Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          BVHMiY0AjJ6gVG5ZnGFFZFklnjDk7VHk630RcJjmRiU=
Subject key identifier:   A4:29:22:75:EE:0A:14:77:23:CC:74:12:EF:9B:C3:B8:E0:9D:B7:B7
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       01962E2B2AE94DB938E91FEDB6379DD4076D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          0139
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
                          2: VpccTipW0lNr-K9sqrEpGYv-Kv8.roa (hash: zrRywVhDOEX8ppVFjwMkfY6qiZ8PRXRoZXgmGI39CI4=)
                          3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: JRV76dg6ESSq7TbsAm9DSGJcApKjaBuzlDGsvNFMJO0=)
                          4: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (hash: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=)
                          5: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2a:e9:4d:b9:38:e9:1f:ed:b6:37:9d:d4:07:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=a4292275ee0a147723cc7412ef9bc3b8e09db7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:6a:01:7b:90:97:ba:71:e9:0a:ec:92:63:
                    43:f8:9a:a9:aa:0c:25:5c:5f:c3:5f:1e:e1:cd:51:
                    dd:b0:c6:69:f8:e1:eb:25:63:13:d2:68:32:97:85:
                    96:58:82:13:a4:a8:f5:1f:1b:b1:4c:9d:cc:0f:92:
                    4b:6d:ea:44:dc:c9:4a:61:5f:36:9d:b4:bb:5c:d3:
                    e8:86:a8:05:3c:6f:d3:bb:27:4c:57:6c:a6:5d:ea:
                    9b:4c:00:8f:5f:80:85:7e:22:a5:9b:23:61:0c:9c:
                    52:eb:07:12:1e:b6:6f:d5:f2:56:b5:c4:a0:8d:cb:
                    2f:53:27:4a:7f:9a:da:ee:3e:57:a2:12:d0:cf:f2:
                    a3:3a:b8:32:14:46:24:aa:69:79:84:d2:2d:79:86:
                    f8:35:5e:ef:b0:cf:b1:84:20:04:7d:ee:f6:95:df:
                    9c:22:ee:45:6c:47:68:53:a6:3a:21:65:44:8a:03:
                    6a:15:85:f2:27:76:5f:31:13:83:fd:b4:2d:1b:a6:
                    18:88:08:4d:25:69:0a:a7:82:fd:9f:41:ae:51:db:
                    4f:ae:b9:d4:4b:6d:28:c2:f3:44:23:d4:cf:15:b7:
                    05:95:93:ec:fc:5b:62:97:ff:62:d6:c6:09:b4:12:
                    3d:32:d5:e2:96:65:35:8f:fb:9f:d0:25:44:76:4c:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:29:22:75:EE:0A:14:77:23:CC:74:12:EF:9B:C3:B8:E0:9D:B7:B7
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:35:56:ec:38:1a:84:3d:48:b9:19:c2:01:8d:4f:12:e3:a0:
         d7:55:23:8e:26:1a:fc:12:ff:0c:ed:11:77:57:1b:4a:11:74:
         d8:15:1e:0a:e6:10:44:3d:bf:cc:c3:66:5b:82:79:25:62:12:
         db:30:a3:ea:16:ef:b5:2c:e5:aa:88:21:97:a5:31:a3:0e:4a:
         f6:8a:f1:f4:a5:fb:38:6c:cf:61:e6:6a:fa:54:18:c5:8a:70:
         a2:fb:4d:58:fc:ff:52:c2:5e:5d:c2:4e:dc:d7:5e:bd:a8:62:
         1a:db:1c:dc:9b:61:87:68:6a:46:12:17:ff:c1:07:7d:1f:84:
         0e:12:29:4e:bc:d6:59:bb:b1:90:f6:9b:df:27:9f:b4:a3:8b:
         94:bf:b1:d8:db:5d:50:02:e7:16:a5:85:94:9b:85:41:88:ff:
         21:ae:38:40:59:f4:8a:e6:d3:94:a6:55:d6:11:eb:d1:a9:58:
         1b:25:df:9d:0f:3b:36:b8:4d:30:15:6c:c3:aa:90:57:6c:40:
         5e:d5:fe:dc:1b:4d:6e:96:bd:34:9b:9d:0c:02:39:e0:ab:66:
         b6:ec:80:fa:6a:88:78:0d:af:f1:00:d5:c9:e5:91:f1:71:50:
         69:49:0b:04:35:c0:84:ab:ae:d2:12:2c:62:d7:77:78:f5:96:
         13:ad:fb:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyrpTbk46R/ttjed1AdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5
ZmYzMjQwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
EyhhNDI5MjI3NWVlMGExNDc3MjNjYzc0MTJlZjliYzNiOGUwOWRiN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GNqAXuQl7px6QrskmND+Jqpqgwl
XF/DXx7hzVHdsMZp+OHrJWMT0mgyl4WWWIITpKj1HxuxTJ3MD5JLbepE3MlKYV82
nbS7XNPohqgFPG/TuydMV2ymXeqbTACPX4CFfiKlmyNhDJxS6wcSHrZv1fJWtcSg
jcsvUydKf5ra7j5XohLQz/KjOrgyFEYkqml5hNIteYb4NV7vsM+xhCAEfe72ld+c
Iu5FbEdoU6Y6IWVEigNqFYXyJ3ZfMROD/bQtG6YYiAhNJWkKp4L9n0GuUdtPrrnU
S20owvNEI9TPFbcFlZPs/Ftil/9i1sYJtBI9MtXilmU1j/uf0CVEdkyLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQpInXuChR3I8x0Eu+bw7jgnbe3MB8GA1UdIwQY
MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt
ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0
LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjVW7Dga
hD1IuRnCAY1PEuOg11UjjiYa/BL/DO0Rd1cbShF02BUeCuYQRD2/zMNmW4J5JWIS
2zCj6hbvtSzlqoghl6Uxow5K9orx9KX7OGzPYeZq+lQYxYpwovtNWPz/UsJeXcJO
3NdevahiGtsc3Jthh2hqRhIX/8EHfR+EDhIpTrzWWbuxkPab3yeftKOLlL+x2Ntd
UALnFqWFlJuFQYj/Ia44QFn0iubTlKZV1hHr0alYGyXfnQ87NrhNMBVsw6qQV2xA
XtX+3BtNbpa9NJudDAI54KtmtuyA+mqIeA2v8QDVyeWR8XFQaUkLBDXAhKuu0hIs
Ytd3ePWWE6374g==
-----END CERTIFICATE-----