Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          V5f5QMGsEU8RkWg/q/FvWlYx9xWyRjHmghxb1q4QeYE=
Subject key identifier:   E2:C3:55:BC:B4:5B:F9:45:FC:63:06:D6:E2:AE:01:C1:FF:1C:74:1A
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       01962F3D67D51DBA68604F27FE4F24F07F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: d29ZINGToUkEei/CEVBjU2FA3n371GHqP26/tUPR5HQ=)
                          2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
                          3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
                          4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:67:d5:1d:ba:68:60:4f:27:fe:4f:24:f0:7f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=e2c355bcb45bf945fc6306d6e2ae01c1ff1c741a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:d8:18:41:b6:62:d8:42:15:4d:24:3b:16:
                    48:5e:8c:10:0a:2d:06:e9:2c:53:85:85:90:1f:15:
                    c7:06:e4:ad:99:41:65:c0:7a:06:18:67:1b:3b:12:
                    78:d4:b6:4d:bd:38:de:d0:90:65:14:0b:3a:20:c7:
                    77:b0:75:66:bc:1d:0d:aa:b3:a4:92:2e:c6:2b:71:
                    c7:7f:54:ab:15:a2:59:70:1f:24:49:e8:7a:9a:43:
                    ec:d3:50:f1:82:0f:4f:cf:b9:68:e4:1b:0e:07:c1:
                    01:c1:45:82:95:2c:22:8f:16:6e:be:a9:e9:db:37:
                    5f:b0:a7:a1:a7:88:4a:64:0f:db:4f:ac:ed:4b:ae:
                    22:d4:5f:07:b5:e6:89:dc:ec:8f:57:50:2d:ba:34:
                    ff:16:57:09:b1:41:b6:1f:ab:52:00:6b:9b:29:19:
                    d0:f4:d2:0c:c5:6f:79:75:07:e9:ac:6d:b3:8c:95:
                    4f:7b:21:d9:0c:39:c3:5a:20:fb:e9:cd:e9:53:9e:
                    69:7a:25:c3:9e:a2:cf:b4:2e:33:7a:fe:4e:79:ef:
                    96:d1:70:be:7a:ef:1c:49:05:d3:61:ed:21:88:fa:
                    16:36:f5:ab:06:2c:75:dc:4e:63:e5:8c:4a:bb:f1:
                    db:a6:79:91:d5:53:d6:34:89:66:db:a4:8b:36:fa:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C3:55:BC:B4:5B:F9:45:FC:63:06:D6:E2:AE:01:C1:FF:1C:74:1A
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a0:50:68:c0:f0:89:ee:68:27:bd:1f:ff:2f:02:c2:eb:7a:
         4f:25:5f:ef:05:12:80:e5:64:94:f6:d7:70:b0:82:e6:c5:61:
         de:39:6b:43:dc:1e:58:84:82:ed:cd:ed:52:c6:05:c6:fb:88:
         4e:9d:36:5d:de:3f:c4:67:c2:e8:cf:e8:6c:44:7d:d3:c9:ee:
         e8:0b:1e:75:7e:23:be:93:3b:c0:63:91:30:10:1a:f3:22:8b:
         a5:6a:ad:3b:6c:ac:43:0b:6a:c0:e1:bf:e8:08:ff:ec:8f:c0:
         9b:b4:ce:9b:39:e3:32:9f:d3:db:a1:51:40:64:14:b1:50:26:
         a4:0f:c7:26:9f:92:c2:ae:cf:6d:ef:94:bf:ce:c1:4b:cf:77:
         e7:6c:67:18:12:6b:47:94:5b:89:e4:99:99:17:77:2e:fa:36:
         e4:70:84:1e:1e:33:a8:04:c5:33:28:79:23:04:13:62:1a:1d:
         f0:71:7a:1d:4e:95:7b:ab:07:f2:f8:bf:44:55:41:92:24:1c:
         13:1a:2d:65:d3:2a:90:11:15:63:36:4c:af:82:27:a1:24:bf:
         d5:90:4d:f6:09:01:be:30:15:86:dc:af:5f:5d:55:ac:8d:9a:
         f4:d4:0c:e1:25:59:28:0c:3a:fe:ff:4d:75:7d:8e:dd:21:8d:
         4f:b8:c0:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWfVHbpoYE8n/k8k8H+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3
NjVlYmEwHhcNMjUwNDEzMTMwMTE1WhcNMjUwNDE0MTMwMTE1WjAzMTEwLwYDVQQD
EyhlMmMzNTViY2I0NWJmOTQ1ZmM2MzA2ZDZlMmFlMDFjMWZmMWM3NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pbYGEG2YthCFU0kOxZIXowQCi0G
6SxThYWQHxXHBuStmUFlwHoGGGcbOxJ41LZNvTje0JBlFAs6IMd3sHVmvB0NqrOk
ki7GK3HHf1SrFaJZcB8kSeh6mkPs01Dxgg9Pz7lo5BsOB8EBwUWClSwijxZuvqnp
2zdfsKehp4hKZA/bT6ztS64i1F8HteaJ3OyPV1AtujT/FlcJsUG2H6tSAGubKRnQ
9NIMxW95dQfprG2zjJVPeyHZDDnDWiD76c3pU55peiXDnqLPtC4zev5Oee+W0XC+
eu8cSQXTYe0hiPoWNvWrBix13E5j5YxKu/HbpnmR1VPWNIlm26SLNvpwPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLDVby0W/lF/GMG1uKuAcH/HHQaMB8GA1UdIwQY
MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt
MGJjZmM1MzI5MzNjLzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj
LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6BQaMDw
ie5oJ70f/y8Cwut6TyVf7wUSgOVklPbXcLCC5sVh3jlrQ9weWISC7c3tUsYFxvuI
Tp02Xd4/xGfC6M/obER908nu6AsedX4jvpM7wGORMBAa8yKLpWqtO2ysQwtqwOG/
6Aj/7I/Am7TOmznjMp/T26FRQGQUsVAmpA/HJp+Swq7Pbe+Uv87BS89352xnGBJr
R5RbieSZmRd3Lvo25HCEHh4zqATFMyh5IwQTYhod8HF6HU6Ve6sH8vi/RFVBkiQc
ExotZdMqkBEVYzZMr4InoSS/1ZBN9gkBvjAVhtyvX11VrI2a9NQM4SVZKAw6/v9N
dX2O3SGNT7jA2A==
-----END CERTIFICATE-----