Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          TscyvCKTfBsswbWVOBhibqodxWrBDFfCimJ8AhXkgqA=
Subject key identifier:   62:D7:18:C3:EB:56:B7:3D:67:BB:9B:77:9C:5F:E6:1E:0D:88:73:B8
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       0195E1222BA9ED72BDF0E922930964257493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          113D
Signing time:             Sat 29 Mar 2025 09:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:07 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 99RmrfvKD21+YSY+HnNJEco9D6pvgvXv/NgTDXX4K+U=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:2b:a9:ed:72:bd:f0:e9:22:93:09:64:25:74:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Mar 29 09:01:07 2025 GMT
            Not After : Mar 30 09:01:07 2025 GMT
        Subject: CN=62d718c3eb56b73d67bb9b779c5fe61e0d8873b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:87:37:c2:35:d1:f1:e3:6e:03:35:ac:ec:
                    2c:54:b0:42:14:76:ca:24:07:d9:4a:d7:54:a7:75:
                    a5:6d:67:10:3c:d5:70:28:2b:cf:22:6a:d8:ab:6f:
                    7a:52:a8:10:3e:a9:92:07:ae:33:1f:7a:9a:ef:45:
                    11:88:77:ee:fb:95:68:fa:a7:83:0f:02:c9:e1:bb:
                    c9:06:60:f4:82:e3:e0:3f:99:0c:78:55:54:54:65:
                    b3:eb:4c:67:fc:ee:27:35:c4:71:ac:11:7b:a1:9b:
                    73:fe:c9:b0:42:ea:2e:ed:1e:99:ac:9b:e2:9b:58:
                    b3:0f:bd:9e:13:ba:67:04:f6:e0:78:14:21:dc:0c:
                    9f:1f:b8:c2:a2:56:77:2b:43:5c:03:81:e7:37:7f:
                    8f:69:70:82:35:8b:e9:a3:21:8b:cf:ce:35:fe:40:
                    37:6b:4b:32:04:c8:b3:b9:fe:a8:7c:8c:90:0c:90:
                    e3:34:fd:43:d4:c0:d3:fc:0a:66:22:0b:bd:0d:4d:
                    66:53:49:a3:41:92:3e:be:64:ab:ef:99:7d:09:aa:
                    4a:ad:4f:e7:0b:2f:16:8b:71:74:d9:6b:29:a8:e7:
                    e9:f2:4e:16:af:d0:60:91:ba:3b:ad:8d:64:13:46:
                    0e:cf:36:d8:5f:8b:1c:20:97:d7:95:ec:38:78:8f:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:18:C3:EB:56:B7:3D:67:BB:9B:77:9C:5F:E6:1E:0D:88:73:B8
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:df:3a:92:c3:6a:50:99:56:db:67:a1:e7:aa:9d:80:33:
         37:2c:3e:9c:22:82:db:63:c8:1c:23:54:a8:f6:9e:f8:19:d4:
         b6:fb:4a:ee:30:05:d5:a5:4e:fd:f2:20:df:ce:4d:ee:0a:7a:
         df:fb:0c:26:b9:19:f9:47:15:f3:f7:c6:f4:96:6d:06:73:6d:
         e8:fc:4e:84:5e:f9:22:9c:6e:f1:cb:6d:5d:0d:b5:bb:6c:3b:
         33:09:63:fe:98:e4:41:cc:59:25:d0:17:fc:5c:ca:ec:52:52:
         a3:4c:77:bb:75:bb:22:ba:d8:dd:38:fc:e8:db:bb:89:51:91:
         37:25:50:34:ba:fa:66:6e:0b:a0:27:ae:a7:f8:b4:ed:14:06:
         9b:ba:5c:b8:3a:25:27:22:73:f3:a0:10:d0:af:88:c6:8f:a1:
         1a:6c:36:fb:f7:48:33:84:dc:e4:84:0f:a2:03:af:d7:8c:9b:
         6a:67:34:58:df:e7:f3:f1:9a:0b:51:0e:9d:26:8f:8f:89:fd:
         03:6f:be:0c:dc:1c:4f:6e:19:08:68:9c:c1:8d:a4:8d:02:88:
         eb:1d:dc:55:46:78:c5:d2:de:50:d7:02:84:97:ff:3a:d0:a9:
         36:07:0e:26:2c:31:0a:00:3b:36:3e:4c:d3:d1:25:36:82:4a:
         4b:ad:21:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIiup7XK98OkikwlkJXSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz
MmVhOWIwHhcNMjUwMzI5MDkwMTA3WhcNMjUwMzMwMDkwMTA3WjAzMTEwLwYDVQQD
Eyg2MmQ3MThjM2ViNTZiNzNkNjdiYjliNzc5YzVmZTYxZTBkODg3M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eSHN8I10fHjbgM1rOwsVLBCFHbK
JAfZStdUp3WlbWcQPNVwKCvPImrYq296UqgQPqmSB64zH3qa70URiHfu+5Vo+qeD
DwLJ4bvJBmD0guPgP5kMeFVUVGWz60xn/O4nNcRxrBF7oZtz/smwQuou7R6ZrJvi
m1izD72eE7pnBPbgeBQh3AyfH7jColZ3K0NcA4HnN3+PaXCCNYvpoyGLz841/kA3
a0syBMizuf6ofIyQDJDjNP1D1MDT/ApmIgu9DU1mU0mjQZI+vmSr75l9CapKrU/n
Cy8Wi3F02WspqOfp8k4Wr9Bgkbo7rY1kE0YOzzbYX4scIJfXlew4eI/+3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLXGMPrVrc9Z7ubd5xf5h4NiHO4MB8GA1UdIwQY
MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfzfOpLD
alCZVttnoeeqnYAzNyw+nCKC22PIHCNUqPae+BnUtvtK7jAF1aVO/fIg385N7gp6
3/sMJrkZ+UcV8/fG9JZtBnNt6PxOhF75Ipxu8cttXQ21u2w7Mwlj/pjkQcxZJdAX
/FzK7FJSo0x3u3W7IrrY3Tj86Nu7iVGRNyVQNLr6Zm4LoCeup/i07RQGm7pcuDol
JyJz86AQ0K+Ixo+hGmw2+/dIM4Tc5IQPogOv14ybamc0WN/n8/GaC1EOnSaPj4n9
A2++DNwcT24ZCGicwY2kjQKI6x3cVUZ4xdLeUNcChJf/OtCpNgcOJiwxCgA7Nj5M
09ElNoJKS60hPg==
-----END CERTIFICATE-----