Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File:                     hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier:          o0cBN2hp6bDIhFAD9mSpK1R+CZcIuf+aT9W99nOluDs=
Subject key identifier:   B8:AE:84:3A:A5:92:03:06:A0:EA:37:B9:BE:95:43:86:BC:E1:EE:BF
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer:       /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial:       01962F741AF9D7CDD10DC3DA41C5A36EFDBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number:          08E3
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
                          2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: okRXQPf4sKp3qXu2iY0oqc7qIQGV60W+egNI67i14TI=)
                          3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
                          4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:f9:d7:cd:d1:0d:c3:da:41:c5:a3:6e:fd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=b8ae843aa5920306a0ea37b9be954386bce1eebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:52:b5:61:b6:88:a3:fd:74:f5:2e:98:c9:
                    e2:23:51:03:6b:35:03:19:3a:4b:6b:93:df:10:d7:
                    67:db:39:c9:fa:37:81:c2:83:fb:b4:f0:e1:24:91:
                    61:a2:ab:90:4c:7a:c0:f6:6b:36:9c:4d:69:16:da:
                    04:bc:b3:4e:f1:a1:7c:1c:c7:c0:75:46:a7:d5:af:
                    52:30:84:1d:f4:0f:0d:04:8d:55:5a:a4:21:1e:32:
                    83:e8:41:11:5b:9e:88:55:42:c3:7e:28:1d:ac:b4:
                    16:8b:84:ce:e0:14:3d:61:04:dd:ce:b3:84:a7:03:
                    7b:67:01:d0:9d:83:b0:b9:81:1a:6f:c6:7c:1e:bb:
                    7c:41:e6:54:84:e4:17:c2:58:3c:a1:4e:8d:c3:71:
                    ae:dd:44:ea:ed:9d:f8:e1:24:e1:d8:8a:7e:27:d3:
                    77:81:e2:4f:da:be:24:01:5d:59:28:c6:94:04:2f:
                    96:45:52:88:b4:d8:92:d6:4c:77:c3:be:33:8c:c8:
                    2a:47:8d:46:a1:ad:31:1a:02:a2:e1:4a:4e:8d:cb:
                    9b:5b:4d:82:bd:e1:3b:b3:3b:b5:ab:70:80:c8:fd:
                    62:3d:cd:92:29:74:e7:10:3a:b5:49:dc:c4:3e:52:
                    fd:c6:4b:c4:85:ae:17:aa:fd:1f:bb:c9:1e:51:ce:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:84:3A:A5:92:03:06:A0:EA:37:B9:BE:95:43:86:BC:E1:EE:BF
            X509v3 Authority Key Identifier:
                keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:a5:97:ca:c6:4f:69:d4:a2:1f:01:34:ac:9d:3e:e3:52:
         7d:28:77:4a:dc:89:36:69:8b:31:c0:15:40:d7:5c:15:83:5e:
         cd:c1:c0:d4:90:ac:1e:81:b1:3d:3e:9b:40:8c:f1:0c:9c:d4:
         ca:ac:4b:2c:6b:90:4c:c1:66:e9:dd:35:c4:f6:22:4a:da:94:
         e5:58:38:80:b2:de:f0:34:ed:f8:81:63:95:46:85:bf:54:a2:
         aa:87:ac:56:c3:6e:0b:4a:9d:c8:73:a2:77:92:2b:73:e7:eb:
         74:d9:4b:69:3c:35:a8:0e:19:66:08:51:62:b6:78:77:f6:db:
         6b:82:51:bd:d0:a1:39:73:50:cc:58:fa:fd:c4:e1:76:f4:3d:
         29:21:02:d0:6b:34:c8:0b:3f:e7:1c:db:1b:6d:a3:c8:28:28:
         c0:f2:f2:50:fe:91:a5:9e:23:82:43:78:ae:d4:5f:15:d4:47:
         06:78:e5:f8:31:89:7b:4d:a6:fc:5b:a2:dc:c3:05:84:7a:3f:
         29:f1:87:f8:ea:1a:8e:fa:87:98:c5:9c:92:ba:75:0a:a2:85:
         2d:f7:1a:b3:61:7e:13:c9:7c:cb:6c:1d:7b:c0:10:e0:16:7a:
         e3:49:9a:29:0a:8a:7b:c6:cd:45:77:a8:b0:e2:10:04:6e:b9:
         ac:9a:3f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBr5183RDcPaQcWjbv2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OGQ5ODAwZDY5ZGViYWUxMWI3ZjgxNjFjM2NlODgxODFm
ZGU3YjQwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EyhiOGFlODQzYWE1OTIwMzA2YTBlYTM3YjliZTk1NDM4NmJjZTFlZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1StWG2iKP9dPUumMniI1EDazUD
GTpLa5PfENdn2znJ+jeBwoP7tPDhJJFhoquQTHrA9ms2nE1pFtoEvLNO8aF8HMfA
dUan1a9SMIQd9A8NBI1VWqQhHjKD6EERW56IVULDfigdrLQWi4TO4BQ9YQTdzrOE
pwN7ZwHQnYOwuYEab8Z8Hrt8QeZUhOQXwlg8oU6Nw3Gu3UTq7Z344STh2Ip+J9N3
geJP2r4kAV1ZKMaUBC+WRVKItNiS1kx3w74zjMgqR41Goa0xGgKi4UpOjcubW02C
veE7szu1q3CAyP1iPc2SKXTnEDq1SdzEPlL9xkvEha4Xqv0fu8keUc4d7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiuhDqlkgMGoOo3ub6VQ4a84e6/MB8GA1UdIwQY
MBaAFISNmADWneuuEbf4Fhw86IGB/ee0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEt
M2Q5M2ZlNmQyMGFhLzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODcxMzYtM2M3MC00NjE5LTgzMjEtM2Q5M2ZlNmQyMGFh
LzEvaEkyWUFOYWQ2NjRSdF9nV0hEem9nWUg5NTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/Cll8rG
T2nUoh8BNKydPuNSfSh3StyJNmmLMcAVQNdcFYNezcHA1JCsHoGxPT6bQIzxDJzU
yqxLLGuQTMFm6d01xPYiStqU5Vg4gLLe8DTt+IFjlUaFv1SiqoesVsNuC0qdyHOi
d5Irc+frdNlLaTw1qA4ZZghRYrZ4d/bba4JRvdChOXNQzFj6/cThdvQ9KSEC0Gs0
yAs/5xzbG22jyCgowPLyUP6RpZ4jgkN4rtRfFdRHBnjl+DGJe02m/Fui3MMFhHo/
KfGH+OoajvqHmMWckrp1CqKFLfcas2F+E8l8y2wde8AQ4BZ640maKQqKe8bNRXeo
sOIQBG65rJo/qA==
-----END CERTIFICATE-----