Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          vSup5bJYYByRO5ncWCBRI8mlT5Ir5vEaav+BlkbqcxQ=
Subject key identifier:   82:99:1C:D4:A1:60:6F:E7:DE:DD:AD:6C:BE:86:57:69:E3:30:77:D2
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       01962DF396EA5EBD896DA16AA8307B17EC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0603
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 34L0qge2tNB4WEjnnevARD_mNUU.roa (hash: ry58BGExakUgGHZ3z3Fi8XcJ02SF1yHnFqs3N6sRqHc=)
                          2: 43gEJXLRZhBLeSI-aOiwsJo8t18.roa (hash: hJ2/LJzxG3xhi0jErGx6Rimn7Tgu+B52/B5v7PqA0Q4=)
                          3: FySTZF5XmiRgffP_0Q1bU_jIQpg.roa (hash: GbwThYD6w19HqYzAx38shdLTpkIXF4U5UQypl5TKy7s=)
                          4: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: /ZkMaGu4xJgzr0L7XoEBurD2wSC8KYKj7KZvwgELxCQ=)
                          5: aSAbXtaRyXcPhRakK1aghIwRn3g.roa (hash: up2cOGYfGLooX0y47JfJVek/1Cnxd7U8E51loywLrVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:96:ea:5e:bd:89:6d:a1:6a:a8:30:7b:17:ec:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=82991cd4a1606fe7deddad6cbe865769e33077d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:90:53:89:f2:4d:f6:e9:80:aa:84:90:2c:
                    4b:da:5b:72:68:51:a2:fa:e4:de:ee:fd:ea:66:c6:
                    00:71:f7:45:84:5f:55:f1:ec:46:09:12:91:71:27:
                    35:82:91:eb:36:ca:80:b9:f0:56:14:61:7f:8a:bf:
                    2e:1c:8f:d9:35:a4:4f:91:81:35:7f:ff:b5:7f:51:
                    c4:a8:73:ec:dd:f6:b4:3e:f7:cb:e5:ae:7c:e8:48:
                    5e:b6:d9:06:4e:1e:de:5d:03:f5:a8:47:ac:70:e2:
                    95:b3:7f:43:cc:b8:33:75:cb:cd:74:38:2e:89:cb:
                    70:4a:51:9c:1d:d1:7e:5b:49:c6:2f:68:b5:37:51:
                    37:4b:cd:1b:64:c1:1f:7e:2b:de:74:c1:13:4a:e3:
                    0b:13:c5:c9:6c:13:d6:62:fe:46:88:63:57:82:0c:
                    be:5b:5c:2a:31:45:61:d4:6c:aa:e3:89:f2:aa:f3:
                    69:89:49:06:31:b9:58:e5:0f:b2:47:3f:50:d4:71:
                    12:58:7e:1b:df:29:17:b0:9a:f2:e2:ff:7d:cb:a4:
                    1a:b7:8a:7e:9f:b3:9b:80:5c:ef:0f:c3:73:28:bb:
                    2a:8e:1a:35:ab:db:f3:c8:ef:30:48:e6:b7:c6:b1:
                    48:52:1f:54:c0:23:6a:11:d7:34:45:b2:2f:86:ac:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:99:1C:D4:A1:60:6F:E7:DE:DD:AD:6C:BE:86:57:69:E3:30:77:D2
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:4f:68:f9:53:8b:79:4e:eb:40:e6:b3:b8:f6:5b:5e:fd:
         63:d8:32:9f:08:e1:02:9d:a8:72:23:7b:ed:e6:6a:b0:f4:86:
         9d:ad:3d:5c:8d:5f:35:b1:5e:ad:21:fe:67:b6:79:ea:f2:da:
         ec:3a:c1:b8:7d:b8:e1:5b:9f:64:c4:7a:61:bb:f0:c8:81:1b:
         9d:c4:c2:62:23:ec:dc:d9:d1:19:d4:7c:31:aa:09:a3:d0:98:
         d5:f9:93:90:c4:ca:4b:06:3b:95:e1:64:da:9a:27:81:3c:c3:
         b4:d4:84:11:56:45:31:d2:7a:ab:84:54:cc:8a:64:a4:07:10:
         d3:de:b8:6e:b1:cc:88:66:cb:30:5f:42:d8:9b:82:da:17:a3:
         fe:c5:38:26:29:8e:f8:3c:20:71:23:95:f9:d5:f4:e1:a7:5c:
         ac:4e:72:0c:da:3b:e3:11:c7:08:03:5e:6b:dd:2c:c7:da:42:
         43:13:97:e8:9a:33:c3:5b:10:f6:74:db:72:cf:4b:49:25:8a:
         c2:85:13:ab:28:f5:2f:5e:1a:ac:c3:45:e7:f9:f6:3f:9a:bc:
         38:f8:0b:7f:d4:7c:bc:82:59:46:d2:21:91:be:b6:46:89:c9:
         fd:44:14:6f:d0:07:89:1a:3b:3f:ac:fe:33:ed:ae:fc:12:ec:
         cc:78:de:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85bqXr2JbaFqqDB7F+wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYTc5NTE2N2QyZDlmYjQyMDk0MWYxNzI4N2JkZjNjNWVl
ZDhkZjkwHhcNMjUwNDEzMDcwMTAwWhcNMjUwNDE0MDcwMTAwWjAzMTEwLwYDVQQD
Eyg4Mjk5MWNkNGExNjA2ZmU3ZGVkZGFkNmNiZTg2NTc2OWUzMzA3N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAileQU4nyTfbpgKqEkCxL2ltyaFGi
+uTe7v3qZsYAcfdFhF9V8exGCRKRcSc1gpHrNsqAufBWFGF/ir8uHI/ZNaRPkYE1
f/+1f1HEqHPs3fa0PvfL5a586EhettkGTh7eXQP1qEescOKVs39DzLgzdcvNdDgu
ictwSlGcHdF+W0nGL2i1N1E3S80bZMEffivedMETSuMLE8XJbBPWYv5GiGNXggy+
W1wqMUVh1Gyq44nyqvNpiUkGMblY5Q+yRz9Q1HESWH4b3ykXsJry4v99y6Qat4p+
n7ObgFzvD8NzKLsqjho1q9vzyO8wSOa3xrFIUh9UwCNqEdc0RbIvhqxHzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKZHNShYG/n3t2tbL6GV2njMHfSMB8GA1UdIwQY
MBaAFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDkt
N2I3ZTk3NmM4NDEyLzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MzUzNWEtZTFiZC00ZmI3LTlmMDktN2I3ZTk3NmM4NDEy
LzEvSDZlVkZuMHRuN1FnbEI4WEtIdmZQRjd0amZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCtPaPlT
i3lO60Dms7j2W179Y9gynwjhAp2ociN77eZqsPSGna09XI1fNbFerSH+Z7Z56vLa
7DrBuH244VufZMR6YbvwyIEbncTCYiPs3NnRGdR8MaoJo9CY1fmTkMTKSwY7leFk
2pongTzDtNSEEVZFMdJ6q4RUzIpkpAcQ0964brHMiGbLMF9C2JuC2hej/sU4JimO
+DwgcSOV+dX04adcrE5yDNo74xHHCANea90sx9pCQxOX6Jozw1sQ9nTbcs9LSSWK
woUTqyj1L14arMNF5/n2P5q8OPgLf9R8vIJZRtIhkb62RonJ/UQUb9AHiRo7P6z+
M+2u/BLszHje8Q==
-----END CERTIFICATE-----