Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File:                     xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier:          6Z96AHh8OjU/RC9NTLwm/JDrxTY6MbY3IGmm7GF2WDY=
Subject key identifier:   77:D7:50:79:FE:85:36:8F:08:24:86:C9:3B:33:B3:86:97:35:8F:E8
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer:       /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial:       01962F744EA503D241E9C529AEC53CA89E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
                          2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
                          3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: tCRyay23hCLdiOmYtpjD02Inpb9PLSs0rgRKnl2kN/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:a5:03:d2:41:e9:c5:29:ae:c5:3c:a8:9e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=77d75079fe85368f082486c93b33b38697358fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:aa:4e:16:a8:a0:39:00:87:6e:5a:dc:6f:
                    b7:b2:c7:63:4f:61:32:81:d1:d6:4a:aa:05:e8:d1:
                    c0:80:64:13:f6:1a:f4:21:cd:83:d8:6c:28:4b:4b:
                    a9:7b:32:1a:58:0b:67:4c:00:3c:d4:83:99:bc:3f:
                    cc:75:d7:7d:db:97:11:d9:69:4e:7d:1e:8d:2a:5d:
                    67:c4:cd:ec:79:39:b6:cf:f2:6d:00:2a:20:09:58:
                    9e:9c:94:f4:ac:6b:6f:07:56:8d:91:f1:e7:7a:58:
                    e6:e8:92:bf:dc:78:a7:fa:f1:30:3e:d1:b0:49:d4:
                    21:c5:27:81:3f:77:db:4c:fe:34:db:e8:38:3c:71:
                    5c:08:2c:5a:16:c4:8a:2a:e4:87:30:7c:0a:8c:8b:
                    3f:27:6c:46:e6:1b:c9:50:e8:36:cf:fa:4a:8f:90:
                    73:73:90:cb:94:8f:d9:e8:f6:72:5f:b7:1a:a5:1d:
                    e9:33:a9:2f:2f:5b:08:8e:ce:73:ed:05:53:c8:11:
                    61:cc:f8:4c:44:32:26:4b:db:a7:4a:66:01:20:27:
                    df:b9:7e:68:c5:d6:02:e8:70:95:1f:8a:a5:b0:6c:
                    cb:df:ef:a4:5f:4c:c6:40:ad:a7:be:75:0d:89:fe:
                    6a:8f:51:ca:d1:ea:da:31:69:f9:64:d1:11:a9:86:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:50:79:FE:85:36:8F:08:24:86:C9:3B:33:B3:86:97:35:8F:E8
            X509v3 Authority Key Identifier:
                keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:33:0f:93:9c:2a:aa:b1:d2:76:7d:f4:33:f8:cc:b4:54:b9:
         d1:f1:01:10:e4:8e:7c:d8:2b:36:b6:4b:7a:60:90:d2:b0:13:
         05:fe:7d:14:b0:5e:d2:63:fa:ab:02:8b:58:9c:4f:59:53:21:
         ec:6b:54:cc:c1:77:a7:76:b9:ce:af:c1:96:73:2b:3e:4c:2e:
         8b:4f:bf:ae:d2:a1:75:58:a9:4b:be:98:24:f7:a1:b8:dc:ef:
         a1:87:40:e2:90:27:da:db:d5:4e:9e:2f:0b:dc:eb:55:e1:c6:
         0e:89:62:6c:45:9b:23:04:fe:0a:c3:95:d4:c4:50:90:ad:01:
         b7:05:1e:26:31:e8:36:6b:0a:92:61:5c:db:1d:92:74:a2:9b:
         09:7c:52:66:d5:2d:da:c2:ba:ed:be:f4:31:39:87:14:63:f7:
         cc:9f:fd:c4:1a:d2:99:cd:52:c1:be:48:2c:fd:8d:46:9f:c5:
         ad:5b:7c:05:30:d9:c4:27:49:50:17:2b:2a:a0:1f:49:d8:b0:
         de:88:25:7c:8f:bd:e9:ea:01:e3:da:0d:e4:49:f7:9d:19:a6:
         e8:2a:00:95:cb:1b:53:2f:67:38:47:ca:a9:0e:2a:13:d3:56:
         a7:b3:00:4e:86:f5:f0:cb:cc:4c:b3:b5:22:02:8f:9a:4a:ab:
         72:94:06:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdE6lA9JB6cUprsU8qJ5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjUwNDEzMTQwMTEzWhcNMjUwNDE0MTQwMTEzWjAzMTEwLwYDVQQD
Eyg3N2Q3NTA3OWZlODUzNjhmMDgyNDg2YzkzYjMzYjM4Njk3MzU4ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupmqThaooDkAh25a3G+3ssdjT2Ey
gdHWSqoF6NHAgGQT9hr0Ic2D2GwoS0upezIaWAtnTAA81IOZvD/Mddd925cR2WlO
fR6NKl1nxM3seTm2z/JtACogCVienJT0rGtvB1aNkfHneljm6JK/3Hin+vEwPtGw
SdQhxSeBP3fbTP402+g4PHFcCCxaFsSKKuSHMHwKjIs/J2xG5hvJUOg2z/pKj5Bz
c5DLlI/Z6PZyX7capR3pM6kvL1sIjs5z7QVTyBFhzPhMRDImS9unSmYBICffuX5o
xdYC6HCVH4qlsGzL3++kX0zGQK2nvnUNif5qj1HK0eraMWn5ZNERqYYcjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfXUHn+hTaPCCSGyTszs4aXNY/oMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzMPk5wq
qrHSdn30M/jMtFS50fEBEOSOfNgrNrZLemCQ0rATBf59FLBe0mP6qwKLWJxPWVMh
7GtUzMF3p3a5zq/BlnMrPkwui0+/rtKhdVipS76YJPehuNzvoYdA4pAn2tvVTp4v
C9zrVeHGDolibEWbIwT+CsOV1MRQkK0BtwUeJjHoNmsKkmFc2x2SdKKbCXxSZtUt
2sK67b70MTmHFGP3zJ/9xBrSmc1Swb5ILP2NRp/FrVt8BTDZxCdJUBcrKqAfSdiw
3oglfI+96eoB49oN5En3nRmm6CoAlcsbUy9nOEfKqQ4qE9NWp7MATob18MvMTLO1
IgKPmkqrcpQG3A==
-----END CERTIFICATE-----