Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File:                     xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier:          CH3tEdFeLiXnDyBRlr5rYFGDS258cTH9z9vrhyVDnfM=
Subject key identifier:   F1:10:D2:D8:1D:8D:8F:12:B4:05:09:FD:7F:34:81:B3:3F:9B:98:D0
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer:       /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial:       01962FAB64595AEFF3DAC47576CB55589C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
                          2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
                          3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
                          4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: VZrrCjj+PJg/JOMQg60qZq6XuBmeKy5RnEHbo/tmDPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:59:5a:ef:f3:da:c4:75:76:cb:55:58:9c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=f110d2d81d8d8f12b40509fd7f3481b33f9b98d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:58:08:a6:1a:09:60:cf:4a:eb:99:05:4f:
                    58:3c:0b:8d:c1:c0:3f:77:67:a3:9a:99:f0:c0:3b:
                    c1:65:64:fe:35:cd:1a:db:72:e7:e1:ba:56:e1:8a:
                    87:a7:64:02:33:cd:ad:87:64:1d:c2:39:20:88:22:
                    c7:36:13:76:4a:fd:5c:4a:95:9b:df:6f:a1:d8:6b:
                    6c:11:f2:c5:ef:15:27:6a:da:50:a6:db:e7:b1:06:
                    7f:c9:1a:5d:4d:0e:7e:e0:e9:f9:c4:94:e6:9b:f2:
                    10:26:0e:c5:ce:78:93:b1:9c:b9:b2:20:1c:82:12:
                    5d:47:87:8f:f0:9c:25:3b:97:e5:f0:f1:a9:eb:9e:
                    e1:e6:92:2d:ee:9d:47:27:1b:a9:eb:23:82:26:3c:
                    c2:67:24:6b:a8:39:64:9a:ca:f2:44:db:5d:d2:f7:
                    bb:82:e5:80:6e:01:18:cb:f3:73:9a:19:44:69:cb:
                    10:ea:a3:51:2b:15:2d:33:9c:0d:6a:7d:ec:41:b2:
                    74:14:2c:0a:c9:ce:0f:0b:90:53:59:ef:1e:24:5e:
                    bf:f0:d1:33:14:a8:01:92:b0:06:e7:2a:16:0d:3f:
                    60:7f:09:dd:91:5a:05:9b:27:e2:88:9d:e2:d7:c2:
                    44:a0:04:50:bc:01:1b:a6:0e:84:c7:9c:b2:80:28:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:D2:D8:1D:8D:8F:12:B4:05:09:FD:7F:34:81:B3:3F:9B:98:D0
            X509v3 Authority Key Identifier:
                keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:62:b5:8e:38:59:e4:85:5f:ab:6f:81:6d:57:3d:a2:03:28:
         73:50:38:7c:5e:41:9c:ab:64:c8:56:f2:7b:e0:60:f8:cb:b3:
         90:5a:21:e9:f3:94:09:f6:8c:80:77:38:35:4e:86:3e:8c:02:
         ba:db:94:17:2f:ef:89:7b:a1:fe:97:47:f5:bd:49:18:17:9e:
         b8:0b:4a:c1:cb:52:17:43:a5:36:fd:ae:35:a6:f0:22:d3:a9:
         70:fc:6d:f3:cc:20:3f:c5:bf:47:71:2f:ce:b6:77:55:ca:da:
         2b:79:20:a3:3b:1e:61:8b:4e:5c:3d:07:b6:ee:46:56:a6:66:
         21:31:cf:d3:78:7c:33:88:32:d0:d9:91:b3:c4:26:80:10:ae:
         bf:86:ee:26:af:69:27:74:96:4d:ec:5e:ef:35:f2:48:0b:14:
         04:6b:b5:e5:af:11:07:94:17:5d:86:41:c4:9e:da:39:79:a8:
         1b:76:60:60:49:6e:8a:e3:e3:a1:af:bf:f4:87:82:d7:88:37:
         e1:8f:4e:87:00:f8:6e:e7:d0:e2:6c:10:12:f3:ca:41:59:34:
         0b:df:e3:8c:dc:dc:68:d2:75:51:d6:df:59:92:39:56:d4:0b:
         43:0a:7a:ca:dc:0c:1b:b4:f3:6a:22:16:72:b4:66:d8:c2:09:
         34:f4:f2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2RZWu/z2sR1dstVWJxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz
NzBhMTkwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
EyhmMTEwZDJkODFkOGQ4ZjEyYjQwNTA5ZmQ3ZjM0ODFiMzNmOWI5OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRYCKYaCWDPSuuZBU9YPAuNwcA/
d2ejmpnwwDvBZWT+Nc0a23Ln4bpW4YqHp2QCM82th2QdwjkgiCLHNhN2Sv1cSpWb
32+h2GtsEfLF7xUnatpQptvnsQZ/yRpdTQ5+4On5xJTmm/IQJg7FzniTsZy5siAc
ghJdR4eP8JwlO5fl8PGp657h5pIt7p1HJxup6yOCJjzCZyRrqDlkmsryRNtd0ve7
guWAbgEYy/NzmhlEacsQ6qNRKxUtM5wNan3sQbJ0FCwKyc4PC5BTWe8eJF6/8NEz
FKgBkrAG5yoWDT9gfwndkVoFmyfiiJ3i18JEoARQvAEbpg6Ex5yygCiBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEQ0tgdjY8StAUJ/X80gbM/m5jQMB8GA1UdIwQY
MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt
YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi
LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWK1jjhZ
5IVfq2+BbVc9ogMoc1A4fF5BnKtkyFbye+Bg+MuzkFoh6fOUCfaMgHc4NU6GPowC
utuUFy/viXuh/pdH9b1JGBeeuAtKwctSF0OlNv2uNabwItOpcPxt88wgP8W/R3Ev
zrZ3VcraK3kgozseYYtOXD0Htu5GVqZmITHP03h8M4gy0NmRs8QmgBCuv4buJq9p
J3SWTexe7zXySAsUBGu15a8RB5QXXYZBxJ7aOXmoG3ZgYEluiuPjoa+/9IeC14g3
4Y9OhwD4bufQ4mwQEvPKQVk0C9/jjNzcaNJ1UdbfWZI5VtQLQwp6ytwMG7TzaiIW
crRm2MIJNPTyOg==
-----END CERTIFICATE-----