Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          Z3BPPzJEnlcalvyP/EhPB+pKwjJdLb4TDJFog96k/Qs=
Subject key identifier:   4B:7C:DE:AB:B6:6B:25:77:9E:4B:82:AD:91:67:1B:B5:AC:B5:B9:08
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       01962E61BDFCF9C61C949BEAB91D59910BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          12F3
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
                          2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: GATvg6iLTGMIPSAVfiIUmCi+IrOOk3+kx58G1T9n/0w=)
                          3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
                          4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
                          5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:fc:f9:c6:1c:94:9b:ea:b9:1d:59:91:0b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=4b7cdeabb66b25779e4b82ad91671bb5acb5b908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:10:90:ce:79:4a:65:df:e4:3e:42:41:91:
                    26:17:e2:d2:57:f7:e3:e1:d1:68:41:eb:b5:64:8e:
                    96:52:6b:c4:78:35:c1:ca:81:17:23:bd:da:e1:e7:
                    d3:7f:47:a8:60:fa:e0:ac:6e:13:4d:30:e3:99:cf:
                    d0:7b:f1:b1:aa:46:34:ff:1a:e3:73:69:4f:e3:60:
                    65:70:0a:fb:34:00:09:90:ac:63:dc:a7:c3:f8:71:
                    96:37:d8:c6:f6:54:1c:e4:d7:a3:53:d5:1b:93:08:
                    90:00:51:50:81:7e:e2:f1:41:33:c8:61:1c:ab:0c:
                    7c:f1:e4:65:44:a5:83:0e:10:75:71:3c:04:0d:0a:
                    a4:26:d9:ef:19:76:6a:2e:0e:e3:40:83:9e:79:f7:
                    d6:d1:fd:d8:79:6a:f7:1a:5e:e7:48:d0:2a:4f:5b:
                    4e:2a:b9:d3:9d:c1:6a:ae:73:2e:30:8a:b0:b7:2f:
                    f1:1d:ed:5e:af:40:20:7c:93:f5:c8:df:54:7b:f2:
                    55:bc:8c:34:6a:6e:f8:8c:d8:05:74:54:7b:df:1a:
                    5c:31:c2:de:c5:0f:8d:57:e5:04:3e:d1:6b:04:2a:
                    26:37:e5:bb:56:98:51:8a:08:be:4d:b9:03:2a:15:
                    39:b4:e6:f5:ea:83:0e:90:0d:41:be:73:c1:98:d6:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7C:DE:AB:B6:6B:25:77:9E:4B:82:AD:91:67:1B:B5:AC:B5:B9:08
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:5f:16:d1:d9:71:c7:54:ab:33:77:dd:b6:fa:cc:d2:6d:
         34:52:e1:98:33:4c:d8:c8:d7:8c:fe:07:68:c2:cd:3e:eb:05:
         1f:7f:ae:39:3e:17:0f:b5:2d:7e:51:2d:01:94:ac:b2:05:69:
         53:2a:ec:ff:c5:24:99:51:23:11:34:b5:31:54:2b:94:f1:ce:
         b6:50:8a:e1:94:97:4b:eb:a1:b4:5d:9a:74:df:c2:43:09:33:
         f8:2a:5a:6b:22:a7:82:df:29:e6:7f:9f:7a:b7:05:43:68:1e:
         ce:9d:1e:30:57:70:43:9a:8e:bf:f5:89:fb:a2:81:8f:7e:67:
         8d:ad:c4:f2:36:1a:e7:d5:42:9b:bc:40:f1:83:34:d5:42:3a:
         19:8a:14:34:50:b3:61:23:5b:36:d8:9d:dc:7d:88:e9:20:2a:
         0b:7d:53:a0:53:81:76:1a:15:a5:d5:5e:53:cb:cf:dd:33:41:
         3e:5e:c9:c4:ee:81:59:ab:71:9d:84:3e:81:8d:3b:2c:a1:a7:
         eb:df:4a:33:c5:f8:66:15:dd:0b:be:3c:3c:45:8d:99:b4:16:
         0b:75:22:ad:2a:bd:4c:70:de:8c:44:e9:34:22:8d:cc:3c:5a:
         37:0c:45:6e:4c:6e:00:ed:69:2a:5e:79:f4:b9:e0:00:33:11:
         63:32:ab:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYb38+cYclJvquR1ZkQvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4
MWM2ZjIwHhcNMjUwNDEzMDkwMTE5WhcNMjUwNDE0MDkwMTE5WjAzMTEwLwYDVQQD
Eyg0YjdjZGVhYmI2NmIyNTc3OWU0YjgyYWQ5MTY3MWJiNWFjYjViOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRUQkM55SmXf5D5CQZEmF+LSV/fj
4dFoQeu1ZI6WUmvEeDXByoEXI73a4efTf0eoYPrgrG4TTTDjmc/Qe/GxqkY0/xrj
c2lP42BlcAr7NAAJkKxj3KfD+HGWN9jG9lQc5NejU9UbkwiQAFFQgX7i8UEzyGEc
qwx88eRlRKWDDhB1cTwEDQqkJtnvGXZqLg7jQIOeeffW0f3YeWr3Gl7nSNAqT1tO
KrnTncFqrnMuMIqwty/xHe1er0AgfJP1yN9Ue/JVvIw0am74jNgFdFR73xpcMcLe
xQ+NV+UEPtFrBComN+W7VphRigi+TbkDKhU5tOb16oMOkA1BvnPBmNbO7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt83qu2ayV3nkuCrZFnG7WstbkIMB8GA1UdIwQY
MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPZfFtHZ
ccdUqzN33bb6zNJtNFLhmDNM2MjXjP4HaMLNPusFH3+uOT4XD7UtflEtAZSssgVp
Uyrs/8UkmVEjETS1MVQrlPHOtlCK4ZSXS+uhtF2adN/CQwkz+CpaayKngt8p5n+f
ercFQ2gezp0eMFdwQ5qOv/WJ+6KBj35nja3E8jYa59VCm7xA8YM01UI6GYoUNFCz
YSNbNtid3H2I6SAqC31ToFOBdhoVpdVeU8vP3TNBPl7JxO6BWatxnYQ+gY07LKGn
699KM8X4ZhXdC748PEWNmbQWC3UirSq9THDejETpNCKNzDxaNwxFbkxuAO1pKl55
9LngADMRYzKrHg==
-----END CERTIFICATE-----