Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File:                     8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier:          mmyft5L5KKG+BjeH5iYlIhv3gAvGyHCGiNCvN2cZ2Z8=
Subject key identifier:   F2:16:A1:99:59:B6:79:3C:38:8B:B9:A8:18:6A:29:D4:1E:3E:7B:4F
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer:       /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial:       0195E00F971E602645D6F602AB0FBD8F86EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number:          0F0A
Signing time:             Sat 29 Mar 2025 04:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:12 +0000
Files and hashes:         1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
                          2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: GvWycyyy2kAQGElf8wiLi1BKs++juFHgDW5C1Jbs/2s=)
                          3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:97:1e:60:26:45:d6:f6:02:ab:0f:bd:8f:86:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
        Validity
            Not Before: Mar 29 04:01:12 2025 GMT
            Not After : Mar 30 04:01:12 2025 GMT
        Subject: CN=f216a19959b6793c388bb9a8186a29d41e3e7b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:51:66:58:58:b3:5a:a8:7f:50:c2:1f:da:
                    97:b9:80:94:f9:57:12:b6:e1:2d:35:3d:e5:8b:91:
                    93:3d:4c:1a:0a:53:b2:62:52:30:92:7e:e5:d5:f5:
                    1b:e6:f0:c2:af:42:98:00:b9:72:68:9a:05:68:04:
                    02:66:52:fd:4a:a3:35:7c:e4:5e:65:e9:53:fd:d8:
                    6d:a5:21:30:0b:83:9a:95:e8:c6:09:d5:c4:1a:bc:
                    ba:f7:a1:29:d8:75:86:f0:05:76:1e:ef:73:f8:68:
                    53:49:80:86:1f:1f:51:70:9e:e8:ef:c5:99:d9:0d:
                    40:6f:26:2c:ff:37:25:5f:c1:fc:48:26:f7:0e:65:
                    81:64:e7:bd:eb:2a:65:51:e4:85:5e:53:3a:43:cf:
                    75:20:b8:0b:0e:85:98:8a:51:0d:f5:7c:ba:b8:1d:
                    9b:ec:3e:35:ae:34:cd:20:37:ba:04:5b:0c:f1:d7:
                    80:f5:c4:24:e5:f0:df:28:4b:d9:cd:a8:11:81:13:
                    f5:d3:89:18:c1:d4:6d:87:e9:b8:fc:87:fc:1f:47:
                    6e:65:35:b0:96:73:f8:06:91:a3:b9:ea:69:d6:58:
                    a3:6e:76:99:d0:da:85:59:8a:51:84:4c:52:b5:dd:
                    91:47:a8:82:a8:8c:3f:2e:7b:8d:61:a2:4e:ad:4b:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:16:A1:99:59:B6:79:3C:38:8B:B9:A8:18:6A:29:D4:1E:3E:7B:4F
            X509v3 Authority Key Identifier:
                keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:f7:19:8d:5b:79:b3:70:93:dd:14:67:fc:bc:9c:68:76:
         0f:6e:b8:8e:e7:d4:be:4b:e8:6c:13:e4:a5:16:2c:bb:93:f6:
         87:8b:0d:1d:a0:8f:8b:e8:a8:7e:4a:58:9e:99:84:1f:9d:fb:
         fd:d3:ab:ed:a8:ce:df:fa:9d:cb:26:61:66:5d:63:d9:97:22:
         9a:9a:3d:c7:71:93:17:6c:ef:a7:2b:5d:b5:c9:49:b1:f8:85:
         71:63:06:42:45:4a:ff:d6:8d:a0:7e:79:9f:7d:34:ac:1d:65:
         9e:39:e1:5b:4e:6b:7a:ac:63:5b:85:25:10:12:2e:aa:be:b1:
         de:12:9e:5e:86:1c:f1:81:eb:7e:03:5b:b8:d9:c2:6d:f8:64:
         4c:f3:b8:d0:a6:43:fb:a2:1f:c7:4c:81:f5:b5:3b:a5:d2:6e:
         76:ee:cd:ba:40:88:46:c0:34:32:72:e5:63:3f:2a:52:f8:ed:
         c8:35:68:eb:1a:33:e0:4d:69:69:3b:52:19:16:d1:58:f9:71:
         f9:e4:a2:ab:05:f8:03:67:ed:03:2a:ab:90:61:6c:73:88:44:
         a2:d5:0a:98:38:e1:94:e1:ae:ad:fa:98:eb:fb:6f:14:05:82:
         06:3b:39:68:64:dc:d6:5a:94:36:22:3d:35:3f:d0:23:88:0e:
         95:37:78:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5ceYCZF1vYCqw+9j4bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjUwMzI5MDQwMTEyWhcNMjUwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
EyhmMjE2YTE5OTU5YjY3OTNjMzg4YmI5YTgxODZhMjlkNDFlM2U3YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvBRZlhYs1qof1DCH9qXuYCU+VcS
tuEtNT3li5GTPUwaClOyYlIwkn7l1fUb5vDCr0KYALlyaJoFaAQCZlL9SqM1fORe
ZelT/dhtpSEwC4OalejGCdXEGry696Ep2HWG8AV2Hu9z+GhTSYCGHx9RcJ7o78WZ
2Q1AbyYs/zclX8H8SCb3DmWBZOe96yplUeSFXlM6Q891ILgLDoWYilEN9Xy6uB2b
7D41rjTNIDe6BFsM8deA9cQk5fDfKEvZzagRgRP104kYwdRth+m4/If8H0duZTWw
lnP4BpGjuepp1lijbnaZ0NqFWYpRhExStd2RR6iCqIw/LnuNYaJOrUuj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIWoZlZtnk8OIu5qBhqKdQePntPMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1j3GY1b
ebNwk90UZ/y8nGh2D264jufUvkvobBPkpRYsu5P2h4sNHaCPi+iofkpYnpmEH537
/dOr7ajO3/qdyyZhZl1j2Zcimpo9x3GTF2zvpytdtclJsfiFcWMGQkVK/9aNoH55
n300rB1lnjnhW05reqxjW4UlEBIuqr6x3hKeXoYc8YHrfgNbuNnCbfhkTPO40KZD
+6Ifx0yB9bU7pdJudu7NukCIRsA0MnLlYz8qUvjtyDVo6xoz4E1paTtSGRbRWPlx
+eSiqwX4A2ftAyqrkGFsc4hEotUKmDjhlOGurfqY6/tvFAWCBjs5aGTc1lqUNiI9
NT/QI4gOlTd4sQ==
-----END CERTIFICATE-----