Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier:          jm27HX1/hslwPt1geC2U1kIXvMu8UCC3ygADQ58F+gI=
Subject key identifier:   F0:37:D5:4A:5B:58:76:55:1E:0A:3A:BF:79:F9:2A:C5:CC:18:AC:60
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       01962DF3D80ED9A0B3A5F938190EA6BCE3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=)
                          2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=)
                          3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=)
                          4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=)
                          5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: zqm/IR+GREiKzmOoBBnUlRKO/xTHwj6DtWsVcsO64ps=)
                          6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=)
                          7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=)
                          8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:0e:d9:a0:b3:a5:f9:38:19:0e:a6:bc:e3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=f037d54a5b5876551e0a3abf79f92ac5cc18ac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:79:3f:2d:58:d4:40:1e:e9:af:c8:ef:06:
                    9e:39:48:12:3a:b1:47:1a:14:e9:fc:4d:ab:06:79:
                    22:65:ef:84:4d:98:d0:6b:1b:c6:9d:75:d4:db:a3:
                    52:c2:ec:61:67:29:b6:3e:a6:71:17:03:da:25:d8:
                    2b:96:36:61:f3:8c:57:fe:77:47:e9:04:c2:3f:87:
                    4f:ea:13:12:8b:85:9b:40:9a:64:4a:89:71:1a:e6:
                    37:05:66:0d:6c:b7:26:ae:01:8c:34:4c:ac:fb:43:
                    be:45:64:78:59:98:11:ce:06:ed:b7:4d:d6:59:6e:
                    73:3f:02:f7:97:e8:c6:21:7e:90:09:c2:ed:8c:bf:
                    a7:27:e2:72:3a:49:4c:6f:f8:68:48:04:a7:30:3b:
                    d9:bd:c4:d0:9c:7a:85:02:19:f0:4d:d8:c0:8c:36:
                    a7:c7:ff:74:20:58:25:ce:85:37:b9:98:55:03:7c:
                    bc:33:64:4e:ee:c6:ac:7a:35:a9:0d:91:70:65:71:
                    09:a0:03:c0:3d:f0:49:04:1e:63:f2:b7:b9:1a:00:
                    a2:e5:98:30:f9:be:55:68:fa:09:e7:47:ce:27:37:
                    b2:ac:55:c3:93:e4:3a:78:04:6c:06:54:ba:86:aa:
                    ac:67:c1:bb:37:da:d2:85:d2:96:a2:8c:8e:a9:78:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:D5:4A:5B:58:76:55:1E:0A:3A:BF:79:F9:2A:C5:CC:18:AC:60
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:10:60:96:5c:03:45:01:12:a9:26:4e:ef:4d:b2:dd:0b:
         33:5b:43:8a:62:05:73:12:a4:75:86:83:47:0e:9f:12:cd:78:
         b9:59:84:fd:f5:02:62:a0:25:6b:c8:23:a5:ce:fd:37:f3:84:
         1b:3f:e0:c8:e4:77:09:f6:bf:32:be:6b:15:8b:63:5b:00:f6:
         18:00:c0:7e:04:79:0c:3d:6b:1d:b6:ca:8d:3c:14:81:59:81:
         7a:4e:59:59:b0:22:47:7b:35:52:3f:4e:ba:87:8e:52:bd:a3:
         d4:d9:83:7e:de:05:8b:65:ee:70:dc:43:d4:b1:ce:1e:8b:23:
         62:35:91:7a:a5:9b:28:d4:97:55:d4:5b:3c:a2:2e:a4:78:58:
         f0:04:d1:49:25:39:f5:60:96:6c:dc:61:c5:49:d2:17:80:d1:
         f4:81:e5:21:dc:f2:1b:4e:60:36:91:50:9e:e6:ec:81:93:ef:
         19:19:44:90:fc:89:e7:91:d7:d7:cd:a6:9a:2f:f1:1d:00:fa:
         0f:41:b3:4d:b5:6a:fe:e2:5e:0a:17:dc:3b:4d:d0:47:d3:d2:
         3f:75:eb:2f:c6:e3:e9:40:07:ee:0b:ea:7e:76:43:ed:74:d8:
         4f:6d:07:78:ac:03:04:b9:41:af:cd:84:56:41:00:46:48:e8:
         c2:cc:4e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89gO2aCzpfk4GQ6mvOPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
EyhmMDM3ZDU0YTViNTg3NjU1MWUwYTNhYmY3OWY5MmFjNWNjMThhYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G55Py1Y1EAe6a/I7waeOUgSOrFH
GhTp/E2rBnkiZe+ETZjQaxvGnXXU26NSwuxhZym2PqZxFwPaJdgrljZh84xX/ndH
6QTCP4dP6hMSi4WbQJpkSolxGuY3BWYNbLcmrgGMNEys+0O+RWR4WZgRzgbtt03W
WW5zPwL3l+jGIX6QCcLtjL+nJ+JyOklMb/hoSASnMDvZvcTQnHqFAhnwTdjAjDan
x/90IFglzoU3uZhVA3y8M2RO7sasejWpDZFwZXEJoAPAPfBJBB5j8re5GgCi5Zgw
+b5VaPoJ50fOJzeyrFXDk+Q6eARsBlS6hqqsZ8G7N9rShdKWooyOqXjNSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA31UpbWHZVHgo6v3n5KsXMGKxgMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ0QYJZc
A0UBEqkmTu9Nst0LM1tDimIFcxKkdYaDRw6fEs14uVmE/fUCYqAla8gjpc79N/OE
Gz/gyOR3Cfa/Mr5rFYtjWwD2GADAfgR5DD1rHbbKjTwUgVmBek5ZWbAiR3s1Uj9O
uoeOUr2j1NmDft4Fi2XucNxD1LHOHosjYjWReqWbKNSXVdRbPKIupHhY8ATRSSU5
9WCWbNxhxUnSF4DR9IHlIdzyG05gNpFQnubsgZPvGRlEkPyJ55HX182mmi/xHQD6
D0GzTbVq/uJeChfcO03QR9PSP3XrL8bj6UAH7gvqfnZD7XTYT20HeKwDBLlBr82E
VkEARkjowsxO/g==
-----END CERTIFICATE-----