Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File:                     4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier:          Cg6hau6Q4XiduFBMkmKgnz2nb/fqFdUnVxlSEdjLI8Q=
Subject key identifier:   A4:15:8A:E5:A0:05:DE:E1:55:66:AC:5D:0F:3C:DE:E2:8C:50:84:CA
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer:       /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial:       01962F3D6F69A31BC8A3E32B211580EDCCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number:          1427
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: jhpR6EA4BuQXuQ4sEjM/f/wgup8mxROHObf9LQ2Py+Q=)
                          2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
                          3: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
                          4: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
                          5: tNRdmlA4nRuSXHmtsjO8t1XCUoo.roa (hash: Nyo8TJ3Ze7JZ+0EgnnMZX1jTt57O8CTgfsqjBp8jwmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:69:a3:1b:c8:a3:e3:2b:21:15:80:ed:cc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=a4158ae5a005dee15566ac5d0f3cdee28c5084ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:52:19:97:f8:7f:42:e7:c9:23:2c:72:da:
                    98:0d:8f:3d:c9:68:d0:ed:ff:0e:a1:04:8f:92:b1:
                    6a:df:43:99:3a:79:fd:70:d9:56:ab:6b:37:eb:4f:
                    c0:2d:7b:05:e9:e0:64:78:31:21:dd:9a:71:0b:92:
                    d6:aa:35:3a:ec:4c:f6:98:00:08:3f:1c:4e:61:c8:
                    92:b0:f1:9f:58:dc:2a:5b:8f:8a:07:ec:61:ed:64:
                    f5:c1:dc:ae:2b:bf:30:04:77:5d:7e:47:31:e4:37:
                    79:e7:af:14:64:5e:69:29:d4:ec:ed:bf:c5:26:a8:
                    96:80:d1:e9:d7:72:2d:09:1d:95:d9:16:8e:4c:24:
                    0b:e6:03:a6:af:92:35:36:e2:6f:b2:1e:bb:60:a3:
                    15:74:27:f7:01:ad:f8:34:79:a8:52:28:09:04:9a:
                    e4:06:bb:70:b0:6b:1c:6a:85:73:20:22:03:93:36:
                    91:d1:ec:64:4e:2c:10:24:55:af:49:4b:80:55:cb:
                    1b:c8:a6:23:16:f3:4a:30:eb:d2:85:3e:66:23:7c:
                    b4:95:2d:24:f8:28:e6:2e:2e:18:1e:71:dd:0f:c2:
                    05:77:99:ad:66:8a:a8:52:85:c1:f9:85:e9:5a:b1:
                    43:13:85:0b:70:a0:74:1d:37:62:ca:27:a0:fb:de:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:8A:E5:A0:05:DE:E1:55:66:AC:5D:0F:3C:DE:E2:8C:50:84:CA
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:72:33:cd:44:f4:49:28:7a:6e:a6:dd:34:c7:25:30:99:2d:
         dc:bb:3c:fd:b9:9e:15:ce:5b:16:51:42:bb:d9:29:14:11:00:
         bf:9a:5b:18:c2:76:e9:b6:7c:02:17:ba:71:9a:1c:50:fa:52:
         1a:10:0b:17:b9:9b:7d:f5:3a:d2:05:42:61:b9:ca:4f:f6:0f:
         99:d6:fe:70:ce:20:65:92:0f:39:f0:fd:79:ac:7b:f3:cb:3b:
         8c:99:50:92:bf:3b:bd:01:37:95:a7:bb:0e:8e:dc:14:65:e8:
         13:72:c6:13:b8:1f:b1:b6:a8:4b:68:35:5e:71:e5:99:6e:73:
         3a:92:39:0a:c3:c3:0f:79:42:a9:51:72:6e:d4:66:bf:da:7d:
         13:9e:0f:9d:0e:b0:7c:1b:be:b7:70:66:c5:d2:8f:e3:ba:50:
         10:4b:e6:79:a5:e5:4d:18:87:32:1f:51:da:ff:22:91:6f:81:
         f2:09:c1:68:22:36:ad:64:be:65:d1:86:47:4d:92:d1:d5:86:
         d5:43:d7:ad:fd:32:46:d5:7a:55:92:aa:d7:94:db:1d:98:82:
         cb:f5:2d:18:25:c9:b3:ef:f2:59:91:04:b6:fc:71:cc:09:40:
         67:d3:28:1b:62:99:43:9b:98:c8:73:7a:48:a5:94:ad:e2:8d:
         d6:85:cc:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPW9poxvIo+MrIRWA7czSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
EyhhNDE1OGFlNWEwMDVkZWUxNTU2NmFjNWQwZjNjZGVlMjhjNTA4NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS5SGZf4f0LnySMsctqYDY89yWjQ
7f8OoQSPkrFq30OZOnn9cNlWq2s360/ALXsF6eBkeDEh3ZpxC5LWqjU67Ez2mAAI
PxxOYciSsPGfWNwqW4+KB+xh7WT1wdyuK78wBHddfkcx5Dd5568UZF5pKdTs7b/F
JqiWgNHp13ItCR2V2RaOTCQL5gOmr5I1NuJvsh67YKMVdCf3Aa34NHmoUigJBJrk
BrtwsGscaoVzICIDkzaR0exkTiwQJFWvSUuAVcsbyKYjFvNKMOvShT5mI3y0lS0k
+CjmLi4YHnHdD8IFd5mtZoqoUoXB+YXpWrFDE4ULcKB0HTdiyieg+97zzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQViuWgBd7hVWasXQ883uKMUITKMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHIzzUT0
SSh6bqbdNMclMJkt3Ls8/bmeFc5bFlFCu9kpFBEAv5pbGMJ26bZ8Ahe6cZocUPpS
GhALF7mbffU60gVCYbnKT/YPmdb+cM4gZZIPOfD9eax788s7jJlQkr87vQE3lae7
Do7cFGXoE3LGE7gfsbaoS2g1XnHlmW5zOpI5CsPDD3lCqVFybtRmv9p9E54PnQ6w
fBu+t3BmxdKP47pQEEvmeaXlTRiHMh9R2v8ikW+B8gnBaCI2rWS+ZdGGR02S0dWG
1UPXrf0yRtV6VZKq15TbHZiCy/UtGCXJs+/yWZEEtvxxzAlAZ9MoG2KZQ5uYyHN6
SKWUreKN1oXMfQ==
-----END CERTIFICATE-----