Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File:                     CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier:          BAvssO2EhVkvYuAzj3dIMoCB6mv5ywpTTwEP699WO0o=
Subject key identifier:   22:58:DC:E1:04:A2:D7:5F:DF:3E:0F:24:7F:24:C4:2A:91:01:D0:B8
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer:       /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial:       0195E0B4774818ED6D0D236D1DD7C3C2F4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number:          145E
Signing time:             Sat 29 Mar 2025 07:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:18 +0000
Files and hashes:         1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=)
                          2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: XTf2RaqaS0+aKo/VzEyF/400alZFrRCh/9ZdIia3HEk=)
                          3: cIX-WWQe1eTYBa5AEDfKv3ZFbSs.roa (hash: KXI7i+vv4GJ48vExO8crdEraeejXsQsIm7BOAxvY6pM=)
                          4: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=)
                          5: pkrI6iaUdda-z9WYMFjdcxpmXjo.roa (hash: hMCs1gjsYAVaOoAjArkJ6N1TgykfFMKnI+aiOTGukGc=)
                          6: tV6sObvzgTfPgUJ_zmLWZJP23Js.roa (hash: ruAGmOYz2wd7CtdLjtd2pZCz/+RLCcgBY+LOgFhOP3c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:77:48:18:ed:6d:0d:23:6d:1d:d7:c3:c2:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
        Validity
            Not Before: Mar 29 07:01:18 2025 GMT
            Not After : Mar 30 07:01:18 2025 GMT
        Subject: CN=2258dce104a2d75fdf3e0f247f24c42a9101d0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:f1:3b:bc:58:54:b4:1a:7c:8d:26:41:83:
                    54:4d:61:41:e7:50:49:b3:97:cb:21:00:04:99:57:
                    cd:dc:56:8b:f7:42:86:de:ca:9b:d4:1b:d9:ba:ec:
                    a3:98:1b:3e:55:48:5e:da:4c:cd:5b:bd:0c:66:d6:
                    ff:52:b5:73:42:12:d5:17:df:7b:98:55:c3:30:eb:
                    d3:ee:5e:fa:f5:e2:70:76:f8:e5:be:a0:97:73:7b:
                    a4:32:fc:5b:32:20:2a:74:51:03:f5:ca:60:90:80:
                    59:68:0c:7a:c4:38:86:c8:15:e3:e4:4b:5d:b0:9c:
                    e0:90:1b:54:c6:02:a3:66:37:e2:9e:23:e4:d3:bf:
                    d6:ef:99:25:ac:54:2c:42:25:11:ad:e6:b0:43:50:
                    f8:02:6f:38:73:cc:50:aa:a9:52:1a:e9:d5:4e:02:
                    cc:8a:e2:fe:46:03:22:e2:e2:ef:89:24:70:a3:ce:
                    71:eb:fb:ad:53:57:33:93:a1:00:0d:47:ac:d2:39:
                    d7:91:43:08:02:9e:c5:a7:99:23:c1:4a:d7:3f:d9:
                    45:3c:78:d6:04:02:b4:87:52:40:ef:a6:c2:c5:5e:
                    f6:20:81:58:c4:99:2f:24:38:bd:f2:bd:a8:d2:e7:
                    7e:de:83:de:dc:f6:f2:54:12:cf:7b:b6:03:0e:14:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:DC:E1:04:A2:D7:5F:DF:3E:0F:24:7F:24:C4:2A:91:01:D0:B8
            X509v3 Authority Key Identifier:
                keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:52:46:4e:ac:2f:6b:3b:f7:1b:3f:96:13:84:ef:04:26:29:
         b2:87:2c:1b:57:a0:31:cb:f5:75:ca:7a:f0:cb:d9:a2:ed:92:
         26:fb:07:8b:00:c0:7e:49:4a:c6:c0:18:38:a3:7a:34:1a:5e:
         85:ca:99:ac:69:98:87:6f:10:f7:c7:60:04:29:e3:02:91:5d:
         00:73:d3:14:bd:7e:55:db:2d:bc:ce:59:84:ee:ab:72:39:07:
         6e:8e:8c:bf:7c:a4:ea:bb:d7:dc:21:ce:2b:cf:0a:09:8e:7f:
         eb:e8:3c:eb:b5:93:6c:50:b6:61:38:07:1a:1b:a5:81:c5:cd:
         30:75:20:a1:b2:5b:f1:1d:e2:d0:26:e8:48:7c:c8:1f:01:5b:
         66:28:0c:9a:4b:83:bf:95:6d:b1:68:43:ee:f7:97:a1:cb:2b:
         17:33:a1:7f:ac:ac:d0:ac:b5:8d:c5:91:27:f2:80:0e:0b:eb:
         4f:dc:54:dd:62:63:13:73:08:5b:8f:9e:d6:ec:f9:9a:02:fb:
         b5:fd:19:5c:f0:4a:5f:2c:d6:c0:2e:13:33:44:a9:94:b3:df:
         39:9b:d1:c3:78:20:fe:9b:b2:a4:da:72:a8:9f:a3:18:48:25:
         f8:6a:d4:ec:50:c8:94:18:24:77:80:1f:d2:01:4f:db:7e:98:
         cc:16:17:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtHdIGO1tDSNtHdfDwvTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2
M2MwZGYwHhcNMjUwMzI5MDcwMTE4WhcNMjUwMzMwMDcwMTE4WjAzMTEwLwYDVQQD
EygyMjU4ZGNlMTA0YTJkNzVmZGYzZTBmMjQ3ZjI0YzQyYTkxMDFkMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc/xO7xYVLQafI0mQYNUTWFB51BJ
s5fLIQAEmVfN3FaL90KG3sqb1BvZuuyjmBs+VUhe2kzNW70MZtb/UrVzQhLVF997
mFXDMOvT7l769eJwdvjlvqCXc3ukMvxbMiAqdFED9cpgkIBZaAx6xDiGyBXj5Etd
sJzgkBtUxgKjZjfiniPk07/W75klrFQsQiURreawQ1D4Am84c8xQqqlSGunVTgLM
iuL+RgMi4uLviSRwo85x6/utU1czk6EADUes0jnXkUMIAp7Fp5kjwUrXP9lFPHjW
BAK0h1JA76bCxV72IIFYxJkvJDi98r2o0ud+3oPe3PbyVBLPe7YDDhTznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJY3OEEotdf3z4PJH8kxCqRAdC4MB8GA1UdIwQY
MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt
YTJlMjRmOTgwYjNmLzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm
LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlJGTqwv
azv3Gz+WE4TvBCYpsocsG1egMcv1dcp68MvZou2SJvsHiwDAfklKxsAYOKN6NBpe
hcqZrGmYh28Q98dgBCnjApFdAHPTFL1+VdstvM5ZhO6rcjkHbo6Mv3yk6rvX3CHO
K88KCY5/6+g867WTbFC2YTgHGhulgcXNMHUgobJb8R3i0CboSHzIHwFbZigMmkuD
v5VtsWhD7veXocsrFzOhf6ys0Ky1jcWRJ/KADgvrT9xU3WJjE3MIW4+e1uz5mgL7
tf0ZXPBKXyzWwC4TM0SplLPfOZvRw3gg/puypNpyqJ+jGEgl+GrU7FDIlBgkd4Af
0gFP236YzBYXcQ==
-----END CERTIFICATE-----