Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
File:                     V8e-KewTsKsBiXQR6G7Piw87NEo.mft (raw, json)
Hash identifier:          2QLNFFktHF5HeZcnnSnuRSAqABuCP5xQGpe2KNlqDs4=
Subject key identifier:   D5:88:3C:03:C8:A7:2E:5F:4A:3D:47:D1:C6:01:64:D0:DD:F6:7A:18
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Certificate issuer:       /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial:       01962ECFA6559AC2393E75ED2811814C49F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: EQPOhUSrp_265j0O-uMyhE9jt_I.roa (hash: rrM5XgLKkJnvxVqnAYFYnHJh7gl05YTg1NaJpYIDwHg=)
                          2: V8e-KewTsKsBiXQR6G7Piw87NEo.crl (hash: p39tXrNgkAfSKy1VDm3FQwS+CjuGCoGnGwMImMf5KTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a6:55:9a:c2:39:3e:75:ed:28:11:81:4c:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=d5883c03c8a72e5f4a3d47d1c60164d0ddf67a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:cd:21:e5:88:5c:49:02:6c:9c:b4:fb:44:
                    1c:12:98:f3:ae:64:f2:31:69:6e:62:a8:81:ac:40:
                    28:69:87:85:b5:54:8f:78:56:6a:d3:dd:ab:1c:29:
                    50:bc:72:e6:47:ea:ce:ce:6a:f0:a5:79:e3:bc:2a:
                    9d:74:e4:23:12:0e:08:b4:47:64:b3:05:6d:ac:5d:
                    cd:a0:fc:e4:c4:a8:f1:47:91:ba:71:37:82:7c:e3:
                    89:14:79:a2:80:08:9b:14:ed:9a:14:9c:d8:5a:30:
                    bd:a9:64:69:32:01:25:5d:fa:33:b1:d5:6a:bc:12:
                    16:a6:af:c7:d1:8b:b2:54:b0:35:f6:7f:4b:fa:39:
                    ac:8e:91:b3:ab:c9:62:23:02:91:5e:31:dd:4f:e5:
                    5a:92:18:ba:04:da:eb:81:04:66:d7:59:60:36:17:
                    78:08:af:21:75:3a:36:6e:be:ad:45:b4:ec:b0:30:
                    7b:d3:96:63:c0:c5:e4:3a:96:e0:5d:42:a6:5e:6d:
                    4c:a2:2a:80:e1:14:4e:dd:90:e9:9d:08:04:e8:59:
                    ad:fb:b3:4d:22:82:8e:39:a2:9c:5e:cd:e2:e6:2f:
                    a3:85:9f:0b:bd:b5:82:a4:9f:7f:75:e3:0f:83:31:
                    a9:5b:15:b8:71:09:cc:a0:52:42:44:e1:99:33:78:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:3C:03:C8:A7:2E:5F:4A:3D:47:D1:C6:01:64:D0:DD:F6:7A:18
            X509v3 Authority Key Identifier:
                keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:ab:5c:9e:97:c3:9b:e7:fd:03:53:8a:5e:d0:56:62:0a:
         25:54:8d:78:93:58:af:da:f0:1a:ba:a1:29:91:42:55:ae:93:
         73:ae:bf:c4:0b:7a:35:58:73:71:aa:8f:49:07:ec:46:8d:8b:
         df:20:1b:20:1d:29:13:7c:5c:d0:d7:a0:66:0c:5f:5e:c7:e3:
         0f:9a:4a:28:19:8a:39:71:25:c6:b0:59:9e:d9:7f:83:51:1a:
         4e:12:99:3c:90:65:56:3a:00:ad:c7:15:24:44:c4:a3:e1:40:
         ef:04:08:ba:5a:90:40:30:ab:f8:9f:62:f1:69:66:b0:21:38:
         bd:68:ad:68:6c:c0:71:9f:f0:92:37:b2:cd:cb:eb:63:be:f6:
         f0:61:92:75:1b:15:3b:14:28:23:3c:0a:69:a3:5c:5a:80:a8:
         45:d1:b1:74:45:b2:f3:e8:e5:89:7b:2f:89:84:59:16:88:22:
         31:a4:05:49:00:2a:71:cf:19:2f:ae:1a:08:06:b5:8d:08:0a:
         e1:3a:9b:95:98:93:0f:fc:77:91:ef:8d:26:5d:bd:7b:dd:a5:
         d6:c4:29:be:60:20:27:42:ea:00:10:c2:c6:51:15:88:f4:6b:
         3e:5d:88:f2:a9:94:98:f9:c5:f0:ee:8d:ea:8c:5c:d0:19:7c:
         53:f7:11:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6ZVmsI5PnXtKBGBTEnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzdiZTI5ZWMxM2IwYWIwMTg5NzQxMWU4NmVjZjhiMGYz
YjM0NGEwHhcNMjUwNDEzMTEwMTIyWhcNMjUwNDE0MTEwMTIyWjAzMTEwLwYDVQQD
EyhkNTg4M2MwM2M4YTcyZTVmNGEzZDQ3ZDFjNjAxNjRkMGRkZjY3YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmvNIeWIXEkCbJy0+0QcEpjzrmTy
MWluYqiBrEAoaYeFtVSPeFZq092rHClQvHLmR+rOzmrwpXnjvCqddOQjEg4ItEdk
swVtrF3NoPzkxKjxR5G6cTeCfOOJFHmigAibFO2aFJzYWjC9qWRpMgElXfozsdVq
vBIWpq/H0YuyVLA19n9L+jmsjpGzq8liIwKRXjHdT+Vakhi6BNrrgQRm11lgNhd4
CK8hdTo2br6tRbTssDB705ZjwMXkOpbgXUKmXm1MoiqA4RRO3ZDpnQgE6Fmt+7NN
IoKOOaKcXs3i5i+jhZ8LvbWCpJ9/deMPgzGpWxW4cQnMoFJCROGZM3jGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWIPAPIpy5fSj1H0cYBZNDd9noYMB8GA1UdIwQY
MBaAFFfHvinsE7CrAYl0Eehuz4sPOzRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEt
YmFlMWQ5ZWVjNDFhLzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEtYmFlMWQ5ZWVjNDFh
LzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7OrXJ6X
w5vn/QNTil7QVmIKJVSNeJNYr9rwGrqhKZFCVa6Tc66/xAt6NVhzcaqPSQfsRo2L
3yAbIB0pE3xc0NegZgxfXsfjD5pKKBmKOXElxrBZntl/g1EaThKZPJBlVjoArccV
JETEo+FA7wQIulqQQDCr+J9i8WlmsCE4vWitaGzAcZ/wkjeyzcvrY7728GGSdRsV
OxQoIzwKaaNcWoCoRdGxdEWy8+jliXsviYRZFogiMaQFSQAqcc8ZL64aCAa1jQgK
4TqblZiTD/x3ke+NJl29e92l1sQpvmAgJ0LqABDCxlEViPRrPl2I8qmUmPnF8O6N
6oxc0Bl8U/cR0A==
-----END CERTIFICATE-----