Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          ViIiUR6kK1+2zEfbtVyk2KCQ5TsRuVmbaepCsbdTIGc=
Subject key identifier:   5B:EE:38:FB:63:DF:57:04:D9:6D:B7:41:2A:A8:0A:F1:17:77:84:5C
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       01962E61D4DA5218EF9FADABD722828BBE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          150B
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=)
                          2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=)
                          3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=)
                          4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=)
                          5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=)
                          6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=)
                          7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=)
                          8: OllQNmMawdArtrTwZHIJNF4T5jM.roa (hash: +uevr5/ThP6vpFGT/Sd5hxkcaCeLUtP4ogWvmijr4m8=)
                          9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: daWOd2SkA4C+hkxah8GCW5YBnClFB6028XzMaHfBxNU=)
                          10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=)
                          11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=)
                          12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:da:52:18:ef:9f:ad:ab:d7:22:82:8b:be:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=5bee38fb63df5704d96db7412aa80af11777845c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:f8:02:7a:6d:90:1c:7a:bb:5c:4a:f8:32:
                    d6:8a:07:02:20:d6:44:cc:e3:13:77:1e:41:ff:ff:
                    ef:46:ce:06:cf:ca:49:c3:93:2e:58:43:de:ab:ac:
                    c2:15:df:81:02:b0:eb:1e:97:a4:ff:6c:9d:53:80:
                    0a:75:45:7d:ce:17:81:6e:46:e8:5a:dc:3a:56:02:
                    fd:0c:77:c9:bc:b9:6c:19:ac:1b:5d:84:6d:97:03:
                    40:65:33:e8:ae:31:35:64:f0:26:95:1c:57:f1:95:
                    a7:5a:eb:4f:c5:9e:8e:6a:c3:79:d2:98:f6:64:cb:
                    89:63:ad:ab:2f:eb:9d:ce:cc:eb:78:6c:4a:b0:23:
                    1e:c1:83:45:66:d6:a7:38:8d:4d:36:fd:05:c3:f7:
                    b0:4f:7f:f0:d5:ec:19:c8:07:fb:39:ed:59:58:53:
                    f4:0a:91:77:99:56:6c:70:f7:5f:8e:f5:bf:8f:7d:
                    96:f6:b5:a4:62:4c:ec:ce:82:5f:6a:9e:d7:7e:28:
                    2e:21:d0:1c:11:26:c7:76:8e:e7:38:b9:4b:98:51:
                    ab:61:3a:3d:06:48:a2:01:e0:4a:a3:59:72:9c:92:
                    b4:a9:6e:32:c9:dc:17:b9:46:bc:46:f4:ad:45:2d:
                    f3:ca:6e:2d:9c:4e:75:60:8c:73:bc:cd:f1:26:83:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EE:38:FB:63:DF:57:04:D9:6D:B7:41:2A:A8:0A:F1:17:77:84:5C
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:d2:42:46:5c:8c:f5:c0:46:b2:a6:a1:50:99:53:ee:80:
         96:02:86:a2:b1:55:95:0f:16:c8:51:8a:7c:71:c3:59:8e:0f:
         15:07:2d:6a:1c:3b:68:6a:a4:7a:78:ba:ff:e0:45:5f:99:5b:
         45:cb:0a:a9:a1:0e:5e:d6:36:61:33:e3:0b:4c:fb:19:95:b1:
         75:2c:57:8a:93:41:a4:26:62:02:08:e4:a2:34:1a:2f:af:7f:
         78:f5:c1:3e:fd:a1:80:db:97:4e:37:5c:93:f2:b4:b3:0c:15:
         7b:eb:53:16:c4:78:0b:f4:fa:1c:4e:2f:09:70:31:35:ed:b3:
         c1:a8:b6:b2:4b:ec:9f:41:35:a7:7c:94:a1:9c:b8:3f:7b:e0:
         25:5c:18:08:8e:5e:a4:86:eb:ac:d1:10:8b:38:62:ac:c2:e3:
         0b:0e:70:3b:04:17:40:a9:e7:de:5b:4a:a8:c5:9c:d6:a3:c1:
         a7:27:d5:c1:d1:1e:35:23:f8:3c:96:49:7e:a1:03:10:0a:9c:
         43:24:e8:59:21:41:5e:64:ba:25:04:45:8f:94:52:79:25:70:
         dd:ef:f6:b2:29:e0:80:0b:2a:03:3a:9d:55:dc:77:98:aa:b8:
         79:08:eb:ae:4d:0e:a1:48:72:67:2b:03:3c:dc:8c:f4:56:50:
         78:34:aa:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdTaUhjvn62r1yKCi75xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjUwNDEzMDkwMTI1WhcNMjUwNDE0MDkwMTI1WjAzMTEwLwYDVQQD
Eyg1YmVlMzhmYjYzZGY1NzA0ZDk2ZGI3NDEyYWE4MGFmMTE3Nzc4NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07n4AnptkBx6u1xK+DLWigcCINZE
zOMTdx5B///vRs4Gz8pJw5MuWEPeq6zCFd+BArDrHpek/2ydU4AKdUV9zheBbkbo
Wtw6VgL9DHfJvLlsGawbXYRtlwNAZTPorjE1ZPAmlRxX8ZWnWutPxZ6OasN50pj2
ZMuJY62rL+udzszreGxKsCMewYNFZtanOI1NNv0Fw/ewT3/w1ewZyAf7Oe1ZWFP0
CpF3mVZscPdfjvW/j32W9rWkYkzszoJfap7XfiguIdAcESbHdo7nOLlLmFGrYTo9
BkiiAeBKo1lynJK0qW4yydwXuUa8RvStRS3zym4tnE51YIxzvM3xJoMCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvuOPtj31cE2W23QSqoCvEXd4RcMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsTSQkZc
jPXARrKmoVCZU+6AlgKGorFVlQ8WyFGKfHHDWY4PFQctahw7aGqkeni6/+BFX5lb
RcsKqaEOXtY2YTPjC0z7GZWxdSxXipNBpCZiAgjkojQaL69/ePXBPv2hgNuXTjdc
k/K0swwVe+tTFsR4C/T6HE4vCXAxNe2zwai2skvsn0E1p3yUoZy4P3vgJVwYCI5e
pIbrrNEQizhirMLjCw5wOwQXQKnn3ltKqMWc1qPBpyfVwdEeNSP4PJZJfqEDEAqc
QyToWSFBXmS6JQRFj5RSeSVw3e/2singgAsqAzqdVdx3mKq4eQjrrk0OoUhyZysD
PNyM9FZQeDSqQw==
-----END CERTIFICATE-----