Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          mDlNTiv2AhqnApddvW4+k4Xehzw51V/lE+EYQjDeE4M=
Subject key identifier:   83:DF:FF:AE:D1:D4:A4:56:40:C4:FC:95:83:9A:7F:B0:56:8D:0E:2B
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       01962F0708AA89331996C07C95ADDC260ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: tZU3AHq8gR85fmw/1WhyhIuMhV/CWU7EUQVi6Ovo5O0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:08:aa:89:33:19:96:c0:7c:95:ad:dc:26:0a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=83dfffaed1d4a45640c4fc95839a7fb0568d0e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:05:e8:d7:56:11:94:75:17:a7:d6:d1:b5:
                    7c:4a:0d:04:ec:94:72:98:96:87:34:90:b2:4a:c6:
                    b7:86:a0:0b:38:55:b7:ef:57:fd:85:d6:aa:49:55:
                    66:30:cb:11:b4:53:0b:89:7e:05:18:ea:e6:51:11:
                    a6:22:55:ee:88:66:55:8e:6c:55:e9:21:b7:c2:ea:
                    7d:1f:96:a6:53:3e:ae:8d:b1:d9:ca:10:c2:85:04:
                    c2:11:f6:91:a7:06:62:75:3e:2e:15:19:54:f3:ef:
                    bc:bf:af:b6:8a:53:6d:84:b2:74:04:f0:85:9c:78:
                    b1:68:74:c6:a4:fa:76:91:46:8f:c2:f6:3a:94:10:
                    c7:c8:71:8c:e6:d7:73:96:39:8f:f9:5d:62:1f:04:
                    af:fe:16:01:a4:80:3b:35:84:94:99:f7:a9:25:4f:
                    4d:db:56:05:e7:22:c5:05:97:35:76:e1:2e:ea:eb:
                    36:98:3b:84:f3:84:2b:b0:b7:47:db:70:9e:58:17:
                    e4:00:cf:aa:54:4f:8b:f8:c9:6d:1a:cc:01:e4:bb:
                    e8:6c:ff:55:ba:30:42:74:43:38:2b:36:f6:64:a0:
                    4e:30:b1:53:e2:af:50:dd:aa:30:ae:53:c6:54:f5:
                    b3:cb:43:14:96:95:95:4f:48:90:f4:d3:d1:7b:0d:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DF:FF:AE:D1:D4:A4:56:40:C4:FC:95:83:9A:7F:B0:56:8D:0E:2B
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:65:9c:43:d6:db:df:d7:7e:ea:7d:ce:74:79:57:3a:c6:17:
         0a:87:eb:6f:a6:e8:c1:0e:b7:74:16:0b:bc:83:6d:97:99:5f:
         1e:ec:b0:aa:99:1a:2f:c9:6c:af:0b:b3:9a:58:0a:f8:bd:e0:
         7b:e7:96:42:c8:4e:fb:c6:da:27:3c:8d:10:f3:da:da:4c:b8:
         3a:a0:86:41:23:1c:c4:cd:53:da:f5:cf:57:13:09:f4:f6:19:
         7b:85:00:f9:f4:2d:6f:f3:64:cd:ac:27:9c:a9:b8:e4:42:a5:
         fd:e4:c4:68:06:ca:2e:71:3c:68:55:cc:f0:96:e3:e2:37:85:
         14:88:3d:26:d6:f9:c6:ae:52:68:98:fb:dc:92:fa:f2:8d:15:
         18:19:3a:34:82:da:79:b7:eb:98:06:c3:a4:6c:ca:fd:65:b5:
         cb:91:1d:47:2e:7b:5e:5f:da:95:39:d1:44:7f:51:85:01:4d:
         63:82:a9:9d:71:20:3c:c9:73:86:fb:3f:c0:24:78:b7:eb:67:
         b8:62:3a:d1:0a:d3:1e:44:4f:7e:9d:0b:c1:9a:03:9d:6f:85:
         69:16:12:a7:5b:81:64:c6:51:cc:1b:52:cf:fe:2e:9e:ab:62:
         57:ac:72:6d:77:d3:d7:be:5d:48:40:e6:02:89:fd:47:cf:12:
         70:78:06:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwiqiTMZlsB8la3cJgq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTM2MGI2ZjU4MzlhYWZkY2UyMWNkNmRlNzYzYmRhYTI2
YmZiZjAwHhcNMjUwNDEzMTIwMTUyWhcNMjUwNDE0MTIwMTUyWjAzMTEwLwYDVQQD
Eyg4M2RmZmZhZWQxZDRhNDU2NDBjNGZjOTU4MzlhN2ZiMDU2OGQwZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJQF6NdWEZR1F6fW0bV8Sg0E7JRy
mJaHNJCySsa3hqALOFW371f9hdaqSVVmMMsRtFMLiX4FGOrmURGmIlXuiGZVjmxV
6SG3wup9H5amUz6ujbHZyhDChQTCEfaRpwZidT4uFRlU8++8v6+2ilNthLJ0BPCF
nHixaHTGpPp2kUaPwvY6lBDHyHGM5tdzljmP+V1iHwSv/hYBpIA7NYSUmfepJU9N
21YF5yLFBZc1duEu6us2mDuE84QrsLdH23CeWBfkAM+qVE+L+MltGswB5LvobP9V
ujBCdEM4Kzb2ZKBOMLFT4q9Q3aowrlPGVPWzy0MUlpWVT0iQ9NPRew21/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPf/67R1KRWQMT8lYOaf7BWjQ4rMB8GA1UdIwQY
MBaAFG+TYLb1g5qv3OIc1t52O9qia/vwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMt
ZTNhN2ZmMTFjNjMxLzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMtZTNhN2ZmMTFjNjMx
LzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGWcQ9bb
39d+6n3OdHlXOsYXCofrb6bowQ63dBYLvINtl5lfHuywqpkaL8lsrwuzmlgK+L3g
e+eWQshO+8baJzyNEPPa2ky4OqCGQSMcxM1T2vXPVxMJ9PYZe4UA+fQtb/Nkzawn
nKm45EKl/eTEaAbKLnE8aFXM8Jbj4jeFFIg9Jtb5xq5SaJj73JL68o0VGBk6NILa
ebfrmAbDpGzK/WW1y5EdRy57Xl/alTnRRH9RhQFNY4KpnXEgPMlzhvs/wCR4t+tn
uGI60QrTHkRPfp0LwZoDnW+FaRYSp1uBZMZRzBtSz/4unqtiV6xybXfT175dSEDm
Aon9R88ScHgGbw==
-----END CERTIFICATE-----