Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File:                     iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier:          I87t6nTiw0ShBR3MgseuvIzMfImbxuH7HViuPgKikkY=
Subject key identifier:   C2:ED:CB:69:B8:1D:1E:20:1C:8B:29:38:AB:2F:F2:A1:5E:94:01:3B
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer:       /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial:       0195E0B4636DCAD960644C78A94B71A89C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number:          0D91
Signing time:             Sat 29 Mar 2025 07:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:12 +0000
Files and hashes:         1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
                          2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
                          3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
                          4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: tN4Jo0bz2TtS6XynCYQQhnykuSDoMBGolvVoKMiXUEM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:63:6d:ca:d9:60:64:4c:78:a9:4b:71:a8:9c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
        Validity
            Not Before: Mar 29 07:01:12 2025 GMT
            Not After : Mar 30 07:01:12 2025 GMT
        Subject: CN=c2edcb69b81d1e201c8b2938ab2ff2a15e94013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:47:9e:f0:5f:aa:b2:a6:2a:0a:54:ff:b8:
                    a4:98:64:16:b9:ab:4d:49:07:9b:bb:4a:89:8f:2f:
                    ad:2e:bd:da:a5:b8:40:06:a4:dc:a6:7e:77:ed:f7:
                    be:84:e3:20:e7:cb:f7:56:72:38:a9:d4:64:e5:00:
                    e8:86:84:1c:b1:7e:84:8a:61:a8:20:cb:ef:03:dd:
                    83:bc:23:4a:54:78:c0:a1:8a:b9:dc:bf:9a:bf:64:
                    75:bc:71:51:1f:f5:97:34:bd:60:96:b5:ad:1d:53:
                    f4:b4:23:ce:29:d0:11:d6:b4:ca:20:37:cc:18:62:
                    ae:fe:ad:24:be:d4:b9:76:ec:c7:64:89:be:89:e6:
                    1e:9f:4d:e0:72:7d:38:e4:c0:39:4a:10:62:64:90:
                    cb:16:83:a4:99:e3:8c:0c:a7:55:5c:f6:47:37:07:
                    f4:79:6a:05:21:37:95:8a:f4:07:4a:bd:f0:eb:41:
                    28:1d:67:18:0b:62:9f:74:ec:f8:b9:29:4e:a0:54:
                    03:f2:f5:d5:3d:04:74:63:aa:f8:cd:5c:d7:a8:fd:
                    41:8a:7d:75:41:00:67:f3:31:52:81:b0:51:a4:f2:
                    c1:15:43:e3:9d:64:b7:f0:f0:09:47:27:f9:a7:59:
                    52:c3:8e:c3:c0:48:98:ca:6d:6f:04:f9:ce:2e:52:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:CB:69:B8:1D:1E:20:1C:8B:29:38:AB:2F:F2:A1:5E:94:01:3B
            X509v3 Authority Key Identifier:
                keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2b:a0:7e:d4:21:de:2f:d6:d1:ad:0d:b9:10:34:b4:85:b3:
         b1:f6:54:98:41:85:12:9d:53:6e:87:e1:24:8f:86:82:1b:83:
         eb:4c:22:50:14:e3:4a:09:56:74:f2:c8:22:09:68:23:3b:17:
         50:75:e9:cc:32:7b:3c:87:b6:8c:c0:45:97:5b:e7:e1:87:11:
         9a:93:3e:7e:76:f1:ec:50:2e:56:1d:89:4a:05:98:9d:00:63:
         ec:e8:e2:ab:46:8e:bd:ce:87:55:6d:df:77:b5:90:5b:28:50:
         15:a2:c0:26:c1:c8:33:c7:a4:0c:df:21:94:2f:8d:fc:97:75:
         79:ad:3d:9f:68:a5:93:c9:ff:1b:3b:9f:79:50:81:06:75:5f:
         e9:d8:2a:76:1b:44:9b:5e:a6:63:ac:6a:89:bf:2f:91:a7:ef:
         df:fe:14:1d:3c:d3:c2:7f:88:0e:2a:83:08:bd:e4:78:ee:02:
         e4:6b:d3:bc:84:92:cc:a2:ce:f3:91:5b:e2:e2:f1:5d:d9:e7:
         d4:6a:af:08:c4:47:1c:27:7a:fd:04:28:d8:c9:9e:96:ca:3c:
         14:3e:3b:34:ce:a0:0e:4e:ca:e2:69:12:c7:4a:d0:87:79:ae:
         fb:cc:60:38:45:ca:05:6c:c4:52:5e:ec:f9:d8:3b:a7:02:4d:
         57:ec:7a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtGNtytlgZEx4qUtxqJwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYTFmZTlhNGMwM2QwMTVhZWM5NzRlMmQyOTcwOWE5Nzll
YjgyZjEwHhcNMjUwMzI5MDcwMTEyWhcNMjUwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
EyhjMmVkY2I2OWI4MWQxZTIwMWM4YjI5MzhhYjJmZjJhMTVlOTQwMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOZHnvBfqrKmKgpU/7ikmGQWuatN
SQebu0qJjy+tLr3apbhABqTcpn537fe+hOMg58v3VnI4qdRk5QDohoQcsX6EimGo
IMvvA92DvCNKVHjAoYq53L+av2R1vHFRH/WXNL1glrWtHVP0tCPOKdAR1rTKIDfM
GGKu/q0kvtS5duzHZIm+ieYen03gcn045MA5ShBiZJDLFoOkmeOMDKdVXPZHNwf0
eWoFITeVivQHSr3w60EoHWcYC2KfdOz4uSlOoFQD8vXVPQR0Y6r4zVzXqP1Bin11
QQBn8zFSgbBRpPLBFUPjnWS38PAJRyf5p1lSw47DwEiYym1vBPnOLlL/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLty2m4HR4gHIspOKsv8qFelAE7MB8GA1UdIwQY
MBaAFIqh/ppMA9AVrsl04tKXCal564LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYt
MWY5YWUwNTU2NDZmLzEvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi80MWU5YjAtNjJlNy00NzE4LWI5NjYtMWY5YWUwNTU2NDZm
LzEvaXFILW1rd0QwQld1eVhUaTBwY0pxWG5yZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSugftQh
3i/W0a0NuRA0tIWzsfZUmEGFEp1TbofhJI+GghuD60wiUBTjSglWdPLIIgloIzsX
UHXpzDJ7PIe2jMBFl1vn4YcRmpM+fnbx7FAuVh2JSgWYnQBj7Ojiq0aOvc6HVW3f
d7WQWyhQFaLAJsHIM8ekDN8hlC+N/Jd1ea09n2ilk8n/GzufeVCBBnVf6dgqdhtE
m16mY6xqib8vkafv3/4UHTzTwn+IDiqDCL3keO4C5GvTvISSzKLO85Fb4uLxXdnn
1GqvCMRHHCd6/QQo2Mmelso8FD47NM6gDk7K4mkSx0rQh3mu+8xgOEXKBWzEUl7s
+dg7pwJNV+x6cA==
-----END CERTIFICATE-----