Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier:          igBFcMTuxZdg8ZqSShXUrFwGYZUCkf144XqN0xUly4o=
Subject key identifier:   44:D1:F5:06:4C:96:33:47:D8:72:2E:41:16:D3:14:E0:B1:DA:C6:6D
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       01962E2AFA59EE3ECCED239BBCD5E620C53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=)
                          2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: caFUzkt074SkDxesWdw5bzFvDdRzESg1WtCaaU9vZn8=)
                          3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=)
                          4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=)
                          5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=)
                          6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=)
                          7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=)
                          8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=)
                          9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=)
                          10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=)
                          11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:59:ee:3e:cc:ed:23:9b:bc:d5:e6:20:c5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=44d1f5064c963347d8722e4116d314e0b1dac66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:37:ec:6b:9a:a7:0e:6b:c7:36:b6:f9:b9:
                    e4:07:27:f7:35:71:02:af:14:4c:7d:76:33:35:fd:
                    c3:aa:0f:aa:10:c2:0c:f2:b1:48:27:68:f6:a6:76:
                    40:c0:40:aa:c9:74:21:ac:c3:2b:c9:a2:4c:59:8d:
                    ee:1d:25:57:4c:90:3b:c7:dc:72:bd:28:95:72:12:
                    be:cf:61:b5:20:14:2b:e0:4e:f9:15:3a:21:72:ed:
                    1b:f3:ba:96:b5:fb:ed:b9:99:c0:19:72:a3:be:de:
                    98:8c:ce:b0:c3:06:9c:05:86:89:3a:41:17:30:af:
                    f4:4a:72:3b:c7:82:f9:4a:ae:cb:ee:73:01:e1:5a:
                    18:0c:71:e2:07:8e:75:ea:bf:1b:c2:15:6b:56:6b:
                    2a:fb:2d:fe:9a:b5:73:e8:32:75:e8:2c:77:f8:11:
                    26:31:ed:ad:a5:89:24:0e:4d:ff:92:c6:dd:4f:ad:
                    19:37:38:c9:c7:3f:32:1c:db:5d:0b:a8:2a:ed:df:
                    21:45:50:0b:af:80:10:e4:4c:b3:d8:77:1d:00:73:
                    b9:ad:24:ab:ec:af:e9:4c:eb:30:ae:a3:4a:5f:be:
                    87:53:61:5d:66:86:bd:4b:7c:69:71:03:23:e0:07:
                    ea:d1:f0:d5:47:f8:3a:f5:56:20:15:e8:13:3f:4f:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D1:F5:06:4C:96:33:47:D8:72:2E:41:16:D3:14:E0:B1:DA:C6:6D
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:84:50:3c:f3:f9:ae:35:da:19:67:01:0c:f1:af:54:2c:dd:
         2b:e8:17:3c:3f:04:fb:d0:3b:b8:53:47:1f:4d:a6:64:ae:cd:
         a4:dd:09:43:b3:59:85:69:cd:d0:9d:58:3e:f6:18:5a:0d:21:
         fd:26:9b:26:d8:f3:af:e6:78:d6:fc:56:84:c9:7f:b1:34:25:
         58:fe:37:9a:27:78:95:bc:0b:43:ca:e7:73:6d:9c:86:74:25:
         aa:2e:55:5f:8a:d3:9c:25:bc:14:51:3c:8e:f9:e5:cc:ea:fd:
         99:ec:eb:3c:cc:b8:4c:5b:e1:63:52:53:a2:40:86:a7:af:95:
         cc:88:03:f2:51:82:16:e9:81:89:0a:58:9a:ab:09:1e:33:1b:
         f8:7c:ef:d5:b0:1d:a6:ea:7c:98:1c:e1:2f:7d:8d:c3:37:56:
         3b:91:78:0d:fd:dd:80:fb:3b:dc:45:7c:da:37:cf:70:d3:03:
         31:90:b4:0b:33:8e:19:b8:fe:12:3b:55:70:27:25:00:7e:85:
         9c:d1:a3:55:99:d1:90:60:46:88:7b:8a:93:a2:65:2c:11:2a:
         43:8e:2e:e2:35:01:74:44:4a:3f:df:fb:3d:73:6c:96:ca:22:
         4a:9f:f4:42:e6:50:27:01:b2:30:fa:f9:b1:dc:21:6b:26:bd:
         71:1a:02:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvpZ7j7M7SObvNXmIMU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1
MjYxNDMwHhcNMjUwNDEzMDgwMTMwWhcNMjUwNDE0MDgwMTMwWjAzMTEwLwYDVQQD
Eyg0NGQxZjUwNjRjOTYzMzQ3ZDg3MjJlNDExNmQzMTRlMGIxZGFjNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZQ37Guapw5rxza2+bnkByf3NXEC
rxRMfXYzNf3Dqg+qEMIM8rFIJ2j2pnZAwECqyXQhrMMryaJMWY3uHSVXTJA7x9xy
vSiVchK+z2G1IBQr4E75FTohcu0b87qWtfvtuZnAGXKjvt6YjM6wwwacBYaJOkEX
MK/0SnI7x4L5Sq7L7nMB4VoYDHHiB4516r8bwhVrVmsq+y3+mrVz6DJ16Cx3+BEm
Me2tpYkkDk3/ksbdT60ZNzjJxz8yHNtdC6gq7d8hRVALr4AQ5Eyz2HcdAHO5rSSr
7K/pTOswrqNKX76HU2FdZoa9S3xpcQMj4Afq0fDVR/g69VYgFegTP099ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETR9QZMljNH2HIuQRbTFOCx2sZtMB8GA1UdIwQY
MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt
ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw
LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4RQPPP5
rjXaGWcBDPGvVCzdK+gXPD8E+9A7uFNHH02mZK7NpN0JQ7NZhWnN0J1YPvYYWg0h
/SabJtjzr+Z41vxWhMl/sTQlWP43mid4lbwLQ8rnc22chnQlqi5VX4rTnCW8FFE8
jvnlzOr9mezrPMy4TFvhY1JTokCGp6+VzIgD8lGCFumBiQpYmqsJHjMb+Hzv1bAd
pup8mBzhL32NwzdWO5F4Df3dgPs73EV82jfPcNMDMZC0CzOOGbj+EjtVcCclAH6F
nNGjVZnRkGBGiHuKk6JlLBEqQ44u4jUBdERKP9/7PXNslsoiSp/0QuZQJwGyMPr5
sdwhaya9cRoC5A==
-----END CERTIFICATE-----