Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File:                     umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier:          T1sCC7hQbbGER27jTNvwQPzQOKUhHlPK5LlOvDTVakY=
Subject key identifier:   B4:D1:76:6E:6C:1A:0B:05:1E:C6:C6:BB:8C:24:59:4D:31:EB:A3:5F
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer:       /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial:       0195E00F8AFB501366836504EAC758F00314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number:          14D1
Signing time:             Sat 29 Mar 2025 04:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:09 +0000
Files and hashes:         1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
                          2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
                          3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
                          4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
                          5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
                          6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: xRw/taek43fx1BzRMxhIeQ1TGRhEn9bteGugetD7Ouo=)
                          7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:8a:fb:50:13:66:83:65:04:ea:c7:58:f0:03:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
        Validity
            Not Before: Mar 29 04:01:09 2025 GMT
            Not After : Mar 30 04:01:09 2025 GMT
        Subject: CN=b4d1766e6c1a0b051ec6c6bb8c24594d31eba35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:c8:b4:69:7e:48:6e:a3:e3:71:ee:c7:2f:
                    c3:c8:26:e4:89:61:1f:58:6b:03:6a:19:1c:e9:b3:
                    9e:b6:ce:53:4c:7f:8d:a8:87:4f:5d:38:b5:17:51:
                    0d:1b:e5:b9:72:32:da:6b:f0:0c:a9:ce:ae:10:be:
                    51:cc:b7:a4:0a:a1:82:05:0b:42:a6:ac:72:f1:62:
                    88:60:0a:99:46:a2:53:7c:96:bf:65:4d:6c:73:89:
                    36:b9:c4:c0:c8:98:f0:9c:d0:27:38:42:55:d2:1c:
                    de:de:8a:8f:64:ea:a8:87:78:b9:75:a6:05:32:b9:
                    90:07:20:e9:b6:b0:65:9d:43:1a:f2:3a:33:de:c6:
                    ad:ab:dc:a0:a9:fa:23:db:43:77:09:cf:ac:8d:a9:
                    5c:9d:4f:5d:45:ee:39:fa:d0:9b:cd:fb:7a:a6:b8:
                    ac:76:12:0e:c6:61:7e:7d:9d:09:dc:e2:22:4b:5b:
                    0a:6d:12:f5:40:3a:7b:a0:e2:6c:6e:4d:be:a8:df:
                    82:11:1e:1f:36:c5:43:43:20:a2:a6:3d:53:d5:73:
                    1d:ee:fe:6d:fd:0a:6d:6a:5f:48:ee:0c:df:71:be:
                    92:f7:5e:4c:2f:5f:ab:66:fb:3d:be:fe:e9:bc:03:
                    6c:d4:9b:f3:0c:97:d8:9c:53:82:3d:ad:bd:7c:de:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D1:76:6E:6C:1A:0B:05:1E:C6:C6:BB:8C:24:59:4D:31:EB:A3:5F
            X509v3 Authority Key Identifier:
                keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fa:28:71:a8:c6:9c:a6:d3:c8:d6:de:9c:3f:bb:c4:da:5f:
         09:b2:d5:d2:1f:a4:c7:1a:83:23:1e:73:1a:38:79:fa:73:6f:
         b8:b7:2b:99:98:b6:5c:a1:20:f3:80:83:ad:c1:bd:7c:e4:b2:
         c9:b9:a9:39:79:34:e0:10:97:06:01:de:11:1e:55:da:dc:ab:
         45:c9:9e:aa:0c:c5:0f:96:6c:53:c8:21:3a:4c:06:40:8f:72:
         b4:da:77:e8:a2:9f:05:73:f1:f7:e5:45:0d:6a:a6:b4:08:eb:
         34:89:78:78:68:ed:50:23:d2:f8:55:7d:0e:f2:83:9b:7c:d1:
         ad:d3:f7:d3:bc:14:d5:ff:dd:57:65:25:88:af:44:19:73:f6:
         d6:24:37:37:3e:ac:66:ca:ea:7c:a1:61:8f:17:58:ac:ad:e6:
         fd:97:81:04:b3:cd:4e:ff:0a:e0:10:59:2f:cd:6a:53:fe:bb:
         02:36:4f:f5:c1:b4:60:db:fc:06:60:b7:77:fa:49:eb:7b:bb:
         93:51:bf:38:3c:86:96:2b:4f:f0:63:49:bd:67:66:8b:b0:5e:
         fd:b1:21:ee:f6:a0:d3:cf:b5:da:96:fb:8a:e9:f7:68:44:87:
         3c:10:3d:57:72:3c:0e:4d:2b:2a:6e:0b:3a:13:8b:48:54:38:
         28:d3:3b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD4r7UBNmg2UE6sdY8AMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjBhNGQ4NzRkOTYwMWM4MTQyYzM1MmY4MGM1NmE0MzI3
NmNkNDcwHhcNMjUwMzI5MDQwMTA5WhcNMjUwMzMwMDQwMTA5WjAzMTEwLwYDVQQD
EyhiNGQxNzY2ZTZjMWEwYjA1MWVjNmM2YmI4YzI0NTk0ZDMxZWJhMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlLItGl+SG6j43Huxy/DyCbkiWEf
WGsDahkc6bOets5TTH+NqIdPXTi1F1ENG+W5cjLaa/AMqc6uEL5RzLekCqGCBQtC
pqxy8WKIYAqZRqJTfJa/ZU1sc4k2ucTAyJjwnNAnOEJV0hze3oqPZOqoh3i5daYF
MrmQByDptrBlnUMa8joz3satq9ygqfoj20N3Cc+sjalcnU9dRe45+tCbzft6pris
dhIOxmF+fZ0J3OIiS1sKbRL1QDp7oOJsbk2+qN+CER4fNsVDQyCipj1T1XMd7v5t
/Qptal9I7gzfcb6S915ML1+rZvs9vv7pvANs1JvzDJfYnFOCPa29fN7lWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTRdm5sGgsFHsbGu4wkWU0x66NfMB8GA1UdIwQY
MBaAFLpgpNh02WAcgULDUvgMVqQyds1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWIt
ZTVhMzc3OGJlM2FkLzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yOGNiNWMtMjk4Zi00ZDhiLTgxNWItZTVhMzc3OGJlM2Fk
LzEvdW1DazJIVFpZQnlCUXNOUy1BeFdwREoyelVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPoocajG
nKbTyNbenD+7xNpfCbLV0h+kxxqDIx5zGjh5+nNvuLcrmZi2XKEg84CDrcG9fOSy
ybmpOXk04BCXBgHeER5V2tyrRcmeqgzFD5ZsU8ghOkwGQI9ytNp36KKfBXPx9+VF
DWqmtAjrNIl4eGjtUCPS+FV9DvKDm3zRrdP307wU1f/dV2UliK9EGXP21iQ3Nz6s
ZsrqfKFhjxdYrK3m/ZeBBLPNTv8K4BBZL81qU/67AjZP9cG0YNv8BmC3d/pJ63u7
k1G/ODyGlitP8GNJvWdmi7Be/bEh7vag08+12pb7iun3aESHPBA9V3I8Dk0rKm4L
OhOLSFQ4KNM7Og==
-----END CERTIFICATE-----