Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File:                     dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier:          GXuqWDgkS0n0s2noaRCk3llQOUCMNQU/D8yKuWIwIsQ=
Subject key identifier:   D4:14:01:7F:9E:2B:2A:F0:83:42:00:AE:1C:FD:63:7F:95:CD:09:EF
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       01962E61E20D414153DE023FA3077FE8A6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number:          0933
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 7hJlVvAGbCOpuMIAbRPmhI1LyJk.roa (hash: kwYrJ2B8iMONESsXhh99M7N/9TNCRx/vPINN+t9MxVk=)
                          2: BPmOKccK3wxsyXop4Fdn5FojVoQ.roa (hash: c0AjkjhURWDz0MoTRfs5io6YXuUePztpcaDJ7boNtz0=)
                          3: DWUjzTTvFWKI6_KZxYcJUZ-6dbs.roa (hash: p+mIlB1T2bs+wFLe4PrmziLDMKor0sVWbkBm3gWKFRI=)
                          4: Io1tznSh-GOgc8SrB8aKsJmTYdU.roa (hash: CmiLKKEV0OJ4fWhZXavfx+jbJs8fV6BUsSVAayR8svE=)
                          5: LLU_h_MCx_PI6iuzjG5n-X7Mntk.roa (hash: co72FMpEqNr608uwvHI73L404xOIPq+UDmFSQ66G/4s=)
                          6: TzjezWebHSz6fdfD6rX_WZumF2s.roa (hash: t5wR4CioofE98lmboG27Ls+8ApJWA+Wv0wKWlwa+C9c=)
                          7: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=)
                          8: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=)
                          9: d36kyNbN24ym68fKEusesMWNdB8.roa (hash: 4gSej8V31X+CtNOzp6ONLx41Eof9eDCO7tOWp+L9w8M=)
                          10: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: bUOBjIZ8JTejVObM85ttA3AnIE6Y5SvSl1JOlU/MpVY=)
                          11: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=)
                          12: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:0d:41:41:53:de:02:3f:a3:07:7f:e8:a6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=d414017f9e2b2af0834200ae1cfd637f95cd09ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:04:73:63:62:0a:7d:a2:3e:55:1c:e3:1c:
                    4a:24:38:bc:fb:98:e7:4c:98:a9:29:17:00:7f:9f:
                    f9:71:b4:f6:29:9a:1f:84:96:3b:f0:4e:cd:76:b2:
                    60:91:be:a1:90:15:6e:cd:74:ac:40:de:16:96:fa:
                    43:02:04:dc:36:f0:c9:0c:19:d1:3d:03:43:c0:c8:
                    59:57:b3:05:ca:a5:81:a2:5b:a3:9e:8e:6e:cd:0f:
                    c5:3b:c8:78:ac:72:ad:f3:be:11:93:ab:5f:83:5f:
                    d3:bc:03:31:e1:2a:36:e2:bd:4c:65:0b:7c:e6:bc:
                    33:ef:f8:ed:51:0a:5b:ec:14:3a:fb:4d:4a:95:d8:
                    3d:17:1d:b7:dd:a3:ec:67:15:c5:04:f6:96:d4:55:
                    04:9a:62:ce:a4:2e:34:40:4c:a8:e5:13:e5:dd:5d:
                    c1:30:7e:c3:ce:92:38:59:ce:dd:c6:26:fd:a4:2b:
                    40:46:31:78:88:a6:a1:7c:69:aa:f2:ca:cf:6b:0a:
                    64:b0:55:89:b4:09:33:37:90:cc:0d:0a:2f:59:11:
                    15:d3:c8:ae:7d:2e:50:4d:07:00:88:e1:13:61:a8:
                    26:7f:b2:98:d8:1b:f1:2b:21:fb:ac:21:35:c2:44:
                    12:c2:d5:6c:6a:4a:10:54:16:00:4f:ea:46:c3:63:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:01:7F:9E:2B:2A:F0:83:42:00:AE:1C:FD:63:7F:95:CD:09:EF
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ce:22:60:ad:48:e5:03:23:67:0b:e2:4e:8a:51:8a:89:ef:
         ca:b3:02:1c:59:24:9f:12:18:6d:93:ae:0d:9e:e6:97:e9:6c:
         29:ce:40:f0:15:58:70:05:61:37:6e:31:39:13:d7:f0:fb:d2:
         ca:30:fb:15:f9:4c:d2:5c:9d:6a:92:9e:de:72:85:32:58:0f:
         75:44:73:54:71:b9:0d:7b:d7:c4:e6:21:c5:70:6c:10:d3:c1:
         7a:8a:f0:ea:55:a5:b5:95:c6:74:6b:a1:0f:75:93:7e:01:5b:
         27:bb:ff:73:fd:50:2a:12:92:4b:fb:44:2f:7e:87:f8:18:54:
         67:c0:b8:32:0e:63:78:3d:f6:3f:d5:88:98:63:28:7e:a8:20:
         07:f3:e1:4e:f7:e8:a0:ab:a2:1f:21:c2:6f:84:46:29:70:1c:
         38:b9:05:01:0d:88:7d:1b:81:8b:ef:31:d1:32:f7:6d:b5:5d:
         7b:93:78:d0:f9:27:3e:94:f5:e4:f1:fe:e5:b7:3e:95:05:40:
         7c:80:6e:ee:02:e3:f6:b9:2e:b4:4c:69:57:de:18:78:4c:d5:
         ea:bd:f8:57:50:45:ab:12:9f:96:05:a9:69:dc:04:84:94:41:
         b6:bc:71:28:f7:79:26:ec:8f:02:22:6d:99:ef:66:43:7c:fc:
         41:57:a8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeINQUFT3gI/owd/6Kb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
EyhkNDE0MDE3ZjllMmIyYWYwODM0MjAwYWUxY2ZkNjM3Zjk1Y2QwOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s0Ec2NiCn2iPlUc4xxKJDi8+5jn
TJipKRcAf5/5cbT2KZofhJY78E7NdrJgkb6hkBVuzXSsQN4WlvpDAgTcNvDJDBnR
PQNDwMhZV7MFyqWBolujno5uzQ/FO8h4rHKt874Rk6tfg1/TvAMx4So24r1MZQt8
5rwz7/jtUQpb7BQ6+01Kldg9Fx233aPsZxXFBPaW1FUEmmLOpC40QEyo5RPl3V3B
MH7DzpI4Wc7dxib9pCtARjF4iKahfGmq8srPawpksFWJtAkzN5DMDQovWREV08iu
fS5QTQcAiOETYagmf7KY2BvxKyH7rCE1wkQSwtVsakoQVBYAT+pGw2NlzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQUAX+eKyrwg0IArhz9Y3+VzQnvMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes4iYK1I
5QMjZwviTopRionvyrMCHFkknxIYbZOuDZ7ml+lsKc5A8BVYcAVhN24xORPX8PvS
yjD7FflM0lydapKe3nKFMlgPdURzVHG5DXvXxOYhxXBsENPBeorw6lWltZXGdGuh
D3WTfgFbJ7v/c/1QKhKSS/tEL36H+BhUZ8C4Mg5jeD32P9WImGMofqggB/PhTvfo
oKuiHyHCb4RGKXAcOLkFAQ2IfRuBi+8x0TL3bbVde5N40PknPpT15PH+5bc+lQVA
fIBu7gLj9rkutExpV94YeEzV6r34V1BFqxKflgWpadwEhJRBtrxxKPd5JuyPAiJt
me9mQ3z8QVeoBA==
-----END CERTIFICATE-----