Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          mY2nEwe72Rs3BZ9OV/xEv/7vaFR0pI/Gal3pYPItu94=
Subject key identifier:   7B:C2:3C:4B:39:63:54:01:B3:F6:1D:EF:93:46:8F:91:15:79:64:52
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       0195E00F6965E088BC84D504443DD8EA4797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          108A
Signing time:             Sat 29 Mar 2025 04:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:01 +0000
Files and hashes:         1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Gx9iqYofwMOEKCf3dHTei1VcufgX7kkDpF5QA72szy0=)
                          3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
                          4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
                          5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
                          6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
                          7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
                          8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:69:65:e0:88:bc:84:d5:04:44:3d:d8:ea:47:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Mar 29 04:01:01 2025 GMT
            Not After : Mar 30 04:01:01 2025 GMT
        Subject: CN=7bc23c4b39635401b3f61def93468f9115796452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:5c:ec:4c:0f:76:18:7a:e9:b1:36:1d:73:
                    00:3e:08:98:52:bb:fb:10:1d:4f:1f:3a:72:4c:0c:
                    a7:cf:83:db:06:84:4c:47:d1:9c:62:f7:e1:ce:71:
                    38:be:7d:4c:92:2a:24:3b:ff:c7:11:25:a0:35:1c:
                    88:00:a9:f5:6e:26:d9:c6:79:02:7a:7a:4e:c9:9e:
                    51:0b:1a:e8:53:ed:24:fa:72:38:5f:d4:8a:4f:dd:
                    fd:ac:a8:0b:bb:7e:78:a4:8d:51:a3:e4:e3:56:5c:
                    79:5f:29:a0:9c:05:41:32:6c:d3:25:30:a4:07:9a:
                    7b:f6:c6:e2:5b:14:9f:8c:82:c5:a7:cd:df:8d:04:
                    32:f8:c2:3c:80:5c:f2:91:99:45:e2:c3:62:23:26:
                    40:bd:b2:b4:87:14:64:a8:69:4e:bb:84:3d:cc:72:
                    19:2b:81:84:c7:97:51:56:77:9d:21:0e:64:28:a4:
                    e7:55:c9:0e:6a:55:64:d9:7a:19:95:e7:9e:bf:ca:
                    4d:1f:53:b8:73:14:ea:a7:89:7f:3b:cf:97:55:47:
                    59:40:3c:72:c4:0a:69:ca:e1:78:f6:02:16:af:16:
                    c1:3e:c2:93:69:cb:79:20:c8:06:60:95:a3:bf:ca:
                    91:2f:17:36:ca:13:df:c1:03:3c:ed:b9:cb:e6:c8:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:3C:4B:39:63:54:01:B3:F6:1D:EF:93:46:8F:91:15:79:64:52
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:bb:f2:bb:1a:7f:2a:e0:bf:77:e3:6e:7b:58:1b:c7:a0:b6:
         04:f9:91:bb:64:db:68:6a:d0:35:93:40:3d:86:18:b3:68:30:
         e4:09:0d:c2:a1:4b:a1:f4:f8:e9:b6:57:4f:5d:7a:aa:23:86:
         38:26:11:9f:2f:5e:3d:e9:48:15:5b:e5:3e:b7:e7:44:4d:ff:
         9b:bc:57:ec:65:c9:52:3a:ba:c3:07:97:06:f4:61:97:53:94:
         eb:6c:c2:b2:f1:89:d9:9f:a4:38:6c:00:31:5d:40:f4:9b:d5:
         9e:95:0d:ab:f9:d6:b2:a1:37:d5:45:d0:04:d9:e6:3a:94:1d:
         8b:78:91:0b:16:00:17:07:f9:9f:60:c2:e3:a4:3d:7b:71:39:
         1d:2a:39:43:a6:f1:5b:da:ab:92:19:d2:33:9a:ff:a0:b8:a4:
         15:80:7c:0c:f1:1f:d5:56:d9:46:1f:af:52:20:f8:6f:71:0f:
         74:fa:fb:1b:3b:58:02:23:6b:2d:a4:f3:63:52:5c:b6:37:b5:
         5e:30:07:66:c7:a7:fa:3e:59:9c:f1:56:24:cc:3f:90:e0:9b:
         8d:4d:b5:06:df:22:42:bc:25:62:0d:04:f7:87:93:24:2b:73:
         91:05:73:60:aa:6c:7b:1d:16:b5:d3:ab:09:41:5f:b2:5f:26:
         cb:1e:6c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD2ll4Ii8hNUERD3Y6keXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjUwMzI5MDQwMTAxWhcNMjUwMzMwMDQwMTAxWjAzMTEwLwYDVQQD
Eyg3YmMyM2M0YjM5NjM1NDAxYjNmNjFkZWY5MzQ2OGY5MTE1Nzk2NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCVc7EwPdhh66bE2HXMAPgiYUrv7
EB1PHzpyTAynz4PbBoRMR9GcYvfhznE4vn1MkiokO//HESWgNRyIAKn1bibZxnkC
enpOyZ5RCxroU+0k+nI4X9SKT939rKgLu354pI1Ro+TjVlx5XymgnAVBMmzTJTCk
B5p79sbiWxSfjILFp83fjQQy+MI8gFzykZlF4sNiIyZAvbK0hxRkqGlOu4Q9zHIZ
K4GEx5dRVnedIQ5kKKTnVckOalVk2XoZleeev8pNH1O4cxTqp4l/O8+XVUdZQDxy
xAppyuF49gIWrxbBPsKTact5IMgGYJWjv8qRLxc2yhPfwQM87bnL5siRZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvCPEs5Y1QBs/Yd75NGj5EVeWRSMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07vyuxp/
KuC/d+Nue1gbx6C2BPmRu2TbaGrQNZNAPYYYs2gw5AkNwqFLofT46bZXT116qiOG
OCYRny9ePelIFVvlPrfnRE3/m7xX7GXJUjq6wweXBvRhl1OU62zCsvGJ2Z+kOGwA
MV1A9JvVnpUNq/nWsqE31UXQBNnmOpQdi3iRCxYAFwf5n2DC46Q9e3E5HSo5Q6bx
W9qrkhnSM5r/oLikFYB8DPEf1VbZRh+vUiD4b3EPdPr7GztYAiNrLaTzY1Jctje1
XjAHZsen+j5ZnPFWJMw/kOCbjU21Bt8iQrwlYg0E94eTJCtzkQVzYKpsex0WtdOr
CUFfsl8myx5szA==
-----END CERTIFICATE-----