Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File:                     tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier:          kkTRA9NqIV619olNfF5EFskTRE5Qkot63Oq1KTErnlY=
Subject key identifier:   C8:CA:7D:5C:BD:B7:C8:C7:BA:3A:2F:F7:CC:76:B9:A9:D5:DD:24:0E
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer:       /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial:       01962DF3DFB001629AEDC71ACD0E40F2DD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number:          0F5A
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
                          2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
                          3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: vR+rnYkE4o/UWuzxOglmh3udJuIzjYycv/UWUPOe+Z4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:b0:01:62:9a:ed:c7:1a:cd:0e:40:f2:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=c8ca7d5cbdb7c8c7ba3a2ff7cc76b9a9d5dd240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:99:31:f7:30:17:9e:3c:88:e7:c5:09:4f:
                    0f:0e:ed:0b:e9:2f:f8:04:0c:7d:12:da:a6:43:09:
                    c6:5d:36:fa:f8:0b:a7:d2:05:92:cf:b0:a9:88:f1:
                    2d:ce:1a:05:57:60:e9:e3:b1:f6:f8:72:cf:08:5b:
                    4d:cc:65:f7:56:31:b0:d3:d2:42:c5:9d:35:40:5f:
                    df:9b:81:a0:f7:b6:07:c4:65:42:78:2a:db:9f:98:
                    ec:48:d4:4f:0d:f8:c2:7e:90:91:ea:1c:e6:ea:ea:
                    0e:10:61:f1:5b:53:10:bc:da:96:91:ef:1d:a4:85:
                    29:57:7c:ec:65:a4:59:4b:c5:4e:5f:72:5e:47:d4:
                    a2:37:a4:b7:55:b8:7e:2a:3e:1c:78:86:13:69:b9:
                    84:87:90:e9:7e:04:ca:06:fd:a3:72:03:1f:4e:1e:
                    79:c0:7f:26:43:41:0c:97:55:8c:2a:54:a1:c7:b5:
                    4d:8b:1b:5c:5b:65:10:c4:62:7a:2d:28:e6:f5:3d:
                    e6:b1:01:b0:30:83:78:4f:fc:f0:25:2c:c5:59:53:
                    e4:82:b7:24:ff:17:5d:ed:00:f3:a8:3d:98:b2:fc:
                    82:ad:95:88:60:50:b5:43:18:2e:fa:e2:d7:cb:50:
                    e7:a0:be:53:9e:93:e8:41:b2:b9:b3:c7:a2:f1:57:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CA:7D:5C:BD:B7:C8:C7:BA:3A:2F:F7:CC:76:B9:A9:D5:DD:24:0E
            X509v3 Authority Key Identifier:
                keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:b0:a9:13:df:52:ca:87:90:73:bf:8d:95:af:14:60:1d:
         02:2d:0b:08:1d:57:4a:de:57:ea:91:bc:10:b6:33:0a:e1:25:
         38:2c:b4:18:34:da:a8:80:21:32:31:18:fe:f2:5b:2d:8d:9e:
         5c:69:e6:d1:f4:81:42:75:29:4f:cf:93:33:5a:c6:83:d1:3f:
         ab:85:ea:25:cd:32:38:d1:27:67:5d:48:7c:79:93:12:54:e4:
         b5:ed:e5:8e:9a:9a:b4:28:35:a4:5b:39:34:44:89:c8:48:83:
         4a:cf:43:5b:73:0c:b9:18:03:c0:2b:92:e5:d1:d5:88:4b:7c:
         1a:3a:90:1f:be:c2:7e:a3:cc:d4:4c:62:2a:4f:9c:21:50:38:
         20:99:50:35:0e:55:57:bf:0c:23:15:ea:f8:11:6b:fd:6a:17:
         5f:0f:9c:8b:cb:1f:c5:02:49:91:81:14:7e:06:53:b5:b5:8f:
         c3:63:ac:b5:0c:b1:41:29:5e:89:de:6c:b9:41:86:5d:25:d6:
         95:28:d2:14:92:69:bb:78:92:6a:c2:a9:b5:87:34:c0:04:2f:
         9c:d5:78:58:df:64:49:23:11:0e:e3:e7:cb:a6:c3:70:fd:91:
         c8:03:eb:9c:06:98:8c:52:5f:30:9b:54:39:36:5a:42:48:2f:
         76:33:13:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89+wAWKa7ccazQ5A8t0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjUwNDEzMDcwMTE5WhcNMjUwNDE0MDcwMTE5WjAzMTEwLwYDVQQD
EyhjOGNhN2Q1Y2JkYjdjOGM3YmEzYTJmZjdjYzc2YjlhOWQ1ZGQyNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyyZMfcwF548iOfFCU8PDu0L6S/4
BAx9EtqmQwnGXTb6+Aun0gWSz7CpiPEtzhoFV2Dp47H2+HLPCFtNzGX3VjGw09JC
xZ01QF/fm4Gg97YHxGVCeCrbn5jsSNRPDfjCfpCR6hzm6uoOEGHxW1MQvNqWke8d
pIUpV3zsZaRZS8VOX3JeR9SiN6S3Vbh+Kj4ceIYTabmEh5DpfgTKBv2jcgMfTh55
wH8mQ0EMl1WMKlShx7VNixtcW2UQxGJ6LSjm9T3msQGwMIN4T/zwJSzFWVPkgrck
/xdd7QDzqD2YsvyCrZWIYFC1Qxgu+uLXy1DnoL5TnpPoQbK5s8ei8VfwWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjKfVy9t8jHujov98x2uanV3SQOMB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXX6wqRPf
UsqHkHO/jZWvFGAdAi0LCB1XSt5X6pG8ELYzCuElOCy0GDTaqIAhMjEY/vJbLY2e
XGnm0fSBQnUpT8+TM1rGg9E/q4XqJc0yONEnZ11IfHmTElTkte3ljpqatCg1pFs5
NESJyEiDSs9DW3MMuRgDwCuS5dHViEt8GjqQH77CfqPM1ExiKk+cIVA4IJlQNQ5V
V78MIxXq+BFr/WoXXw+ci8sfxQJJkYEUfgZTtbWPw2OstQyxQSleid5suUGGXSXW
lSjSFJJpu3iSasKptYc0wAQvnNV4WN9kSSMRDuPny6bDcP2RyAPrnAaYjFJfMJtU
OTZaQkgvdjMTOA==
-----END CERTIFICATE-----