Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File:                     a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier:          lVbaNzT9ijS24fwARI3KN6eN6dTuNxe+M5RrRzZoB24=
Subject key identifier:   D6:53:97:23:9E:14:1B:C0:30:5E:D8:D7:3C:FD:FD:CB:B9:C2:EE:AE
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer:       /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial:       0195E0EB3DA1EA9284F3410E41532CF6FFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number:          1496
Signing time:             Sat 29 Mar 2025 08:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:07 +0000
Files and hashes:         1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=)
                          2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=)
                          3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=)
                          4: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (hash: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=)
                          5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=)
                          6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=)
                          7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=)
                          8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=)
                          9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: /trD22L6YGN4+KG8Kz8pnsszO+5/SDWj6SNhnUMnmjM=)
                          10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=)
                          11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=)
                          12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=)
                          13: l8zjw_dQH-5IvDX9HiKIRUpeGKI.roa (hash: +s8gDZx10WhNyZs9vlnsxeBJZaCG2xbon0ENNsnrO4w=)
                          14: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:3d:a1:ea:92:84:f3:41:0e:41:53:2c:f6:ff:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
        Validity
            Not Before: Mar 29 08:01:07 2025 GMT
            Not After : Mar 30 08:01:07 2025 GMT
        Subject: CN=d65397239e141bc0305ed8d73cfdfdcbb9c2eeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:5e:37:03:c9:01:2b:c5:99:2e:4a:24:88:
                    24:19:66:1a:ca:56:2d:18:be:0e:b8:f3:b7:41:0f:
                    b9:59:2c:8b:5a:26:5a:fe:b9:dd:55:c8:68:2c:51:
                    8b:c1:5c:1b:36:2f:ca:f2:56:87:4c:a0:93:61:ee:
                    bb:b7:3a:a7:79:d9:13:bf:c5:7d:c6:d7:79:1a:b9:
                    4a:38:1d:ea:a6:99:ef:17:d6:60:22:12:e0:a9:c8:
                    6d:60:5a:6f:dc:42:46:55:a3:38:0f:4b:23:cb:ce:
                    34:dc:09:0f:85:26:c3:6c:99:1e:62:69:97:20:8a:
                    62:67:ea:40:9e:73:a9:79:9a:c6:9c:eb:25:d0:c0:
                    62:7e:26:47:19:b2:93:e1:bd:28:2b:2f:81:55:dc:
                    25:77:bc:c7:3a:58:ca:3e:65:1b:65:43:85:6a:3f:
                    37:9d:41:b7:a3:27:fe:ef:96:48:0b:4a:a7:44:05:
                    f6:ff:e4:22:86:80:fd:49:05:4d:89:53:99:62:89:
                    63:49:d4:ec:ea:d6:fa:2e:61:ab:60:d9:30:c4:6e:
                    1a:70:80:39:c0:40:5b:d0:1e:7a:fa:f5:84:67:4a:
                    b4:ed:79:9c:d3:0a:57:a2:01:c1:26:81:b1:ad:ec:
                    5d:0c:b3:a8:d9:0f:6d:49:3e:f1:4d:89:33:9e:52:
                    6e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:97:23:9E:14:1B:C0:30:5E:D8:D7:3C:FD:FD:CB:B9:C2:EE:AE
            X509v3 Authority Key Identifier:
                keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:88:a1:68:36:dd:41:28:fa:ac:25:d3:48:ce:f0:7e:18:
         13:1d:62:fb:8a:52:57:e4:f4:8c:bb:fd:08:e5:fc:99:cd:e2:
         3c:6a:1a:4f:d1:7e:6f:ff:0d:9d:f7:3e:7e:0d:6f:63:c5:a2:
         81:8f:e3:cc:cb:68:89:63:ad:f6:d6:ce:71:01:2e:af:e9:a6:
         6c:5d:1f:b8:cd:0e:0d:51:b4:26:33:1a:71:73:ea:89:8b:a1:
         c4:33:ef:b9:74:54:a5:be:b5:9d:34:2b:87:90:84:ab:91:a0:
         cf:73:52:b6:e6:14:60:c8:81:df:fc:04:21:05:4c:48:f4:bb:
         e9:a9:a3:3b:eb:95:b6:4f:68:0e:5f:3d:54:0e:a4:c2:ff:5e:
         c1:a1:0b:25:75:16:a6:88:e2:67:41:e4:f5:07:79:2c:0a:b8:
         81:7b:8b:27:b5:8a:19:7a:d9:27:75:c6:2d:14:e3:fd:5f:eb:
         59:e3:9a:88:e7:47:e7:b2:16:94:5e:43:3d:f9:49:06:b8:48:
         05:65:0d:d9:9c:76:20:8a:0c:b0:ae:48:bf:ff:24:7a:04:10:
         e2:c3:48:68:77:49:9e:aa:14:46:10:f0:ed:34:39:1e:43:4f:
         ae:80:07:dd:a8:90:92:c3:5c:27:74:6e:7f:4e:7c:7d:dd:40:
         f8:ad:67:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6z2h6pKE80EOQVMs9v/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjUwMzI5MDgwMTA3WhcNMjUwMzMwMDgwMTA3WjAzMTEwLwYDVQQD
EyhkNjUzOTcyMzllMTQxYmMwMzA1ZWQ4ZDczY2ZkZmRjYmI5YzJlZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDNeNwPJASvFmS5KJIgkGWYaylYt
GL4OuPO3QQ+5WSyLWiZa/rndVchoLFGLwVwbNi/K8laHTKCTYe67tzqnedkTv8V9
xtd5GrlKOB3qppnvF9ZgIhLgqchtYFpv3EJGVaM4D0sjy8403AkPhSbDbJkeYmmX
IIpiZ+pAnnOpeZrGnOsl0MBifiZHGbKT4b0oKy+BVdwld7zHOljKPmUbZUOFaj83
nUG3oyf+75ZIC0qnRAX2/+QihoD9SQVNiVOZYoljSdTs6tb6LmGrYNkwxG4acIA5
wEBb0B56+vWEZ0q07Xmc0wpXogHBJoGxrexdDLOo2Q9tST7xTYkznlJuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZTlyOeFBvAMF7Y1zz9/cu5wu6uMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB2IoWg2
3UEo+qwl00jO8H4YEx1i+4pSV+T0jLv9COX8mc3iPGoaT9F+b/8Nnfc+fg1vY8Wi
gY/jzMtoiWOt9tbOcQEur+mmbF0fuM0ODVG0JjMacXPqiYuhxDPvuXRUpb61nTQr
h5CEq5Ggz3NStuYUYMiB3/wEIQVMSPS76amjO+uVtk9oDl89VA6kwv9ewaELJXUW
pojiZ0Hk9Qd5LAq4gXuLJ7WKGXrZJ3XGLRTj/V/rWeOaiOdH57IWlF5DPflJBrhI
BWUN2Zx2IIoMsK5Iv/8kegQQ4sNIaHdJnqoURhDw7TQ5HkNProAH3aiQksNcJ3Ru
f058fd1A+K1nkA==
-----END CERTIFICATE-----