Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          vshoJryMIDnc9+iAbwPJE7Rjrcc807RRuwa3UDfrBuw=
Subject key identifier:   B6:5D:51:DE:14:A0:8D:09:3F:43:3F:CF:8C:23:85:26:3A:E0:35:8E
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       01962F745CA8543A8B1E5000A2CB6DA69266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          11AD
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
                          2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
                          3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: NA6ky+3M4anFjtmE7fDjiQe6Rlj/F8WOZoTsYKboc2M=)
                          4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
                          5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5c:a8:54:3a:8b:1e:50:00:a2:cb:6d:a6:92:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=b65d51de14a08d093f433fcf8c2385263ae0358e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:9c:12:fe:4f:ea:8e:6e:14:39:22:93:bf:
                    98:ed:83:72:28:1d:57:a4:65:0f:ab:54:b1:87:fb:
                    85:64:b8:f6:f8:70:fa:7d:33:06:c6:e1:07:88:d1:
                    bd:56:fc:a5:85:3a:d2:7a:d1:49:98:db:a0:28:89:
                    b8:5c:a2:92:79:5d:51:6e:e5:f6:42:8c:3a:13:49:
                    4e:ed:46:aa:6f:bb:40:cb:9f:27:4a:cd:42:7a:50:
                    b5:eb:a8:af:ed:86:b7:ae:82:bc:8d:81:6f:45:5f:
                    3a:02:03:52:97:76:52:fb:ab:52:ce:28:3b:71:cc:
                    f9:c7:b9:2c:31:80:d0:32:71:f0:fd:ae:88:5a:56:
                    ad:57:a3:76:36:50:d5:08:67:01:c4:a1:a0:fe:55:
                    a4:9a:b2:d9:ae:3c:ef:a2:3d:a7:02:7f:0f:bd:e2:
                    5b:94:db:c9:02:d5:af:77:00:a7:8e:59:77:75:13:
                    73:73:c6:07:0b:f4:91:35:17:47:01:1b:22:9d:52:
                    e5:37:9c:7c:f4:d1:98:3c:37:cc:ce:da:08:de:11:
                    3c:ba:85:e0:55:a6:9f:e2:b8:5c:37:1f:86:c9:b0:
                    29:de:ab:02:bc:ef:b8:ad:c5:93:90:bb:3e:fb:64:
                    2e:53:54:5c:d4:94:e0:ca:79:d0:48:99:37:75:3e:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:51:DE:14:A0:8D:09:3F:43:3F:CF:8C:23:85:26:3A:E0:35:8E
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3d:82:bc:d8:71:c7:39:88:c8:8c:ef:a8:e0:36:9f:a0:4d:
         40:9d:76:7c:f5:1c:56:a5:d8:d0:e4:10:08:fa:21:1c:5a:9c:
         81:c9:3b:e1:3c:84:90:0b:69:e3:de:76:04:25:1d:99:f4:37:
         2d:ad:2c:33:0f:a3:d2:c6:b6:e6:98:65:75:59:d5:48:be:c4:
         ac:9c:05:b5:88:53:57:88:c2:76:38:23:31:82:65:ad:51:3c:
         4e:52:7f:5f:77:f8:ff:bf:fe:54:53:0f:a3:a4:d8:c8:1a:5f:
         70:bf:ad:39:0c:a7:ab:d2:66:47:64:f2:00:ec:8c:cf:cf:05:
         d0:29:63:ac:06:bd:27:07:84:6e:45:21:dd:3f:ee:ed:3d:80:
         91:28:c6:38:b8:bb:a4:3c:56:46:b3:c8:c1:9a:5f:bc:21:4c:
         d7:22:9a:aa:d4:e8:1d:3d:21:4d:b2:44:a0:0e:1e:5c:2f:c5:
         1d:c0:a6:e8:a1:21:ba:09:50:2e:a4:eb:6c:d6:d1:06:83:e6:
         42:d1:a7:63:12:5e:1a:65:12:f5:a1:e4:05:7c:b5:8d:2d:e9:
         9b:b4:b4:8e:b2:ab:34:cc:1c:a5:fd:91:4e:52:d1:b5:bb:7c:
         a5:67:e7:85:97:94:51:e9:75:35:55:f5:28:c1:3f:bd:fa:cd:
         0f:00:28:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFyoVDqLHlAAosttppJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjUwNDEzMTQwMTE3WhcNMjUwNDE0MTQwMTE3WjAzMTEwLwYDVQQD
EyhiNjVkNTFkZTE0YTA4ZDA5M2Y0MzNmY2Y4YzIzODUyNjNhZTAzNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QicEv5P6o5uFDkik7+Y7YNyKB1X
pGUPq1Sxh/uFZLj2+HD6fTMGxuEHiNG9VvylhTrSetFJmNugKIm4XKKSeV1RbuX2
Qow6E0lO7Uaqb7tAy58nSs1CelC166iv7Ya3roK8jYFvRV86AgNSl3ZS+6tSzig7
ccz5x7ksMYDQMnHw/a6IWlatV6N2NlDVCGcBxKGg/lWkmrLZrjzvoj2nAn8PveJb
lNvJAtWvdwCnjll3dRNzc8YHC/SRNRdHARsinVLlN5x89NGYPDfMztoI3hE8uoXg
Vaaf4rhcNx+GybAp3qsCvO+4rcWTkLs++2QuU1Rc1JTgynnQSJk3dT7D7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZdUd4UoI0JP0M/z4wjhSY64DWOMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT2CvNhx
xzmIyIzvqOA2n6BNQJ12fPUcVqXY0OQQCPohHFqcgck74TyEkAtp4952BCUdmfQ3
La0sMw+j0sa25phldVnVSL7ErJwFtYhTV4jCdjgjMYJlrVE8TlJ/X3f4/7/+VFMP
o6TYyBpfcL+tOQynq9JmR2TyAOyMz88F0CljrAa9JweEbkUh3T/u7T2AkSjGOLi7
pDxWRrPIwZpfvCFM1yKaqtToHT0hTbJEoA4eXC/FHcCm6KEhuglQLqTrbNbRBoPm
QtGnYxJeGmUS9aHkBXy1jS3pm7S0jrKrNMwcpf2RTlLRtbt8pWfnhZeUUel1NVX1
KME/vfrNDwAoiw==
-----END CERTIFICATE-----