Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File:                     Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier:          ckRVxoLsFu1ediQdIgP5m9MG10kvyx7u4Yj7GrOtooA=
Subject key identifier:   F5:20:AB:04:A9:1C:7F:20:5A:8A:B2:2F:EA:B0:8B:5D:45:64:E9:32
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer:       /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial:       0195E07D2D73030F2AE8F7EF1080484C66B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number:          14C8
Signing time:             Sat 29 Mar 2025 06:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:54 +0000
Files and hashes:         1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
                          2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
                          3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
                          4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: iWKlWyr0yylE6rqdMEhA5lz0T8vVFtjv2q+N3kVACFU=)
                          5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
                          6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
                          7: oCb6cpOKxQ3hs0Wd_KXRQQOGUOY.roa (hash: nIAMXpEpkh1hhboO/mB9TQEizUmas4RdDtRm1RU1TV8=)
                          8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
                          9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:2d:73:03:0f:2a:e8:f7:ef:10:80:48:4c:66:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
        Validity
            Not Before: Mar 29 06:00:54 2025 GMT
            Not After : Mar 30 06:00:54 2025 GMT
        Subject: CN=f520ab04a91c7f205a8ab22feab08b5d4564e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:7d:c1:47:0f:1a:40:47:f0:0a:e2:f0:e4:
                    ef:d5:6e:5a:a2:00:93:a0:7e:5d:57:93:c3:13:6f:
                    d6:97:13:6d:10:3c:7a:64:18:94:89:e3:fd:30:ea:
                    0d:99:3e:60:4c:80:f0:b9:50:b1:7c:da:33:a4:10:
                    54:37:38:d5:f5:0b:e4:a5:62:0b:b1:3f:db:ca:0f:
                    16:bc:57:55:06:5c:ee:e5:b6:c9:85:7f:b2:2a:94:
                    ea:39:8c:58:86:0e:bd:43:7b:ca:f2:b6:20:1d:93:
                    80:84:12:30:7e:db:47:75:dd:a5:39:15:ad:77:17:
                    ee:16:0d:a4:4d:fe:a3:18:b8:69:25:ca:be:df:eb:
                    55:ce:0e:b1:35:a8:50:eb:f6:9d:0d:a8:a2:f5:b1:
                    11:8e:26:cc:02:fc:a4:18:80:4f:2e:bf:3e:65:d5:
                    51:56:5d:6b:73:5c:26:fb:85:8d:ff:1d:7e:a9:24:
                    e1:fe:d3:7b:ac:ad:55:9a:62:a3:0f:31:1a:f2:53:
                    e2:e6:ab:9e:8f:cf:0a:0b:9d:cc:a5:49:3e:d4:31:
                    fc:25:a3:5b:7b:78:2f:07:df:ae:62:e5:3c:bc:e2:
                    a4:97:99:88:18:23:0b:63:06:e3:de:d4:d2:40:ed:
                    9a:b0:24:a2:d7:53:6c:e9:d3:df:17:15:90:48:85:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:AB:04:A9:1C:7F:20:5A:8A:B2:2F:EA:B0:8B:5D:45:64:E9:32
            X509v3 Authority Key Identifier:
                keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:dc:77:79:28:0b:77:17:23:60:60:7a:ed:47:3b:03:ab:
         2b:09:6e:09:d9:bb:e9:98:45:57:90:aa:ec:ea:97:ff:64:0a:
         9a:53:ec:34:67:ac:e6:52:a6:cb:cd:f4:4b:a6:df:75:2a:e1:
         11:31:1f:9e:6e:fe:aa:59:d6:ad:a1:36:dd:3b:a9:fd:6d:59:
         80:b1:e7:a7:ac:0b:93:63:e1:c3:6f:13:57:3f:a7:79:ff:d6:
         37:d0:04:c7:1c:3b:66:ab:38:99:4a:3f:07:29:21:43:36:0f:
         64:3e:98:b4:6a:e7:74:48:47:4b:d9:52:31:f4:e5:e9:4e:01:
         58:e0:a3:50:87:25:31:0a:4e:fd:c1:61:5c:3f:3c:c9:88:1a:
         10:d5:72:6d:7f:b0:2b:87:32:f3:57:d6:34:f7:5f:9a:4f:c3:
         a7:7b:dd:ba:3b:4c:78:47:86:0a:27:13:48:74:0a:6d:3e:3e:
         45:7f:8c:28:46:8e:c7:53:be:f7:27:ab:04:54:77:2c:aa:6f:
         0b:75:5f:e8:27:be:e1:0a:31:6a:bb:ff:7d:d4:d6:44:f0:47:
         22:32:b4:24:6f:03:24:bc:82:e0:ef:20:c1:3b:fc:3d:6d:94:
         fb:fb:7e:16:b2:11:b5:5a:d3:a4:45:be:53:b5:8a:fb:c3:79:
         74:52:b7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfS1zAw8q6PfvEIBITGa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjUwMzI5MDYwMDU0WhcNMjUwMzMwMDYwMDU0WjAzMTEwLwYDVQQD
EyhmNTIwYWIwNGE5MWM3ZjIwNWE4YWIyMmZlYWIwOGI1ZDQ1NjRlOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pd9wUcPGkBH8Ari8OTv1W5aogCT
oH5dV5PDE2/WlxNtEDx6ZBiUieP9MOoNmT5gTIDwuVCxfNozpBBUNzjV9QvkpWIL
sT/byg8WvFdVBlzu5bbJhX+yKpTqOYxYhg69Q3vK8rYgHZOAhBIwfttHdd2lORWt
dxfuFg2kTf6jGLhpJcq+3+tVzg6xNahQ6/adDaii9bERjibMAvykGIBPLr8+ZdVR
Vl1rc1wm+4WN/x1+qSTh/tN7rK1VmmKjDzEa8lPi5quej88KC53MpUk+1DH8JaNb
e3gvB9+uYuU8vOKkl5mIGCMLYwbj3tTSQO2asCSi11Ns6dPfFxWQSIX5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUgqwSpHH8gWoqyL+qwi11FZOkyMB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXybcd3ko
C3cXI2Bgeu1HOwOrKwluCdm76ZhFV5Cq7OqX/2QKmlPsNGes5lKmy830S6bfdSrh
ETEfnm7+qlnWraE23Tup/W1ZgLHnp6wLk2Phw28TVz+nef/WN9AExxw7Zqs4mUo/
BykhQzYPZD6YtGrndEhHS9lSMfTl6U4BWOCjUIclMQpO/cFhXD88yYgaENVybX+w
K4cy81fWNPdfmk/Dp3vdujtMeEeGCicTSHQKbT4+RX+MKEaOx1O+9yerBFR3LKpv
C3Vf6Ce+4Qoxarv/fdTWRPBHIjK0JG8DJLyC4O8gwTv8PW2U+/t+FrIRtVrTpEW+
U7WK+8N5dFK3ng==
-----END CERTIFICATE-----