Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File:                     lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier:          eemzpEdGx42ezGQ7Ma+N/Ou57EZg6lF0VG3973fCZ3M=
Subject key identifier:   67:03:73:95:1F:D1:97:3E:E8:DA:84:89:06:72:DA:BA:62:E5:AA:20
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer:       /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial:       01962DF42F0D90815E726A3ABB64E8D76E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number:          0364
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
                          2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: cTGe5HC3FMhndAeLm9poU7NykXHQlNNWCBfaNGWG90E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2f:0d:90:81:5e:72:6a:3a:bb:64:e8:d7:6e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=670373951fd1973ee8da84890672daba62e5aa20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:d6:35:a3:c7:80:39:c8:1a:0b:d0:7f:c4:
                    bf:4d:f8:a1:a4:48:92:a7:c1:f9:85:23:de:1a:d5:
                    13:30:b9:0f:4e:23:b5:94:12:77:16:fc:c3:86:7c:
                    c2:89:e1:08:ac:26:e9:f0:0f:e5:87:b5:15:e0:a4:
                    f7:02:7a:f5:80:da:14:45:0f:0d:b5:95:3e:6b:5e:
                    29:93:a8:48:01:70:d3:d3:8d:1f:90:18:28:88:d2:
                    11:64:ca:64:3c:da:42:6a:61:6f:ed:a0:b4:5c:6d:
                    68:15:2e:7d:59:7b:f4:c8:fe:cc:09:c7:59:42:96:
                    95:ce:bd:94:66:db:de:e5:07:6f:76:4e:e6:c9:19:
                    4d:3b:fa:36:db:25:a9:cb:eb:37:ab:f9:79:e3:bf:
                    61:da:a7:79:a7:19:e8:8b:84:9f:5f:10:4f:07:30:
                    68:5c:a1:08:5c:6f:02:e9:98:85:15:5b:2f:c1:09:
                    12:cb:86:d8:85:85:cc:6f:59:40:6e:12:24:8a:3d:
                    ef:78:d9:c6:d1:0c:98:4c:0c:04:13:ea:8c:56:df:
                    3e:4c:fd:06:b1:72:49:10:06:8c:96:9c:a7:32:e2:
                    76:a1:c8:70:22:6f:2a:37:40:82:be:e3:93:97:11:
                    a6:35:20:36:99:c0:81:36:42:e3:7b:1f:c4:da:b0:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:03:73:95:1F:D1:97:3E:E8:DA:84:89:06:72:DA:BA:62:E5:AA:20
            X509v3 Authority Key Identifier:
                keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:22:e4:bb:49:03:72:88:4a:99:33:9a:00:6e:c6:11:40:
         15:7e:d9:41:3a:b5:ae:c1:90:0d:4e:f5:06:34:2d:5f:60:7c:
         cd:81:59:61:ab:a3:26:bb:22:7e:07:08:22:b8:17:9e:f9:53:
         0a:e1:2b:ba:83:4d:fb:0d:51:9a:cb:aa:43:ab:e7:09:d2:b3:
         d1:98:bf:93:b1:12:6d:d1:21:99:5a:10:2a:eb:e0:28:ba:51:
         9e:5e:0c:56:61:0c:88:6c:98:9d:34:da:6d:19:60:e6:ab:1c:
         1e:f9:61:38:9a:e9:0b:6f:90:6d:42:d3:c8:4a:3a:1d:e8:8f:
         34:e7:a4:a7:48:2f:00:fd:71:c6:f0:9d:03:66:60:52:a9:88:
         b4:fa:37:87:b1:df:11:f5:65:93:80:39:18:0b:a9:1a:1e:d9:
         9d:a0:b9:86:08:4d:0a:cd:09:d0:a0:c1:8f:88:ca:45:c7:28:
         87:b3:19:a8:94:76:df:fc:92:35:2b:b4:01:52:b7:1c:86:00:
         75:ad:b8:f1:9f:20:d6:16:1f:83:b0:3b:5f:f8:b4:1c:8c:7b:
         0d:92:29:d4:2f:b2:71:83:84:c5:25:b8:9f:0a:c6:01:d7:20:
         b7:fe:a1:e0:f4:b9:ae:73:ed:eb:3e:ba:4f:87:fb:c0:74:c6:
         fa:36:6f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9C8NkIFecmo6u2To125dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTgzMmYwMjVjYmVmYTFlYTFiY2EwYzM5MGI2M2MxNzY5
NDhjZDIwHhcNMjUwNDEzMDcwMTM5WhcNMjUwNDE0MDcwMTM5WjAzMTEwLwYDVQQD
Eyg2NzAzNzM5NTFmZDE5NzNlZThkYTg0ODkwNjcyZGFiYTYyZTVhYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoInWNaPHgDnIGgvQf8S/TfihpEiS
p8H5hSPeGtUTMLkPTiO1lBJ3FvzDhnzCieEIrCbp8A/lh7UV4KT3Anr1gNoURQ8N
tZU+a14pk6hIAXDT040fkBgoiNIRZMpkPNpCamFv7aC0XG1oFS59WXv0yP7MCcdZ
QpaVzr2UZtve5Qdvdk7myRlNO/o22yWpy+s3q/l5479h2qd5pxnoi4SfXxBPBzBo
XKEIXG8C6ZiFFVsvwQkSy4bYhYXMb1lAbhIkij3veNnG0QyYTAwEE+qMVt8+TP0G
sXJJEAaMlpynMuJ2ochwIm8qN0CCvuOTlxGmNSA2mcCBNkLjex/E2rDe0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcDc5Uf0Zc+6NqEiQZy2rpi5aogMB8GA1UdIwQY
MBaAFJSYMvAly++h6hvKDDkLY8F2lIzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQt
NzhmYzNiYzI4YmExLzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQtNzhmYzNiYzI4YmEx
LzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8wi5LtJ
A3KISpkzmgBuxhFAFX7ZQTq1rsGQDU71BjQtX2B8zYFZYaujJrsifgcIIrgXnvlT
CuEruoNN+w1RmsuqQ6vnCdKz0Zi/k7ESbdEhmVoQKuvgKLpRnl4MVmEMiGyYnTTa
bRlg5qscHvlhOJrpC2+QbULTyEo6HeiPNOekp0gvAP1xxvCdA2ZgUqmItPo3h7Hf
EfVlk4A5GAupGh7ZnaC5hghNCs0J0KDBj4jKRccoh7MZqJR23/ySNSu0AVK3HIYA
da248Z8g1hYfg7A7X/i0HIx7DZIp1C+ycYOExSW4nwrGAdcgt/6h4PS5rnPt6z66
T4f7wHTG+jZvXQ==
-----END CERTIFICATE-----