Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          A/ZrGIM0TnOaE3nI7wlKqN1ohE58Q0CcnSrBJOT2syE=
Subject key identifier:   78:1C:46:A6:F6:6B:88:0E:58:ED:16:02:20:73:FD:1D:2E:E7:F5:AC
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       01962E617945F480B052A8CA3EA7487A67A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
                          2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
                          3: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: 0ZmlbLOL5rVwO13y9wOo1O2LOCh1/7/wXKh/d8A+c88=)
                          4: cOWofKyb3NN8nv4CWZV7MLxAcXc.roa (hash: LjkxNR+VtLN8pFku0A8FzCtI0cGNobOpe7LNW6GMeZ0=)
                          5: ymqrtOTNWDQDdgBajqQ828K-pKw.roa (hash: MvzirsJ3BfWJOTVpYajs6bYFgV7Uhw3FJ4ibTjZ7nbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:45:f4:80:b0:52:a8:ca:3e:a7:48:7a:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=781c46a6f66b880e58ed16022073fd1d2ee7f5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:f2:5e:f9:ca:4d:fa:60:98:62:d6:e2:96:
                    88:17:20:8b:2e:6f:80:1f:23:01:34:7d:48:2e:81:
                    32:ce:b9:4d:6e:3d:59:d8:7e:7b:b5:ec:9a:d0:f6:
                    bd:65:c7:51:29:69:da:26:58:b4:47:d9:ec:7b:e4:
                    be:c3:5b:0e:4f:0a:5b:aa:56:53:8b:e4:7b:42:02:
                    65:f4:b7:cc:db:3e:5f:3d:4b:87:cb:9c:e7:85:b2:
                    eb:8f:a6:52:14:79:00:37:6f:53:b3:de:a4:df:ae:
                    12:94:d5:78:3b:2a:7c:35:a4:2f:79:95:7c:0a:d2:
                    e0:7f:95:0d:1b:d8:fa:50:76:f9:a0:9f:39:ad:fd:
                    3b:d0:b4:61:70:5a:1c:33:34:a3:b3:45:12:75:71:
                    7c:e1:12:35:86:5b:0e:ac:e4:9a:fd:c5:1a:cf:70:
                    5f:5d:5b:c8:83:6c:8a:9a:1f:73:0b:ff:13:70:26:
                    f8:b3:98:76:44:cc:d6:b0:4c:f3:97:c1:54:37:f5:
                    4c:76:20:c4:32:84:13:b3:05:42:0a:5d:64:8a:ca:
                    e5:ac:2e:8a:db:57:89:35:9c:43:ba:3e:c6:dd:ec:
                    aa:3e:43:65:c5:e3:cd:ba:f1:cb:7f:7f:42:63:56:
                    b7:23:07:7b:f1:17:c9:f0:1e:76:4c:86:1a:24:ef:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1C:46:A6:F6:6B:88:0E:58:ED:16:02:20:73:FD:1D:2E:E7:F5:AC
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:51:c9:35:da:b1:65:e4:7f:72:3c:4b:bd:62:2d:c4:46:3d:
         49:a6:e1:a6:07:af:cd:f0:7f:c2:ba:0a:4b:78:6f:b0:e8:66:
         03:92:c1:ed:2d:80:98:16:08:c4:ce:8d:c6:df:ae:60:96:f4:
         df:92:7e:20:c1:00:4c:96:54:22:e1:07:13:b0:cb:6e:ed:3b:
         28:0b:ba:fe:5b:e7:2e:00:f1:ef:81:dc:1e:05:19:09:f1:7d:
         d7:8d:6b:2c:2f:9c:1e:2d:3b:f1:ed:b3:8e:f1:c0:be:b2:1b:
         da:06:b3:8f:a9:6c:f2:96:59:71:57:c7:c8:fb:3b:b1:80:f1:
         55:4a:85:c0:5b:39:cc:0c:6e:42:a6:5c:d5:05:62:cc:5f:65:
         57:81:37:d9:ab:63:b8:d3:57:e3:75:b0:e8:42:38:3d:ec:36:
         41:0b:82:74:e3:e4:0a:12:ae:ca:1f:c8:1a:f4:7a:55:d9:64:
         51:46:5c:12:6c:1d:ab:59:a6:fd:9b:c8:dd:4d:f7:aa:fd:1f:
         b3:14:67:ff:33:e5:4c:c1:c3:1b:2b:69:bf:d2:a3:a9:86:b7:
         40:0c:74:7c:96:ba:eb:47:5e:05:d7:e0:cb:95:89:40:35:8c:
         bf:01:f1:8d:9e:63:ed:1a:c9:a1:b3:0a:33:37:30:b0:2c:d0:
         f4:a2:5e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXlF9ICwUqjKPqdIemegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjUwNDEzMDkwMTAxWhcNMjUwNDE0MDkwMTAxWjAzMTEwLwYDVQQD
Eyg3ODFjNDZhNmY2NmI4ODBlNThlZDE2MDIyMDczZmQxZDJlZTdmNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd/yXvnKTfpgmGLW4paIFyCLLm+A
HyMBNH1ILoEyzrlNbj1Z2H57teya0Pa9ZcdRKWnaJli0R9nse+S+w1sOTwpbqlZT
i+R7QgJl9LfM2z5fPUuHy5znhbLrj6ZSFHkAN29Ts96k364SlNV4Oyp8NaQveZV8
CtLgf5UNG9j6UHb5oJ85rf070LRhcFocMzSjs0USdXF84RI1hlsOrOSa/cUaz3Bf
XVvIg2yKmh9zC/8TcCb4s5h2RMzWsEzzl8FUN/VMdiDEMoQTswVCCl1kisrlrC6K
21eJNZxDuj7G3eyqPkNlxePNuvHLf39CY1a3Iwd78RfJ8B52TIYaJO+CiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgcRqb2a4gOWO0WAiBz/R0u5/WsMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFHJNdqx
ZeR/cjxLvWItxEY9SabhpgevzfB/wroKS3hvsOhmA5LB7S2AmBYIxM6Nxt+uYJb0
35J+IMEATJZUIuEHE7DLbu07KAu6/lvnLgDx74HcHgUZCfF9141rLC+cHi078e2z
jvHAvrIb2gazj6ls8pZZcVfHyPs7sYDxVUqFwFs5zAxuQqZc1QVizF9lV4E32atj
uNNX43Ww6EI4Pew2QQuCdOPkChKuyh/IGvR6VdlkUUZcEmwdq1mm/ZvI3U33qv0f
sxRn/zPlTMHDGytpv9KjqYa3QAx0fJa660deBdfgy5WJQDWMvwHxjZ5j7RrJobMK
MzcwsCzQ9KJeiw==
-----END CERTIFICATE-----