Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File:                     ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier:          DGBPxms5Pi1/r7bbDXcs9hwK9cDcbi+Vg0sJ+uzBhDQ=
Subject key identifier:   C1:12:2D:28:75:30:E4:4C:DA:C0:71:43:48:41:37:94:FF:49:4D:0F
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       01962F06F1F921C19699BCAD46FE1B9FAE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number:          13AF
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=)
                          2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=)
                          3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=)
                          4: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (hash: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=)
                          5: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (hash: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=)
                          6: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=)
                          7: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: HPgGTdJq8M0+rqPRpp5JGBdJr7RK2zp0eZK6zn7xx2w=)
                          8: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (hash: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=)
                          9: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=)
                          10: Si8V8khtv0yVUA78DGGzfalNcCk.roa (hash: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=)
                          11: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (hash: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=)
                          12: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (hash: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=)
                          13: cozXNddBZMRS0D_fVDWk42XqVNI.roa (hash: nP2wP4zibtasbSbsg7EMlMPSKjFkuBzXXdP2DBCONIM=)
                          14: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (hash: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=)
                          15: lQoeI3fot2NEOazpcJqwENKoEUU.roa (hash: Elimcemes6spMNky/T+TAYcPtxVw5jFrGcayiuk5D80=)
                          16: vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (hash: 6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f1:f9:21:c1:96:99:bc:ad:46:fe:1b:9f:ae:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=c1122d287530e44cdac0714348413794ff494d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b4:38:26:5f:42:e8:01:d1:d2:69:09:1f:74:
                    45:be:5e:79:10:d5:f2:68:6b:5c:b6:f6:c2:00:3c:
                    9a:17:b9:01:e3:96:04:ac:a0:d2:a3:0a:c0:2d:1c:
                    11:db:fd:b2:da:39:eb:ce:9d:5e:89:04:c7:34:e9:
                    de:6e:07:08:42:67:70:e1:71:a8:b8:d9:6c:43:ce:
                    86:7f:35:08:2c:30:5c:ba:af:8e:67:af:7f:e8:1a:
                    33:77:c6:e5:a3:f6:3e:5b:68:08:c8:a0:12:b6:4a:
                    63:62:da:17:24:6e:6c:eb:95:eb:3c:c1:5b:42:12:
                    be:88:d2:33:96:b0:4b:40:74:09:23:40:9a:29:e2:
                    ed:a1:63:df:17:d6:04:18:fa:42:90:dd:fd:28:f5:
                    30:b8:1b:1c:a0:5d:74:6c:45:f7:ae:7a:ef:a7:e0:
                    42:79:41:c6:18:11:86:eb:f2:ee:55:19:77:f6:44:
                    95:13:43:b4:ea:30:e6:fa:fb:eb:0a:bd:5b:1b:99:
                    8d:32:07:fc:10:d7:84:00:90:ee:1a:e8:dd:73:7c:
                    dc:46:7e:14:06:4a:49:98:46:3c:99:de:69:47:c3:
                    4d:b2:d9:d9:8e:5b:69:9b:7d:e5:a1:5e:38:83:4b:
                    21:b2:a9:24:1d:d4:ea:d4:62:08:bc:8e:2b:f3:5d:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:12:2D:28:75:30:E4:4C:DA:C0:71:43:48:41:37:94:FF:49:4D:0F
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:50:b7:bc:7c:5a:08:41:48:66:63:7b:35:90:57:05:17:
         6e:e1:10:69:99:eb:e2:ab:74:89:f7:80:e8:b4:11:cc:dd:f5:
         b5:36:d2:e8:65:ab:b0:27:f1:fa:d4:09:b3:e6:b2:ab:40:90:
         2c:71:90:d6:63:8e:1e:20:c2:35:04:a7:47:c7:88:0f:80:a4:
         36:4e:87:38:91:15:19:b8:63:35:7e:3c:d7:3f:59:04:04:e3:
         c9:3f:ac:83:60:d4:52:1b:bd:25:ba:b2:cc:4a:a8:a6:d2:db:
         37:50:5c:32:a2:c2:34:7f:01:8e:e7:db:bc:68:8b:08:26:8d:
         97:76:4b:d4:3f:bd:f2:66:a5:59:87:5d:a9:76:90:84:f4:52:
         e5:ef:5d:41:c9:5f:ca:02:f2:d6:55:d6:31:78:93:83:b3:9d:
         3d:86:24:82:3b:19:8c:f2:55:b9:4f:3b:ee:bb:dd:c0:89:0a:
         b4:a0:d2:06:53:1b:a6:ba:87:3c:cc:67:68:fe:92:af:97:b4:
         15:4e:9b:32:84:6a:64:9c:fa:80:82:aa:67:21:4b:b0:87:81:
         15:b0:75:4f:0e:a1:a1:11:73:9e:b9:ce:71:44:31:c7:ca:ab:
         7d:9f:c6:0c:55:18:c6:a3:e0:9f:15:d6:0d:4c:c8:37:3e:52:
         f2:f4:c1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvH5IcGWmbytRv4bn65LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0
MWE4ZDMwHhcNMjUwNDEzMTIwMTQ2WhcNMjUwNDE0MTIwMTQ2WjAzMTEwLwYDVQQD
EyhjMTEyMmQyODc1MzBlNDRjZGFjMDcxNDM0ODQxMzc5NGZmNDk0ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77Q4Jl9C6AHR0mkJH3RFvl55ENXy
aGtctvbCADyaF7kB45YErKDSowrALRwR2/2y2jnrzp1eiQTHNOnebgcIQmdw4XGo
uNlsQ86GfzUILDBcuq+OZ69/6Bozd8blo/Y+W2gIyKAStkpjYtoXJG5s65XrPMFb
QhK+iNIzlrBLQHQJI0CaKeLtoWPfF9YEGPpCkN39KPUwuBscoF10bEX3rnrvp+BC
eUHGGBGG6/LuVRl39kSVE0O06jDm+vvrCr1bG5mNMgf8ENeEAJDuGujdc3zcRn4U
BkpJmEY8md5pR8NNstnZjltpm33loV44g0shsqkkHdTq1GIIvI4r8117sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMESLSh1MORM2sBxQ0hBN5T/SU0PMB8GA1UdIwQY
MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt
MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0
LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6ZQt7x8
WghBSGZjezWQVwUXbuEQaZnr4qt0ifeA6LQRzN31tTbS6GWrsCfx+tQJs+ayq0CQ
LHGQ1mOOHiDCNQSnR8eID4CkNk6HOJEVGbhjNX481z9ZBATjyT+sg2DUUhu9Jbqy
zEqoptLbN1BcMqLCNH8BjufbvGiLCCaNl3ZL1D+98malWYddqXaQhPRS5e9dQclf
ygLy1lXWMXiTg7OdPYYkgjsZjPJVuU877rvdwIkKtKDSBlMbprqHPMxnaP6Sr5e0
FU6bMoRqZJz6gIKqZyFLsIeBFbB1Tw6hoRFznrnOcUQxx8qrfZ/GDFUYxqPgnxXW
DUzINz5S8vTBvA==
-----END CERTIFICATE-----