Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          k0X61t4dP42oy8L96E6h5toOc6HYd/NTYQf9DF7PsLQ=
Subject key identifier:   AB:2E:C6:07:EA:21:4C:56:F4:81:E3:55:86:3B:5B:AA:23:93:42:60
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       01962E61AA1CFAFC336EF95F24C939A9452C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1523
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 1a0sPcn4pmhhD6HGlGpxCJ-XVlY.roa (hash: a2pnK6j+am/bu5v21fphazd3b7PjB1w+G72ERblnw20=)
                          2: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
                          3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: 7ztYhDAmddLBIONqaNLPuXc7RiFxnSGWfL9xgFLQ1sw=)
                          4: Kiw_rRXvEr3ukKKsQhrB4GqRftU.roa (hash: NIF23ooyYuT0FP+1LU5YHB5raA7/sRFIC/+274gQFO0=)
                          5: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
                          6: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
                          7: dbxrBkyZ0tq0ud2dYJnpzRMQOb8.roa (hash: DiDC1vRDYZKV7MhR9bmWUC8CTeGvGisDjrMVDZIxj4c=)
                          8: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:aa:1c:fa:fc:33:6e:f9:5f:24:c9:39:a9:45:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=ab2ec607ea214c56f481e355863b5baa23934260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:e6:4f:07:37:10:3c:bb:30:63:a7:42:29:
                    78:6d:b6:a0:d4:b6:1d:12:09:ab:75:59:3a:39:49:
                    df:2b:d8:f7:e8:2b:8d:80:3d:0f:fd:71:b4:49:88:
                    6d:b2:5d:0b:78:b1:bf:f9:a7:be:fc:60:51:3b:50:
                    07:76:a5:02:51:d7:36:bd:2b:ac:d3:4d:df:63:7a:
                    ce:6c:7a:83:bf:74:4b:15:d5:5c:94:4b:86:01:e1:
                    07:4f:18:82:e0:fd:0f:15:d9:ca:9c:98:36:0d:ae:
                    b4:5a:64:1e:5f:44:9b:03:d5:9c:8e:50:ac:ce:fe:
                    7c:fd:8b:12:0d:33:b1:d4:dc:e3:2c:66:0b:46:9c:
                    8c:68:65:dd:55:72:c5:77:53:52:d1:2f:a5:e3:87:
                    41:62:66:5f:ac:59:71:3b:24:fc:26:cc:1a:f5:42:
                    e2:91:52:c2:71:a8:ec:5a:71:30:0a:2b:e2:5f:2f:
                    e8:17:be:08:92:7d:49:d9:89:93:41:ce:65:52:b0:
                    b1:32:2b:f1:ba:f9:1c:ac:99:58:eb:50:00:9f:c3:
                    7b:dd:6f:12:65:9d:ac:12:fb:80:a1:85:47:40:84:
                    34:3c:ad:c4:75:f0:6e:66:7f:00:70:fd:b5:20:d7:
                    46:0b:fd:1c:68:b1:98:1c:71:6c:6a:88:9b:ab:37:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:C6:07:EA:21:4C:56:F4:81:E3:55:86:3B:5B:AA:23:93:42:60
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:8b:c9:6d:b3:02:b7:4b:7a:a4:e7:4e:51:c0:39:1d:d8:
         27:c7:43:f3:6b:2c:22:0d:64:fd:59:41:cf:ad:8d:ca:f5:f5:
         f7:47:6c:7d:84:e4:b1:48:d8:b5:93:5e:b8:42:82:dc:59:5e:
         ab:26:82:e5:58:a8:a3:51:63:ee:1b:b9:5e:a8:5e:36:17:dd:
         49:be:12:b2:60:45:44:1c:d5:64:12:c8:c2:1a:bc:c6:f6:d2:
         ca:de:62:76:c1:11:fe:d4:a4:29:5f:9d:71:70:80:91:df:74:
         cb:84:58:61:13:4d:b8:e2:a6:1f:71:09:df:b2:e2:38:3b:eb:
         34:39:35:2d:04:72:cd:eb:a7:3f:86:27:30:ec:c3:6e:9d:0c:
         fa:1f:77:6a:13:fb:09:20:71:fb:e8:aa:d6:e5:aa:c3:cb:50:
         b4:a7:8c:e1:34:5a:87:84:5e:6c:bd:b4:cd:26:5b:a3:ac:88:
         87:88:9e:68:f4:f8:28:27:c1:c5:16:21:f4:d5:17:09:46:ef:
         00:77:f6:70:7d:0c:b4:b4:34:a4:c9:92:3a:f3:83:e7:24:2b:
         fc:f5:2e:3c:23:d9:33:ec:95:83:d3:43:fa:30:a1:66:be:80:
         88:8a:16:de:42:6d:5d:94:57:e1:3b:fc:eb:6d:5e:46:fe:de:
         b6:0b:a0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaoc+vwzbvlfJMk5qUUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw
ZDQxZTUwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EyhhYjJlYzYwN2VhMjE0YzU2ZjQ4MWUzNTU4NjNiNWJhYTIzOTM0MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2HmTwc3EDy7MGOnQil4bbag1LYd
EgmrdVk6OUnfK9j36CuNgD0P/XG0SYhtsl0LeLG/+ae+/GBRO1AHdqUCUdc2vSus
003fY3rObHqDv3RLFdVclEuGAeEHTxiC4P0PFdnKnJg2Da60WmQeX0SbA9WcjlCs
zv58/YsSDTOx1NzjLGYLRpyMaGXdVXLFd1NS0S+l44dBYmZfrFlxOyT8Jswa9ULi
kVLCcajsWnEwCiviXy/oF74Ikn1J2YmTQc5lUrCxMivxuvkcrJlY61AAn8N73W8S
ZZ2sEvuAoYVHQIQ0PK3EdfBuZn8AcP21INdGC/0caLGYHHFsaoibqzdf7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsuxgfqIUxW9IHjVYY7W6ojk0JgMB8GA1UdIwQY
MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt
M2RmN2ZhZjM1MzVkLzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk
LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllyLyW2z
ArdLeqTnTlHAOR3YJ8dD82ssIg1k/VlBz62NyvX190dsfYTksUjYtZNeuEKC3Fle
qyaC5Vioo1Fj7hu5XqheNhfdSb4SsmBFRBzVZBLIwhq8xvbSyt5idsER/tSkKV+d
cXCAkd90y4RYYRNNuOKmH3EJ37LiODvrNDk1LQRyzeunP4YnMOzDbp0M+h93ahP7
CSBx++iq1uWqw8tQtKeM4TRah4RebL20zSZbo6yIh4ieaPT4KCfBxRYh9NUXCUbv
AHf2cH0MtLQ0pMmSOvOD5yQr/PUuPCPZM+yVg9ND+jChZr6AiIoW3kJtXZRX4Tv8
621eRv7etgugmA==
-----END CERTIFICATE-----