Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File:                     4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier:          qH7/ivpG0WJE4RcC+fGKJ0GwgtPmdmmP/PYL2tfxNlc=
Subject key identifier:   AC:B6:5E:A0:83:92:A1:2C:24:11:79:11:B9:E0:74:67:6B:6C:AC:00
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer:       /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial:       0194BD8592A1EBFE23E79CDC4B902691AAE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 18:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:35 +0000
Files and hashes:         1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 1/FcBMYx7WFoDpMcapyaVYaY1E+R0I9h4+3xsvImPeU=)
                          2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
                          3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
                          4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
                          5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
                          6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
                          7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
                          8: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
                          9: vStv_OvsCtAGyFlJC0SKr9auzs0.roa (hash: CHh/qONNygZ5ywon/o5XpHUBPM37qr0xrts1mGCo92Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:92:a1:eb:fe:23:e7:9c:dc:4b:90:26:91:aa:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
        Validity
            Not Before: Jan 31 18:00:35 2025 GMT
            Not After : Feb  1 18:00:35 2025 GMT
        Subject: CN=acb65ea08392a12c24117911b9e074676b6cac00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:16:7c:0a:39:8d:51:65:32:1e:12:11:a0:
                    9e:76:ef:ad:4b:d8:3b:2b:16:4c:0f:33:1d:57:aa:
                    71:01:7a:4c:1b:5b:b3:46:c0:5e:49:c5:a5:05:ef:
                    ec:bc:4a:b8:8c:61:e7:65:90:1d:f6:db:1e:7e:01:
                    43:33:56:b4:7b:e7:e3:5b:e1:b6:4c:f3:6f:6e:70:
                    e6:77:0f:fe:8e:6f:09:cb:da:ee:e5:74:42:8e:df:
                    c6:51:82:fb:5a:8e:8b:73:a7:06:2d:f3:f2:0c:c4:
                    75:75:50:77:85:60:84:cb:68:10:18:3a:de:7b:d2:
                    bc:4c:70:da:79:7d:00:55:9d:5d:c3:55:11:37:75:
                    68:99:e5:79:b4:71:23:0a:66:86:d1:50:15:df:ff:
                    fe:fc:bb:53:e9:da:c4:6b:e5:cc:6d:78:01:17:2f:
                    1d:33:e8:93:34:b4:3f:2b:4e:68:85:bf:f0:0d:0e:
                    83:48:1b:64:34:f3:1a:57:3b:83:7c:f0:92:a0:61:
                    63:55:ce:fe:5f:02:f0:e4:8e:b6:09:3d:6f:80:f1:
                    54:5f:f7:92:34:3d:a1:30:91:e1:dd:71:42:f1:7c:
                    de:02:17:fd:04:44:2d:3f:ce:9a:a3:dc:57:95:f8:
                    6d:59:ee:c3:7c:d8:86:b9:d2:c9:86:fe:05:75:f5:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B6:5E:A0:83:92:A1:2C:24:11:79:11:B9:E0:74:67:6B:6C:AC:00
            X509v3 Authority Key Identifier:
                keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:80:83:1c:4b:29:41:42:28:e6:59:d1:f8:5c:34:5d:01:
         27:01:6c:c7:b2:60:c4:e2:36:36:b2:b3:f6:ff:05:46:c8:83:
         05:b4:79:6f:3f:9a:89:bc:f3:79:ca:93:cd:21:71:fc:53:8f:
         b3:25:ef:45:8e:3a:1f:ef:01:b1:40:8d:a5:c8:2c:42:4c:80:
         5a:31:25:18:81:9a:87:d8:22:02:a7:7c:42:93:fc:ea:c6:b8:
         b8:e9:2d:3f:eb:78:79:7d:58:d2:e4:84:d7:66:d1:9f:bd:32:
         0e:ae:59:c6:bd:2f:20:7a:96:ae:6a:93:6c:11:5d:80:e6:87:
         2d:e4:7e:2b:9e:59:f9:53:63:1b:3a:0d:f5:3f:9a:ef:66:0e:
         8d:b8:cf:d4:c6:77:f4:dd:b3:52:7d:8a:b0:c0:a9:f8:58:9a:
         19:29:08:83:3f:7a:4a:ea:b4:37:fe:85:c8:24:05:55:31:74:
         52:42:f6:05:8c:c5:28:08:15:31:12:48:73:79:a4:1d:e9:a9:
         39:37:33:ba:2e:59:14:07:33:4a:7e:a8:37:b7:e6:3f:c3:3c:
         9e:dd:a9:14:a4:3f:92:6d:ae:97:6a:08:d4:e8:a6:24:94:0a:
         5f:8d:85:1c:00:c8:9e:5f:80:db:ba:fa:6c:76:96:1f:51:80:
         71:d7:04:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZKh6/4j55zcS5AmkarpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUwMTMxMTgwMDM1WhcNMjUwMjAxMTgwMDM1WjAzMTEwLwYDVQQD
EyhhY2I2NWVhMDgzOTJhMTJjMjQxMTc5MTFiOWUwNzQ2NzZiNmNhYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn4WfAo5jVFlMh4SEaCedu+tS9g7
KxZMDzMdV6pxAXpMG1uzRsBeScWlBe/svEq4jGHnZZAd9tsefgFDM1a0e+fjW+G2
TPNvbnDmdw/+jm8Jy9ru5XRCjt/GUYL7Wo6Lc6cGLfPyDMR1dVB3hWCEy2gQGDre
e9K8THDaeX0AVZ1dw1URN3VomeV5tHEjCmaG0VAV3//+/LtT6drEa+XMbXgBFy8d
M+iTNLQ/K05ohb/wDQ6DSBtkNPMaVzuDfPCSoGFjVc7+XwLw5I62CT1vgPFUX/eS
ND2hMJHh3XFC8XzeAhf9BEQtP86ao9xXlfhtWe7DfNiGudLJhv4FdfX53wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy2XqCDkqEsJBF5EbngdGdrbKwAMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj6AgxxL
KUFCKOZZ0fhcNF0BJwFsx7JgxOI2NrKz9v8FRsiDBbR5bz+aibzzecqTzSFx/FOP
syXvRY46H+8BsUCNpcgsQkyAWjElGIGah9giAqd8QpP86sa4uOktP+t4eX1Y0uSE
12bRn70yDq5Zxr0vIHqWrmqTbBFdgOaHLeR+K55Z+VNjGzoN9T+a72YOjbjP1MZ3
9N2zUn2KsMCp+FiaGSkIgz96Suq0N/6FyCQFVTF0UkL2BYzFKAgVMRJIc3mkHemp
OTczui5ZFAczSn6oN7fmP8M8nt2pFKQ/km2ul2oI1OimJJQKX42FHADInl+A27r6
bHaWH1GAcdcESw==
-----END CERTIFICATE-----