Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
File:                     Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json)
Hash identifier:          CEufdW7AZEO+m31Cztua88Y8Ylt3bi95vKdBMwZjhWs=
Subject key identifier:   61:F0:96:DD:A0:BA:AD:5C:24:AC:37:E4:53:C0:42:A7:E0:18:34:88
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Certificate issuer:       /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial:       01962DF3D35A068E52871A68324E567F1391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
Manifest number:          07A3
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: AVhJFVI2rddRDN9TZkxu2cOqd_U.roa (hash: Z21jddbs3xWpC/IPmSRdmy8CLER4CTA+wtUEhdmSjWA=)
                          2: GJoKWxqXVe9byJ7vEN4O3FsAPbw.roa (hash: 3INb6wymsZxncaYsZTd/NPz0kxdapcCp+SJMbjM8l0Y=)
                          3: ONKzBcZlLaDvBXj0ChQkq0AcBAo.roa (hash: xt6U3+zGv+p5+qldoLqBIRpHRAbFRfEFMt0N2Y4HxPA=)
                          4: Qu4ONRj9Tnvy_jUVCaYk-FPrpBY.roa (hash: uN7owuwNEzSt/aZwd8y6vL95cBARm3xUUdKefTm2BpI=)
                          5: TAjOCfxKmVaufyeMAaRjJQRrJpo.roa (hash: SxUJ/IMNoKh2IGXhAoqHbHYgCNszkM1cz1fmREsS+Ko=)
                          6: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: wIzxE9s3JvBo2gZXsYN5UYNqjwvQnH9mt1/B+zx8d7w=)
                          7: WNXcUWyOPw_jgwsMhjt3tr-DAXY.roa (hash: xCXJ3TCSOan9saMZR5HLRDriokOQriL1DMFUL1E2Cpg=)
                          8: ZGAhlZjnasS5BKxbuKtTlb2IG8g.roa (hash: /CWZhme5O1ZBpiwykCFeFAG1hv6S2QE4eqN/Qea+vmc=)
                          9: cbgxDriMd1w8Ezk1j_uW9c-uk8k.roa (hash: RA/kZIx4fzU+RCbQ8O1BxIKCZRJDjC4JRLSNt3ovrQ8=)
                          10: cblkW3ZYAZ5VQl8X3gHLFnE7S8g.roa (hash: +MK4cG6/hNPklJaXz5PxE5zp6rLCIwlFMKcCPx37Jxo=)
                          11: dxXbgNQXIcZf-wRxxpxKbsjTAhQ.roa (hash: 7Q2urw+eTsZ+V/fuq0yE3c5anzy795+Z4CJRGjeU6Hk=)
                          12: fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa (hash: BGM9RaFK/cZe9M2jNupJdVSdkow5uJUKCy6zw6S9pgQ=)
                          13: jDpfwbf-MYo1z6WLxxoQR9fD_bw.roa (hash: zExaE643LO98tK4NvHjnGSmdQinpnm87QOpAVLfdMLY=)
                          14: puM6zDTCACkm8XM63GmrJCmb9w4.roa (hash: /wWLN32nFvo5E1f9qQj5og/sDQq7KYw38OVpA8GGi58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:5a:06:8e:52:87:1a:68:32:4e:56:7f:13:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=61f096dda0baad5c24ac37e453c042a7e0183488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:6d:e6:56:df:e7:70:13:70:81:30:a3:e1:
                    16:83:cf:15:27:a8:77:54:c6:7d:62:d2:f6:44:52:
                    b9:cf:bc:a4:60:f4:4c:8a:6c:8a:49:63:af:4f:94:
                    d8:81:9b:05:c9:12:e1:0a:93:78:6d:99:79:49:9a:
                    ee:61:07:e3:61:e2:ef:c5:13:f0:f3:3f:81:08:c9:
                    cf:fc:39:33:54:5b:07:3a:d6:c1:44:d8:c6:c5:87:
                    28:00:60:97:fd:1f:02:cc:ba:9e:04:32:4d:0f:36:
                    b3:da:f3:a3:ad:6f:94:ad:84:ac:a3:63:9b:36:d9:
                    d8:e4:38:c3:8f:e4:8b:c2:b5:bc:ce:ac:e1:ff:a8:
                    53:f6:db:42:0e:75:0f:7c:23:44:16:19:58:94:6c:
                    87:5b:78:ca:19:77:fd:af:96:da:d3:83:5f:22:32:
                    97:41:dd:e6:98:53:6c:6c:04:ec:8d:ca:32:b2:37:
                    2f:c1:3b:ff:05:ba:e8:60:8d:9c:79:50:f6:51:38:
                    9f:b1:b5:c7:99:d7:49:37:56:68:ba:03:ca:3f:b0:
                    95:58:29:43:cd:aa:d3:48:d4:19:d4:97:78:7f:c4:
                    9e:5e:60:0d:25:b7:d0:8f:86:28:71:ba:ba:87:b1:
                    82:5d:1e:2a:ef:e9:b0:b7:31:8a:a3:83:72:2c:3c:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:96:DD:A0:BA:AD:5C:24:AC:37:E4:53:C0:42:A7:E0:18:34:88
            X509v3 Authority Key Identifier:
                keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:eb:c4:49:34:27:08:a4:b5:b8:b0:0d:a9:65:e9:8f:ff:
         14:05:2b:1c:c4:8c:5e:91:bc:67:a9:c0:0f:e4:42:de:e0:9f:
         85:6d:ae:66:75:10:c4:10:56:91:b4:0d:1e:6a:8a:10:2a:7d:
         b4:16:ae:0b:97:96:f3:e5:fa:f1:35:31:da:d7:97:af:4c:d0:
         3e:19:11:37:ef:0f:f9:01:29:74:66:4c:3a:e3:61:3e:e6:7e:
         d5:f3:e4:7c:7b:fd:ea:58:fd:03:38:51:4d:ca:c1:87:3d:03:
         77:40:09:96:a5:6c:56:09:5d:ba:a0:05:7f:98:30:e8:35:bb:
         1e:1d:87:be:ef:dc:aa:a6:47:25:91:e5:64:30:2b:fb:12:bf:
         9b:d0:19:ae:1a:b4:dd:2b:ed:30:c4:b4:0c:3d:ac:f5:22:bc:
         02:cf:5d:95:bf:9c:b6:3e:2f:8b:8d:80:83:36:c9:b7:1a:42:
         a2:e4:12:3a:83:e6:97:56:cc:2c:3f:72:9c:1f:46:7c:b7:74:
         4d:a4:30:50:50:20:2c:be:b9:2a:84:79:ce:92:cd:aa:c6:1a:
         18:4f:e8:de:ec:fd:2e:01:dd:a0:70:cd:ad:fc:55:5b:00:7c:
         b6:42:41:62:e4:46:b3:80:e3:c7:eb:0a:eb:3a:67:52:97:f2:
         3a:b2:64:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89NaBo5ShxpoMk5WfxORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjUwNDEzMDcwMTE2WhcNMjUwNDE0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg2MWYwOTZkZGEwYmFhZDVjMjRhYzM3ZTQ1M2MwNDJhN2UwMTgzNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXVt5lbf53ATcIEwo+EWg88VJ6h3
VMZ9YtL2RFK5z7ykYPRMimyKSWOvT5TYgZsFyRLhCpN4bZl5SZruYQfjYeLvxRPw
8z+BCMnP/DkzVFsHOtbBRNjGxYcoAGCX/R8CzLqeBDJNDzaz2vOjrW+UrYSso2Ob
NtnY5DjDj+SLwrW8zqzh/6hT9ttCDnUPfCNEFhlYlGyHW3jKGXf9r5ba04NfIjKX
Qd3mmFNsbATsjcoysjcvwTv/BbroYI2ceVD2UTifsbXHmddJN1ZougPKP7CVWClD
zarTSNQZ1Jd4f8SeXmANJbfQj4Yocbq6h7GCXR4q7+mwtzGKo4NyLDzwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHwlt2guq1cJKw35FPAQqfgGDSIMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKTrxEk0
JwiktbiwDall6Y//FAUrHMSMXpG8Z6nAD+RC3uCfhW2uZnUQxBBWkbQNHmqKECp9
tBauC5eW8+X68TUx2teXr0zQPhkRN+8P+QEpdGZMOuNhPuZ+1fPkfHv96lj9AzhR
TcrBhz0Dd0AJlqVsVglduqAFf5gw6DW7Hh2Hvu/cqqZHJZHlZDAr+xK/m9AZrhq0
3SvtMMS0DD2s9SK8As9dlb+ctj4vi42AgzbJtxpCouQSOoPml1bMLD9ynB9GfLd0
TaQwUFAgLL65KoR5zpLNqsYaGE/o3uz9LgHdoHDNrfxVWwB8tkJBYuRGs4Djx+sK
6zpnUpfyOrJk9g==
-----END CERTIFICATE-----