Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File:                     2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier:          VtMZjyFIJGww9Bg63B0hJKdv85qWofthN4TBucGUQ7A=
Subject key identifier:   C6:26:D6:6C:3F:F0:46:97:F5:F9:9C:1F:18:A0:07:62:74:92:F5:F5
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer:       /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial:       0195E046813D4838A09676B433F88243D667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 05:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:11 +0000
Files and hashes:         1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: aA7p6t9xcnNLOWtuNVyDXHOkrK7YN+c4pwH5Ek861v0=)
                          2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
                          3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
                          4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:81:3d:48:38:a0:96:76:b4:33:f8:82:43:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
        Validity
            Not Before: Mar 29 05:01:11 2025 GMT
            Not After : Mar 30 05:01:11 2025 GMT
        Subject: CN=c626d66c3ff04697f5f99c1f18a007627492f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:1f:5e:e7:80:99:c9:d2:61:07:57:ae:63:
                    ff:e7:a6:e6:42:85:a9:a6:46:a2:e6:34:95:86:8c:
                    23:a0:54:45:40:11:c6:c7:67:21:5a:cd:c7:b0:e6:
                    f5:3c:00:61:c9:2d:72:6a:e4:bf:9b:30:ec:22:57:
                    00:a4:73:06:5a:80:61:d2:6d:e7:30:e6:23:11:84:
                    8e:e7:06:53:ad:43:33:91:7e:14:29:33:10:03:60:
                    2b:38:c2:fe:54:28:ff:50:f6:f3:87:33:6a:ff:83:
                    b7:0f:57:11:56:0c:d9:a7:86:c2:df:de:75:27:e9:
                    42:f7:96:6f:b7:9f:87:66:ac:03:75:49:4e:1b:6c:
                    6f:b9:2e:4c:e0:04:a6:74:a7:76:3b:bc:dd:1f:af:
                    a1:c2:00:44:fb:bc:a1:3b:e0:ca:e6:25:45:a3:a9:
                    b4:50:20:f7:8a:07:d9:b1:e6:f8:9c:3a:87:7e:d8:
                    80:86:26:62:18:7e:a6:67:5c:6f:15:d9:e4:6c:d2:
                    2e:8c:72:19:10:c6:b4:38:30:29:43:88:a7:b6:e7:
                    ae:75:1d:f9:2e:0b:9b:22:4d:28:f5:64:ef:f7:9d:
                    d1:e5:9c:77:76:c2:ff:4a:bc:3b:0e:c5:25:8b:49:
                    a8:a1:28:a4:dd:99:3b:66:25:9a:62:4e:1d:73:de:
                    35:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:26:D6:6C:3F:F0:46:97:F5:F9:9C:1F:18:A0:07:62:74:92:F5:F5
            X509v3 Authority Key Identifier:
                keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:86:b8:ca:94:b7:51:54:e4:42:8b:4d:6b:52:c7:8a:e8:f6:
         de:71:59:b3:ab:d0:ef:5b:75:1d:5a:e6:82:5e:71:ab:24:e5:
         94:6c:2f:36:d5:91:75:8f:09:89:54:e4:bd:11:19:af:71:ca:
         41:95:b5:72:f4:d0:f6:1b:a6:91:27:af:b1:c6:ec:3c:c6:7e:
         74:67:f0:70:92:1e:b7:e0:86:97:bc:5b:6f:cf:9d:98:cc:6c:
         eb:ec:55:2a:33:32:45:d9:57:ef:d3:4d:86:be:fc:c8:00:3e:
         9e:bb:9f:2b:c2:84:57:6e:e2:80:3c:dc:b4:c0:17:4a:7a:93:
         26:4d:d2:59:8d:25:87:0b:8a:d0:d1:f4:d9:e0:c3:af:60:d6:
         3b:cc:2e:e5:26:ef:92:bc:66:d7:6e:d4:ce:9e:9e:54:8f:a6:
         ed:47:f7:39:2d:af:1a:52:61:ec:7c:7b:77:5a:ab:1d:65:7f:
         24:14:6f:52:bc:7b:cc:f6:2b:bd:7a:dc:3d:c5:2a:20:bf:bd:
         42:f2:8c:38:3a:f3:fe:d4:98:fd:fa:d6:0c:02:91:84:3e:57:
         c5:61:c0:f0:a1:19:c9:95:75:fa:eb:d7:65:b8:07:a3:3d:8c:
         f6:03:7b:50:26:11:da:0c:2d:09:1a:e6:bf:36:1c:bd:97:13:
         fa:91:77:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRoE9SDiglna0M/iCQ9ZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUwMzI5MDUwMTExWhcNMjUwMzMwMDUwMTExWjAzMTEwLwYDVQQD
EyhjNjI2ZDY2YzNmZjA0Njk3ZjVmOTljMWYxOGEwMDc2Mjc0OTJmNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy8fXueAmcnSYQdXrmP/56bmQoWp
pkai5jSVhowjoFRFQBHGx2chWs3HsOb1PABhyS1yauS/mzDsIlcApHMGWoBh0m3n
MOYjEYSO5wZTrUMzkX4UKTMQA2ArOML+VCj/UPbzhzNq/4O3D1cRVgzZp4bC3951
J+lC95Zvt5+HZqwDdUlOG2xvuS5M4ASmdKd2O7zdH6+hwgBE+7yhO+DK5iVFo6m0
UCD3igfZseb4nDqHftiAhiZiGH6mZ1xvFdnkbNIujHIZEMa0ODApQ4intueudR35
LgubIk0o9WTv953R5Zx3dsL/Srw7DsUli0mooSik3Zk7ZiWaYk4dc9415wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYm1mw/8EaX9fmcHxigB2J0kvX1MB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIa4ypS3
UVTkQotNa1LHiuj23nFZs6vQ71t1HVrmgl5xqyTllGwvNtWRdY8JiVTkvREZr3HK
QZW1cvTQ9humkSevscbsPMZ+dGfwcJIet+CGl7xbb8+dmMxs6+xVKjMyRdlX79NN
hr78yAA+nrufK8KEV27igDzctMAXSnqTJk3SWY0lhwuK0NH02eDDr2DWO8wu5Sbv
krxm127Uzp6eVI+m7Uf3OS2vGlJh7Hx7d1qrHWV/JBRvUrx7zPYrvXrcPcUqIL+9
QvKMODrz/tSY/frWDAKRhD5XxWHA8KEZyZV1+uvXZbgHoz2M9gN7UCYR2gwtCRrm
vzYcvZcT+pF3uw==
-----END CERTIFICATE-----