Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
File:                     614owu_zzzXDwcw9Z7qj3wUFX5k.mft (raw, json)
Hash identifier:          +ATahbUk0LknRbERdq8KO3dxW8DIPOOha5dO59bHTe4=
Subject key identifier:   2B:B5:F2:4D:8A:86:1B:B2:EE:9F:AF:57:BE:96:E9:21:EB:7E:16:18
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Certificate issuer:       /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial:       0195E121F99295F1FAED7FE46AB2A30B534C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 09:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:54 +0000
Files and hashes:         1: 614owu_zzzXDwcw9Z7qj3wUFX5k.crl (hash: eBGAVvKJGF4szpAELfT91yr7RrPWbtOfvhFxCAcMT/I=)
                          2: eNqrwTVXkwV2eehov2BiD26ibTI.roa (hash: udLq0w8AI0t67Q1kVv/LIKA6aE1Zr7prABYVZQQ1D4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:f9:92:95:f1:fa:ed:7f:e4:6a:b2:a3:0b:53:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
        Validity
            Not Before: Mar 29 09:00:54 2025 GMT
            Not After : Mar 30 09:00:54 2025 GMT
        Subject: CN=2bb5f24d8a861bb2ee9faf57be96e921eb7e1618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:7d:71:3d:ec:fd:9e:31:08:e9:f8:38:a2:
                    7f:24:a9:72:6b:b3:17:ce:31:3c:9c:6c:9d:28:db:
                    56:85:57:53:8c:ba:00:b5:ae:eb:4c:fc:4a:f8:c1:
                    d7:cd:73:80:56:ce:1c:90:d2:45:07:a3:d7:28:0f:
                    d1:24:2a:7a:b2:46:af:a3:63:65:69:e2:b8:58:6b:
                    f9:5e:cc:f0:2d:48:88:3e:66:80:3e:96:e7:e8:98:
                    15:a9:6f:26:4d:8d:98:5d:30:f1:e1:83:4c:36:ba:
                    6a:dd:36:ea:96:c0:0d:a9:b3:b5:61:bc:20:8e:52:
                    72:fc:d3:97:93:a8:60:ab:09:88:78:b0:b7:2e:0e:
                    5a:8b:87:b9:52:04:7e:ff:47:52:09:e3:2a:6a:b1:
                    d8:0b:71:a0:17:20:9b:9e:61:4f:b0:91:c7:51:42:
                    69:ff:ef:bd:c8:a4:75:89:c4:c4:77:e4:d3:a8:a9:
                    0b:3c:51:b3:00:fe:6a:ad:f2:55:ad:63:98:04:05:
                    bf:54:fc:16:63:da:b5:31:be:fc:ab:de:4d:21:8d:
                    8c:9c:0d:eb:01:09:61:29:36:c5:d5:08:49:d2:66:
                    5c:6c:62:ed:75:e8:2d:55:10:c4:24:c4:7b:3f:87:
                    eb:7a:8f:b1:99:7f:22:df:b6:b9:5b:7b:0d:72:57:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:F2:4D:8A:86:1B:B2:EE:9F:AF:57:BE:96:E9:21:EB:7E:16:18
            X509v3 Authority Key Identifier:
                keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:f0:5d:a3:c0:48:b7:58:44:2b:69:38:de:ae:bb:57:0c:
         08:6f:20:22:e4:89:4b:64:88:2d:1e:af:76:0c:84:86:f7:66:
         a9:8e:cd:10:02:93:3c:af:76:38:40:6f:9d:39:2e:b4:62:2f:
         6b:05:a9:9e:3e:76:0b:ec:e0:b0:5d:48:e9:fa:88:1e:3f:0d:
         a2:6a:01:a8:c0:38:9d:bd:de:df:4a:c1:35:cb:84:c5:78:7b:
         47:ba:f3:7b:8a:e7:45:75:9b:74:7f:9d:da:66:01:57:e6:3f:
         87:fd:64:0b:c2:8e:82:67:bb:70:cd:3b:46:5b:71:98:f6:ef:
         3d:a7:95:fd:5f:36:d6:1d:fd:15:8d:42:65:13:9e:f1:ca:39:
         84:cd:de:e2:94:9a:18:ee:f3:72:5c:10:79:3f:6d:6e:5a:21:
         43:e7:d5:bd:6d:f5:69:2e:a3:6f:76:10:c1:80:80:4a:bc:1b:
         50:97:97:53:a3:ab:ac:70:25:f0:a0:cc:9f:f6:c7:24:bd:61:
         01:fb:84:81:97:3d:48:24:64:17:4d:3c:24:50:49:47:41:36:
         9c:d7:f2:36:63:bc:86:87:7a:78:98:4b:ed:e7:ef:96:35:87:
         20:1e:10:a5:49:6c:d5:71:90:bd:a3:16:37:7f:3d:95:a5:25:
         e3:dc:64:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIfmSlfH67X/karKjC1NMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNWUyOGMyZWZmM2NmMzVjM2MxY2MzZDY3YmFhM2RmMDUw
NTVmOTkwHhcNMjUwMzI5MDkwMDU0WhcNMjUwMzMwMDkwMDU0WjAzMTEwLwYDVQQD
EygyYmI1ZjI0ZDhhODYxYmIyZWU5ZmFmNTdiZTk2ZTkyMWViN2UxNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMZ9cT3s/Z4xCOn4OKJ/JKlya7MX
zjE8nGydKNtWhVdTjLoAta7rTPxK+MHXzXOAVs4ckNJFB6PXKA/RJCp6skavo2Nl
aeK4WGv5XszwLUiIPmaAPpbn6JgVqW8mTY2YXTDx4YNMNrpq3TbqlsANqbO1Ybwg
jlJy/NOXk6hgqwmIeLC3Lg5ai4e5UgR+/0dSCeMqarHYC3GgFyCbnmFPsJHHUUJp
/++9yKR1icTEd+TTqKkLPFGzAP5qrfJVrWOYBAW/VPwWY9q1Mb78q95NIY2MnA3r
AQlhKTbF1QhJ0mZcbGLtdegtVRDEJMR7P4freo+xmX8i37a5W3sNcleJ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu18k2Khhuy7p+vV76W6SHrfhYYMB8GA1UdIwQY
MBaAFOteKMLv8881w8HMPWe6o98FBV+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTg2MjMtNmRiZS00Njg4LWE0NjUt
Y2VjMjY1ZGRhYzQ3LzEvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTg2MjMtNmRiZS00Njg4LWE0NjUtY2VjMjY1ZGRhYzQ3
LzEvNjE0b3d1X3p6elhEd2N3OVo3cWozd1VGWDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh3wXaPA
SLdYRCtpON6uu1cMCG8gIuSJS2SILR6vdgyEhvdmqY7NEAKTPK92OEBvnTkutGIv
awWpnj52C+zgsF1I6fqIHj8NomoBqMA4nb3e30rBNcuExXh7R7rze4rnRXWbdH+d
2mYBV+Y/h/1kC8KOgme7cM07RltxmPbvPaeV/V821h39FY1CZROe8co5hM3e4pSa
GO7zclwQeT9tblohQ+fVvW31aS6jb3YQwYCASrwbUJeXU6OrrHAl8KDMn/bHJL1h
AfuEgZc9SCRkF008JFBJR0E2nNfyNmO8hod6eJhL7efvljWHIB4QpUls1XGQvaMW
N389laUl49xkww==
-----END CERTIFICATE-----