Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File:                     tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier:          rjb9UlOR5garu9Vva75JtKENoc7cCJVU7TXyBX4+95I=
Subject key identifier:   93:7E:97:11:04:C0:B9:71:5A:95:1C:BB:A4:17:AC:85:39:AF:35:71
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer:       /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial:       01962E98C95414D354775F5B783CF805A37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (hash: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=)
                          2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: Eg8S7pVAYmovXLnEDxispcnV0/FDOaPbJLBjxCxNY8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:54:14:d3:54:77:5f:5b:78:3c:f8:05:a3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=937e971104c0b9715a951cbba417ac8539af3571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:72:64:bd:2b:8c:1f:98:26:6d:f5:59:2c:
                    74:c5:3a:2f:68:a5:72:62:52:5e:a6:d0:e0:02:d3:
                    f9:10:86:ad:ab:f8:09:70:29:1e:e7:c2:65:31:3e:
                    e0:39:34:a7:d8:87:79:c3:fa:2b:8d:ae:5d:8d:7d:
                    d3:a2:fb:c6:19:61:08:2b:d1:de:65:7f:84:57:66:
                    10:14:89:df:35:d2:56:69:17:f8:18:1d:8c:a7:6c:
                    95:66:1c:48:9f:2f:66:47:ff:2d:4a:96:f1:e6:c6:
                    08:f0:54:1a:57:fa:3e:0a:c5:41:d8:54:6a:e4:c0:
                    76:fa:0d:53:0b:f6:d1:c6:a9:55:dc:20:4d:c5:5f:
                    e5:04:20:37:74:55:a2:17:a7:b8:fe:46:3c:fd:3d:
                    8f:a6:85:0f:bc:a0:0a:7e:e4:b0:87:fc:40:88:f4:
                    c7:b1:6c:94:e3:37:32:a3:ed:ee:ce:e5:6c:38:b4:
                    c4:6f:73:fa:e6:b0:fe:5e:5a:3d:32:d8:66:77:c3:
                    c8:f2:6e:0e:d3:ca:46:c1:06:5c:d4:e6:68:ee:92:
                    cb:a0:00:05:92:f3:5a:f1:ca:e8:49:c1:cb:ab:97:
                    a1:a4:44:c9:7e:bb:ec:ae:70:55:16:62:e4:a9:89:
                    c4:30:24:f4:ac:cf:0f:c3:df:d7:b6:8b:f4:61:64:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:97:11:04:C0:B9:71:5A:95:1C:BB:A4:17:AC:85:39:AF:35:71
            X509v3 Authority Key Identifier:
                keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:6d:bf:45:ef:71:ea:8c:6f:26:4c:ee:f3:65:b6:b1:bc:
         c9:68:21:a2:44:1e:58:12:95:6c:4a:90:4d:ed:51:33:2d:30:
         62:54:f9:58:87:35:3b:b4:66:2b:82:40:27:59:44:89:c4:7f:
         ff:9f:cf:d7:ee:09:b9:49:51:55:4f:ab:ba:ac:21:5f:a9:e2:
         da:16:1f:f1:fb:a1:93:56:99:11:62:16:44:b3:2d:91:e8:90:
         78:d9:c2:b5:a3:70:e0:51:a6:2c:2c:e7:f2:43:5d:fa:11:a6:
         71:1c:1c:ea:4a:25:c5:e3:a5:40:ce:59:2d:ab:88:89:03:7a:
         a9:a4:03:81:b6:0b:4b:db:09:10:fd:6c:6b:f6:c4:63:a9:59:
         aa:86:a6:68:18:c9:8c:76:5b:42:58:60:9d:6a:83:3f:84:99:
         e6:e8:fb:d8:01:d7:2b:23:59:0f:80:72:85:45:da:86:c6:6a:
         d5:e0:aa:d4:45:f2:3a:28:01:00:c5:3b:7b:39:13:21:90:de:
         66:e1:29:be:fe:7b:dd:65:1a:c8:27:b8:ff:89:59:07:4b:ce:
         17:ab:08:71:28:1e:ab:0a:08:ad:23:cf:71:67:2f:c0:2f:55:
         8d:6a:c1:b2:83:90:89:ff:15:5f:fc:ce:67:7c:f5:4c:96:ed:
         a9:f5:31:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMlUFNNUd19beDz4BaN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2I5N2ExZDIxZjYzN2I1NDkxMzBmMDg1N2E2ODFjYzdm
Njg4NGMwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
Eyg5MzdlOTcxMTA0YzBiOTcxNWE5NTFjYmJhNDE3YWM4NTM5YWYzNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBhyZL0rjB+YJm31WSx0xTovaKVy
YlJeptDgAtP5EIatq/gJcCke58JlMT7gOTSn2Id5w/orja5djX3TovvGGWEIK9He
ZX+EV2YQFInfNdJWaRf4GB2Mp2yVZhxIny9mR/8tSpbx5sYI8FQaV/o+CsVB2FRq
5MB2+g1TC/bRxqlV3CBNxV/lBCA3dFWiF6e4/kY8/T2PpoUPvKAKfuSwh/xAiPTH
sWyU4zcyo+3uzuVsOLTEb3P65rD+Xlo9Mthmd8PI8m4O08pGwQZc1OZo7pLLoAAF
kvNa8croScHLq5ehpETJfrvsrnBVFmLkqYnEMCT0rM8Pw9/Xtov0YWQ0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN+lxEEwLlxWpUcu6QXrIU5rzVxMB8GA1UdIwQY
MBaAFLQ7l6HSH2N7VJEw8IV6aBzH9ohMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0Yjkt
MDQ2NGU5NDVmMWNjLzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81NDU0YWQtNmNmMy00ZWU1LWE0YjktMDQ2NGU5NDVmMWNj
LzEvdER1WG9kSWZZM3RVa1REd2hYcG9ITWYyaUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5ttv0Xv
ceqMbyZM7vNltrG8yWghokQeWBKVbEqQTe1RMy0wYlT5WIc1O7RmK4JAJ1lEicR/
/5/P1+4JuUlRVU+ruqwhX6ni2hYf8fuhk1aZEWIWRLMtkeiQeNnCtaNw4FGmLCzn
8kNd+hGmcRwc6kolxeOlQM5ZLauIiQN6qaQDgbYLS9sJEP1sa/bEY6lZqoamaBjJ
jHZbQlhgnWqDP4SZ5uj72AHXKyNZD4ByhUXahsZq1eCq1EXyOigBAMU7ezkTIZDe
ZuEpvv573WUayCe4/4lZB0vOF6sIcSgeqwoIrSPPcWcvwC9VjWrBsoOQif8VX/zO
Z3z1TJbtqfUxJw==
-----END CERTIFICATE-----