Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
File:                     JYYj7MjcuRPRAiipRgqG5mDLj7I.mft (raw, json)
Hash identifier:          +4nDH8kK0qeQbyetPD1nUwFleORJktW8K+DjyW4BMs0=
Subject key identifier:   DA:28:3F:C6:EC:3F:A6:68:41:FB:06:CF:8F:7A:B0:7D:09:AF:2E:14
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       0195E07D602B16F8480635C8BA6130D33AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft
Manifest number:          14BF
Signing time:             Sat 29 Mar 2025 06:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:07 +0000
Files and hashes:         1: 4jOyDkN0sYgHQOu4H2i3BPnuwuc.roa (hash: pBs68ICaSbGSqyGLZ9bB1efuQfGC5WelauRjyqdWgTI=)
                          2: JYYj7MjcuRPRAiipRgqG5mDLj7I.crl (hash: sfNzMhrnXgRaOjqRC4v/gxIEdmbrLlSSRMkzPDzADug=)
                          3: WS5dJtxLFKB6EZr0k7FG-L1WfpI.roa (hash: EcGFRU20uqBbFC1foj+y9OBYi5L7+bc1+NFOuFXpPjg=)
                          4: k_-rD0qGkNwGwcLu6HW3p8mmNtU.roa (hash: 2oKRAJvxuw9ZlCxWfoLf08ddChOQxfTyMJhpORXiSP8=)
                          5: p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (hash: JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=)
                          6: px36HXCD5Tde7rc7667drQlCUgM.roa (hash: DdLtjUoBr2/szAIeZWx5x3x5Gnlyu/gE0I7UYrAM/6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:60:2b:16:f8:48:06:35:c8:ba:61:30:d3:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Mar 29 06:01:07 2025 GMT
            Not After : Mar 30 06:01:07 2025 GMT
        Subject: CN=da283fc6ec3fa66841fb06cf8f7ab07d09af2e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:73:0a:7c:bb:39:64:c9:e3:66:c5:9e:e9:
                    ca:a9:f2:81:16:f6:a9:34:8f:f3:be:eb:6c:ad:a7:
                    05:64:ce:66:0c:4b:1a:26:82:a8:e9:7f:ef:ad:fd:
                    5d:b6:4a:e4:08:73:e5:b1:60:75:07:66:fe:fe:e3:
                    b2:f0:4d:f6:25:17:b9:f2:89:55:de:35:ad:87:e9:
                    ae:c7:b5:98:f0:42:fc:3a:a2:65:01:5b:01:c0:00:
                    af:f5:df:12:a6:a3:79:e9:15:d5:1d:65:c6:d9:73:
                    ef:ce:5e:e3:9f:a9:15:54:22:45:f9:92:21:12:70:
                    15:9d:df:44:02:d8:a5:a9:d7:35:ed:d8:60:0e:58:
                    03:2f:97:80:d8:29:bf:98:6f:7a:e0:1a:1d:7c:26:
                    9f:7e:f3:c9:09:69:82:30:d6:9b:7c:0d:ca:5c:14:
                    25:95:92:98:f7:59:02:15:cb:e0:8c:bc:b8:e2:d7:
                    1e:fd:77:1f:e2:61:40:84:15:31:e4:23:8b:ad:9d:
                    8e:e1:36:34:11:df:d6:3c:75:d0:2d:e7:44:2c:8f:
                    5b:0b:1d:05:be:d4:94:de:85:a6:2b:4a:92:f4:28:
                    89:35:94:13:1f:73:85:73:30:d5:39:91:cf:0d:e5:
                    f6:fc:f3:69:9a:3f:cb:8a:5f:20:87:50:ca:df:d2:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:28:3F:C6:EC:3F:A6:68:41:FB:06:CF:8F:7A:B0:7D:09:AF:2E:14
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:95:aa:70:44:b1:bb:c6:23:20:7e:bc:fb:48:37:24:83:
         58:77:a8:42:8b:66:61:3e:86:d7:64:eb:bd:47:02:87:d9:9f:
         09:ab:c2:af:54:a8:b7:78:31:00:ec:95:41:77:c5:c4:72:cc:
         a4:97:d5:8e:8c:af:fb:42:7b:30:f1:3d:e5:4b:df:ef:2b:c5:
         52:a2:cb:6b:70:1e:07:a9:cb:ab:30:c4:e6:72:7c:03:20:33:
         0c:3b:9e:eb:ed:90:80:1a:7b:5d:91:b3:32:a2:f8:75:da:4c:
         8a:86:e6:68:3f:5e:2c:31:fa:cb:3e:a5:9a:16:c6:96:64:e7:
         ba:73:aa:9c:02:ea:a7:bc:33:ac:b2:34:e8:07:ec:ae:a0:ac:
         7d:43:ee:24:1a:4b:a3:ad:3c:12:f3:1b:75:d6:c8:71:82:43:
         a1:a5:00:aa:f2:55:62:e8:00:38:77:3c:cb:27:91:4c:e5:fc:
         b9:9e:af:b3:30:20:de:fe:97:bc:26:a7:1d:d2:6c:79:95:36:
         38:df:4d:37:98:21:95:d6:f8:35:42:6e:6f:7e:70:64:db:52:
         87:aa:7c:0a:8c:cc:33:7c:3a:b5:19:99:f9:9a:fa:cc:b8:00:
         e2:b8:df:e2:bd:f5:6b:36:7a:1d:4c:65:82:fc:48:3d:e5:74:
         4b:fd:3f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfWArFvhIBjXIumEw0zqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODYyM2VjYzhkY2I5MTNkMTAyMjhhOTQ2MGE4NmU2NjBj
YjhmYjIwHhcNMjUwMzI5MDYwMTA3WhcNMjUwMzMwMDYwMTA3WjAzMTEwLwYDVQQD
EyhkYTI4M2ZjNmVjM2ZhNjY4NDFmYjA2Y2Y4ZjdhYjA3ZDA5YWYyZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zhzCny7OWTJ42bFnunKqfKBFvap
NI/zvutsracFZM5mDEsaJoKo6X/vrf1dtkrkCHPlsWB1B2b+/uOy8E32JRe58olV
3jWth+mux7WY8EL8OqJlAVsBwACv9d8SpqN56RXVHWXG2XPvzl7jn6kVVCJF+ZIh
EnAVnd9EAtilqdc17dhgDlgDL5eA2Cm/mG964BodfCaffvPJCWmCMNabfA3KXBQl
lZKY91kCFcvgjLy44tce/Xcf4mFAhBUx5COLrZ2O4TY0Ed/WPHXQLedELI9bCx0F
vtSU3oWmK0qS9CiJNZQTH3OFczDVOZHPDeX2/PNpmj/Lil8gh1DK39I9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNooP8bsP6ZoQfsGz496sH0Jry4UMB8GA1UdIwQY
MBaAFCWGI+zI3LkT0QIoqUYKhuZgy4+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUt
NTY4OWVlMDZlMTRjLzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NmFiOTUtYzJmZS00YjkzLTlhMmUtNTY4OWVlMDZlMTRj
LzEvSllZajdNamN1UlBSQWlpcFJncUc1bURMajdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW+VqnBE
sbvGIyB+vPtINySDWHeoQotmYT6G12TrvUcCh9mfCavCr1Sot3gxAOyVQXfFxHLM
pJfVjoyv+0J7MPE95Uvf7yvFUqLLa3AeB6nLqzDE5nJ8AyAzDDue6+2QgBp7XZGz
MqL4ddpMiobmaD9eLDH6yz6lmhbGlmTnunOqnALqp7wzrLI06AfsrqCsfUPuJBpL
o608EvMbddbIcYJDoaUAqvJVYugAOHc8yyeRTOX8uZ6vszAg3v6XvCanHdJseZU2
ON9NN5ghldb4NUJub35wZNtSh6p8CozMM3w6tRmZ+Zr6zLgA4rjf4r31azZ6HUxl
gvxIPeV0S/0/Nw==
-----END CERTIFICATE-----