Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File:                     _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier:          C3XfhUq9HtcIk5+7KZ4v3Rkfr9XI0jgwl4/RJ888XqY=
Subject key identifier:   24:77:01:E5:5D:DF:8F:43:05:69:5B:7D:FD:15:04:B9:B6:D0:CE:98
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer:       /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial:       01962F74734F473139352AD68F41781461B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: a+M0gPduK5SopF7kRLpfOTy97+aJ5wPTii5cRKtflo8=)
                          2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=)
                          3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=)
                          4: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:73:4f:47:31:39:35:2a:d6:8f:41:78:14:61:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=247701e55ddf8f4305695b7dfd1504b9b6d0ce98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:8a:21:2b:ac:71:ca:20:be:28:3f:86:ac:
                    40:77:d1:39:92:58:92:8f:03:1d:5c:b8:2f:10:fa:
                    75:0b:11:a1:fe:8c:bd:f1:f6:c1:d9:3e:be:aa:5f:
                    95:1e:ed:31:e4:1f:e4:1a:f0:4e:b5:31:90:05:f1:
                    84:45:5f:85:87:d6:66:8e:51:ab:d4:30:0e:3f:1b:
                    89:a8:56:d4:c8:ab:88:4e:3d:cc:e8:ac:d1:de:ed:
                    ae:38:84:3e:5d:e4:c2:4e:45:bd:b3:a0:24:64:91:
                    2f:b7:7b:04:b6:00:a3:0b:f2:14:71:96:4c:ef:de:
                    0a:d8:55:10:77:e0:40:0e:7b:04:a4:da:8a:f6:4f:
                    43:c7:d5:0a:d6:6d:a4:c0:58:fe:b5:b2:72:b9:3b:
                    c5:96:16:64:6a:2c:73:b4:4f:ba:c2:3d:dc:f2:3d:
                    d0:9d:24:9e:c8:91:a0:b0:6f:02:5d:27:7c:3e:7a:
                    9a:01:a0:91:63:b6:68:c2:77:d8:60:97:21:54:0a:
                    1d:38:89:c4:d0:53:a4:9c:42:73:58:df:76:6d:46:
                    15:57:6c:d4:4b:99:45:99:62:64:60:fd:cd:12:eb:
                    1d:8b:b5:4a:30:d6:70:22:d2:2b:37:96:54:10:07:
                    b8:61:a5:4d:3b:26:a6:e7:d7:b7:0e:87:c5:b1:04:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:77:01:E5:5D:DF:8F:43:05:69:5B:7D:FD:15:04:B9:B6:D0:CE:98
            X509v3 Authority Key Identifier:
                keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:95:34:20:0e:f9:a5:3b:6f:79:00:59:93:53:8d:e0:7e:
         31:22:32:4a:57:07:bc:87:bb:49:ab:d6:8c:c5:a6:b6:0d:cb:
         76:a8:b6:27:12:35:9f:4b:21:26:d2:24:1c:e4:0a:ed:1f:92:
         00:a2:0c:81:10:df:20:3b:db:51:60:8f:a4:39:02:c8:27:8c:
         95:5f:92:63:13:fe:5c:e2:cd:de:01:bf:93:a5:e4:39:05:e4:
         fe:79:db:2c:9a:21:d8:43:7e:fe:d8:40:2e:af:cd:2a:10:d4:
         55:88:62:d2:f8:9d:a5:22:c3:9f:db:ba:2a:0e:f7:f9:98:56:
         25:69:55:f4:8b:83:63:11:de:62:79:14:f1:a3:77:f3:ad:84:
         9a:29:d5:52:6d:53:11:f7:c7:13:d0:b8:bc:51:cc:fb:1f:33:
         eb:91:8f:ab:13:e9:18:ed:bd:fb:f9:c9:c0:76:68:d9:49:0d:
         3b:56:c0:6f:8a:2b:93:d3:c7:22:1f:6b:7f:3e:bd:bd:94:32:
         e5:e0:cd:17:c3:53:b8:56:e5:a5:68:e8:3c:9d:bd:42:17:de:
         f6:83:64:83:f1:74:94:c5:01:37:15:6a:62:4d:6b:c2:a6:02:
         31:78:3f:31:d9:9a:4c:56:2c:85:09:fc:72:ee:d3:c9:78:e1:
         71:7e:5a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHNPRzE5NSrWj0F4FGG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi
NjI5ZWEwHhcNMjUwNDEzMTQwMTIyWhcNMjUwNDE0MTQwMTIyWjAzMTEwLwYDVQQD
EygyNDc3MDFlNTVkZGY4ZjQzMDU2OTViN2RmZDE1MDRiOWI2ZDBjZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYyKISusccogvig/hqxAd9E5kliS
jwMdXLgvEPp1CxGh/oy98fbB2T6+ql+VHu0x5B/kGvBOtTGQBfGERV+Fh9ZmjlGr
1DAOPxuJqFbUyKuITj3M6KzR3u2uOIQ+XeTCTkW9s6AkZJEvt3sEtgCjC/IUcZZM
794K2FUQd+BADnsEpNqK9k9Dx9UK1m2kwFj+tbJyuTvFlhZkaixztE+6wj3c8j3Q
nSSeyJGgsG8CXSd8PnqaAaCRY7ZownfYYJchVAodOInE0FOknEJzWN92bUYVV2zU
S5lFmWJkYP3NEusdi7VKMNZwItIrN5ZUEAe4YaVNOyam59e3DofFsQR2OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR3AeVd349DBWlbff0VBLm20M6YMB8GA1UdIwQY
MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt
OTU1NWQzMGY2ZjhmLzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm
LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqSVNCAO
+aU7b3kAWZNTjeB+MSIySlcHvIe7SavWjMWmtg3Ldqi2JxI1n0shJtIkHOQK7R+S
AKIMgRDfIDvbUWCPpDkCyCeMlV+SYxP+XOLN3gG/k6XkOQXk/nnbLJoh2EN+/thA
Lq/NKhDUVYhi0vidpSLDn9u6Kg73+ZhWJWlV9IuDYxHeYnkU8aN3862EminVUm1T
EffHE9C4vFHM+x8z65GPqxPpGO29+/nJwHZo2UkNO1bAb4ork9PHIh9rfz69vZQy
5eDNF8NTuFblpWjoPJ29Qhfe9oNkg/F0lMUBNxVqYk1rwqYCMXg/MdmaTFYshQn8
cu7TyXjhcX5amg==
-----END CERTIFICATE-----