Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File:                     2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier:          AYVWehCxjcDx8xKr7bJLsuPpcYg0ZMg9gTV9xBxPmhc=
Subject key identifier:   15:F9:02:FF:71:DD:81:25:A5:A5:5E:D0:4B:FB:99:47:BD:A8:F9:52
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer:       /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial:       0195E1223C5AFDE74C3AECD9B7B7FF57F409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number:          0B69
Signing time:             Sat 29 Mar 2025 09:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:11 +0000
Files and hashes:         1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: v7dWIAH4kCmoNA2s1IVn7GSRIVn5rBRTQRiZnuTq/yM=)
                          2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=)
                          3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=)
                          4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:3c:5a:fd:e7:4c:3a:ec:d9:b7:b7:ff:57:f4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
        Validity
            Not Before: Mar 29 09:01:11 2025 GMT
            Not After : Mar 30 09:01:11 2025 GMT
        Subject: CN=15f902ff71dd8125a5a55ed04bfb9947bda8f952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:ae:6b:9b:fc:43:5c:52:a2:14:a8:5f:48:
                    82:50:de:af:61:df:72:ec:a5:a3:84:10:e1:f5:30:
                    03:69:e9:39:f1:c4:88:01:a9:49:d6:1f:66:86:67:
                    c3:de:2d:e0:8f:c1:8b:c9:af:a5:a5:8a:f5:39:64:
                    e1:dd:ef:27:74:07:c6:c4:d8:9c:d2:d2:1d:79:d0:
                    08:b8:b5:39:e8:65:c0:1a:63:fb:39:4f:fb:66:0d:
                    76:3d:63:ed:be:db:4f:c1:1f:61:c5:88:34:e5:55:
                    28:d0:80:1f:26:95:a1:78:88:b5:83:1a:46:ed:35:
                    da:f7:b5:17:c8:bb:eb:cb:dd:c9:d6:1c:61:c6:65:
                    55:f2:41:2a:7a:43:cf:0b:b5:f0:95:bc:b8:05:7b:
                    91:27:e1:b3:14:f9:4f:21:1a:38:46:e5:33:4d:1a:
                    7d:2d:9e:d8:56:43:a0:3b:bc:db:1c:19:6f:ec:a7:
                    be:5c:df:33:8b:fc:78:03:66:73:28:e3:7d:d5:2a:
                    c6:ca:19:f8:1e:ab:23:bc:81:35:e4:15:e9:04:0d:
                    11:07:cd:29:d1:8d:27:42:a1:4b:b7:fc:b0:36:25:
                    50:3f:ac:1c:64:15:aa:34:72:6c:19:6a:9d:be:cc:
                    22:e0:d7:56:be:1a:2b:10:41:e9:75:d0:2d:2b:6b:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:02:FF:71:DD:81:25:A5:A5:5E:D0:4B:FB:99:47:BD:A8:F9:52
            X509v3 Authority Key Identifier:
                keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:00:1b:13:31:56:4c:81:d9:d6:7c:e8:6f:c8:b3:c5:c6:48:
         d3:2e:90:d5:fe:98:97:f3:87:85:21:b1:96:c7:2e:0f:63:dd:
         2b:ce:4c:98:09:e9:8f:b8:0b:40:1b:59:77:4f:27:79:11:d8:
         d6:b5:58:c8:f7:ed:de:e2:d4:95:8f:77:89:6c:b0:78:13:b2:
         07:8a:3e:ec:c0:a9:57:21:08:ae:6b:1c:05:ec:fe:df:35:37:
         a7:54:51:5a:53:e8:9a:55:0c:6b:97:aa:52:70:56:86:89:9a:
         99:50:3c:3e:48:21:cd:11:d6:a5:db:91:16:db:14:b1:5f:13:
         3d:24:f5:d7:4c:ec:de:dc:b1:93:7d:89:02:0f:e0:14:80:11:
         40:f3:30:75:2b:40:84:4b:46:48:0c:51:37:fc:6c:26:cb:d7:
         07:67:78:75:15:6e:9e:97:e6:73:c3:35:7c:8b:e8:2e:34:6f:
         5c:47:9d:10:41:66:fe:51:4c:d8:d0:97:f8:2f:c7:56:8e:d4:
         85:ac:c4:93:e6:06:df:06:19:c5:01:df:f5:4b:6c:03:b4:02:
         d0:49:bd:83:fb:7b:c2:06:62:6a:e6:d6:2b:2f:e9:06:43:50:
         c3:a8:6f:26:69:e0:89:2e:cf:8c:90:8e:18:d3:90:95:10:ff:
         36:8a:36:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIjxa/edMOuzZt7f/V/QJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz
NzZlZjAwHhcNMjUwMzI5MDkwMTExWhcNMjUwMzMwMDkwMTExWjAzMTEwLwYDVQQD
EygxNWY5MDJmZjcxZGQ4MTI1YTVhNTVlZDA0YmZiOTk0N2JkYThmOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPSua5v8Q1xSohSoX0iCUN6vYd9y
7KWjhBDh9TADaek58cSIAalJ1h9mhmfD3i3gj8GLya+lpYr1OWTh3e8ndAfGxNic
0tIdedAIuLU56GXAGmP7OU/7Zg12PWPtvttPwR9hxYg05VUo0IAfJpWheIi1gxpG
7TXa97UXyLvry93J1hxhxmVV8kEqekPPC7Xwlby4BXuRJ+GzFPlPIRo4RuUzTRp9
LZ7YVkOgO7zbHBlv7Ke+XN8zi/x4A2ZzKON91SrGyhn4HqsjvIE15BXpBA0RB80p
0Y0nQqFLt/ywNiVQP6wcZBWqNHJsGWqdvswi4NdWvhorEEHpddAtK2t4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX5Av9x3YElpaVe0Ev7mUe9qPlSMB8GA1UdIwQY
MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct
YzgxM2NlMGY1ZTQ3LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3
LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwAbEzFW
TIHZ1nzob8izxcZI0y6Q1f6Yl/OHhSGxlscuD2PdK85MmAnpj7gLQBtZd08neRHY
1rVYyPft3uLUlY93iWyweBOyB4o+7MCpVyEIrmscBez+3zU3p1RRWlPomlUMa5eq
UnBWhomamVA8PkghzRHWpduRFtsUsV8TPST110zs3tyxk32JAg/gFIARQPMwdStA
hEtGSAxRN/xsJsvXB2d4dRVunpfmc8M1fIvoLjRvXEedEEFm/lFM2NCX+C/HVo7U
hazEk+YG3wYZxQHf9UtsA7QC0Em9g/t7wgZiaubWKy/pBkNQw6hvJmngiS7PjJCO
GNOQlRD/Noo2Mw==
-----END CERTIFICATE-----