Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File:                     pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier:          FgltAJi0SJsH+wuoRN0sPbBWRgotB8xSCmZNQni5Jtg=
Subject key identifier:   8E:F9:E0:6E:FC:00:F3:E4:A4:0C:92:D7:2D:F7:8B:5E:41:53:3D:96
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer:       /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial:       01962F3D37F72A6121AB68000B21AD8990F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
                          2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
                          3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: mjgT5jrYkWlYSL2+1r4+T1vkQEBNqH45Q2WruO7hQNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:f7:2a:61:21:ab:68:00:0b:21:ad:89:90:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=8ef9e06efc00f3e4a40c92d72df78b5e41533d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:bc:fa:c6:84:42:a6:62:6a:9a:32:58:13:
                    39:24:68:12:61:59:70:7a:dc:3b:e4:67:75:4f:ba:
                    c8:3a:60:80:08:32:06:8b:65:96:60:c5:17:20:66:
                    5e:fb:77:e8:50:07:b3:0f:76:c5:e2:71:65:bb:9b:
                    a2:b0:23:80:5b:28:46:a8:05:fc:06:3a:dc:34:73:
                    67:98:9c:c7:7a:94:e9:18:c6:38:41:48:44:3a:a0:
                    da:b2:41:d0:c6:cc:9e:f8:44:9c:dc:ad:5d:39:d6:
                    2e:64:16:f3:0c:ae:1b:32:40:a9:ca:6e:ff:7d:78:
                    6f:4d:c0:8f:43:e7:a6:39:c4:28:a0:cb:d9:44:45:
                    48:c9:b4:9f:c9:d6:14:80:10:88:ff:d8:e3:6b:1e:
                    48:5d:d3:75:f1:e4:eb:a4:3e:31:02:bf:d5:2a:28:
                    8c:de:93:21:42:b8:8c:6f:f3:1f:62:6c:f5:87:80:
                    61:98:27:35:9a:a4:13:00:49:be:3c:4a:28:85:95:
                    be:18:98:2e:16:55:d3:81:ca:6e:c9:8f:1f:b3:fe:
                    16:ab:be:e8:50:98:0e:f1:54:fe:d0:2b:89:07:5d:
                    ba:e9:69:64:71:e0:e5:88:cb:a3:20:94:2c:1e:da:
                    ca:94:08:5e:2c:e0:a3:f5:09:aa:26:b3:fa:cf:89:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F9:E0:6E:FC:00:F3:E4:A4:0C:92:D7:2D:F7:8B:5E:41:53:3D:96
            X509v3 Authority Key Identifier:
                keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:91:06:67:cd:c9:8a:6d:d5:99:20:04:dc:02:e7:1e:b9:
         e8:cb:55:fa:20:b7:95:51:f8:72:45:11:ef:61:d9:74:13:c7:
         6d:4a:1a:30:d3:86:aa:c1:f7:18:22:63:b5:65:54:33:37:a4:
         20:14:6e:52:8a:67:b7:19:81:1f:24:a4:e1:9d:c9:14:99:13:
         2b:cc:d6:01:21:a8:58:b3:bd:94:8e:2f:53:93:29:37:a7:66:
         df:1d:5f:ef:cd:56:b9:80:c7:c5:d7:47:a0:20:1c:b5:96:ce:
         6b:eb:38:91:61:c1:ef:eb:f4:6a:d3:b4:d5:01:9a:0b:e0:5a:
         9e:0c:a7:a2:1c:96:7c:db:0a:4e:d9:63:1d:84:d7:b1:f5:04:
         c1:ea:eb:2d:bd:57:1d:41:67:b7:a0:ae:9f:50:b2:ee:c1:56:
         02:2e:e9:ce:a4:7e:5a:f5:5d:3c:ba:66:ef:30:75:b4:3b:49:
         d2:2f:a4:a4:a0:f6:a9:e4:ae:55:ff:c6:03:70:ad:b5:17:0e:
         09:b0:7d:dc:98:04:04:e6:35:72:05:d0:de:9a:af:55:73:14:
         44:60:47:83:d6:3f:4d:20:24:be:8f:bf:87:d1:67:c9:b4:16:
         e6:93:be:d2:eb:6a:c4:cb:d8:f5:45:10:03:49:55:7a:ec:e6:
         08:47:72:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTf3KmEhq2gACyGtiZDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy
NGQ0YzkwHhcNMjUwNDEzMTMwMTAzWhcNMjUwNDE0MTMwMTAzWjAzMTEwLwYDVQQD
Eyg4ZWY5ZTA2ZWZjMDBmM2U0YTQwYzkyZDcyZGY3OGI1ZTQxNTMzZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvky8+saEQqZiapoyWBM5JGgSYVlw
etw75Gd1T7rIOmCACDIGi2WWYMUXIGZe+3foUAezD3bF4nFlu5uisCOAWyhGqAX8
BjrcNHNnmJzHepTpGMY4QUhEOqDaskHQxsye+ESc3K1dOdYuZBbzDK4bMkCpym7/
fXhvTcCPQ+emOcQooMvZREVIybSfydYUgBCI/9jjax5IXdN18eTrpD4xAr/VKiiM
3pMhQriMb/MfYmz1h4BhmCc1mqQTAEm+PEoohZW+GJguFlXTgcpuyY8fs/4Wq77o
UJgO8VT+0CuJB1266WlkceDliMujIJQsHtrKlAheLOCj9QmqJrP6z4lppQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI754G78APPkpAyS1y33i15BUz2WMB8GA1UdIwQY
MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt
YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0
LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcyRBmfN
yYpt1ZkgBNwC5x656MtV+iC3lVH4ckUR72HZdBPHbUoaMNOGqsH3GCJjtWVUMzek
IBRuUopntxmBHySk4Z3JFJkTK8zWASGoWLO9lI4vU5MpN6dm3x1f781WuYDHxddH
oCActZbOa+s4kWHB7+v0atO01QGaC+BangynohyWfNsKTtljHYTXsfUEwerrLb1X
HUFnt6Cun1Cy7sFWAi7pzqR+WvVdPLpm7zB1tDtJ0i+kpKD2qeSuVf/GA3CttRcO
CbB93JgEBOY1cgXQ3pqvVXMURGBHg9Y/TSAkvo+/h9FnybQW5pO+0utqxMvY9UUQ
A0lVeuzmCEdyEQ==
-----END CERTIFICATE-----