Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File:                     a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier:          Cjd0QNFoFELHxBQScKRFkWTFxruLZGK9dBtE4nXIXZA=
Subject key identifier:   F2:F9:D2:D1:BC:E4:47:EA:DC:C5:1D:D6:76:67:0D:7E:F7:1C:80:23
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer:       /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial:       01962E2B2D6F2E0918DBC9DABE3E6966C8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number:          14BE
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=)
                          2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=)
                          3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=)
                          4: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (hash: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=)
                          5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=)
                          6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=)
                          7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=)
                          8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=)
                          9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 2uuuBwRx6VtccOiHTPX1UWeuBwHOOCLsR21yJThG33k=)
                          10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=)
                          11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=)
                          12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=)
                          13: l8zjw_dQH-5IvDX9HiKIRUpeGKI.roa (hash: +s8gDZx10WhNyZs9vlnsxeBJZaCG2xbon0ENNsnrO4w=)
                          14: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2d:6f:2e:09:18:db:c9:da:be:3e:69:66:c8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=f2f9d2d1bce447eadcc51dd676670d7ef71c8023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:cb:6e:2e:a9:b8:be:45:36:4b:9d:48:f0:
                    d4:02:1e:e1:c1:7e:d0:28:ac:79:2c:57:03:3a:df:
                    7b:e6:05:73:bc:05:6f:37:b5:ee:59:bf:62:73:ab:
                    48:76:57:6a:e2:52:d8:7b:e5:55:53:18:98:7b:39:
                    5a:8e:98:43:9d:98:09:ef:d6:30:6f:6d:a6:53:e9:
                    3b:11:79:a1:cb:47:9a:be:c6:6b:4b:9f:e8:a7:59:
                    8a:2e:92:80:31:82:7d:9b:60:42:65:7a:52:89:8a:
                    e1:93:9d:5d:7d:09:c3:a1:6f:b4:89:98:b4:92:c3:
                    bd:34:6f:ab:8d:d0:71:82:57:25:42:0e:6c:97:ba:
                    44:0e:db:06:32:6f:c4:74:3a:2a:32:d5:cb:6a:81:
                    fe:48:ea:7c:7e:07:66:d5:ba:a3:3c:e5:9c:89:38:
                    00:96:af:d8:f4:15:0d:7b:a7:6c:d8:93:e1:3a:e3:
                    71:96:e6:b3:67:51:18:29:90:de:a4:39:af:96:a0:
                    d4:37:b9:b6:75:a7:e0:b8:cc:78:b9:19:46:e0:76:
                    3c:c4:8d:2b:64:17:73:1f:73:fe:74:39:d2:4b:16:
                    37:2c:44:2d:f6:ea:b3:63:e5:94:b1:53:a3:51:67:
                    21:0f:2f:ca:e4:06:46:08:45:9c:af:a1:89:e1:7a:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:D2:D1:BC:E4:47:EA:DC:C5:1D:D6:76:67:0D:7E:F7:1C:80:23
            X509v3 Authority Key Identifier:
                keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:71:ae:9c:3d:ad:88:3b:75:c1:b1:ad:00:5c:bb:7c:b2:88:
         7b:a8:7d:ac:b4:87:88:f9:dd:1e:17:9e:d6:3e:f5:fa:d7:aa:
         6f:d1:2b:99:95:d8:dd:c8:ab:37:aa:1f:09:f6:cf:e0:8f:31:
         71:51:32:ea:84:89:f0:c2:0e:e5:a3:6d:20:05:b1:25:d3:1b:
         e3:fb:93:c0:d6:4d:4d:c7:8f:ec:fd:25:2d:58:7c:58:2b:fd:
         ff:a0:bf:c7:14:6b:ec:76:d2:93:f1:5f:6e:f5:cc:4a:2a:15:
         5a:5f:49:af:9f:3d:7e:a4:07:da:31:9e:26:c5:27:d1:30:01:
         b5:ce:66:39:c2:13:41:e6:1c:e8:9c:d2:5f:e0:20:f0:1a:ed:
         df:a9:52:98:11:50:72:d0:2c:d0:9d:0e:04:41:56:3e:c7:bf:
         3f:66:a6:3f:18:fd:2a:8f:39:7f:56:2a:32:46:27:04:1e:18:
         fc:40:7b:be:12:1b:85:10:c2:5c:d7:bf:10:b4:87:c6:28:54:
         89:53:1d:a2:ff:4e:71:84:8d:f9:b6:0f:a4:ed:46:8c:8b:db:
         28:7c:44:fe:65:d7:fe:d1:09:cc:83:3e:7e:da:d1:32:b6:2c:
         0e:02:ae:2d:cd:10:bc:f7:df:ee:6e:21:74:e6:95:31:10:fa:
         e8:50:c5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKy1vLgkY28navj5pZsiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjUwNDEzMDgwMTQzWhcNMjUwNDE0MDgwMTQzWjAzMTEwLwYDVQQD
EyhmMmY5ZDJkMWJjZTQ0N2VhZGNjNTFkZDY3NjY3MGQ3ZWY3MWM4MDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+TLbi6puL5FNkudSPDUAh7hwX7Q
KKx5LFcDOt975gVzvAVvN7XuWb9ic6tIdldq4lLYe+VVUxiYezlajphDnZgJ79Yw
b22mU+k7EXmhy0eavsZrS5/op1mKLpKAMYJ9m2BCZXpSiYrhk51dfQnDoW+0iZi0
ksO9NG+rjdBxglclQg5sl7pEDtsGMm/EdDoqMtXLaoH+SOp8fgdm1bqjPOWciTgA
lq/Y9BUNe6ds2JPhOuNxluazZ1EYKZDepDmvlqDUN7m2dafguMx4uRlG4HY8xI0r
ZBdzH3P+dDnSSxY3LEQt9uqzY+WUsVOjUWchDy/K5AZGCEWcr6GJ4XrcJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL50tG85Efq3MUd1nZnDX73HIAjMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHGunD2t
iDt1wbGtAFy7fLKIe6h9rLSHiPndHhee1j71+teqb9ErmZXY3cirN6ofCfbP4I8x
cVEy6oSJ8MIO5aNtIAWxJdMb4/uTwNZNTceP7P0lLVh8WCv9/6C/xxRr7HbSk/Ff
bvXMSioVWl9Jr589fqQH2jGeJsUn0TABtc5mOcITQeYc6JzSX+Ag8Brt36lSmBFQ
ctAs0J0OBEFWPse/P2amPxj9Ko85f1YqMkYnBB4Y/EB7vhIbhRDCXNe/ELSHxihU
iVMdov9OcYSN+bYPpO1GjIvbKHxE/mXX/tEJzIM+ftrRMrYsDgKuLc0QvPff7m4h
dOaVMRD66FDF/Q==
-----END CERTIFICATE-----