Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          Fl2P4qfKHzIGo7IFCfE84FAcPiM1n4CR4ivuQYUh7hg=
Subject key identifier:   FB:12:94:BE:F5:4E:C5:CB:FD:AE:18:25:6F:9C:0C:E8:66:2B:0A:3F
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       01962F3DBBE09C1BA8067D3624A84B152225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=)
                          2: H4XS9Jd4RgVQziQYba5Gfsonrvs.roa (hash: 55mfL9Yq4sSJVb8E/9Ead0lw9ritGLLPE3h22CvMkqI=)
                          3: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=)
                          4: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: Wv0H+IVBkolj79EdRubExrF1Hrrc7gLtC9BA9sMs3NI=)
                          5: xPmNgI2MBJIstiWMiSOAWkej_zc.roa (hash: vJKk+eO7ZLM5QA+TiNBJgqIVJMIub9fywVY+U729ifg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:e0:9c:1b:a8:06:7d:36:24:a8:4b:15:22:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=fb1294bef54ec5cbfdae18256f9c0ce8662b0a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:4d:7b:70:fc:46:9b:62:76:40:16:08:84:
                    7b:37:24:91:1a:f0:65:6f:c2:c3:a5:c6:12:3e:15:
                    57:59:56:42:6c:d1:35:dc:c7:d7:b0:7b:60:67:5f:
                    81:90:3f:0a:b7:1d:26:d8:40:c0:44:31:6d:02:ab:
                    52:84:78:8b:f7:ef:ec:95:b4:c4:a8:28:db:18:35:
                    36:15:cd:21:74:73:7c:e9:36:ad:40:a2:55:65:05:
                    19:14:c8:71:1f:9e:ef:f5:3d:c5:45:53:15:2d:da:
                    d9:63:8c:04:44:9b:ac:d2:08:87:f2:47:79:51:b8:
                    fc:8b:45:f1:61:e8:78:8f:5c:30:2f:2b:5e:05:02:
                    68:29:f1:98:5f:ac:a4:35:05:2e:16:4b:9d:91:1c:
                    21:38:f4:ce:b0:87:c8:c1:37:e5:19:37:e2:14:ec:
                    dc:d7:0d:4f:13:20:34:cc:c3:69:24:df:b9:b3:d0:
                    43:9d:ca:ba:be:bf:97:66:c3:63:44:cd:0a:3b:11:
                    be:64:2e:21:d3:04:ae:12:e7:a2:d8:d4:10:0f:3f:
                    af:c0:d4:cd:4a:52:6e:b5:19:f4:77:a3:e8:34:ce:
                    7c:dc:93:3a:7b:04:2b:03:71:b9:92:dd:d4:e6:9e:
                    2a:2a:43:e4:75:2f:0b:e9:35:4a:b1:00:de:7a:79:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:12:94:BE:F5:4E:C5:CB:FD:AE:18:25:6F:9C:0C:E8:66:2B:0A:3F
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:a3:74:c2:17:01:32:88:df:f6:a0:62:2b:d5:55:b5:28:
         86:78:f6:9c:d4:d6:9e:d7:8b:20:1f:e2:33:22:ac:06:b4:2f:
         b9:ea:f0:01:e1:05:74:36:da:a9:1a:fd:a5:02:99:72:8d:36:
         9d:00:f5:ee:63:08:26:7f:ff:89:f8:c5:9e:47:07:3c:93:ae:
         4e:c1:74:31:5a:d7:e7:e9:e5:2d:77:c1:9f:8e:98:47:fa:1c:
         74:64:0d:b8:f7:11:7d:18:c3:e2:f9:a0:7e:8b:99:ff:8e:c3:
         36:2d:8f:5a:85:bd:47:21:96:2d:dc:18:ec:da:3e:39:3d:6c:
         c0:7e:7f:55:5a:b9:1e:71:f6:d1:98:f6:d5:bd:cf:a1:0f:9c:
         7f:8e:6c:84:3b:d4:87:95:fb:ba:1a:ea:5f:bb:56:cc:0f:3e:
         9e:93:50:7e:7d:17:a7:21:42:69:50:26:5a:0a:26:38:be:81:
         77:c5:01:58:43:16:2a:db:73:5a:93:44:a1:07:63:a1:5d:4d:
         68:d9:02:d8:4a:d6:b3:e5:c2:97:70:1a:67:f5:10:2f:59:41:
         03:3c:b0:3e:b2:b3:4e:d5:4e:8a:ca:95:c9:bf:ac:e1:7c:0c:
         da:68:8f:f6:84:17:3b:95:7e:1c:46:5f:7f:02:09:8a:c9:ac:
         af:1b:1a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbvgnBuoBn02JKhLFSIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EyhmYjEyOTRiZWY1NGVjNWNiZmRhZTE4MjU2ZjljMGNlODY2MmIwYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyZNe3D8RptidkAWCIR7NySRGvBl
b8LDpcYSPhVXWVZCbNE13MfXsHtgZ1+BkD8Ktx0m2EDARDFtAqtShHiL9+/slbTE
qCjbGDU2Fc0hdHN86TatQKJVZQUZFMhxH57v9T3FRVMVLdrZY4wERJus0giH8kd5
Ubj8i0XxYeh4j1wwLyteBQJoKfGYX6ykNQUuFkudkRwhOPTOsIfIwTflGTfiFOzc
1w1PEyA0zMNpJN+5s9BDncq6vr+XZsNjRM0KOxG+ZC4h0wSuEuei2NQQDz+vwNTN
SlJutRn0d6PoNM583JM6ewQrA3G5kt3U5p4qKkPkdS8L6TVKsQDeenl/MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsSlL71TsXL/a4YJW+cDOhmKwo/MB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKSjdMIX
ATKI3/agYivVVbUohnj2nNTWnteLIB/iMyKsBrQvuerwAeEFdDbaqRr9pQKZco02
nQD17mMIJn//ifjFnkcHPJOuTsF0MVrX5+nlLXfBn46YR/ocdGQNuPcRfRjD4vmg
fouZ/47DNi2PWoW9RyGWLdwY7No+OT1swH5/VVq5HnH20Zj21b3PoQ+cf45shDvU
h5X7uhrqX7tWzA8+npNQfn0XpyFCaVAmWgomOL6Bd8UBWEMWKttzWpNEoQdjoV1N
aNkC2ErWs+XCl3AaZ/UQL1lBAzywPrKzTtVOisqVyb+s4XwM2miP9oQXO5V+HEZf
fwIJismsrxsaOA==
-----END CERTIFICATE-----