Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File:                     8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier:          744pDSUQ0/3V6nzEmr5P7SakPwWqIF0UvEE0+hbwDvY=
Subject key identifier:   83:41:72:6D:58:26:76:1E:B2:78:42:7E:37:82:F7:26:D5:A3:EB:28
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer:       /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial:       01962F3D6A156DC263BBEB1BB53248EE9909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number:          0F33
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
                          2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: +c/6dth41ZBmONeHpgzd+UvOWz7QZ9SyBfma5ga8090=)
                          3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6a:15:6d:c2:63:bb:eb:1b:b5:32:48:ee:99:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=8341726d5826761eb278427e3782f726d5a3eb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:b2:6b:a3:62:f8:6a:97:0f:24:80:63:ae:
                    7c:cd:9b:f4:ef:4b:fd:bc:46:b6:84:6e:44:99:b0:
                    dc:6d:53:55:22:3a:b2:76:c2:6c:d7:16:eb:58:84:
                    94:6e:21:cb:75:d3:82:16:4d:fe:a1:d7:fd:fc:b5:
                    08:0f:db:a9:7a:ca:9d:d1:20:89:72:5e:e1:99:05:
                    ed:dd:2f:3c:cb:51:f3:68:11:73:4f:7b:00:15:0e:
                    0d:9b:2d:07:b6:5e:80:d2:e0:7f:6e:4b:cc:31:4b:
                    e9:0c:03:d6:2b:9f:1f:6e:9d:54:a5:d7:9a:4d:bd:
                    c3:75:d7:52:00:27:9a:b8:13:0b:f9:35:c3:a5:22:
                    88:82:c4:92:3c:dc:fb:a5:13:70:01:c7:33:40:40:
                    69:83:80:12:5c:c6:ed:ed:de:f3:eb:ad:ab:85:12:
                    c3:32:be:b5:98:f1:8e:0e:c3:b8:f8:0f:c0:3e:a8:
                    82:b6:90:5b:c1:c3:99:56:9c:05:58:c9:57:ff:3c:
                    17:bd:48:4c:62:3f:81:e4:74:3f:ad:f9:af:d3:e6:
                    3f:35:52:29:00:84:b0:28:41:92:d3:00:12:46:27:
                    63:72:fc:29:02:75:f0:4b:d9:58:19:ef:92:59:81:
                    89:40:7f:04:85:92:af:17:5b:66:27:18:62:95:9e:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:41:72:6D:58:26:76:1E:B2:78:42:7E:37:82:F7:26:D5:A3:EB:28
            X509v3 Authority Key Identifier:
                keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:46:56:79:61:c7:dc:c5:4c:7e:63:fc:8f:0c:14:2e:17:
         6c:b3:46:65:96:87:c4:c7:5a:f2:dd:ff:ca:1a:d4:92:fe:56:
         2d:c7:ec:71:1d:97:0a:d7:80:e4:8c:4e:ac:c7:2c:e2:98:a8:
         d5:95:ca:f6:93:f5:ff:8c:99:70:ad:19:ed:c9:18:c4:07:08:
         a0:5c:a8:e1:c2:35:0c:28:3d:96:1d:9d:42:ab:8c:a5:21:d8:
         23:35:6f:4d:ed:99:c6:3a:4a:b1:29:e6:c4:ed:13:ee:fe:61:
         b2:3c:38:1e:ad:58:12:08:1f:76:93:5f:9d:b9:f0:7c:88:97:
         52:a4:80:4f:5d:d9:35:b6:34:aa:1c:6b:18:93:17:59:ba:9d:
         a7:37:a9:15:52:b0:89:1f:52:e5:16:8b:16:2c:31:e8:77:24:
         f8:15:8b:07:79:e1:8b:2c:94:29:40:d0:29:5f:f9:6b:95:87:
         68:fd:83:cb:62:43:5c:dc:74:51:f9:a1:74:7c:af:75:db:c4:
         be:f0:bf:e2:1a:d1:41:56:f3:80:d1:7a:ec:b8:ee:a5:46:cb:
         22:7f:b7:f5:bb:36:56:1c:b0:dc:46:06:b8:aa:02:1c:40:ef:
         db:2a:83:22:da:64:c7:10:7a:7e:e2:eb:03:b4:3b:3e:87:2c:
         1c:9a:05:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWoVbcJju+sbtTJI7pkJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg4MzQxNzI2ZDU4MjY3NjFlYjI3ODQyN2UzNzgyZjcyNmQ1YTNlYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaCya6Ni+GqXDySAY658zZv070v9
vEa2hG5EmbDcbVNVIjqydsJs1xbrWISUbiHLddOCFk3+odf9/LUID9upesqd0SCJ
cl7hmQXt3S88y1HzaBFzT3sAFQ4Nmy0Htl6A0uB/bkvMMUvpDAPWK58fbp1Updea
Tb3DdddSACeauBML+TXDpSKIgsSSPNz7pRNwAcczQEBpg4ASXMbt7d7z662rhRLD
Mr61mPGODsO4+A/APqiCtpBbwcOZVpwFWMlX/zwXvUhMYj+B5HQ/rfmv0+Y/NVIp
AISwKEGS0wASRidjcvwpAnXwS9lYGe+SWYGJQH8EhZKvF1tmJxhilZ73YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINBcm1YJnYesnhCfjeC9ybVo+soMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfZGVnlh
x9zFTH5j/I8MFC4XbLNGZZaHxMda8t3/yhrUkv5WLcfscR2XCteA5IxOrMcs4pio
1ZXK9pP1/4yZcK0Z7ckYxAcIoFyo4cI1DCg9lh2dQquMpSHYIzVvTe2ZxjpKsSnm
xO0T7v5hsjw4Hq1YEggfdpNfnbnwfIiXUqSAT13ZNbY0qhxrGJMXWbqdpzepFVKw
iR9S5RaLFiwx6Hck+BWLB3nhiyyUKUDQKV/5a5WHaP2Dy2JDXNx0UfmhdHyvddvE
vvC/4hrRQVbzgNF67LjupUbLIn+39bs2Vhyw3EYGuKoCHEDv2yqDItpkxxB6fuLr
A7Q7PocsHJoF2w==
-----END CERTIFICATE-----