Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          kKo681pf/uOuaVWj9ifMwx0rd3E1AT2LOH4ZLr1doxs=
Subject key identifier:   E9:B1:27:D7:41:A2:AE:76:27:1F:20:87:94:82:64:2E:E8:04:0C:42
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       01962ECF50F54383CDCCD337C106FBBA8A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          0C88
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: 5ggs9L4charaycl+4ai+bqXIgM5hRkt2ZFKcIQ6+m0Y=)
                          2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:f5:43:83:cd:cc:d3:37:c1:06:fb:ba:8a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=e9b127d741a2ae76271f20879482642ee8040c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:8e:b7:8f:58:28:f5:0d:e9:a0:06:ed:aa:
                    31:fb:58:f5:dc:44:60:12:47:ff:00:f9:3b:1d:13:
                    bd:1c:95:5f:d2:40:0f:03:13:c0:69:c0:82:14:41:
                    d4:7e:3d:bc:98:70:36:b2:11:23:27:2f:f6:3e:34:
                    95:63:6a:31:66:bf:45:3b:6f:fe:ee:6e:a8:28:65:
                    a6:9e:5a:68:a0:74:2f:8c:65:5a:12:f5:f4:e5:29:
                    cd:fc:e3:ee:56:e5:0d:e4:47:c9:96:3a:89:07:72:
                    17:35:a7:83:c1:ea:dd:d4:6b:8a:32:1f:26:24:0e:
                    fd:e3:68:08:6d:cb:db:ad:45:6a:2b:83:45:77:8a:
                    65:0e:e4:e9:b4:55:b9:05:b3:c4:9c:18:14:1f:0f:
                    69:43:67:7d:73:c9:dd:be:21:65:a7:36:a5:f9:d1:
                    da:15:a4:f5:ff:28:34:0d:03:0e:8d:1f:5d:be:28:
                    8e:03:7e:82:9f:76:ec:51:a0:e6:e3:ca:c3:2b:9e:
                    66:44:c3:70:95:64:d8:df:e0:d3:5e:7c:37:98:0e:
                    70:2b:55:c7:4a:e9:92:b3:39:85:5f:c8:2f:a5:61:
                    98:1c:fc:a1:f2:5d:9a:43:4a:2e:31:e6:42:d7:f2:
                    3a:6b:ed:c3:41:e7:9c:ae:b8:b9:dd:9b:23:a9:a2:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:27:D7:41:A2:AE:76:27:1F:20:87:94:82:64:2E:E8:04:0C:42
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5e:43:95:29:67:44:fd:36:ea:59:7a:8b:b0:d9:8b:1b:02:
         8d:19:7f:a5:6d:20:67:30:3e:b1:5a:0f:26:08:9b:f1:a4:51:
         14:0f:cd:8e:2c:c0:f6:5c:35:7c:e3:51:9e:bf:a4:a2:1f:97:
         ba:5e:b0:2d:4c:5f:8d:a1:2d:2c:b0:4b:18:69:7c:cc:21:1b:
         91:df:d0:7c:db:23:a4:be:7e:4f:14:a2:31:d6:01:05:0d:b9:
         f9:06:86:ec:9a:8c:ce:c1:d8:b3:bc:e8:7a:b2:8c:82:0e:95:
         53:63:b6:94:97:1c:4b:99:b7:b4:fd:50:ad:30:dc:65:e1:d2:
         d2:12:dd:35:40:7f:74:f0:d3:53:aa:58:66:63:fd:b7:56:b1:
         38:3c:66:9c:38:9b:29:cc:a5:92:56:3e:2a:e4:b0:29:c5:80:
         b1:83:01:1f:fd:4c:ed:bc:15:17:ff:be:fd:a3:02:13:c9:cd:
         23:ce:fc:a6:0c:97:3d:86:c0:da:57:6a:9d:ae:95:c4:74:50:
         d5:a8:ee:6b:51:16:06:fe:96:1f:52:4f:83:17:fa:b4:f6:be:
         03:d4:d5:9d:53:a5:c1:66:85:45:ef:c3:64:cd:de:39:0e:3b:
         c8:08:32:a9:fb:9c:01:06:9f:4b:c9:c4:23:ec:c4:e6:ff:4d:
         ec:6a:5f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1D1Q4PNzNM3wQb7uookMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk
NGViYmYwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhlOWIxMjdkNzQxYTJhZTc2MjcxZjIwODc5NDgyNjQyZWU4MDQwYzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2OOt49YKPUN6aAG7aox+1j13ERg
Ekf/APk7HRO9HJVf0kAPAxPAacCCFEHUfj28mHA2shEjJy/2PjSVY2oxZr9FO2/+
7m6oKGWmnlpooHQvjGVaEvX05SnN/OPuVuUN5EfJljqJB3IXNaeDwerd1GuKMh8m
JA7942gIbcvbrUVqK4NFd4plDuTptFW5BbPEnBgUHw9pQ2d9c8ndviFlpzal+dHa
FaT1/yg0DQMOjR9dviiOA36Cn3bsUaDm48rDK55mRMNwlWTY3+DTXnw3mA5wK1XH
SumSszmFX8gvpWGYHPyh8l2aQ0ouMeZC1/I6a+3DQeecrri53ZsjqaLicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmxJ9dBoq52Jx8gh5SCZC7oBAxCMB8GA1UdIwQY
MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt
NjZmOGI2ZTE2YjhhLzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh
LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxV5DlSln
RP026ll6i7DZixsCjRl/pW0gZzA+sVoPJgib8aRRFA/NjizA9lw1fONRnr+koh+X
ul6wLUxfjaEtLLBLGGl8zCEbkd/QfNsjpL5+TxSiMdYBBQ25+QaG7JqMzsHYs7zo
erKMgg6VU2O2lJccS5m3tP1QrTDcZeHS0hLdNUB/dPDTU6pYZmP9t1axODxmnDib
KcylklY+KuSwKcWAsYMBH/1M7bwVF/++/aMCE8nNI878pgyXPYbA2ldqna6VxHRQ
1ajua1EWBv6WH1JPgxf6tPa+A9TVnVOlwWaFRe/DZM3eOQ47yAgyqfucAQafS8nE
I+zE5v9N7GpfmQ==
-----END CERTIFICATE-----