Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          CVVbb7vPc42b89xSbVBSC7EvEkfIDFw4GnDw6nVBhcE=
Subject key identifier:   6C:E7:E8:23:7F:04:7B:B9:63:FA:BB:D5:9B:73:61:84:D1:94:B0:FF
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       01962F743E1E82721531577DE1C86ED2B72C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: 44mFZ6JzKCoYvuYWvF/0sUxtHQQFbD4hPjrJsGkRKrc=)
                          3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
                          4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3e:1e:82:72:15:31:57:7d:e1:c8:6e:d2:b7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=6ce7e8237f047bb963fabbd59b736184d194b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:75:68:bc:89:6b:e7:a7:d9:2b:7f:a5:02:a0:
                    db:59:85:56:f6:4f:b9:4c:38:5e:43:6b:64:ef:3f:
                    fe:f3:19:7b:be:80:6d:81:66:42:ed:d9:d5:7f:d0:
                    51:14:50:0a:ec:b6:df:69:7f:6e:19:6c:52:4f:5e:
                    86:71:c3:f7:b4:a6:17:f1:80:f8:38:8f:91:07:c3:
                    a3:35:45:a4:9b:2a:7a:46:de:f3:b2:92:35:42:38:
                    6d:26:cb:52:e0:82:95:f4:bc:8e:c6:f2:bb:8d:bc:
                    bd:f7:17:cc:06:db:81:cc:6f:34:cf:7e:a8:a8:68:
                    d1:49:bb:31:e5:85:be:51:36:d0:22:b9:ea:d5:2d:
                    7a:f8:bb:39:fd:dc:a3:57:54:d7:29:e6:90:01:6b:
                    5d:f3:5c:e8:af:6b:70:47:b7:a1:5d:52:47:5c:d7:
                    8b:b3:ba:3f:84:dd:85:f7:e2:19:a2:60:94:d5:56:
                    ba:0b:b9:c5:82:35:f9:07:65:5f:fc:43:71:40:c3:
                    ec:14:d8:a3:9c:26:b9:2d:16:f7:86:66:18:65:ce:
                    b7:8e:f4:8b:f4:71:63:0f:4a:ab:14:29:d9:4a:c6:
                    cc:9b:e1:7e:71:b5:26:7d:b2:64:74:76:08:da:0a:
                    3f:92:b3:80:e2:bc:f4:d0:48:d3:ec:6f:e9:7d:77:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:E8:23:7F:04:7B:B9:63:FA:BB:D5:9B:73:61:84:D1:94:B0:FF
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:9a:b7:7b:aa:92:6f:c5:ab:73:e6:30:28:fa:32:47:45:
         11:50:ab:26:a6:be:60:59:55:dd:19:21:90:f5:ef:b6:df:83:
         1b:0b:16:c7:15:95:46:dd:32:a7:9c:53:5f:32:2d:52:e1:69:
         82:bb:b0:75:85:b7:28:ea:d4:90:bf:d7:ea:ce:73:cf:66:33:
         9e:65:31:4d:f3:89:cc:87:a2:b1:18:03:dc:51:82:c3:d4:52:
         18:15:b4:32:11:73:ce:5d:27:40:e4:2d:0c:a1:6f:e5:e8:8a:
         4b:96:56:4a:d7:82:13:ba:69:51:79:2a:03:62:61:11:3f:cd:
         f4:c4:71:92:8f:0c:68:ba:02:60:08:6d:33:6d:a2:1a:0a:b7:
         c0:f9:43:f4:03:55:17:57:5d:d7:bc:d5:a4:c4:2d:37:e6:f6:
         71:56:e9:46:0c:56:07:8e:c6:97:ab:59:94:04:91:a8:73:4e:
         4a:7a:a5:33:98:59:4c:05:de:b8:27:12:f6:c6:5c:0d:9d:16:
         a1:c3:0e:9e:1b:81:b9:57:5d:d0:06:86:38:ac:ff:bd:e1:ec:
         a3:21:28:2c:52:30:26:c4:20:4a:d5:21:16:90:2d:17:7b:9b:
         04:d5:87:e5:4a:1f:c9:a2:ef:e7:8f:e1:ac:16:42:00:3a:30:
         ff:b0:9d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdD4egnIVMVd94chu0rcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjUwNDEzMTQwMTA5WhcNMjUwNDE0MTQwMTA5WjAzMTEwLwYDVQQD
Eyg2Y2U3ZTgyMzdmMDQ3YmI5NjNmYWJiZDU5YjczNjE4NGQxOTRiMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nVovIlr56fZK3+lAqDbWYVW9k+5
TDheQ2tk7z/+8xl7voBtgWZC7dnVf9BRFFAK7LbfaX9uGWxST16GccP3tKYX8YD4
OI+RB8OjNUWkmyp6Rt7zspI1QjhtJstS4IKV9LyOxvK7jby99xfMBtuBzG80z36o
qGjRSbsx5YW+UTbQIrnq1S16+Ls5/dyjV1TXKeaQAWtd81zor2twR7ehXVJHXNeL
s7o/hN2F9+IZomCU1Va6C7nFgjX5B2Vf/ENxQMPsFNijnCa5LRb3hmYYZc63jvSL
9HFjD0qrFCnZSsbMm+F+cbUmfbJkdHYI2go/krOA4rz00EjT7G/pfXcDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzn6CN/BHu5Y/q71ZtzYYTRlLD/MB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr+at3uq
km/Fq3PmMCj6MkdFEVCrJqa+YFlV3RkhkPXvtt+DGwsWxxWVRt0yp5xTXzItUuFp
gruwdYW3KOrUkL/X6s5zz2YznmUxTfOJzIeisRgD3FGCw9RSGBW0MhFzzl0nQOQt
DKFv5eiKS5ZWSteCE7ppUXkqA2JhET/N9MRxko8MaLoCYAhtM22iGgq3wPlD9ANV
F1dd17zVpMQtN+b2cVbpRgxWB47Gl6tZlASRqHNOSnqlM5hZTAXeuCcS9sZcDZ0W
ocMOnhuBuVdd0AaGOKz/veHsoyEoLFIwJsQgStUhFpAtF3ubBNWH5UofyaLv54/h
rBZCADow/7Cd3g==
-----END CERTIFICATE-----