Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          Ex5HQmqfQDqHfjL/XCQ2Pgnhd3LDT0IfFKq/5HzWIcM=
Subject key identifier:   30:3F:A6:6E:1C:5C:A7:F7:B4:FB:E8:67:E6:5E:AD:E3:87:6F:99:E0
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       01962E61B95FA332D33E06F8A8F43344CB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          0BCC
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (hash: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=)
                          2: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: QQdv0zRNONhI8g4MtQCFI8SnHw9uA4487a3+Nq07Ees=)
                          3: VknLSw01F6JnIGcpuDroFOQ6wlg.roa (hash: x8OBiPpoyvPs1xLJUu7Ja3HvluBnOuxAWAGhM5OwwjU=)
                          4: YJqBlZ2Fe8Khq-5phtHszQ17dp0.roa (hash: 5y6pIty0B50Ya59ZjY0WQF6A2tMefyueh/h5IfLk1iU=)
                          5: bz0QjIkqD5-RMeJmKg1JG6p5-Ws.roa (hash: 1PiFMOcXEw++DLpqX3fex/SiFqoIja/HYiTy+CElJPg=)
                          6: r3uflPboabvJIaGhEdaIDk06CD4.roa (hash: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:5f:a3:32:d3:3e:06:f8:a8:f4:33:44:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=303fa66e1c5ca7f7b4fbe867e65eade3876f99e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:44:f4:c0:99:68:d7:8c:af:a8:1c:0e:d3:
                    82:60:b2:47:02:d3:78:f2:21:6a:aa:33:90:28:16:
                    28:51:84:6c:59:ea:37:ff:a9:7e:7b:b2:51:db:27:
                    6b:0a:c9:45:a1:ea:d0:5e:b4:8e:33:af:af:b5:70:
                    a3:22:c8:64:da:9d:95:35:e6:2e:71:1d:3c:fa:84:
                    54:66:c9:02:a8:0d:01:14:0f:b3:76:37:58:22:11:
                    5a:f3:cb:97:b3:1f:7f:6f:d6:c0:f5:52:84:4c:0b:
                    44:03:aa:bd:48:5f:b9:02:80:c1:e7:fa:bc:91:3b:
                    5a:11:72:61:a0:48:bb:00:73:e2:b4:48:44:90:9c:
                    7e:8b:72:b8:da:77:03:50:57:92:b9:d6:4b:d8:8c:
                    01:fe:25:5c:a3:0c:97:3e:4d:a1:85:39:85:e1:4b:
                    e8:05:83:36:68:bf:e8:6e:cf:6a:aa:ee:2f:45:15:
                    ae:c9:24:6d:14:d1:7d:82:3e:90:b9:3c:91:7d:e3:
                    b9:e0:a9:6c:01:31:b0:1b:19:dc:4a:94:99:bf:ef:
                    1b:fd:3b:da:5b:30:a0:fc:26:aa:98:b9:dd:79:04:
                    30:64:b9:8c:87:0a:fe:0a:a1:10:6c:00:f0:a6:95:
                    fb:51:82:2d:6a:33:08:51:16:8c:d8:27:87:64:f8:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3F:A6:6E:1C:5C:A7:F7:B4:FB:E8:67:E6:5E:AD:E3:87:6F:99:E0
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:57:80:ac:a9:2f:fd:65:4d:3c:d2:72:7e:5e:93:92:e7:f1:
         91:a2:62:b0:3d:82:d2:66:60:3e:a8:2e:cc:09:89:c2:ba:00:
         06:7f:24:67:e4:bf:62:72:f9:ee:b4:96:b3:7d:f5:86:4e:83:
         be:71:3d:ef:fd:13:ad:7d:04:f0:e4:6a:ab:5d:be:01:b4:40:
         ca:7b:81:cd:33:97:b2:86:ca:b7:70:2d:b2:13:35:19:63:12:
         64:d8:a7:8a:44:21:63:9e:0e:5f:a9:f0:61:f6:07:37:5e:8e:
         27:7d:4b:19:92:b2:1a:8e:59:a9:3a:b2:53:85:b8:50:ee:d3:
         6c:c4:24:6d:97:9c:4f:0e:88:2f:2e:d6:5a:55:9d:8f:bd:fd:
         8c:c1:3c:31:84:12:16:1d:e1:35:83:8f:c2:fe:d0:d7:9a:af:
         cf:2d:4c:de:bb:d8:e4:3f:11:fe:1f:49:b7:16:7d:ea:58:b1:
         6b:e2:48:e1:3b:23:d7:2e:4b:85:18:44:e4:f1:6c:31:aa:68:
         ab:5c:bb:28:96:46:a5:48:02:b3:1f:12:39:bf:cb:d2:ed:dd:
         33:b3:bb:e2:65:58:04:fa:4c:ab:13:c6:74:2a:9f:5f:db:2f:
         9a:7a:e2:1d:c6:dd:fa:34:d9:63:53:3f:4f:6e:c4:64:b4:f3:
         c4:0a:8d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYblfozLTPgb4qPQzRMsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjUwNDEzMDkwMTE4WhcNMjUwNDE0MDkwMTE4WjAzMTEwLwYDVQQD
EygzMDNmYTY2ZTFjNWNhN2Y3YjRmYmU4NjdlNjVlYWRlMzg3NmY5OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ1E9MCZaNeMr6gcDtOCYLJHAtN4
8iFqqjOQKBYoUYRsWeo3/6l+e7JR2ydrCslFoerQXrSOM6+vtXCjIshk2p2VNeYu
cR08+oRUZskCqA0BFA+zdjdYIhFa88uXsx9/b9bA9VKETAtEA6q9SF+5AoDB5/q8
kTtaEXJhoEi7AHPitEhEkJx+i3K42ncDUFeSudZL2IwB/iVcowyXPk2hhTmF4Uvo
BYM2aL/obs9qqu4vRRWuySRtFNF9gj6QuTyRfeO54KlsATGwGxncSpSZv+8b/Tva
WzCg/CaqmLndeQQwZLmMhwr+CqEQbADwppX7UYItajMIURaM2CeHZPhfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA/pm4cXKf3tPvoZ+ZereOHb5ngMB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIleArKkv
/WVNPNJyfl6TkufxkaJisD2C0mZgPqguzAmJwroABn8kZ+S/YnL57rSWs331hk6D
vnE97/0TrX0E8ORqq12+AbRAynuBzTOXsobKt3AtshM1GWMSZNinikQhY54OX6nw
YfYHN16OJ31LGZKyGo5ZqTqyU4W4UO7TbMQkbZecTw6ILy7WWlWdj739jME8MYQS
Fh3hNYOPwv7Q15qvzy1M3rvY5D8R/h9JtxZ96lixa+JI4Tsj1y5LhRhE5PFsMapo
q1y7KJZGpUgCsx8SOb/L0u3dM7O74mVYBPpMqxPGdCqfX9svmnriHcbd+jTZY1M/
T27EZLTzxAqNdA==
-----END CERTIFICATE-----