Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          1lGyX4j+5KWbzPJaJ/ZMTBQOdXjfRfxm25JPIOkXVfU=
Subject key identifier:   30:30:88:8B:2C:30:9B:68:00:7A:29:E7:C7:23:95:0B:E0:D2:A3:21
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       01962F748B7507443E275965A5B87C1150B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: 1SywVSh8Ii1qp/GV6PYkZN40CXH90+FpKiFOC5ZFbHg=)
                          9: xovZOIhlPZ45N9oOxx7_NSJCrEw.roa (hash: JeeMpjw12qOmA0b+WEGyWZXkSEOnUNh26ITmvmBxXbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:75:07:44:3e:27:59:65:a5:b8:7c:11:50:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=3030888b2c309b68007a29e7c723950be0d2a321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:a3:04:9a:38:2a:db:46:42:e0:28:f8:70:
                    88:52:ff:01:a9:fe:4a:22:b5:ed:fd:9d:8d:d6:52:
                    b9:37:2a:3e:13:bf:a9:b0:d6:3a:84:cd:78:f9:6f:
                    7c:7e:97:9e:09:3a:1e:a0:b4:84:18:14:fe:e9:8d:
                    f7:83:0e:36:5b:41:25:1d:f0:4f:b9:12:ca:1d:0a:
                    f1:d2:51:88:24:f9:1d:13:91:a8:ff:29:5f:5e:00:
                    f7:5e:d3:87:7e:e7:b1:58:4d:6c:83:f3:6d:4d:bf:
                    92:73:3c:25:c5:fb:21:6c:ef:89:d1:06:eb:e6:68:
                    51:af:04:05:71:42:3f:43:b5:4b:1f:8a:cb:de:1f:
                    2d:96:23:b2:4d:b9:a6:22:cc:a6:f1:77:8c:1b:7a:
                    a9:e6:1d:32:1f:a4:0c:42:c6:2e:5b:dd:0c:10:7e:
                    f0:a1:6e:14:9f:c9:95:15:a3:19:f8:7a:1e:ca:b7:
                    1e:29:fd:d5:7f:a1:23:51:a0:86:ca:27:05:61:d4:
                    2c:b5:c4:8a:e5:56:76:70:04:60:7c:1a:14:e0:5e:
                    94:9f:52:2c:ba:6b:32:5a:eb:38:5f:45:36:bb:4e:
                    03:8a:57:94:0d:b0:fb:5c:32:49:b9:65:43:c0:f7:
                    67:26:fc:15:f4:ca:38:0c:00:66:0d:ce:9d:84:a8:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:88:8B:2C:30:9B:68:00:7A:29:E7:C7:23:95:0B:E0:D2:A3:21
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:6c:c3:34:4e:23:20:37:c8:46:cb:7c:a8:30:23:9f:98:
         88:63:6c:fd:a7:71:38:a4:97:eb:84:af:e1:ed:a3:02:d3:43:
         50:1a:ae:39:05:80:a6:bf:95:a8:af:b9:c3:42:7f:0b:3a:e9:
         b4:41:23:bf:9b:4f:13:d9:f6:87:94:0c:a6:a3:29:c5:12:13:
         3d:6d:02:c5:a1:5f:63:0c:67:e7:8c:df:b7:2e:6d:0b:de:20:
         57:b6:56:6b:0e:6b:f8:94:12:b0:84:98:b0:9e:d9:f5:4b:b2:
         c2:9b:79:9b:3d:c3:13:56:3d:6f:21:68:f4:32:be:60:4d:52:
         e6:0b:eb:77:7d:44:8c:aa:ed:2c:2b:89:d2:15:09:45:ea:16:
         46:b1:8c:16:20:ab:ff:6f:95:7c:93:6c:92:e6:50:f6:4c:17:
         63:0c:68:67:9c:05:49:5b:60:e2:01:43:c6:df:71:9b:16:ed:
         d0:71:2e:75:06:e6:7b:72:09:c1:ae:5b:59:6c:3c:27:a7:97:
         36:06:92:11:8b:0b:e5:41:c2:b9:32:aa:26:08:da:21:e3:a7:
         e4:d3:2c:eb:b0:9b:08:82:b4:56:4d:3d:a1:91:2d:8f:c8:c7:
         e5:be:7a:63:d9:59:f9:2b:0a:79:73:03:a1:5a:f6:73:7f:a2:
         4d:35:5d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIt1B0Q+J1llpbh8EVC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk
NThjNDYwHhcNMjUwNDEzMTQwMTI5WhcNMjUwNDE0MTQwMTI5WjAzMTEwLwYDVQQD
EygzMDMwODg4YjJjMzA5YjY4MDA3YTI5ZTdjNzIzOTUwYmUwZDJhMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBejBJo4KttGQuAo+HCIUv8Bqf5K
IrXt/Z2N1lK5Nyo+E7+psNY6hM14+W98fpeeCToeoLSEGBT+6Y33gw42W0ElHfBP
uRLKHQrx0lGIJPkdE5Go/ylfXgD3XtOHfuexWE1sg/NtTb+SczwlxfshbO+J0Qbr
5mhRrwQFcUI/Q7VLH4rL3h8tliOyTbmmIsym8XeMG3qp5h0yH6QMQsYuW90MEH7w
oW4Un8mVFaMZ+HoeyrceKf3Vf6EjUaCGyicFYdQstcSK5VZ2cARgfBoU4F6Un1Is
umsyWus4X0U2u04DileUDbD7XDJJuWVDwPdnJvwV9Mo4DABmDc6dhKgUUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAwiIssMJtoAHop58cjlQvg0qMhMB8GA1UdIwQY
MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt
N2QxNmI5MGRiZTcyLzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy
LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZxswzRO
IyA3yEbLfKgwI5+YiGNs/adxOKSX64Sv4e2jAtNDUBquOQWApr+VqK+5w0J/Czrp
tEEjv5tPE9n2h5QMpqMpxRITPW0CxaFfYwxn54zfty5tC94gV7ZWaw5r+JQSsISY
sJ7Z9Uuywpt5mz3DE1Y9byFo9DK+YE1S5gvrd31EjKrtLCuJ0hUJReoWRrGMFiCr
/2+VfJNskuZQ9kwXYwxoZ5wFSVtg4gFDxt9xmxbt0HEudQbme3IJwa5bWWw8J6eX
NgaSEYsL5UHCuTKqJgjaIeOn5NMs67CbCIK0Vk09oZEtj8jH5b56Y9lZ+SsKeXMD
oVr2c3+iTTVdFw==
-----END CERTIFICATE-----