Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File:                     AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier:          jUVmAA/XzLukWA42RR7aHszjTmkyqALuv6nDdL+pT0M=
Subject key identifier:   FC:09:CF:7C:86:27:8C:7C:C8:AC:72:A1:45:44:F9:2B:8A:B8:DB:F9
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer:       /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial:       01962E61E11B584391F0FBAE60BFC8FE4804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: o/cakq3d+xOLf6/8MYlH/JqZ0r8ld1PRzlKWtt6ihS0=)
                          2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
                          3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:1b:58:43:91:f0:fb:ae:60:bf:c8:fe:48:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=fc09cf7c86278c7cc8ac72a14544f92b8ab8dbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:d3:33:16:42:e3:7c:1d:b3:9c:c4:bd:49:
                    3d:89:4f:df:41:6a:d3:76:29:02:ac:f0:4a:fb:c2:
                    78:1e:30:d7:70:eb:ad:10:c5:6f:43:7b:60:98:63:
                    83:99:d6:40:1f:22:59:1d:9d:50:2f:40:de:c8:12:
                    b5:1d:5b:2f:95:7f:2b:8f:b6:bd:af:82:f8:27:d1:
                    9e:db:73:44:2e:d4:fe:c3:bf:65:64:05:ba:5e:6a:
                    af:af:8c:1a:fa:af:90:ba:9d:dc:95:d0:31:de:a6:
                    17:fc:8d:b0:ca:bc:95:7a:8e:36:17:27:1b:fb:58:
                    2a:6b:7b:e5:d1:f2:42:75:63:a2:41:4c:ac:69:3c:
                    c3:de:37:ea:36:92:c8:09:40:d0:c7:90:c8:44:81:
                    21:ce:20:31:10:b8:06:25:18:b3:c2:2d:87:04:40:
                    c8:4f:0d:57:08:45:c8:d1:b3:73:8f:34:fc:2e:20:
                    ea:c4:5b:31:3e:be:88:b5:01:3a:7c:94:c5:67:10:
                    36:ef:85:40:b4:9c:84:cd:08:2b:af:f0:63:93:d0:
                    4f:0f:4a:b7:86:6d:22:c6:ae:da:7f:c8:1e:b7:fd:
                    3b:e3:0c:ed:bc:85:46:84:d0:8f:56:54:a2:28:82:
                    fc:17:36:64:bf:11:30:eb:54:d8:f9:3e:1d:16:0b:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:09:CF:7C:86:27:8C:7C:C8:AC:72:A1:45:44:F9:2B:8A:B8:DB:F9
            X509v3 Authority Key Identifier:
                keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:85:5b:35:90:35:2a:35:92:56:ee:d5:19:40:26:3f:16:
         2e:be:17:3a:61:c4:5c:69:1f:d2:b0:75:30:b2:a2:01:ec:9a:
         0f:20:1c:05:08:75:c4:ba:b5:bd:26:92:48:1c:a5:e6:bf:23:
         81:4d:3c:90:6c:75:08:e1:3c:29:73:6b:fb:7c:9e:cb:9f:aa:
         40:d3:37:10:cc:79:bf:3d:f3:b6:79:0c:19:a1:c0:6c:2c:13:
         b3:4a:4e:85:5a:6a:6a:35:17:61:0b:2d:5c:91:40:e4:c5:ab:
         ee:17:b5:db:7b:0d:78:51:f4:70:0b:84:50:4b:88:41:9e:cb:
         6c:78:07:e2:1f:51:0e:75:c2:b6:49:51:9e:03:11:ee:eb:44:
         27:ce:14:16:00:0c:98:f7:0b:ea:b6:22:18:cb:69:fb:f6:bf:
         35:c0:41:f6:3d:17:05:f3:08:99:6a:4f:e3:da:51:1e:66:a9:
         6b:6e:75:74:4b:6d:fc:81:0a:f1:1c:4d:99:83:45:88:de:83:
         fc:24:3c:61:84:42:06:32:cd:96:7e:f9:20:00:7a:46:d4:6f:
         3e:28:f8:45:4e:03:60:5a:a7:b5:3d:db:92:f2:0c:43:c6:24:
         52:d6:8c:21:c5:2e:5d:eb:72:0b:26:63:a4:3b:96:e5:50:b9:
         1f:7c:e6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeEbWEOR8PuuYL/I/kgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy
MmZjZmIwHhcNMjUwNDEzMDkwMTI4WhcNMjUwNDE0MDkwMTI4WjAzMTEwLwYDVQQD
EyhmYzA5Y2Y3Yzg2Mjc4YzdjYzhhYzcyYTE0NTQ0ZjkyYjhhYjhkYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqTTMxZC43wds5zEvUk9iU/fQWrT
dikCrPBK+8J4HjDXcOutEMVvQ3tgmGODmdZAHyJZHZ1QL0DeyBK1HVsvlX8rj7a9
r4L4J9Ge23NELtT+w79lZAW6Xmqvr4wa+q+Qup3cldAx3qYX/I2wyryVeo42Fycb
+1gqa3vl0fJCdWOiQUysaTzD3jfqNpLICUDQx5DIRIEhziAxELgGJRizwi2HBEDI
Tw1XCEXI0bNzjzT8LiDqxFsxPr6ItQE6fJTFZxA274VAtJyEzQgrr/Bjk9BPD0q3
hm0ixq7af8get/074wztvIVGhNCPVlSiKIL8FzZkvxEw61TY+T4dFgsbLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwJz3yGJ4x8yKxyoUVE+SuKuNv5MB8GA1UdIwQY
MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt
MDUzNzNiYTk0ODNkLzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk
LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhGFWzWQ
NSo1klbu1RlAJj8WLr4XOmHEXGkf0rB1MLKiAeyaDyAcBQh1xLq1vSaSSByl5r8j
gU08kGx1COE8KXNr+3yey5+qQNM3EMx5vz3ztnkMGaHAbCwTs0pOhVpqajUXYQst
XJFA5MWr7he123sNeFH0cAuEUEuIQZ7LbHgH4h9RDnXCtklRngMR7utEJ84UFgAM
mPcL6rYiGMtp+/a/NcBB9j0XBfMImWpP49pRHmapa251dEtt/IEK8RxNmYNFiN6D
/CQ8YYRCBjLNln75IAB6RtRvPij4RU4DYFqntT3bkvIMQ8YkUtaMIcUuXetyCyZj
pDuW5VC5H3zmxQ==
-----END CERTIFICATE-----