Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File:                     2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier:          3tAIvudSun/7JhgyWDenZGRnlkRos3G0kRAXVZ6y6g8=
Subject key identifier:   B3:75:C0:35:03:29:C7:E9:2F:D0:24:22:D5:74:76:BB:C5:2D:65:22
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       01962E61B231E4953B7683C192D7844FB5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=)
                          2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: b26vhlWtw6NAeq4ku8u0O3ZREH9fR5FmCDONVWVb7+o=)
                          3: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=)
                          4: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=)
                          5: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=)
                          6: TXY1I130XvsaTvWkchtuWI-PM9g.roa (hash: TIrFe9IGuWpgbdyOP5J+JnA8eNzT/AVIEYMB6nU7cvM=)
                          7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=)
                          8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=)
                          9: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=)
                          10: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=)
                          11: nA9xLYDfBUMTndIiuMDxngVWqy8.roa (hash: pXyFBd1rpI+yPoJu0gr4TIbRfkcbLlWRK75T9hWlGqk=)
                          12: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=)
                          13: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b2:31:e4:95:3b:76:83:c1:92:d7:84:4f:b5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=b375c0350329c7e92fd02422d57476bbc52d6522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:c2:69:eb:d2:23:ef:a7:01:0b:fb:04:fa:
                    90:ce:09:ff:d1:93:be:12:ce:5c:1d:e0:91:9d:16:
                    51:03:c5:4b:13:eb:9c:a8:af:f6:5c:c0:69:88:b0:
                    65:0e:af:e0:f0:ed:87:11:5c:0b:b3:68:c2:b4:c0:
                    21:eb:21:70:d1:c7:cc:f2:50:18:6b:0b:a1:9f:4d:
                    b0:42:5c:3e:0d:45:70:25:b4:8c:ef:6e:28:a6:5f:
                    7c:47:a0:97:09:db:eb:a4:37:91:a7:17:03:65:91:
                    5b:37:a0:5b:f1:19:c4:dc:43:d8:5e:f8:c1:2a:96:
                    8d:b8:e7:d0:e9:80:11:ab:bf:de:53:ec:7a:0f:73:
                    8e:10:f8:2f:a5:83:1f:2d:19:45:c6:3e:8c:c0:2f:
                    17:96:bd:20:81:55:99:0b:ac:ea:17:83:2e:35:4c:
                    b7:a1:63:77:23:e4:3e:fb:97:ac:32:e8:da:43:e6:
                    3c:59:f4:3c:37:8d:48:29:75:a5:8b:aa:dc:c8:b2:
                    0e:1d:1d:77:df:ed:ac:a0:b7:15:d2:ce:03:d3:b8:
                    70:bd:18:95:41:4c:b9:ec:37:c0:b7:70:73:2d:82:
                    85:92:8a:70:27:c0:5c:20:53:4f:ca:0f:7f:92:8c:
                    44:83:28:7e:c8:7a:46:45:2e:c5:d4:79:66:59:22:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:C0:35:03:29:C7:E9:2F:D0:24:22:D5:74:76:BB:C5:2D:65:22
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:3c:96:a9:2c:31:70:04:3a:13:5f:51:ef:4b:e6:8e:b8:
         e8:e3:f5:48:d7:60:a1:99:b0:3e:0d:15:b6:49:65:b7:32:5f:
         80:8c:3a:49:63:a3:79:46:39:7f:00:fc:10:ca:7f:09:75:6b:
         8f:c1:be:6a:c9:3b:53:e6:9e:49:0f:35:a3:29:d7:9f:a0:2d:
         99:5b:5d:38:73:db:e0:e1:f4:70:af:c9:1d:6a:c6:50:c0:35:
         81:a7:d5:f2:e4:7f:ce:26:0a:d9:12:5d:0e:c2:0f:e8:67:f1:
         a9:e6:c7:5c:e3:bc:e1:af:4d:8c:cd:be:e9:de:87:ae:8a:2a:
         44:42:fb:de:e9:b3:4b:90:15:98:34:4e:f5:5b:f7:b0:60:88:
         9b:f6:1e:43:0c:75:20:27:23:53:16:46:e8:7f:b7:1e:ae:b1:
         0c:b7:49:34:3f:11:2e:09:7c:83:31:ed:d6:a9:6b:85:de:39:
         2c:99:55:ae:07:3e:33:6d:fe:19:85:e9:c8:24:8a:dd:51:4e:
         81:c5:33:fa:4e:33:f6:4c:46:fb:ae:30:3d:33:4c:ae:5b:43:
         10:78:cc:d1:e4:5c:5d:9e:9d:40:3f:63:01:2c:a6:13:cc:48:
         51:0d:a8:d8:50:8d:f7:20:a7:52:d2:43:3f:de:9b:f9:6b:77:
         c8:fe:00:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbIx5JU7doPBkteET7X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2
MjFkYjEwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
EyhiMzc1YzAzNTAzMjljN2U5MmZkMDI0MjJkNTc0NzZiYmM1MmQ2NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt/CaevSI++nAQv7BPqQzgn/0ZO+
Es5cHeCRnRZRA8VLE+ucqK/2XMBpiLBlDq/g8O2HEVwLs2jCtMAh6yFw0cfM8lAY
awuhn02wQlw+DUVwJbSM724opl98R6CXCdvrpDeRpxcDZZFbN6Bb8RnE3EPYXvjB
KpaNuOfQ6YARq7/eU+x6D3OOEPgvpYMfLRlFxj6MwC8Xlr0ggVWZC6zqF4MuNUy3
oWN3I+Q++5esMujaQ+Y8WfQ8N41IKXWli6rcyLIOHR133+2soLcV0s4D07hwvRiV
QUy57DfAt3BzLYKFkopwJ8BcIFNPyg9/koxEgyh+yHpGRS7F1HlmWSLKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN1wDUDKcfpL9AkItV0drvFLWUiMB8GA1UdIwQY
MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt
ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3
LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk48lqks
MXAEOhNfUe9L5o646OP1SNdgoZmwPg0VtklltzJfgIw6SWOjeUY5fwD8EMp/CXVr
j8G+ask7U+aeSQ81oynXn6AtmVtdOHPb4OH0cK/JHWrGUMA1gafV8uR/ziYK2RJd
DsIP6GfxqebHXOO84a9NjM2+6d6HrooqREL73umzS5AVmDRO9Vv3sGCIm/YeQwx1
ICcjUxZG6H+3Hq6xDLdJND8RLgl8gzHt1qlrhd45LJlVrgc+M23+GYXpyCSK3VFO
gcUz+k4z9kxG+64wPTNMrltDEHjM0eRcXZ6dQD9jASymE8xIUQ2o2FCN9yCnUtJD
P96b+Wt3yP4AgQ==
-----END CERTIFICATE-----