Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File:                     _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier:          aZyJM1BdnlMOAbrphRtZGhoNEu/aaL0Lxi7NyXNDSVU=
Subject key identifier:   D4:ED:C4:26:41:53:BE:3F:93:4C:63:78:A3:58:2A:70:04:64:39:EA
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       0195E00FCED097729AA8EE3BD80C6E3574EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number:          11D3
Signing time:             Sat 29 Mar 2025 04:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:27 +0000
Files and hashes:         1: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (hash: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=)
                          2: Anmto90Z9g3pcSYFUNggSKUfX38.roa (hash: 3ls1WfKkLLzWNGOmnZTjqfHi7SxgoXvBGgCXTO5fmJg=)
                          3: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (hash: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=)
                          4: MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa (hash: 8EC847pBFpPj5yw0TCwh/bnYc5VOWtL7236chIzY3r4=)
                          5: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: DGJZjqP0FfE0toWbBjR6lBJN51ciTTXm7j2RLkWf/V4=)
                          6: kITElgml7RZxWNr4eKfvM1E5VyM.roa (hash: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=)
                          7: koZdUg9eyaaGc1g9ur5UXBYavrc.roa (hash: GaEJ7CaaD7TlL7BrSl+zzHjmdcf3ad/46vcHTxYsYGE=)
                          8: zsj7ZU7c27fACndp52_vAKfImfU.roa (hash: VK3pf67Xdj80z42M9vc+h8UO7pmF3OLN63Yl3j4PoPw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:ce:d0:97:72:9a:a8:ee:3b:d8:0c:6e:35:74:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Mar 29 04:01:27 2025 GMT
            Not After : Mar 30 04:01:27 2025 GMT
        Subject: CN=d4edc4264153be3f934c6378a3582a70046439ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:ff:14:c5:0d:2a:59:4a:6d:65:80:cf:45:
                    94:74:a4:3c:0c:b1:75:99:01:2a:4b:c8:ae:50:85:
                    4c:b2:8f:c7:f0:77:4c:aa:87:2f:03:60:88:1f:f0:
                    f8:3e:24:0b:c8:45:b9:59:46:71:28:4d:4e:8b:f5:
                    66:53:4a:a9:eb:ad:5d:d5:0f:30:15:8d:4e:44:5f:
                    68:8f:79:78:2d:2e:d3:c3:a0:dc:2a:f7:53:3c:d9:
                    69:5f:47:6e:6f:a0:50:00:83:d3:84:6f:31:52:0b:
                    59:c2:91:12:69:75:fe:29:82:e3:6d:ab:f0:95:b2:
                    3f:23:01:81:bd:03:2b:b3:d8:01:84:c5:e9:cd:ed:
                    26:6d:9c:4c:56:57:6a:87:5d:0d:10:75:94:ff:e3:
                    08:e0:7e:f0:fd:1d:61:4d:b8:96:57:72:dd:5b:06:
                    7a:63:9b:af:b5:11:72:16:06:79:c2:c7:59:d5:7b:
                    53:fd:88:8e:59:6a:9b:be:43:b3:02:a8:9a:f0:1a:
                    67:e9:84:75:f0:08:c5:7a:a4:fb:e1:d8:21:98:07:
                    c5:f3:a4:25:7b:93:07:b9:e5:89:29:0b:6a:70:10:
                    f7:1c:c4:c9:59:49:22:fb:2e:f5:cc:6c:1e:ef:1e:
                    60:8d:6e:f5:48:fb:27:cf:68:aa:0c:95:1e:bf:91:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:ED:C4:26:41:53:BE:3F:93:4C:63:78:A3:58:2A:70:04:64:39:EA
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:d9:6f:b2:40:cb:96:72:00:ff:b2:1e:25:0a:2f:84:34:
         26:54:e9:0f:dd:4c:78:fc:b5:2d:a2:15:c6:fd:7f:98:b4:90:
         c8:63:99:e7:ee:b5:08:13:c0:f3:2d:83:54:2d:9a:37:2b:a3:
         f1:6a:77:58:07:ab:f8:e8:4a:c4:bc:f7:31:4f:f7:7f:66:e4:
         df:8c:bc:84:e7:3b:67:b9:39:69:65:ee:71:f2:ee:90:f2:df:
         8f:70:8a:01:f2:5d:42:44:e0:b7:65:ce:20:a7:27:4c:d4:34:
         a6:ea:ce:11:09:6b:6f:e7:e6:72:18:5d:7e:0a:e7:75:b7:e5:
         85:ac:19:33:1b:38:87:3c:93:7d:e7:e4:d5:36:a3:b2:ef:14:
         d4:7d:5a:f8:dd:1e:04:27:bb:b1:7d:bd:bf:cc:2e:53:e7:8d:
         6a:35:28:65:ef:43:b6:cb:45:11:fb:8c:fd:56:77:94:d7:05:
         e6:98:47:c9:81:1c:2c:45:d6:9c:38:ae:8e:87:d5:52:57:c8:
         ba:62:37:e3:b3:07:79:0b:55:2a:f6:40:ef:bd:1b:96:62:ab:
         2e:ec:9b:ad:23:35:7e:a7:2e:fc:d1:5b:e4:b0:c7:7f:2a:b7:
         a4:c9:21:3c:9a:75:ac:97:43:05:a9:0f:f3:b7:e8:0c:43:3e:
         77:19:57:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD87Ql3KaqO472AxuNXTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjUwMzI5MDQwMTI3WhcNMjUwMzMwMDQwMTI3WjAzMTEwLwYDVQQD
EyhkNGVkYzQyNjQxNTNiZTNmOTM0YzYzNzhhMzU4MmE3MDA0NjQzOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SH/FMUNKllKbWWAz0WUdKQ8DLF1
mQEqS8iuUIVMso/H8HdMqocvA2CIH/D4PiQLyEW5WUZxKE1Oi/VmU0qp661d1Q8w
FY1ORF9oj3l4LS7Tw6DcKvdTPNlpX0dub6BQAIPThG8xUgtZwpESaXX+KYLjbavw
lbI/IwGBvQMrs9gBhMXpze0mbZxMVldqh10NEHWU/+MI4H7w/R1hTbiWV3LdWwZ6
Y5uvtRFyFgZ5wsdZ1XtT/YiOWWqbvkOzAqia8Bpn6YR18AjFeqT74dghmAfF86Ql
e5MHueWJKQtqcBD3HMTJWUki+y71zGwe7x5gjW71SPsnz2iqDJUev5FIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTtxCZBU74/k0xjeKNYKnAEZDnqMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHizZb7JA
y5ZyAP+yHiUKL4Q0JlTpD91MePy1LaIVxv1/mLSQyGOZ5+61CBPA8y2DVC2aNyuj
8Wp3WAer+OhKxLz3MU/3f2bk34y8hOc7Z7k5aWXucfLukPLfj3CKAfJdQkTgt2XO
IKcnTNQ0purOEQlrb+fmchhdfgrndbflhawZMxs4hzyTfefk1Tajsu8U1H1a+N0e
BCe7sX29v8wuU+eNajUoZe9DtstFEfuM/VZ3lNcF5phHyYEcLEXWnDiujofVUlfI
umI347MHeQtVKvZA770blmKrLuybrSM1fqcu/NFb5LDHfyq3pMkhPJp1rJdDBakP
87foDEM+dxlX0g==
-----END CERTIFICATE-----