Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          MUGbD5WQJQ+njJPhUhjqEe8TCQezveNYXH4/BgC+QSU=
Subject key identifier:   FE:85:F1:4D:C3:F3:35:7B:B3:A8:7C:61:8E:92:8F:B6:28:9D:4C:FA
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       0195E046974B5998A0D3F1760E5D77741216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          06D4
Signing time:             Sat 29 Mar 2025 05:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:17 +0000
Files and hashes:         1: FeklVC0qNHXfj0J3Hp8Z9ArWnx4.roa (hash: zhU/XsLgugYmejL0TFrTVwxSx58qhIKNoUYntYLxICw=)
                          2: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
                          3: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 1tlNfx74JAqHRW8xga4QpXSvN8G7wf8q08F9cXNAGSg=)
                          4: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
                          5: f4Ucn45Rv4XzGRea7jIYv06EQoM.roa (hash: dEkb9TCXMwOfFotkjpNPCU75fXglPlFmFSOsMZEXlWI=)
                          6: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:97:4b:59:98:a0:d3:f1:76:0e:5d:77:74:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Mar 29 05:01:17 2025 GMT
            Not After : Mar 30 05:01:17 2025 GMT
        Subject: CN=fe85f14dc3f3357bb3a87c618e928fb6289d4cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:21:cd:4c:08:3d:1b:13:7a:42:c7:e4:a6:
                    5b:46:41:3a:a7:25:09:da:87:c8:04:62:0c:82:a2:
                    8c:3e:a4:aa:a9:a6:ef:6a:25:ad:cd:92:ef:5e:17:
                    8e:d1:18:26:60:4b:bb:75:2e:34:76:c1:ba:c1:3d:
                    bb:e0:d4:12:a1:04:d4:48:d0:30:58:41:97:81:75:
                    2e:9f:93:5f:0f:1c:c5:8c:e4:76:17:5e:54:80:d7:
                    75:3d:4f:67:fd:76:f3:40:97:4f:85:d0:48:85:4d:
                    5a:e8:3b:98:f6:8e:af:79:d7:92:ef:34:95:36:d9:
                    97:11:d3:23:e3:c3:50:8d:67:ce:a6:48:56:f9:c8:
                    b3:8f:5d:c8:3e:22:0e:6d:34:79:dd:a4:96:61:0c:
                    76:3a:d2:a9:c3:95:78:c9:83:8e:1b:73:fd:34:bc:
                    b1:d7:b8:69:37:92:dd:a2:0b:be:6d:21:08:43:34:
                    cc:d4:51:0f:74:db:63:61:04:11:40:b7:b1:3f:2c:
                    39:83:8d:05:38:f0:5c:e9:43:73:b1:92:b8:bc:d7:
                    c0:64:c3:76:6c:fc:36:fe:aa:87:d9:9b:94:15:36:
                    b9:0a:d0:21:05:1f:3d:fe:3d:c1:a1:3d:b6:40:01:
                    e6:f9:c9:28:6d:d3:da:80:b5:d1:cb:84:75:3f:78:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:85:F1:4D:C3:F3:35:7B:B3:A8:7C:61:8E:92:8F:B6:28:9D:4C:FA
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ea:8b:a3:61:fc:ff:2c:70:f1:b3:ca:50:69:9d:bd:4a:a3:
         f1:6e:3b:1e:50:63:45:79:6d:48:ce:5a:a8:f2:dc:f8:ab:86:
         e7:4d:d3:3b:c4:e5:c7:5c:a9:8a:75:20:80:f8:ca:27:2e:51:
         c0:33:31:bf:e7:da:ee:59:1e:6e:da:72:e1:3a:7f:7b:a2:f6:
         51:11:d7:ea:ba:41:eb:66:be:57:06:63:04:8c:57:f8:7c:23:
         66:c4:0e:26:c5:8a:2f:fe:db:c1:30:2d:d6:d2:c9:34:48:a3:
         34:2c:de:0d:a4:20:a7:86:fa:fe:87:c0:a0:70:49:91:fc:6b:
         70:02:93:ce:29:77:69:10:c6:ed:bb:4b:f4:b8:db:4b:f3:a1:
         04:89:f6:5a:bc:36:c1:9d:8f:bb:39:16:ae:00:ce:be:13:e2:
         27:9c:ac:73:24:5f:c6:38:50:e7:95:03:9f:68:7a:69:c2:87:
         33:ba:d5:82:dd:08:7e:03:59:b9:b6:ea:d0:ea:c4:59:a1:bd:
         11:63:0e:b1:73:32:f5:7d:be:e2:11:e7:af:08:6b:3f:55:19:
         2b:5b:68:80:e8:29:9b:9a:9a:55:b7:98:3a:b4:ad:29:b6:a2:
         43:f1:e2:cc:10:92:44:12:b3:de:fb:2f:ba:8c:c4:9e:63:71:
         8e:b5:4c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRpdLWZig0/F2Dl13dBIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjUwMzI5MDUwMTE3WhcNMjUwMzMwMDUwMTE3WjAzMTEwLwYDVQQD
EyhmZTg1ZjE0ZGMzZjMzNTdiYjNhODdjNjE4ZTkyOGZiNjI4OWQ0Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MEhzUwIPRsTekLH5KZbRkE6pyUJ
2ofIBGIMgqKMPqSqqabvaiWtzZLvXheO0RgmYEu7dS40dsG6wT274NQSoQTUSNAw
WEGXgXUun5NfDxzFjOR2F15UgNd1PU9n/XbzQJdPhdBIhU1a6DuY9o6vedeS7zSV
NtmXEdMj48NQjWfOpkhW+cizj13IPiIObTR53aSWYQx2OtKpw5V4yYOOG3P9NLyx
17hpN5Ldogu+bSEIQzTM1FEPdNtjYQQRQLexPyw5g40FOPBc6UNzsZK4vNfAZMN2
bPw2/qqH2ZuUFTa5CtAhBR89/j3BoT22QAHm+ckobdPagLXRy4R1P3j7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6F8U3D8zV7s6h8YY6Sj7YonUz6MB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOqLo2H8
/yxw8bPKUGmdvUqj8W47HlBjRXltSM5aqPLc+KuG503TO8Tlx1ypinUggPjKJy5R
wDMxv+fa7lkebtpy4Tp/e6L2URHX6rpB62a+VwZjBIxX+HwjZsQOJsWKL/7bwTAt
1tLJNEijNCzeDaQgp4b6/ofAoHBJkfxrcAKTzil3aRDG7btL9LjbS/OhBIn2Wrw2
wZ2PuzkWrgDOvhPiJ5yscyRfxjhQ55UDn2h6acKHM7rVgt0IfgNZubbq0OrEWaG9
EWMOsXMy9X2+4hHnrwhrP1UZK1togOgpm5qaVbeYOrStKbaiQ/HizBCSRBKz3vsv
uozEnmNxjrVMrg==
-----END CERTIFICATE-----