Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File:                     uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier:          xp3zLG7kwLzM/Yp6y3L+f21wd38rZtNJvTcT7pE0UhI=
Subject key identifier:   8A:68:49:06:75:2A:62:1F:42:BB:60:0D:5D:92:34:1F:CC:3B:3F:A4
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer:       /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial:       01962ECF90FA1CD10850E5CCBE642013830F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number:          0E0A
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
                          2: 8tGhbhMGN_POJ7YSYEPEigGTSlM.roa (hash: AyZWf3gcGZsZqBrGbd7j+e4CICThgNWqmUZZB2Q39TY=)
                          3: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
                          4: lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa (hash: P6bpbS3OXvq0UtxdzJFd21jTQ3yjWXkBJ0OIzqYZwM4=)
                          5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: D6lC0lYU26YjMM9z5BxdMwwkKTU8xBWLWuKydwYpJ6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:fa:1c:d1:08:50:e5:cc:be:64:20:13:83:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=8a684906752a621f42bb600d5d92341fcc3b3fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:c7:f2:2f:f7:9a:a3:41:17:a0:e5:4f:f9:
                    11:a4:8f:f5:6f:29:d5:36:d7:2e:97:b1:90:8d:58:
                    92:6d:89:31:1f:a7:4e:be:5a:74:0a:8a:c4:1f:81:
                    c1:e2:28:f9:96:6d:f2:61:fb:19:c3:13:92:d9:fe:
                    a8:e4:a3:61:9c:fc:f7:33:c4:11:0a:e6:f5:bb:02:
                    b0:b7:6a:24:a4:2f:91:20:2f:e9:f6:84:1e:cd:68:
                    75:e8:73:15:69:7c:71:81:44:be:14:67:89:b6:58:
                    27:fa:57:14:a1:da:f0:4c:e9:57:c8:59:31:92:1d:
                    ab:df:36:05:44:a4:0d:58:3f:fc:70:dc:89:0f:11:
                    0a:9e:ed:d0:8e:7e:af:ee:91:22:10:c9:fe:77:d6:
                    51:3f:fd:5c:ce:fb:a9:c6:aa:a1:ea:de:11:06:14:
                    ff:fa:4b:d4:3f:e4:b1:97:ca:7a:40:f7:c7:13:0d:
                    c2:77:bc:c4:9b:36:f7:c9:07:21:f5:cd:1d:08:de:
                    7a:47:29:5e:a9:c9:84:1d:de:7e:4f:09:9d:7b:92:
                    c2:74:68:98:5f:e9:f8:fb:ad:f3:28:1f:9a:61:b7:
                    23:d7:8e:a8:d3:2d:d6:c4:7f:5d:57:66:11:79:e8:
                    3c:34:84:ac:46:ed:f1:22:b9:9d:90:83:78:a3:30:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:68:49:06:75:2A:62:1F:42:BB:60:0D:5D:92:34:1F:CC:3B:3F:A4
            X509v3 Authority Key Identifier:
                keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:67:7d:5e:94:f0:e8:0b:78:20:7e:1f:06:61:b0:a0:c1:
         fb:cc:79:eb:7d:1b:3c:94:bb:76:82:d5:e8:df:29:49:13:2e:
         fa:43:5f:7e:7b:de:e8:ef:48:1d:72:25:0e:0a:c1:dd:29:3d:
         e9:d8:f9:64:f6:83:31:9d:72:bd:05:81:8b:1a:92:91:02:d0:
         c7:04:62:5d:63:80:e0:6d:88:7b:bd:f3:2a:56:df:d4:d7:e7:
         9a:b0:e8:b2:ad:0c:1f:36:3f:fb:8c:9f:bc:c1:fa:cb:bf:ec:
         2f:95:71:95:2f:4d:8d:05:a5:70:89:1b:e3:d2:c3:ef:4f:c2:
         e4:1d:8e:6a:23:3b:41:06:02:c1:0e:8a:67:25:23:5c:e4:af:
         ff:60:77:fb:b3:57:d2:e4:f3:4f:28:d6:c2:a9:ea:f2:63:fa:
         32:7c:a4:c2:fc:6f:e9:16:a1:06:29:05:15:88:ae:78:8b:ae:
         c2:6b:78:f0:98:bd:da:ba:15:c7:0f:59:eb:c4:a2:01:3f:86:
         90:aa:42:5c:f6:22:b3:10:83:63:41:4f:29:f9:a0:d5:76:b2:
         8b:d1:43:f4:79:fa:76:30:ba:10:ee:77:af:1c:9f:0d:8c:72:
         c8:7b:e1:03:f6:b9:8f:26:e8:1d:13:26:2a:ac:c0:f2:a0:43:
         bc:fd:13:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5D6HNEIUOXMvmQgE4MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjUwNDEzMTEwMTE3WhcNMjUwNDE0MTEwMTE3WjAzMTEwLwYDVQQD
Eyg4YTY4NDkwNjc1MmE2MjFmNDJiYjYwMGQ1ZDkyMzQxZmNjM2IzZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ3H8i/3mqNBF6DlT/kRpI/1bynV
Ntcul7GQjViSbYkxH6dOvlp0CorEH4HB4ij5lm3yYfsZwxOS2f6o5KNhnPz3M8QR
Cub1uwKwt2okpC+RIC/p9oQezWh16HMVaXxxgUS+FGeJtlgn+lcUodrwTOlXyFkx
kh2r3zYFRKQNWD/8cNyJDxEKnu3Qjn6v7pEiEMn+d9ZRP/1czvupxqqh6t4RBhT/
+kvUP+Sxl8p6QPfHEw3Cd7zEmzb3yQch9c0dCN56RyleqcmEHd5+Twmde5LCdGiY
X+n4+63zKB+aYbcj146o0y3WxH9dV2YReeg8NISsRu3xIrmdkIN4ozCNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpoSQZ1KmIfQrtgDV2SNB/MOz+kMB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWRnfV6U
8OgLeCB+HwZhsKDB+8x5630bPJS7doLV6N8pSRMu+kNffnve6O9IHXIlDgrB3Sk9
6dj5ZPaDMZ1yvQWBixqSkQLQxwRiXWOA4G2Ie73zKlbf1NfnmrDosq0MHzY/+4yf
vMH6y7/sL5VxlS9NjQWlcIkb49LD70/C5B2OaiM7QQYCwQ6KZyUjXOSv/2B3+7NX
0uTzTyjWwqnq8mP6Mnykwvxv6RahBikFFYiueIuuwmt48Ji92roVxw9Z68SiAT+G
kKpCXPYisxCDY0FPKfmg1Xayi9FD9Hn6djC6EO53rxyfDYxyyHvhA/a5jyboHRMm
KqzA8qBDvP0TiA==
-----END CERTIFICATE-----