Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File:                     p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier:          AO8WOplZovQDujLhGLlJnw6Vrpctg+1e6E1V23dupjY=
Subject key identifier:   0C:57:16:98:85:4D:F9:4E:30:F9:2A:A0:42:C2:7B:BD:CC:AE:5E:D1
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       01962F74907F2DBC03598713106E9DA534CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=)
                          2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=)
                          3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=)
                          4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=)
                          5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=)
                          6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=)
                          7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=)
                          8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=)
                          9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=)
                          10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=)
                          11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: keKZbQFsj1t8SwPsw80a30XehCxdldQoeZSFNXW7wpU=)
                          12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:7f:2d:bc:03:59:87:13:10:6e:9d:a5:34:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=0c571698854df94e30f92aa042c27bbdccae5ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:bd:4b:2f:db:aa:53:52:f9:57:5a:52:3b:
                    72:ea:10:cd:47:6e:32:e1:a7:ce:9a:52:6d:df:26:
                    4d:75:f0:1f:21:6c:e9:4f:aa:61:7d:a8:0a:7f:9c:
                    7b:e3:97:e8:1d:31:5c:60:b8:eb:b0:6d:ee:6a:4e:
                    da:a7:2b:33:46:a8:48:61:6b:03:3e:a6:e1:3c:f6:
                    48:f1:40:ac:e3:d3:a2:05:c7:c9:60:79:0a:b8:d3:
                    d9:c0:6f:0c:83:fd:65:53:f7:84:c9:42:cf:99:b9:
                    63:2c:86:78:2c:6b:88:38:cc:1e:26:98:0a:28:33:
                    15:02:46:4e:8a:7b:f7:82:ef:b8:95:6c:04:0b:bc:
                    51:6e:25:0e:92:7f:e2:11:90:b9:24:a8:4a:cb:bd:
                    8e:b0:d1:1c:8a:87:f2:bc:6b:b9:d3:08:0f:27:d1:
                    2d:9d:28:8e:f7:e5:2a:1e:0f:9f:eb:3b:9f:5c:4c:
                    c7:80:01:c0:48:62:70:a1:9d:f1:9a:bb:b7:09:d7:
                    23:73:b3:04:55:c3:c4:6b:fc:fa:0a:89:4e:3e:25:
                    4a:fa:a8:4b:3e:39:1f:a8:b4:e1:86:99:a6:ff:0f:
                    58:a9:87:d6:e0:92:b0:eb:8c:4f:71:84:94:ec:87:
                    0a:ff:10:40:22:13:db:66:56:98:e7:b7:9d:ab:dd:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:16:98:85:4D:F9:4E:30:F9:2A:A0:42:C2:7B:BD:CC:AE:5E:D1
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:54:4f:cb:ec:84:f8:61:9e:a4:a3:80:e8:a0:af:eb:f6:
         27:2d:22:b4:70:73:52:8a:3f:62:a3:55:7a:c2:9f:5b:65:6a:
         6c:07:f2:50:4b:f6:c2:54:67:41:78:d0:53:0d:26:f8:7b:04:
         20:c5:10:89:4d:fd:9a:ac:5a:d5:07:f6:d2:3c:b5:41:0c:99:
         ac:e6:18:24:b5:00:ee:64:33:54:07:84:85:b9:f6:82:25:64:
         b1:0f:d7:b3:11:2d:df:5c:9a:9b:99:21:bb:9b:c7:37:60:06:
         40:29:c6:08:a8:a1:f8:7d:d1:18:d0:30:ff:d3:33:3c:21:a3:
         fd:be:79:a0:e1:d7:83:19:c8:64:45:1a:5e:3e:66:57:1c:08:
         56:54:06:01:ee:55:61:e9:2b:f1:ca:28:95:9b:ba:a4:fd:54:
         b4:b7:3d:3b:33:8e:2d:a5:d7:f3:24:0d:f8:49:4a:47:cc:91:
         38:7e:c3:8e:b5:27:dc:a7:d1:6b:cc:68:3e:07:d3:70:85:42:
         d0:07:83:18:fd:0f:da:53:8e:74:2f:35:70:3d:a6:6a:95:96:
         16:f4:54:12:54:37:db:79:5a:1f:1d:f6:41:1e:6d:2c:88:2a:
         84:b7:81:a2:42:07:1e:a0:77:a3:2b:fe:30:6f:7c:cb:c9:6c:
         31:14:4e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJB/LbwDWYcTEG6dpTTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EygwYzU3MTY5ODg1NGRmOTRlMzBmOTJhYTA0MmMyN2JiZGNjYWU1ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGK9Sy/bqlNS+VdaUjty6hDNR24y
4afOmlJt3yZNdfAfIWzpT6phfagKf5x745foHTFcYLjrsG3uak7apyszRqhIYWsD
PqbhPPZI8UCs49OiBcfJYHkKuNPZwG8Mg/1lU/eEyULPmbljLIZ4LGuIOMweJpgK
KDMVAkZOinv3gu+4lWwEC7xRbiUOkn/iEZC5JKhKy72OsNEciofyvGu50wgPJ9Et
nSiO9+UqHg+f6zufXEzHgAHASGJwoZ3xmru3Cdcjc7MEVcPEa/z6ColOPiVK+qhL
PjkfqLThhpmm/w9YqYfW4JKw64xPcYSU7IcK/xBAIhPbZlaY57edq90PnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxXFpiFTflOMPkqoELCe73Mrl7RMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh5UT8vs
hPhhnqSjgOigr+v2Jy0itHBzUoo/YqNVesKfW2VqbAfyUEv2wlRnQXjQUw0m+HsE
IMUQiU39mqxa1Qf20jy1QQyZrOYYJLUA7mQzVAeEhbn2giVksQ/XsxEt31yam5kh
u5vHN2AGQCnGCKih+H3RGNAw/9MzPCGj/b55oOHXgxnIZEUaXj5mVxwIVlQGAe5V
Yekr8coolZu6pP1UtLc9OzOOLaXX8yQN+ElKR8yROH7DjrUn3KfRa8xoPgfTcIVC
0AeDGP0P2lOOdC81cD2mapWWFvRUElQ323laHx32QR5tLIgqhLeBokIHHqB3oyv+
MG98y8lsMRROmw==
-----END CERTIFICATE-----