Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          TTE3Aiza+WV+RyxLXqzd1Zb/Q3L4nI6EzzsL5eT2q5k=
Subject key identifier:   79:CB:99:95:5D:C2:D7:B3:09:E8:B0:1E:88:15:E2:E9:31:FB:F9:38
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       01962FAB53A510632F463EF88714676EA5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (hash: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=)
                          2: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: F5XrIf75MzN/4QLs7op+m6MBljn/JPYMaGrS1RrU89w=)
                          3: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (hash: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=)
                          4: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (hash: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=)
                          5: RUBK6YgAvaDdWQcnoq_c2QP-xe4.roa (hash: Uqv+aEnH2dA3s4zAi+ZXrmM5vUYHFe7H5OkNDJW1qSI=)
                          6: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (hash: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:a5:10:63:2f:46:3e:f8:87:14:67:6e:a5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=79cb99955dc2d7b309e8b01e8815e2e931fbf938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:94:e1:6a:0e:5d:1e:27:00:c4:68:78:d0:
                    34:b6:b9:02:e7:8d:a7:9a:0e:45:d5:2f:5d:5c:7f:
                    61:03:c8:a9:0c:dd:eb:17:da:fb:b1:ce:00:c4:aa:
                    07:70:7e:4a:14:e4:7c:e1:af:ce:10:fc:60:7e:04:
                    e9:5b:ca:85:30:25:b9:a3:62:72:01:c3:01:74:11:
                    2a:1c:7c:c5:7a:26:72:40:7f:6c:cc:b5:1b:be:d4:
                    4b:22:65:2c:92:59:3f:d7:d3:a7:d7:88:ae:00:8b:
                    bd:1f:03:6b:37:d1:d5:68:f6:c1:9a:4d:48:9f:9a:
                    11:01:f4:0f:f7:45:88:70:ea:6f:3d:57:77:cf:ef:
                    a7:07:4e:be:dc:3e:7c:a3:7f:63:20:00:56:09:22:
                    49:d0:10:94:cb:7f:4b:c8:6b:7d:aa:dc:41:31:85:
                    8e:b1:c1:ae:48:ee:d9:d6:09:09:a4:40:df:6f:83:
                    59:25:ed:7c:8e:b3:ee:a4:63:59:da:64:4b:8a:95:
                    5d:3b:15:3a:08:89:ec:7f:77:28:d0:1a:18:9d:b7:
                    e6:87:44:c8:ba:d0:11:9f:1c:ef:2a:e8:8e:d4:54:
                    73:c6:67:9e:1a:28:e6:8e:92:41:15:1e:6d:06:3d:
                    11:ef:df:b3:e1:b4:57:36:03:7d:20:fe:06:4e:48:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:99:95:5D:C2:D7:B3:09:E8:B0:1E:88:15:E2:E9:31:FB:F9:38
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:68:ab:86:38:e7:d2:2d:23:21:2f:0e:05:aa:c0:cb:b8:a3:
         69:4c:bd:a6:97:0e:31:8f:04:91:16:26:ad:dd:d0:3b:5d:1a:
         e5:98:a9:7b:1f:2d:fc:48:5a:ca:0b:9c:48:6b:34:2c:ea:91:
         9b:1e:af:9b:3a:f5:04:a7:46:dc:4f:49:10:e9:d2:14:ed:20:
         bd:7d:d2:be:95:a7:c2:88:dc:94:fa:78:7a:0d:bd:8b:96:35:
         86:9d:62:29:58:cf:4e:79:0f:b2:ba:94:93:42:12:98:67:52:
         c5:a7:f9:31:bf:4d:2a:e0:04:bd:50:43:d2:7f:94:35:5d:99:
         fb:f1:9c:78:1b:d2:a6:48:2c:84:9e:9c:5c:9e:14:8a:63:88:
         5c:41:e6:8c:88:cb:d7:96:f0:c5:9f:9a:3b:a5:f1:2c:ac:10:
         83:ba:8c:52:18:5c:b2:2a:6e:ad:f5:9b:08:06:57:cb:1f:56:
         e6:12:0b:85:1d:bb:d0:c4:c6:af:d5:87:b2:59:0f:56:71:82:
         70:98:73:4a:ed:88:a7:91:bf:92:f8:bf:47:cd:1b:6b:5d:ea:
         3e:e9:3e:2b:b5:47:a0:2d:c4:cc:f2:7d:40:c4:24:e6:a8:78:
         68:e6:8b:b2:3f:1d:b4:fd:ff:6c:d9:6a:f2:5c:6d:2f:60:88:
         08:5b:37:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1OlEGMvRj74hxRnbqWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
Eyg3OWNiOTk5NTVkYzJkN2IzMDllOGIwMWU4ODE1ZTJlOTMxZmJmOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/uU4WoOXR4nAMRoeNA0trkC542n
mg5F1S9dXH9hA8ipDN3rF9r7sc4AxKoHcH5KFOR84a/OEPxgfgTpW8qFMCW5o2Jy
AcMBdBEqHHzFeiZyQH9szLUbvtRLImUsklk/19On14iuAIu9HwNrN9HVaPbBmk1I
n5oRAfQP90WIcOpvPVd3z++nB06+3D58o39jIABWCSJJ0BCUy39LyGt9qtxBMYWO
scGuSO7Z1gkJpEDfb4NZJe18jrPupGNZ2mRLipVdOxU6CInsf3co0BoYnbfmh0TI
utARnxzvKuiO1FRzxmeeGijmjpJBFR5tBj0R79+z4bRXNgN9IP4GTkjaFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnLmZVdwtezCeiwHogV4ukx+/k4MB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImirhjjn
0i0jIS8OBarAy7ijaUy9ppcOMY8EkRYmrd3QO10a5Zipex8t/EhaygucSGs0LOqR
mx6vmzr1BKdG3E9JEOnSFO0gvX3SvpWnwojclPp4eg29i5Y1hp1iKVjPTnkPsrqU
k0ISmGdSxaf5Mb9NKuAEvVBD0n+UNV2Z+/GceBvSpkgshJ6cXJ4UimOIXEHmjIjL
15bwxZ+aO6XxLKwQg7qMUhhcsipurfWbCAZXyx9W5hILhR270MTGr9WHslkPVnGC
cJhzSu2Ip5G/kvi/R80ba13qPuk+K7VHoC3EzPJ9QMQk5qh4aOaLsj8dtP3/bNlq
8lxtL2CICFs3Vw==
-----END CERTIFICATE-----