Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          elxgLk7dLDWfiUlgRV8CL1HMfthfDXnd9OLR0x0PMm4=
Subject key identifier:   A4:74:6F:20:D8:60:7B:B5:43:A5:2F:86:92:D8:6F:CC:BB:08:68:F4
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       01962E2AD6DDD68D5426D1B8AE1E92D1B0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          08AB
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
                          2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
                          3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: JQupoKjeIxzcJIZ4zQwIIsEvf6psr+6+laFLxIc+5Ro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:dd:d6:8d:54:26:d1:b8:ae:1e:92:d1:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=a4746f20d8607bb543a52f8692d86fccbb0868f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:95:71:f1:2c:bb:88:42:40:67:35:a9:07:
                    93:3d:92:40:05:e5:be:7d:2b:53:b2:9d:f0:a4:e9:
                    5d:6f:9e:c5:29:cd:2f:5d:75:cc:fe:c0:b7:a8:06:
                    d3:a7:53:40:df:36:3b:2a:72:c0:6b:cb:4a:f9:8c:
                    5f:fb:58:02:05:1e:4c:0e:ca:8c:01:6d:54:33:d5:
                    e5:00:82:6a:ac:f0:95:98:26:77:83:24:6b:55:68:
                    49:cf:29:61:e5:6b:ae:c1:27:e6:13:e2:e7:7b:45:
                    47:18:c0:09:53:00:d3:69:92:ca:33:8e:9f:59:b7:
                    07:4e:05:01:40:8b:7a:5c:8a:1c:80:69:a5:90:95:
                    43:67:99:41:f8:24:e0:d1:c1:43:6b:d6:2e:cf:7f:
                    d1:9f:dc:30:cd:5b:b9:95:d6:cb:8f:b9:02:3b:a3:
                    e2:f7:b3:d6:a5:c4:a0:67:53:14:15:89:ae:f4:c2:
                    1d:6a:72:a2:6d:d2:b8:f2:09:29:eb:7c:c8:8b:22:
                    53:88:c9:d6:e3:19:13:60:23:fd:62:a4:c1:2d:0e:
                    76:71:18:7b:6f:fa:ea:8c:26:ca:ce:2a:71:02:cc:
                    bf:bf:8a:2f:b0:c0:e4:1c:e0:60:81:bf:96:87:50:
                    55:63:23:e6:c8:20:c0:ca:6e:f9:4f:55:3f:df:04:
                    cd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:6F:20:D8:60:7B:B5:43:A5:2F:86:92:D8:6F:CC:BB:08:68:F4
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:e3:77:10:73:0b:4f:e6:e8:71:39:15:0a:e3:d2:b0:70:
         f2:4d:03:b4:bd:53:ca:c1:76:49:62:38:b6:7f:c2:33:7e:cb:
         c4:33:3a:1f:4c:73:a9:04:17:35:4c:41:9a:8d:b3:e3:f7:c6:
         e3:f5:c1:f8:5d:e5:17:22:a7:09:02:0e:16:7e:b8:5f:ef:6b:
         ea:92:59:91:5d:c7:4b:0e:71:d6:5c:a5:8a:a3:ae:6b:b2:a0:
         78:2c:8b:c6:b4:84:dd:59:60:08:af:66:39:fc:55:b6:c8:5a:
         cd:83:51:e3:a9:c2:f8:eb:74:58:6b:a8:bb:cf:a4:09:63:49:
         7d:d4:d6:3b:7f:2b:22:9f:77:22:e0:52:d1:9c:3f:30:7d:d3:
         f4:77:6e:93:67:d0:5f:74:17:24:ba:47:27:9d:1c:28:8c:44:
         d3:0a:ef:7b:44:f4:f6:ba:54:c1:55:f1:d3:df:cf:6e:e3:41:
         40:40:12:7f:3e:d8:8d:28:40:47:28:fb:4e:3a:f5:6b:e5:b2:
         e6:ce:08:8c:2a:fb:a4:3d:0e:65:be:fe:cd:12:44:6b:9a:31:
         d2:e9:65:c2:82:33:85:95:4b:e0:4d:5b:71:c9:6d:e9:77:ae:
         c1:3c:a1:bf:fb:75:fe:ec:0b:19:fb:ae:00:42:f1:b8:18:63:
         13:8f:35:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtbd1o1UJtG4rh6S0bD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjUwNDEzMDgwMTIxWhcNMjUwNDE0MDgwMTIxWjAzMTEwLwYDVQQD
EyhhNDc0NmYyMGQ4NjA3YmI1NDNhNTJmODY5MmQ4NmZjY2JiMDg2OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jiVcfEsu4hCQGc1qQeTPZJABeW+
fStTsp3wpOldb57FKc0vXXXM/sC3qAbTp1NA3zY7KnLAa8tK+Yxf+1gCBR5MDsqM
AW1UM9XlAIJqrPCVmCZ3gyRrVWhJzylh5WuuwSfmE+Lne0VHGMAJUwDTaZLKM46f
WbcHTgUBQIt6XIocgGmlkJVDZ5lB+CTg0cFDa9Yuz3/Rn9wwzVu5ldbLj7kCO6Pi
97PWpcSgZ1MUFYmu9MIdanKibdK48gkp63zIiyJTiMnW4xkTYCP9YqTBLQ52cRh7
b/rqjCbKzipxAsy/v4ovsMDkHOBggb+Wh1BVYyPmyCDAym75T1U/3wTNKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR0byDYYHu1Q6UvhpLYb8y7CGj0MB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPjjdxBz
C0/m6HE5FQrj0rBw8k0DtL1TysF2SWI4tn/CM37LxDM6H0xzqQQXNUxBmo2z4/fG
4/XB+F3lFyKnCQIOFn64X+9r6pJZkV3HSw5x1lyliqOua7KgeCyLxrSE3VlgCK9m
OfxVtshazYNR46nC+Ot0WGuou8+kCWNJfdTWO38rIp93IuBS0Zw/MH3T9Hduk2fQ
X3QXJLpHJ50cKIxE0wrve0T09rpUwVXx09/PbuNBQEASfz7YjShARyj7Tjr1a+Wy
5s4IjCr7pD0OZb7+zRJEa5ox0ullwoIzhZVL4E1bcclt6XeuwTyhv/t1/uwLGfuu
AELxuBhjE481mw==
-----END CERTIFICATE-----