Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File:                     tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier:          P6LseOagiw11PpEL77I/KtG1rXiBwGydpsBliUoSslc=
Subject key identifier:   17:9B:6F:C0:AF:6D:51:00:62:00:64:D1:8E:1E:55:BD:61:F6:66:E4
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer:       /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial:       01962E2AF4429B7B6C00A7CC0568E15DC770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
                          2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: HqfotTPwh65d0iHSFTP0Oax32tsvuDUWFws0FIVksYw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f4:42:9b:7b:6c:00:a7:cc:05:68:e1:5d:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=179b6fc0af6d5100620064d18e1e55bd61f666e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:d1:f3:0e:a3:b8:ce:3b:65:b8:1c:87:f1:
                    9a:bf:6f:33:32:ec:db:ee:ae:50:0d:cc:89:a7:95:
                    c7:e2:22:49:8d:59:dd:04:61:5c:8a:4e:d1:2e:06:
                    ae:cf:4c:c9:37:c4:dd:de:28:42:0c:52:53:be:b5:
                    a1:85:5a:e6:45:3a:40:6e:7e:06:d8:ad:5c:4c:60:
                    4e:93:08:a6:45:0c:0d:d5:a7:6b:c6:06:72:71:1e:
                    28:0e:d0:37:e1:7e:2f:53:c4:92:25:4d:6b:28:d7:
                    c3:cb:e7:fd:cf:08:a4:5f:55:0b:8b:45:80:9d:3c:
                    b7:62:60:2c:d4:da:e0:34:0c:e7:6b:9e:da:90:b9:
                    4e:3a:98:1a:f5:e8:f0:12:6e:39:b3:5c:c6:79:8c:
                    e7:79:83:f0:48:95:bb:21:2b:94:29:09:4e:9f:65:
                    15:c0:aa:a7:47:4d:c6:6b:a7:67:ed:1a:ab:76:cd:
                    2f:de:ce:58:63:ff:e1:3c:0e:a0:9f:bb:e0:b9:92:
                    25:5a:7f:50:8b:cf:88:a4:78:a4:19:13:42:84:f7:
                    6f:07:f5:1e:6d:19:23:0f:8f:3c:5e:79:a9:d4:e5:
                    4b:69:c3:4d:52:a7:f7:fe:70:c1:67:64:54:b7:be:
                    05:75:be:6f:e1:69:c6:fc:6e:04:d7:30:1c:d6:ed:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9B:6F:C0:AF:6D:51:00:62:00:64:D1:8E:1E:55:BD:61:F6:66:E4
            X509v3 Authority Key Identifier:
                keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:7f:7e:b2:68:a9:04:73:cf:ef:1b:43:3d:f9:b1:42:f7:
         12:c1:55:eb:16:a5:2f:7c:0c:f9:52:d0:1a:64:2e:d0:de:ec:
         b9:da:c9:42:db:64:5f:45:12:e4:55:bf:85:76:b1:ff:1b:cb:
         c0:e6:06:53:ef:5b:69:4b:9e:45:18:1b:65:8b:de:76:7c:70:
         d6:21:87:94:c3:74:20:06:11:65:b9:a3:9d:b8:fd:32:29:9d:
         09:62:b8:14:8c:d8:83:94:48:97:32:ea:ee:56:32:d9:c5:ed:
         41:c0:62:1d:ed:77:ef:de:bc:31:79:47:c4:3a:b3:16:ad:c3:
         b3:20:45:53:0e:45:0f:37:be:3a:37:3d:62:47:83:d8:fb:cc:
         30:1c:97:90:1a:32:41:c0:3c:e0:53:2c:f2:7e:cf:77:19:5d:
         04:a3:82:48:e0:88:7d:56:86:0d:67:5d:99:a9:a1:20:dd:75:
         5d:de:4c:40:0c:b1:6b:8b:f3:ec:8a:1d:67:e9:2a:fb:4b:49:
         19:b2:6c:29:cb:c5:c5:ae:8d:5d:e4:4b:b7:e5:a7:b0:8e:11:
         3e:a5:01:08:6d:7e:03:59:6b:a9:10:90:9b:12:aa:ae:f8:24:
         dc:1d:0d:43:c6:ca:4d:47:a2:89:7e:3b:de:06:10:77:40:fb:
         0b:85:2f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvRCm3tsAKfMBWjhXcdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2FiNzE4YjRhY2IzYTY3OWM1ZGI4ZmNlZTcyOTRlZDZi
ZTJiZDAwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
EygxNzliNmZjMGFmNmQ1MTAwNjIwMDY0ZDE4ZTFlNTViZDYxZjY2NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjR8w6juM47Zbgch/Gav28zMuzb
7q5QDcyJp5XH4iJJjVndBGFcik7RLgauz0zJN8Td3ihCDFJTvrWhhVrmRTpAbn4G
2K1cTGBOkwimRQwN1adrxgZycR4oDtA34X4vU8SSJU1rKNfDy+f9zwikX1ULi0WA
nTy3YmAs1NrgNAzna57akLlOOpga9ejwEm45s1zGeYzneYPwSJW7ISuUKQlOn2UV
wKqnR03Ga6dn7Rqrds0v3s5YY//hPA6gn7vguZIlWn9Qi8+IpHikGRNChPdvB/Ue
bRkjD488Xnmp1OVLacNNUqf3/nDBZ2RUt74Fdb5v4WnG/G4E1zAc1u0nXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBebb8CvbVEAYgBk0Y4eVb1h9mbkMB8GA1UdIwQY
MBaAFLV6txi0rLOmecXbj87nKU7WvivQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYt
YzcwMGVhMDNjMjI3LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYTFiZTMtNzk2ZS00NWM4LThiNzYtYzcwMGVhMDNjMjI3
LzEvdFhxM0dMU3NzNlo1eGR1UHp1Y3BUdGEtSzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF9/frJo
qQRzz+8bQz35sUL3EsFV6xalL3wM+VLQGmQu0N7sudrJQttkX0US5FW/hXax/xvL
wOYGU+9baUueRRgbZYvednxw1iGHlMN0IAYRZbmjnbj9MimdCWK4FIzYg5RIlzLq
7lYy2cXtQcBiHe137968MXlHxDqzFq3DsyBFUw5FDze+Ojc9YkeD2PvMMByXkBoy
QcA84FMs8n7PdxldBKOCSOCIfVaGDWddmamhIN11Xd5MQAyxa4vz7IodZ+kq+0tJ
GbJsKcvFxa6NXeRLt+WnsI4RPqUBCG1+A1lrqRCQmxKqrvgk3B0NQ8bKTUeiiX47
3gYQd0D7C4UvCA==
-----END CERTIFICATE-----