Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
File:                     Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft (raw, json)
Hash identifier:          Au05mLD8hHAocud4ZgfnwIjs2VBgdO2EWcTvcrS+R44=
Subject key identifier:   15:27:F0:C3:0E:E3:DD:89:68:E4:DC:B4:AF:F3:DA:39:BC:19:9E:77
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Certificate issuer:       /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial:       01962DF43F6E53C1706ABB283F23F7BD04FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
Manifest number:          0EF5
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: B3anwTfv9G1rVUQa6NJWLwdwXYI.roa (hash: mmLvT4hHYo/WnQMssEwo9M27udmQqtzbwXP4LSX1FYM=)
                          2: Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl (hash: SGzfNIK0cXuQ26YGuSkr6uKepUKYkKImg3hxTSz9jZY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3f:6e:53:c1:70:6a:bb:28:3f:23:f7:bd:04:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=1527f0c30ee3dd8968e4dcb4aff3da39bc199e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:63:4a:79:0d:26:1d:bc:8b:65:87:03:e1:
                    f4:3c:5d:5c:1c:f3:c2:94:32:6a:2d:4b:69:52:40:
                    35:a0:c4:6d:49:61:fa:0a:9b:8d:4a:83:5e:70:a3:
                    7d:fd:ab:80:db:77:01:86:e3:5b:4f:a4:40:58:ca:
                    ac:4d:c2:be:44:5b:68:da:7f:9f:32:29:56:86:2a:
                    8f:cb:3f:0b:0b:40:7a:c6:45:fb:e5:13:ac:dd:fe:
                    06:0b:2e:16:82:34:97:46:18:2b:90:03:6e:c5:c5:
                    d6:d2:97:db:23:cc:0d:81:82:b3:d0:05:37:20:6e:
                    6d:b1:8b:11:01:23:9d:c1:59:8d:aa:ce:d4:97:ed:
                    a5:5e:02:b6:9d:03:db:d5:61:73:86:c6:03:34:4c:
                    0c:c4:a1:d8:34:b9:db:0c:37:a6:cc:ac:3e:34:df:
                    d6:f3:e0:45:f0:69:c6:cf:0f:a9:7b:eb:7d:b8:c0:
                    88:4d:d9:73:b0:d8:54:09:d8:af:43:b6:63:b3:0c:
                    c1:52:11:44:4e:4d:b7:83:dd:f9:80:6f:11:15:be:
                    7b:b0:13:dd:ed:e0:da:cc:9e:83:17:17:a9:8d:99:
                    38:e2:96:c0:51:84:ed:64:33:09:45:a6:8b:ee:37:
                    6e:10:38:bc:98:7e:3b:a7:e6:7b:3f:2a:90:7e:f5:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:F0:C3:0E:E3:DD:89:68:E4:DC:B4:AF:F3:DA:39:BC:19:9E:77
            X509v3 Authority Key Identifier:
                keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:81:a4:aa:de:ea:24:47:c9:ae:e1:7d:dc:5f:b2:f0:b5:25:
         6f:9b:22:65:09:20:0f:1c:99:1e:50:95:76:48:a0:73:64:8e:
         69:a9:31:f6:1b:ee:b6:3a:15:d1:9e:ea:35:4b:83:68:ca:1f:
         64:69:7d:07:61:05:74:c4:cb:a9:4a:46:68:e8:c1:b4:50:c7:
         c9:98:cc:51:76:4f:21:54:74:7d:06:07:43:46:3c:55:ae:e1:
         7c:99:c0:95:df:98:fa:8f:07:e9:a4:10:81:df:c9:51:f2:8d:
         1f:6a:5f:86:7c:7a:3c:6e:94:d3:27:33:ee:7f:bb:db:26:63:
         5f:7c:25:6a:00:6b:01:a6:90:46:a5:c3:0b:7f:5e:8f:53:23:
         79:a2:b2:3d:de:6f:1f:f4:53:da:96:94:eb:f0:cf:8a:58:ab:
         2e:ba:3d:14:ee:63:31:6f:07:2e:05:cd:ea:62:c6:3a:85:20:
         0b:44:46:5c:b6:fb:0e:41:25:52:65:af:38:85:76:6a:e1:ec:
         a5:5d:5d:32:02:df:69:d8:e1:1a:d0:15:a9:88:b8:d3:29:09:
         30:a9:e3:84:ed:fe:4a:ea:21:f0:78:df:a6:05:d6:62:fa:1a:
         38:92:dc:e7:54:93:bd:9d:77:a6:9c:1d:d9:64:27:23:93:89:
         25:01:ba:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D9uU8FwarsoPyP3vQT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMWQyNDU3ZTBiZTU0ZGM3OGZjMWY2Njg3ZGIzZTk0YjA2
OGFjOWIwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EygxNTI3ZjBjMzBlZTNkZDg5NjhlNGRjYjRhZmYzZGEzOWJjMTk5ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuVjSnkNJh28i2WHA+H0PF1cHPPC
lDJqLUtpUkA1oMRtSWH6CpuNSoNecKN9/auA23cBhuNbT6RAWMqsTcK+RFto2n+f
MilWhiqPyz8LC0B6xkX75ROs3f4GCy4WgjSXRhgrkANuxcXW0pfbI8wNgYKz0AU3
IG5tsYsRASOdwVmNqs7Ul+2lXgK2nQPb1WFzhsYDNEwMxKHYNLnbDDemzKw+NN/W
8+BF8GnGzw+pe+t9uMCITdlzsNhUCdivQ7ZjswzBUhFETk23g935gG8RFb57sBPd
7eDazJ6DFxepjZk44pbAUYTtZDMJRaaL7jduEDi8mH47p+Z7PyqQfvUf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUn8MMO492JaOTctK/z2jm8GZ53MB8GA1UdIwQY
MBaAFC4dJFfgvlTcePwfZofbPpSwaKybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAt
OTRmZDllMjk2OWFmLzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNzhkZjMtZmM0Ny00ZWRiLWE5YTAtOTRmZDllMjk2OWFm
LzEvTGgwa1YtQy1WTng0X0I5bWg5cy1sTEJvckpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYGkqt7q
JEfJruF93F+y8LUlb5siZQkgDxyZHlCVdkigc2SOaakx9hvutjoV0Z7qNUuDaMof
ZGl9B2EFdMTLqUpGaOjBtFDHyZjMUXZPIVR0fQYHQ0Y8Va7hfJnAld+Y+o8H6aQQ
gd/JUfKNH2pfhnx6PG6U0ycz7n+72yZjX3wlagBrAaaQRqXDC39ej1MjeaKyPd5v
H/RT2paU6/DPilirLro9FO5jMW8HLgXN6mLGOoUgC0RGXLb7DkElUmWvOIV2auHs
pV1dMgLfadjhGtAVqYi40ykJMKnjhO3+Suoh8HjfpgXWYvoaOJLc51STvZ13ppwd
2WQnI5OJJQG6hA==
-----END CERTIFICATE-----