Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          zRojGC5KfT405/FUNTyfF0rLih35BPOBhTVaBgjRZH8=
Subject key identifier:   1B:4C:88:A2:5D:92:6F:8C:55:B9:6B:86:25:16:70:67:BB:52:CE:72
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       01962F3DA7FA37C17FF9D24252494AEDED18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          140E
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: PTERD8htZbWWjwlUnhZ5+AZXha54KgdqPyhsYSZB5pc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a7:fa:37:c1:7f:f9:d2:42:52:49:4a:ed:ed:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=1b4c88a25d926f8c55b96b8625167067bb52ce72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:fe:69:da:ba:23:59:cd:e7:45:ec:19:95:
                    ba:1e:3b:ee:5c:8c:d8:34:b1:11:a8:11:2d:1d:d0:
                    ec:6a:87:e1:9e:30:93:70:38:0f:1a:bb:6b:0a:25:
                    8c:c2:4c:cd:c0:8a:b4:f0:80:ef:ef:d8:0b:2d:6a:
                    29:50:c0:97:f7:be:7d:60:9c:fb:55:80:8a:65:63:
                    14:d3:c7:9c:e0:70:50:70:0d:2f:12:92:dc:17:dd:
                    d9:e7:54:f4:d5:d1:4b:53:5b:aa:cd:22:ae:5f:d6:
                    09:41:7a:30:3d:3e:75:cc:c2:91:d2:e2:30:78:8e:
                    c2:f0:ec:35:a6:93:be:38:ad:92:5d:fe:14:d9:f0:
                    79:2e:63:e8:e6:b1:59:2c:96:bd:24:65:df:61:7e:
                    e0:98:e9:7a:46:1d:d5:4f:f4:1e:64:87:71:45:e7:
                    2b:8b:16:92:12:15:e9:6e:ec:98:35:6d:80:a2:9d:
                    3b:3c:65:d7:2c:88:ac:6b:cb:de:1e:68:2d:51:c1:
                    27:c4:6e:be:24:4b:ca:cc:d7:cf:1e:2b:db:95:4c:
                    41:ae:b2:ef:e4:ad:79:38:b8:38:5b:6d:d9:2c:16:
                    c6:79:66:2e:29:60:39:52:3f:59:88:0a:9e:65:ee:
                    a2:89:82:10:c4:31:98:61:47:65:f3:32:09:23:8e:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:88:A2:5D:92:6F:8C:55:B9:6B:86:25:16:70:67:BB:52:CE:72
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:12:cd:d3:55:ce:da:5a:66:bb:43:27:e0:a0:e8:46:bc:39:
         55:5d:0c:a6:49:e9:e4:66:ac:c6:ce:86:51:a3:58:95:67:6e:
         03:5b:82:f3:c2:73:f9:f0:10:2c:01:30:88:f5:55:ad:60:a7:
         39:38:d6:e8:91:6f:62:f3:47:da:23:ac:c9:43:13:49:71:c9:
         33:d0:38:ea:f6:1b:8e:82:0e:3f:57:9c:12:05:75:4a:be:1e:
         d2:c8:c2:9b:90:4b:2c:76:ba:79:c1:8a:9a:17:6c:72:b3:c8:
         45:76:5c:d5:2c:82:ba:cb:4d:3f:6a:91:6e:99:d9:81:e3:3b:
         cf:c1:19:80:a5:d8:7b:44:b4:96:a7:70:64:e6:2b:3e:ab:1d:
         16:4c:28:d5:0b:14:6e:b9:2e:3f:26:d3:03:e9:e3:eb:76:95:
         52:b0:4f:20:e9:5b:77:77:14:3a:4c:73:92:a2:f9:f2:c1:a4:
         06:65:8e:fe:fd:da:a8:fb:96:87:be:7f:4a:8e:cc:19:7e:3b:
         50:b2:cd:f3:d4:50:0d:e7:e6:15:e8:93:f5:e8:27:06:92:ac:
         31:b9:b0:90:02:1a:c9:3c:b9:e3:30:a9:c9:c7:c8:0f:ac:ab:
         be:29:84:5d:62:a4:2d:b7:2f:82:85:f8:c7:dc:16:f4:5a:8b:
         3a:61:9a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaf6N8F/+dJCUklK7e0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3
MGNlN2QwHhcNMjUwNDEzMTMwMTMxWhcNMjUwNDE0MTMwMTMxWjAzMTEwLwYDVQQD
EygxYjRjODhhMjVkOTI2ZjhjNTViOTZiODYyNTE2NzA2N2JiNTJjZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQT+adq6I1nN50XsGZW6HjvuXIzY
NLERqBEtHdDsaofhnjCTcDgPGrtrCiWMwkzNwIq08IDv79gLLWopUMCX9759YJz7
VYCKZWMU08ec4HBQcA0vEpLcF93Z51T01dFLU1uqzSKuX9YJQXowPT51zMKR0uIw
eI7C8Ow1ppO+OK2SXf4U2fB5LmPo5rFZLJa9JGXfYX7gmOl6Rh3VT/QeZIdxRecr
ixaSEhXpbuyYNW2Aop07PGXXLIisa8veHmgtUcEnxG6+JEvKzNfPHivblUxBrrLv
5K15OLg4W23ZLBbGeWYuKWA5Uj9ZiAqeZe6iiYIQxDGYYUdl8zIJI446iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtMiKJdkm+MVblrhiUWcGe7Us5yMB8GA1UdIwQY
MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt
M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh
LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBLN01XO
2lpmu0Mn4KDoRrw5VV0Mpknp5Gasxs6GUaNYlWduA1uC88Jz+fAQLAEwiPVVrWCn
OTjW6JFvYvNH2iOsyUMTSXHJM9A46vYbjoIOP1ecEgV1Sr4e0sjCm5BLLHa6ecGK
mhdscrPIRXZc1SyCustNP2qRbpnZgeM7z8EZgKXYe0S0lqdwZOYrPqsdFkwo1QsU
brkuPybTA+nj63aVUrBPIOlbd3cUOkxzkqL58sGkBmWO/v3aqPuWh75/So7MGX47
ULLN89RQDefmFeiT9egnBpKsMbmwkAIayTy54zCpycfID6yrvimEXWKkLbcvgoX4
x9wW9FqLOmGaYA==
-----END CERTIFICATE-----