Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
File:                     upnU2xLk8LAC9g6SzFM-b4gtFQg.mft (raw, json)
Hash identifier:          Ap4J0iDDOnYISdVmWnILRs9sL2Pw411BLlMKH6ODQ8M=
Subject key identifier:   0C:8C:0B:9A:57:FC:04:35:16:4D:A3:92:58:F6:8C:8A:71:D3:64:81
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Certificate issuer:       /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial:       01954747E945023C06265151338D4498D4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
Manifest number:          0F79
Signing time:             Thu 27 Feb 2025 12:00:49 +0000
Manifest this update:     Thu 27 Feb 2025 12:00:49 +0000
Manifest next update:     Fri 28 Feb 2025 12:00:49 +0000
Files and hashes:         1: 8YIAR5sWr0I8DxBlTYWLr-wehd4.roa (hash: 2GhhwLBXrsl+hdUevrhZ5dBt1jzrfau++jD+6VRkn7o=)
                          2: ZQgVOtlKeyFC38M2101OMHMsXQE.roa (hash: yhIhd3mmsJTwIKHcA4cRnEfn0qLPxogW2a77pLgopes=)
                          3: upnU2xLk8LAC9g6SzFM-b4gtFQg.crl (hash: 2zglbsVStrret0oF8/hXzj4lOJ38Pr1/d0WOgjsV7Qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:47:e9:45:02:3c:06:26:51:51:33:8d:44:98:d4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
        Validity
            Not Before: Feb 27 12:00:49 2025 GMT
            Not After : Feb 28 12:00:49 2025 GMT
        Subject: CN=0c8c0b9a57fc0435164da39258f68c8a71d36481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:c3:e9:bf:b6:f6:72:92:32:73:9c:b7:50:
                    99:1e:2e:05:37:08:8e:84:f3:cb:61:7a:d8:ab:48:
                    7d:d2:c7:71:59:6e:c4:6e:7b:8f:6d:d9:68:4d:8a:
                    5a:a3:20:d7:e1:66:6f:a5:14:b4:96:f2:bc:cd:23:
                    a5:4c:77:7b:e9:e0:b3:32:b2:58:d3:4b:ec:ec:b5:
                    0f:7d:09:1d:72:47:a0:83:b6:8d:e7:05:f3:23:cd:
                    19:b0:39:c6:72:99:26:29:f0:4f:8d:8d:2b:b1:66:
                    5f:8d:13:f5:48:b6:93:2a:07:24:5c:74:a5:64:1a:
                    b0:93:bc:36:07:f9:80:6c:bb:43:6a:e4:3a:bb:df:
                    9c:6c:ab:3b:d1:8c:f4:e2:a0:b2:d7:c5:2c:15:53:
                    58:9e:97:02:d0:53:fe:d4:57:6c:5b:51:4b:56:26:
                    e0:7c:fe:ae:13:48:d7:9d:fa:02:b1:2f:36:ef:67:
                    30:de:ad:40:a2:17:1c:00:46:09:b8:52:17:0e:ca:
                    61:78:c7:00:1c:41:df:24:d6:35:b0:42:a0:97:fc:
                    b7:31:f2:96:62:a8:cb:fe:bb:4d:ab:55:1e:10:e4:
                    2c:78:b6:be:7c:fb:0a:c6:4d:d7:85:5e:0a:d2:8e:
                    ef:ce:12:7d:2f:d3:af:9f:cd:0b:28:55:4c:b5:80:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:0B:9A:57:FC:04:35:16:4D:A3:92:58:F6:8C:8A:71:D3:64:81
            X509v3 Authority Key Identifier:
                keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:00:0b:ab:60:20:68:f7:2a:e0:ba:44:d4:5b:61:4e:3b:
         fa:c2:f7:66:9b:48:1d:84:b3:72:fe:0c:a3:de:99:47:ee:52:
         df:b6:ab:96:73:7c:23:6a:8a:e1:a3:3d:21:38:02:97:23:ca:
         c5:1a:61:92:78:86:b4:e0:9e:ec:80:db:9f:d5:01:38:24:fd:
         a4:6c:90:f2:e6:4b:a7:7f:78:8a:43:32:2b:be:7c:05:78:07:
         36:c3:a2:2c:8d:ad:e9:e8:9d:32:b8:9f:95:5c:06:f0:f6:fe:
         0c:df:34:6c:b2:1d:99:19:b4:d7:7a:96:bd:e2:66:98:39:8e:
         89:80:ce:f2:a7:3f:9c:3c:4e:fd:f1:63:72:98:df:61:05:9d:
         93:0e:8c:85:d3:37:ce:fb:a3:ae:5f:79:90:2f:7a:56:96:8c:
         ea:05:65:a9:be:0d:70:d0:22:c3:3e:fe:6b:50:cc:e1:57:be:
         2c:e0:47:6f:08:96:0b:47:7b:1f:de:8c:f6:c7:30:b0:93:a8:
         a7:19:f6:32:04:19:4d:4d:fe:1c:cb:55:54:b5:be:54:02:c3:
         4f:68:66:2c:48:b6:ab:b9:e1:6d:c5:7c:b5:36:f3:fc:6f:bf:
         ce:2c:4d:8f:a6:35:e0:60:74:b3:aa:c6:87:f1:ba:a3:cc:e5:
         82:41:84:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVHR+lFAjwGJlFRM41EmNTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOTlkNGRiMTJlNGYwYjAwMmY2MGU5MmNjNTMzZTZmODgy
ZDE1MDgwHhcNMjUwMjI3MTIwMDQ5WhcNMjUwMjI4MTIwMDQ5WjAzMTEwLwYDVQQD
EygwYzhjMGI5YTU3ZmMwNDM1MTY0ZGEzOTI1OGY2OGM4YTcxZDM2NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2bD6b+29nKSMnOct1CZHi4FNwiO
hPPLYXrYq0h90sdxWW7EbnuPbdloTYpaoyDX4WZvpRS0lvK8zSOlTHd76eCzMrJY
00vs7LUPfQkdckegg7aN5wXzI80ZsDnGcpkmKfBPjY0rsWZfjRP1SLaTKgckXHSl
ZBqwk7w2B/mAbLtDauQ6u9+cbKs70Yz04qCy18UsFVNYnpcC0FP+1FdsW1FLVibg
fP6uE0jXnfoCsS8272cw3q1AohccAEYJuFIXDspheMcAHEHfJNY1sEKgl/y3MfKW
YqjL/rtNq1UeEOQseLa+fPsKxk3XhV4K0o7vzhJ9L9Ovn80LKFVMtYCyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyMC5pX/AQ1Fk2jklj2jIpx02SBMB8GA1UdIwQY
MBaAFLqZ1NsS5PCwAvYOksxTPm+ILRUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXBuVTJ4TGs4TEFDOWc2U3pGTS1iNGd0RlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZjUxNmQtOTZjOS00YmYyLTgxYzgt
OGI0OGYzZjQwNjI1LzEvdXBuVTJ4TGs4TEFDOWc2U3pGTS1iNGd0RlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZjUxNmQtOTZjOS00YmYyLTgxYzgtOGI0OGYzZjQwNjI1
LzEvdXBuVTJ4TGs4TEFDOWc2U3pGTS1iNGd0RlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPAAC6tg
IGj3KuC6RNRbYU47+sL3ZptIHYSzcv4Mo96ZR+5S37arlnN8I2qK4aM9ITgClyPK
xRphkniGtOCe7IDbn9UBOCT9pGyQ8uZLp394ikMyK758BXgHNsOiLI2t6eidMrif
lVwG8Pb+DN80bLIdmRm013qWveJmmDmOiYDO8qc/nDxO/fFjcpjfYQWdkw6MhdM3
zvujrl95kC96VpaM6gVlqb4NcNAiwz7+a1DM4Ve+LOBHbwiWC0d7H96M9scwsJOo
pxn2MgQZTU3+HMtVVLW+VALDT2hmLEi2q7nhbcV8tTbz/G+/zixNj6Y14GB0s6rG
h/G6o8zlgkGE7w==
-----END CERTIFICATE-----