Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          x4cRPj9kdLrCTbyBIIatEpZTnckedTySm88FNQGBqEQ=
Subject key identifier:   32:26:94:75:35:95:FC:5A:41:1C:17:38:E2:43:81:41:4B:5A:4B:D5
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       01962E2B1DC95790B3058E65327DD46F77AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: DNtnbvJyFX3vGs4Q6JEG_ZsHFQg.roa (hash: K+AhFAZDpy/NkiLJfIEeAFYckiqA8OuE/Pb388Cb1M4=)
                          2: VdxEEuOoMeJjzuf1tOIRu5y_cuY.roa (hash: AIf8SEV2T1VKgT7ROpLNSZ5BKqfUXSKlfSWrsWX9IKQ=)
                          3: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
                          4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: JWD83D17e4E6BDGjmsArAobcfmXmg4EOz+fx0AZPX5M=)
                          5: wGg8NKByP-F8-49JwKsHJej-0ks.roa (hash: 6NeYKXnfUfbfp0JVHojhaiZ+F9KjenhMqxsTxiHArrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:c9:57:90:b3:05:8e:65:32:7d:d4:6f:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=322694753595fc5a411c1738e24381414b5a4bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:ca:ec:83:2e:bb:aa:95:0f:ed:12:76:e7:
                    66:7a:59:05:a0:1e:82:eb:9b:c8:8c:5b:44:78:ae:
                    37:e9:04:89:dc:aa:d4:e1:52:3a:b4:7f:e4:d3:26:
                    64:db:b5:dc:5a:e8:7e:0d:82:02:9f:80:1d:37:b6:
                    8f:a4:a9:5c:0c:60:da:8c:b1:e0:af:a0:78:bc:31:
                    ae:84:1d:f0:54:34:01:8b:c2:3b:42:8b:8f:8f:57:
                    a2:3c:95:8a:06:80:06:8a:37:0f:62:0c:5b:31:70:
                    7c:22:0c:90:9a:ac:3f:49:7a:32:1c:3a:b1:2d:7f:
                    24:ed:a9:01:47:c4:f0:03:10:a2:6b:cb:8d:27:86:
                    2e:38:62:db:3a:6f:71:18:d4:ed:30:64:14:a5:6d:
                    33:9f:22:9c:ee:c0:31:84:49:62:c2:7b:21:bc:42:
                    b2:ed:76:a3:8c:af:9f:c2:1c:69:7e:9f:2f:cd:30:
                    0e:a3:01:f4:3a:bd:3e:30:c9:25:f2:08:6e:42:88:
                    f8:2e:5b:ef:fe:b9:0b:00:72:8a:99:f8:95:46:f6:
                    fb:33:d4:0d:a3:1d:73:27:93:3b:13:61:61:c2:47:
                    77:68:ad:37:1f:93:83:82:af:c1:a5:52:15:7d:07:
                    a1:03:b1:60:b9:48:25:af:fc:1e:b0:3b:12:5f:83:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:94:75:35:95:FC:5A:41:1C:17:38:E2:43:81:41:4B:5A:4B:D5
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:ac:1a:94:81:15:dc:85:75:66:52:59:c8:3e:c1:b1:b1:
         0e:63:e7:bb:f2:f1:89:bd:dc:6f:c2:19:56:44:cf:03:82:83:
         66:52:c9:c8:db:26:72:a1:47:3d:86:cb:93:a5:e4:8d:dd:c1:
         2f:78:b4:b3:d8:08:0e:0f:41:d5:f1:50:d8:29:e8:67:ab:01:
         2d:90:c8:53:02:46:3e:ef:53:5f:c1:7d:0a:f2:ae:d3:94:a7:
         5c:6d:dd:4a:47:b1:0a:0d:e4:87:ca:cd:21:b0:f9:cc:6d:7a:
         c0:55:e6:d9:69:f3:79:d9:7b:01:04:fc:a2:5e:cd:43:e1:72:
         9b:66:d8:6e:74:59:cc:e8:27:b2:3d:c4:af:e8:57:49:74:9a:
         78:a7:88:63:bc:98:10:87:07:7e:74:01:94:96:ce:13:38:81:
         ed:9f:77:ac:31:7b:36:b9:35:73:42:03:41:e9:29:ac:91:a8:
         43:e9:ce:7a:79:ea:da:c8:6b:0f:aa:63:1a:2b:ab:28:b4:1a:
         74:16:5d:b5:18:a8:2e:98:9d:48:c9:f6:99:2d:fa:c3:92:31:
         c1:71:53:6d:4c:c7:be:26:34:a9:eb:f4:c3:09:29:3a:81:80:
         70:2a:d4:3f:df:3d:b8:4a:4b:85:88:84:fe:73:a6:94:a8:2e:
         90:fd:51:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKx3JV5CzBY5lMn3Ub3erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx
ZTU4NTAwHhcNMjUwNDEzMDgwMTM5WhcNMjUwNDE0MDgwMTM5WjAzMTEwLwYDVQQD
EygzMjI2OTQ3NTM1OTVmYzVhNDExYzE3MzhlMjQzODE0MTRiNWE0YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eHK7IMuu6qVD+0SdudmelkFoB6C
65vIjFtEeK436QSJ3KrU4VI6tH/k0yZk27XcWuh+DYICn4AdN7aPpKlcDGDajLHg
r6B4vDGuhB3wVDQBi8I7QouPj1eiPJWKBoAGijcPYgxbMXB8IgyQmqw/SXoyHDqx
LX8k7akBR8TwAxCia8uNJ4YuOGLbOm9xGNTtMGQUpW0znyKc7sAxhEliwnshvEKy
7XajjK+fwhxpfp8vzTAOowH0Or0+MMkl8ghuQoj4Llvv/rkLAHKKmfiVRvb7M9QN
ox1zJ5M7E2Fhwkd3aK03H5ODgq/BpVIVfQehA7FguUglr/wesDsSX4PSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDImlHU1lfxaQRwXOOJDgUFLWkvVMB8GA1UdIwQY
MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt
YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw
LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaOsGpSB
FdyFdWZSWcg+wbGxDmPnu/Lxib3cb8IZVkTPA4KDZlLJyNsmcqFHPYbLk6Xkjd3B
L3i0s9gIDg9B1fFQ2CnoZ6sBLZDIUwJGPu9TX8F9CvKu05SnXG3dSkexCg3kh8rN
IbD5zG16wFXm2Wnzedl7AQT8ol7NQ+Fym2bYbnRZzOgnsj3Er+hXSXSaeKeIY7yY
EIcHfnQBlJbOEziB7Z93rDF7Nrk1c0IDQekprJGoQ+nOennq2shrD6pjGiurKLQa
dBZdtRioLpidSMn2mS36w5IxwXFTbUzHviY0qev0wwkpOoGAcCrUP989uEpLhYiE
/nOmlKgukP1RjA==
-----END CERTIFICATE-----