Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File:                     dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier:          pxSvV2Yq9jO1Ndt8CvBxiQAWElur8xmhYYQr1hk45J0=
Subject key identifier:   56:78:27:B4:6C:77:F2:C5:D7:E2:F7:AA:DC:8F:62:A3:04:02:46:6D
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer:       /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial:       01962E6196BDF3D378F69E782B535F7B5B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
                          2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 0V9WkiHEJmcrT4s4NeInrbqR8haKRPkB29++8gtL84A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:bd:f3:d3:78:f6:9e:78:2b:53:5f:7b:5b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=567827b46c77f2c5d7e2f7aadc8f62a30402466d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:13:9a:cf:b6:e3:bc:75:00:68:68:1a:dd:
                    f0:e4:22:a0:e9:79:0e:a2:12:eb:98:45:02:8b:c3:
                    68:ac:0d:8b:f8:49:a0:a9:aa:53:55:c1:cc:0b:0a:
                    07:b1:a4:3f:ca:4c:2b:63:09:b0:c9:05:94:b9:18:
                    1e:17:06:e9:80:a9:36:99:6c:cf:aa:c7:c8:91:4e:
                    aa:38:47:42:0c:a9:06:1a:c4:e2:97:c1:7a:f2:5d:
                    1a:35:51:1a:e3:06:a3:0b:ac:c7:a8:97:38:67:53:
                    4b:ef:7d:ee:c1:db:fd:94:81:c8:cc:a7:72:ce:f5:
                    70:95:a0:8f:7b:fb:99:6e:c0:d2:f1:c1:23:e3:d9:
                    72:1f:87:c3:4f:86:c1:dd:23:38:10:70:db:ee:44:
                    c9:64:97:ea:4c:a9:21:e5:92:99:c7:43:ef:df:66:
                    1f:df:d7:10:ff:3b:39:33:52:14:45:73:c0:db:b7:
                    30:cb:e7:8d:4c:6f:0c:ca:a7:4c:01:47:84:f1:22:
                    df:fa:48:41:d7:6a:c6:7c:5d:14:bf:89:77:67:37:
                    a1:2c:a4:35:0a:0a:4a:4b:43:ed:98:c7:a1:25:e7:
                    f5:71:e7:4d:20:5f:cc:b9:f7:b8:67:22:be:89:0e:
                    e6:d0:5f:80:f1:4a:9a:ab:6f:9c:4f:53:31:87:ba:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:78:27:B4:6C:77:F2:C5:D7:E2:F7:AA:DC:8F:62:A3:04:02:46:6D
            X509v3 Authority Key Identifier:
                keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:42:6a:63:9c:f5:b2:57:aa:c1:02:bf:2f:bc:c8:e0:46:
         06:f6:e1:5d:08:21:b5:77:32:7b:dd:c3:14:00:14:11:58:62:
         26:6d:22:a3:db:ef:54:4b:87:7d:1f:5a:e1:f8:ea:dc:1c:c9:
         c3:a1:e6:14:e3:8d:a2:b5:a9:8d:ee:6f:97:8f:ae:63:a8:cb:
         31:38:2c:7b:a5:f6:6d:bf:2a:fb:da:be:f0:92:83:3d:86:4f:
         70:fb:33:ea:8f:9a:05:92:8b:88:ff:7a:f3:66:a5:94:bd:3f:
         b5:c0:8a:32:e8:47:36:e3:bb:24:cd:81:98:f8:a6:45:e4:5f:
         0e:04:90:fc:31:4d:fc:82:e9:3a:86:0a:57:84:04:cb:10:dd:
         a7:e2:b7:ab:51:9e:b2:83:86:dd:10:8a:d2:a2:88:db:55:b0:
         16:a7:2e:cd:5c:76:d1:ad:5a:a5:8e:f1:18:0f:76:38:33:d0:
         aa:18:74:92:58:f9:f1:89:34:3f:5d:5e:e6:e5:00:ce:1e:34:
         90:81:2b:37:06:48:6e:e8:63:20:10:7a:81:db:1f:70:9e:a1:
         ec:a2:59:5b:ea:11:00:83:7e:25:23:9e:46:56:c1:9a:ed:80:
         d0:46:f0:c5:40:cb:a7:9b:26:47:20:fb:5f:fe:c6:b8:62:ce:
         77:58:77:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZa989N49p54K1Nfe1teMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4
NjI5OTIwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
Eyg1Njc4MjdiNDZjNzdmMmM1ZDdlMmY3YWFkYzhmNjJhMzA0MDI0NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX0Tms+247x1AGhoGt3w5CKg6XkO
ohLrmEUCi8NorA2L+EmgqapTVcHMCwoHsaQ/ykwrYwmwyQWUuRgeFwbpgKk2mWzP
qsfIkU6qOEdCDKkGGsTil8F68l0aNVEa4wajC6zHqJc4Z1NL733uwdv9lIHIzKdy
zvVwlaCPe/uZbsDS8cEj49lyH4fDT4bB3SM4EHDb7kTJZJfqTKkh5ZKZx0Pv32Yf
39cQ/zs5M1IURXPA27cwy+eNTG8MyqdMAUeE8SLf+khB12rGfF0Uv4l3ZzehLKQ1
CgpKS0PtmMehJef1cedNIF/Mufe4ZyK+iQ7m0F+A8Uqaq2+cT1Mxh7r38QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ4J7Rsd/LF1+L3qtyPYqMEAkZtMB8GA1UdIwQY
MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt
OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy
LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfJCamOc
9bJXqsECvy+8yOBGBvbhXQghtXcye93DFAAUEVhiJm0io9vvVEuHfR9a4fjq3BzJ
w6HmFOONorWpje5vl4+uY6jLMTgse6X2bb8q+9q+8JKDPYZPcPsz6o+aBZKLiP96
82allL0/tcCKMuhHNuO7JM2BmPimReRfDgSQ/DFN/ILpOoYKV4QEyxDdp+K3q1Ge
soOG3RCK0qKI21WwFqcuzVx20a1apY7xGA92ODPQqhh0klj58Yk0P11e5uUAzh40
kIErNwZIbuhjIBB6gdsfcJ6h7KJZW+oRAIN+JSOeRlbBmu2A0EbwxUDLp5smRyD7
X/7GuGLOd1h31g==
-----END CERTIFICATE-----