Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
File:                     cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json)
Hash identifier:          JzpHVPJB+YadWxJGv/cUTWbcHrCzp+2wTPMkjQnWe6c=
Subject key identifier:   5F:99:3E:04:3F:8D:0A:51:6A:F9:E5:BC:F2:5C:D8:B1:B6:CB:3D:91
Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA
Certificate issuer:       /CN=706f0a161b217b9cefd3781ce2611951be419dba
Certificate serial:       01962F3DA2C7FA74F0E9506A74306643C5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft
Manifest number:          061F
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: R-wXA-kWQa5PdCJfUeOG1Bar_7E.roa (hash: eg3vfMOt4/2VviBbur6gIcbu+ezOh6ft9BbXqbZkqec=)
                          2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: X8ks0tDV4TaUQ2A9IIvIQxUNbVohKLhyV6trvF75fA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:c7:fa:74:f0:e9:50:6a:74:30:66:43:c5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=5f993e043f8d0a516af9e5bcf25cd8b1b6cb3d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:d8:bb:9c:be:6d:71:ea:52:30:50:11:b4:
                    77:72:34:28:1e:58:90:c9:d4:57:96:08:4e:df:03:
                    1f:28:cc:46:a2:01:66:29:7a:01:6b:1d:94:e6:ce:
                    fa:df:2d:2a:1c:2b:93:1b:b6:f8:a7:67:59:c3:4d:
                    d1:41:13:00:8a:a9:38:86:04:e8:d2:39:d6:ff:12:
                    00:5d:50:c4:d3:4a:53:56:bb:16:c7:cd:44:95:95:
                    b4:cd:14:99:7b:47:a5:3a:02:ca:8e:c6:05:57:bc:
                    a1:b7:14:16:f5:75:1e:86:f9:27:57:15:b2:85:92:
                    4b:8f:96:8c:d1:33:ef:bb:0c:f7:b7:8d:44:0f:e7:
                    34:b6:af:12:20:e0:e9:aa:b7:cf:46:de:aa:14:29:
                    dc:14:d6:e2:1f:82:bc:2f:12:ca:58:7b:33:c0:7a:
                    e0:5c:7e:f2:ca:11:fe:9c:9e:d7:95:c5:b9:ca:d4:
                    82:7e:02:9b:9e:24:11:3c:00:b2:09:9b:5f:7b:ed:
                    0e:9b:78:ce:68:fa:4e:97:e7:b9:ae:31:cd:23:cb:
                    3a:4b:47:fb:17:41:6c:d2:55:c0:c1:f1:8c:3d:8f:
                    ef:b3:e3:1b:80:29:58:ac:13:72:5f:70:b4:0c:d3:
                    9b:3c:fe:98:69:51:58:8e:6d:e6:11:bc:84:3c:08:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:3E:04:3F:8D:0A:51:6A:F9:E5:BC:F2:5C:D8:B1:B6:CB:3D:91
            X509v3 Authority Key Identifier:
                keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:bc:0d:e1:5d:ad:7c:d3:df:4e:d3:61:9b:b7:77:de:96:44:
         47:3b:2e:43:3f:d5:29:ef:06:c2:1f:67:af:35:db:d0:c6:6a:
         2d:ac:ad:28:cf:a2:22:45:79:f4:91:c7:29:58:fa:03:c0:35:
         26:35:88:65:fc:c5:f3:c1:cb:43:40:c2:87:e6:d0:d4:67:b3:
         71:46:3a:b2:ec:9b:34:ef:80:a9:91:c7:d7:fa:b1:ea:92:dc:
         f1:18:a1:24:73:d3:ea:56:bf:74:f5:a4:cd:a3:4d:09:51:55:
         5a:ba:01:35:45:96:ac:00:e8:f2:c6:b5:e2:a1:15:e4:bc:fd:
         23:1e:9e:9e:51:74:3c:13:56:fe:3a:7a:bf:3f:2e:d6:12:da:
         5f:45:a3:b6:28:ec:d1:f3:f6:d1:71:9e:ac:91:29:b1:f3:20:
         72:69:98:30:30:3d:01:70:e3:30:e2:6d:14:f4:88:3f:fb:4d:
         b8:67:95:eb:f7:e0:d9:00:fd:0e:55:e8:87:84:de:40:2b:d2:
         c6:b9:a1:22:19:e1:94:f9:70:f7:64:f8:b3:55:f2:70:2e:7a:
         d8:45:23:ef:92:6b:25:c6:59:ee:11:47:d5:b9:6e:1a:0c:a2:
         a8:f2:e4:96:90:ce:0c:e8:62:91:b3:b3:f5:83:83:ea:db:64:
         36:b9:78:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaLH+nTw6VBqdDBmQ8XvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0
MTlkYmEwHhcNMjUwNDEzMTMwMTMwWhcNMjUwNDE0MTMwMTMwWjAzMTEwLwYDVQQD
Eyg1Zjk5M2UwNDNmOGQwYTUxNmFmOWU1YmNmMjVjZDhiMWI2Y2IzZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQLYu5y+bXHqUjBQEbR3cjQoHliQ
ydRXlghO3wMfKMxGogFmKXoBax2U5s763y0qHCuTG7b4p2dZw03RQRMAiqk4hgTo
0jnW/xIAXVDE00pTVrsWx81ElZW0zRSZe0elOgLKjsYFV7yhtxQW9XUehvknVxWy
hZJLj5aM0TPvuwz3t41ED+c0tq8SIODpqrfPRt6qFCncFNbiH4K8LxLKWHszwHrg
XH7yyhH+nJ7XlcW5ytSCfgKbniQRPACyCZtfe+0Om3jOaPpOl+e5rjHNI8s6S0f7
F0Fs0lXAwfGMPY/vs+MbgClYrBNyX3C0DNObPP6YaVFYjm3mEbyEPAgQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+ZPgQ/jQpRavnlvPJc2LG2yz2RMB8GA1UdIwQY
MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It
MTA0OWM5OTdiYzdhLzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh
LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurwN4V2t
fNPfTtNhm7d33pZERzsuQz/VKe8Gwh9nrzXb0MZqLaytKM+iIkV59JHHKVj6A8A1
JjWIZfzF88HLQ0DCh+bQ1GezcUY6suybNO+AqZHH1/qx6pLc8RihJHPT6la/dPWk
zaNNCVFVWroBNUWWrADo8sa14qEV5Lz9Ix6enlF0PBNW/jp6vz8u1hLaX0Wjtijs
0fP20XGerJEpsfMgcmmYMDA9AXDjMOJtFPSIP/tNuGeV6/fg2QD9DlXoh4TeQCvS
xrmhIhnhlPlw92T4s1XycC562EUj75JrJcZZ7hFH1bluGgyiqPLklpDODOhikbOz
9YOD6ttkNrl42w==
-----END CERTIFICATE-----