Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          5szMAvqzDAy8B1nGzIk1Xkt8kQ2ckwR7WHB4fqZK/jQ=
Subject key identifier:   3F:12:F5:C4:83:94:51:43:B5:D0:39:C9:90:F2:2C:62:49:67:DE:8E
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       01962F3D4ED0529B94E576C6C4C2695B69AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          11FB
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
                          2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: WfecKqAMQ/NhOFmd22pU21LFq+MyZbNKWpYjFS1klMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4e:d0:52:9b:94:e5:76:c6:c4:c2:69:5b:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=3f12f5c483945143b5d039c990f22c624967de8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:3c:43:42:26:f4:0b:b5:61:75:29:5f:96:
                    b6:62:39:5a:ca:cf:14:f7:ca:40:de:b5:8e:a2:90:
                    d9:bf:16:77:18:4b:12:c1:37:23:24:17:93:05:7a:
                    43:6c:eb:b8:dd:70:b6:f7:71:51:da:ef:d0:cd:e8:
                    85:45:6b:d5:f7:3b:17:e9:0b:f1:60:da:a5:cf:84:
                    cd:6d:db:9f:f7:74:8d:b0:02:32:2e:2d:2d:b2:10:
                    6e:2e:27:ed:c4:4e:3e:91:cd:3c:f9:07:27:ce:a0:
                    ed:77:3b:2b:91:40:97:5a:d1:33:de:c5:30:83:60:
                    2e:42:61:c1:93:4d:b7:65:a7:9a:d6:5f:e0:51:a6:
                    2b:62:8c:04:0c:c4:51:dc:c6:62:23:1f:16:b3:92:
                    89:e6:6c:a2:9e:7b:9e:da:05:9c:a5:f7:6d:5a:09:
                    2f:8b:4e:8a:a7:b8:31:01:2d:93:d6:16:ee:a0:22:
                    e1:28:79:d8:97:dd:3e:c3:81:dd:ac:5f:ee:38:05:
                    22:57:69:de:81:96:aa:9a:16:f5:11:5c:5b:59:f1:
                    28:00:d9:d9:40:9b:23:5f:92:40:5a:9b:e9:55:e6:
                    bb:e1:3a:61:46:2b:e7:4d:98:8c:d8:f0:d7:f7:4e:
                    8b:3d:54:b5:3d:38:b8:73:ff:e8:c4:9b:ca:4e:50:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:F5:C4:83:94:51:43:B5:D0:39:C9:90:F2:2C:62:49:67:DE:8E
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a7:74:3c:94:d2:ee:80:e3:e5:12:81:79:c1:1a:fa:2e:b5:
         a7:f6:ea:1e:0f:ef:72:e0:2c:ba:83:50:9e:09:42:5b:d5:37:
         9b:f8:c3:f9:3c:9e:e6:84:2e:80:cd:5d:2a:e0:7a:d0:ea:ee:
         39:a3:b5:80:d7:1f:0c:85:a1:6d:bf:db:55:0f:02:6d:8b:8e:
         b3:09:32:4f:6d:cf:50:6a:5b:06:7d:fe:eb:c8:e1:9d:e7:02:
         a7:e4:c1:49:58:5c:52:ca:80:9f:0a:93:17:2f:ec:38:f5:0e:
         a1:f0:3a:6f:af:6c:26:4d:0f:0c:59:15:49:83:35:25:5a:dd:
         11:7d:95:e7:9c:2b:ee:06:95:15:0c:80:c5:74:de:a1:e7:f2:
         9f:ee:9a:74:f7:9b:6f:10:7e:ca:82:53:f3:97:91:57:d3:a9:
         f1:e1:70:01:e2:9f:df:41:71:0b:ce:cd:4d:ae:2f:2e:dc:2b:
         03:2b:1f:d0:7c:78:bf:4a:c0:e7:87:75:26:d1:8f:19:18:e2:
         b7:94:fe:a7:b8:10:41:65:9a:b9:a4:c3:cc:d4:e4:df:05:75:
         8a:bb:ed:31:bc:ca:cd:75:9b:8e:4b:cc:ca:e6:df:9f:ba:04:
         89:e7:81:46:d1:bd:37:1a:1e:3c:65:3b:5e:cf:0f:22:dd:31:
         c7:06:71:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU7QUpuU5XbGxMJpW2mvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy
MjcxM2IwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
EygzZjEyZjVjNDgzOTQ1MTQzYjVkMDM5Yzk5MGYyMmM2MjQ5NjdkZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysQ8Q0Im9Au1YXUpX5a2Yjlays8U
98pA3rWOopDZvxZ3GEsSwTcjJBeTBXpDbOu43XC293FR2u/QzeiFRWvV9zsX6Qvx
YNqlz4TNbduf93SNsAIyLi0tshBuLiftxE4+kc08+QcnzqDtdzsrkUCXWtEz3sUw
g2AuQmHBk023Zaea1l/gUaYrYowEDMRR3MZiIx8Ws5KJ5myinnue2gWcpfdtWgkv
i06Kp7gxAS2T1hbuoCLhKHnYl90+w4HdrF/uOAUiV2negZaqmhb1EVxbWfEoANnZ
QJsjX5JAWpvpVea74TphRivnTZiM2PDX906LPVS1PTi4c//oxJvKTlBA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8S9cSDlFFDtdA5yZDyLGJJZ96OMB8GA1UdIwQY
MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt
ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2
LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6d0PJTS
7oDj5RKBecEa+i61p/bqHg/vcuAsuoNQnglCW9U3m/jD+Tye5oQugM1dKuB60Oru
OaO1gNcfDIWhbb/bVQ8CbYuOswkyT23PUGpbBn3+68jhnecCp+TBSVhcUsqAnwqT
Fy/sOPUOofA6b69sJk0PDFkVSYM1JVrdEX2V55wr7gaVFQyAxXTeoefyn+6adPeb
bxB+yoJT85eRV9Op8eFwAeKf30FxC87NTa4vLtwrAysf0Hx4v0rA54d1JtGPGRji
t5T+p7gQQWWauaTDzNTk3wV1irvtMbzKzXWbjkvMyubfn7oEieeBRtG9NxoePGU7
Xs8PIt0xxwZxUg==
-----END CERTIFICATE-----