Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          zn7W53bonmbnfFAu/Bm/0RfSg5fa895lKB6IK/xdIKk=
Subject key identifier:   2A:B2:6F:F6:40:91:B4:4F:64:FE:3D:83:10:59:9A:FF:B2:16:3D:58
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01962F743CD79F585465B9CD1E69E01AAEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          150C
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: OYbT+sfEUcNl75BQHDHrDjkpmhiFlz4a6nEAAJFZFSo=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3c:d7:9f:58:54:65:b9:cd:1e:69:e0:1a:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=2ab26ff64091b44f64fe3d8310599affb2163d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:48:78:37:35:51:59:0f:0d:38:7c:98:e7:
                    fa:d4:c4:bb:3a:4d:bd:0d:16:0c:a8:07:3c:2b:30:
                    f3:67:b7:dc:39:e1:50:8d:fb:03:58:ca:90:aa:9d:
                    6d:b5:85:d3:b8:2c:5f:33:a0:64:79:13:10:ce:8d:
                    d7:cc:28:8a:78:0b:16:1f:c9:b8:ec:b0:43:8d:4a:
                    d7:83:95:30:c8:ab:cd:7f:0d:4d:ed:2a:17:bd:14:
                    fd:fe:d3:d7:aa:c1:de:86:a4:e3:a3:77:df:68:0e:
                    62:00:e0:c3:ec:ed:10:51:8c:b1:61:37:eb:4f:19:
                    b4:f1:12:b1:a9:bd:2b:10:ff:97:96:e7:32:64:09:
                    37:1e:4c:5d:df:7e:b8:b7:c3:0b:32:93:71:85:4c:
                    d4:37:6e:ad:12:ec:f6:19:97:83:27:43:f2:d2:9a:
                    34:d8:d8:1e:f0:77:45:17:49:32:13:05:1d:f2:de:
                    28:44:6e:92:97:00:f3:41:3d:df:8b:8d:ce:e6:63:
                    c3:c2:7d:4a:5f:41:d6:fa:2c:67:09:af:3e:61:77:
                    de:0b:1d:e2:8a:54:5b:c4:8e:2a:f1:75:21:43:88:
                    7e:80:37:64:62:cf:eb:6b:00:16:d1:ab:6e:99:bb:
                    55:67:43:56:55:71:cf:da:b5:f9:18:7d:c0:8b:fd:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:6F:F6:40:91:B4:4F:64:FE:3D:83:10:59:9A:FF:B2:16:3D:58
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:e4:e7:3b:d3:f6:d6:be:12:90:3f:2d:c5:5f:16:9d:e9:
         66:d1:e7:9b:43:df:b7:7d:6c:1e:e0:c4:75:dd:af:d9:f0:6d:
         07:b5:46:3d:9b:2b:b4:39:1b:a9:de:04:e5:0b:f3:54:ea:16:
         a1:9c:26:67:56:0a:4a:7e:5d:4b:b4:85:e6:7c:b5:20:09:d5:
         c3:2d:ba:d0:7a:94:eb:28:fe:f7:cb:eb:14:8a:28:31:ec:20:
         39:d6:85:87:b0:e2:b6:2b:74:d2:e6:ff:35:2f:8f:e7:7b:43:
         ef:6f:68:b5:23:e2:6b:05:5c:1d:04:b3:b8:c2:07:a4:c2:1c:
         a6:83:c4:b4:d3:3c:d5:89:e0:e0:01:13:51:24:25:fc:90:90:
         6b:69:d3:05:78:5e:1f:ab:38:49:3e:d3:4c:de:2b:d3:48:c1:
         db:03:38:71:bc:db:2b:49:b8:ca:5e:7d:19:f9:e0:69:45:f2:
         02:6e:3f:fb:12:cb:ae:c3:21:28:e1:32:d3:cd:9c:4a:37:c9:
         70:31:f6:7d:da:89:5f:71:bc:8d:db:af:22:bf:4b:cd:9d:27:
         f6:54:4e:94:ed:60:5b:fb:c9:67:bb:6c:21:c1:b3:02:58:57:
         fe:8a:cb:d7:8a:16:d0:fa:a1:4b:41:c9:c0:e0:95:77:90:9f:
         66:da:7e:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDzXn1hUZbnNHmngGq6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjUwNDEzMTQwMTA4WhcNMjUwNDE0MTQwMTA4WjAzMTEwLwYDVQQD
EygyYWIyNmZmNjQwOTFiNDRmNjRmZTNkODMxMDU5OWFmZmIyMTYzZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuBIeDc1UVkPDTh8mOf61MS7Ok29
DRYMqAc8KzDzZ7fcOeFQjfsDWMqQqp1ttYXTuCxfM6BkeRMQzo3XzCiKeAsWH8m4
7LBDjUrXg5UwyKvNfw1N7SoXvRT9/tPXqsHehqTjo3ffaA5iAODD7O0QUYyxYTfr
Txm08RKxqb0rEP+XlucyZAk3Hkxd3364t8MLMpNxhUzUN26tEuz2GZeDJ0Py0po0
2Nge8HdFF0kyEwUd8t4oRG6SlwDzQT3fi43O5mPDwn1KX0HW+ixnCa8+YXfeCx3i
ilRbxI4q8XUhQ4h+gDdkYs/rawAW0atumbtVZ0NWVXHP2rX5GH3Ai/12GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqyb/ZAkbRPZP49gxBZmv+yFj1YMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHv3k5zvT
9ta+EpA/LcVfFp3pZtHnm0Pft31sHuDEdd2v2fBtB7VGPZsrtDkbqd4E5QvzVOoW
oZwmZ1YKSn5dS7SF5ny1IAnVwy260HqU6yj+98vrFIooMewgOdaFh7Ditit00ub/
NS+P53tD729otSPiawVcHQSzuMIHpMIcpoPEtNM81Yng4AETUSQl/JCQa2nTBXhe
H6s4ST7TTN4r00jB2wM4cbzbK0m4yl59GfngaUXyAm4/+xLLrsMhKOEy082cSjfJ
cDH2fdqJX3G8jduvIr9LzZ0n9lROlO1gW/vJZ7tsIcGzAlhX/orL14oW0PqhS0HJ
wOCVd5CfZtp+Hw==
-----END CERTIFICATE-----