Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          t9P63qfkYfj+2P/1mqMQsgSrOGmsJfJANJ/UNTv1zvs=
Subject key identifier:   C9:41:C5:46:CE:68:9C:C6:60:8E:59:F2:8F:A2:04:7B:31:F0:AC:E9
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       01962ECFB6D93FAD37B704A15BF77F59C753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          0292
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 7hX2kvhGcEho9Z4B5I203SOFDKo.roa (hash: uOYoTi2rqcHbtIlClUvG5lUVdT7AvqTcY4AmaxczRf4=)
                          2: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: 9v5w8HlEhPgssYGy725J1fotKD3SU1poRIPpoeFQyxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:d9:3f:ad:37:b7:04:a1:5b:f7:7f:59:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=c941c546ce689cc6608e59f28fa2047b31f0ace9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:1a:91:19:cf:77:0f:dd:ed:e4:5f:b9:ac:
                    34:50:31:51:cd:a8:14:77:34:c5:ef:d1:05:e4:0b:
                    93:ad:fd:48:f8:7b:8d:63:f0:46:3f:82:35:6a:f0:
                    f1:f4:c5:f9:25:4b:12:a6:3b:bb:e4:76:35:a5:11:
                    2b:e3:73:b5:df:0f:79:0b:5c:da:83:58:f7:eb:cc:
                    f5:77:cc:8c:b6:b9:80:76:0d:a7:09:41:91:5e:e2:
                    7a:7d:3a:2e:78:cd:74:65:c2:0c:30:17:16:fe:ee:
                    9a:80:11:9b:03:15:4f:4b:44:5a:0a:cf:0b:b7:6d:
                    8c:5c:9a:5f:ef:fd:c7:0a:6d:ae:01:18:9a:e8:b6:
                    c7:ee:15:16:21:a0:19:a4:dd:0d:df:9b:76:ba:9c:
                    ef:1e:95:a9:fe:b9:28:9a:1e:4b:17:0e:5d:85:3b:
                    24:ed:b9:ad:fd:3a:54:4e:fb:fa:00:49:e8:64:d0:
                    e2:b0:a1:0e:95:fc:b2:dc:ba:fb:ba:ec:50:2b:4f:
                    64:9b:e6:91:6c:98:19:1e:35:bc:8e:f8:05:73:78:
                    52:7a:35:28:55:33:0d:8b:64:0e:50:30:bc:65:09:
                    5f:d6:9f:c9:a3:e7:7e:b0:ed:b5:c4:3a:e1:6f:c8:
                    fd:f7:0b:37:1f:ad:b3:5e:0d:6c:fb:47:bc:2f:af:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:41:C5:46:CE:68:9C:C6:60:8E:59:F2:8F:A2:04:7B:31:F0:AC:E9
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:1d:c9:0b:5b:0f:95:36:fa:90:39:87:b6:61:a5:7f:75:
         61:2b:b7:43:d4:14:9f:2d:db:4e:00:43:29:41:de:c9:94:34:
         f2:ff:d3:bb:25:7d:12:6b:e3:23:6a:dd:96:ac:fa:57:63:02:
         41:e7:9c:ba:09:67:2e:f8:70:fd:e2:04:ca:1a:34:09:9e:90:
         30:ee:54:7c:c5:5d:39:86:ba:bd:9d:d3:74:7c:1e:50:e1:3d:
         c7:5b:cc:84:6d:aa:aa:ee:e6:d8:4b:c9:45:34:5e:4f:14:91:
         53:8a:cc:ae:ea:17:e5:da:c9:24:c1:3c:3f:1a:61:03:f7:98:
         70:21:a5:25:9d:da:a7:f5:23:a2:ec:fa:30:02:16:61:b0:a1:
         33:28:c5:b2:b4:41:e5:da:9f:20:e9:4d:ef:7a:5b:48:c1:16:
         3e:bc:53:8c:65:d8:14:0f:fc:d8:4d:1a:a6:8e:7e:43:6e:2b:
         13:92:b3:67:81:d0:a9:5f:07:a2:d7:79:e5:b0:38:03:08:ac:
         c3:83:d6:33:9c:97:f9:6f:cf:8a:a2:b8:7a:0a:3d:93:24:72:
         54:4c:0e:0c:15:ba:5f:f5:28:ae:eb:71:7b:05:09:f2:82:5c:
         08:89:e0:46:35:25:f8:50:17:e1:e2:1f:86:d3:33:87:e2:e8:
         cf:5d:75:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7bZP603twShW/d/WcdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
EyhjOTQxYzU0NmNlNjg5Y2M2NjA4ZTU5ZjI4ZmEyMDQ3YjMxZjBhY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zUakRnPdw/d7eRfuaw0UDFRzagU
dzTF79EF5AuTrf1I+HuNY/BGP4I1avDx9MX5JUsSpju75HY1pREr43O13w95C1za
g1j368z1d8yMtrmAdg2nCUGRXuJ6fToueM10ZcIMMBcW/u6agBGbAxVPS0RaCs8L
t22MXJpf7/3HCm2uARia6LbH7hUWIaAZpN0N35t2upzvHpWp/rkomh5LFw5dhTsk
7bmt/TpUTvv6AEnoZNDisKEOlfyy3Lr7uuxQK09km+aRbJgZHjW8jvgFc3hSejUo
VTMNi2QOUDC8ZQlf1p/Jo+d+sO21xDrhb8j99ws3H62zXg1s+0e8L68RWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlBxUbOaJzGYI5Z8o+iBHsx8KzpMB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOygdyQtb
D5U2+pA5h7ZhpX91YSu3Q9QUny3bTgBDKUHeyZQ08v/TuyV9EmvjI2rdlqz6V2MC
QeecuglnLvhw/eIEyho0CZ6QMO5UfMVdOYa6vZ3TdHweUOE9x1vMhG2qqu7m2EvJ
RTReTxSRU4rMruoX5drJJME8PxphA/eYcCGlJZ3ap/Ujouz6MAIWYbChMyjFsrRB
5dqfIOlN73pbSMEWPrxTjGXYFA/82E0apo5+Q24rE5KzZ4HQqV8Hotd55bA4Awis
w4PWM5yX+W/PiqK4ego9kyRyVEwODBW6X/UorutxewUJ8oJcCIngRjUl+FAX4eIf
htMzh+Loz111MA==
-----END CERTIFICATE-----