Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File:                     sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier:          X7RyrUuyBEpMUp2aOCTR//iYTRQFLP3LuBLkHxoPXso=
Subject key identifier:   B5:7E:19:41:7D:4F:B6:B1:2E:2C:35:97:0A:DE:29:7C:F2:47:43:9E
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer:       /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial:       01962E2B261D1E6D637B1CD58F19280FD397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
                          2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
                          3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
                          4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: zEjhtXhcxaEtZwp1h+otRLuKwS/u0qcFOWqvZbmAnyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:1d:1e:6d:63:7b:1c:d5:8f:19:28:0f:d3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=b57e19417d4fb6b12e2c35970ade297cf247439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:6d:74:aa:db:7b:d8:86:48:36:84:3d:0f:
                    55:da:e7:44:c6:68:19:17:f7:d1:4b:5a:82:b8:c6:
                    57:48:51:e1:b5:26:7a:89:5c:d6:57:e5:92:8d:8b:
                    83:b6:3d:33:60:6d:f9:1f:12:d5:4a:fd:48:e2:b6:
                    68:02:f7:50:f3:a8:3f:2c:94:ad:4b:cb:ae:91:d9:
                    ac:8f:32:4a:a9:49:7d:cc:2e:a7:96:60:c0:9a:2f:
                    cc:16:1f:0f:df:03:a0:64:07:96:27:73:4b:ab:06:
                    d0:e7:e0:81:eb:f6:18:73:c7:b5:e8:0b:d4:74:d3:
                    d0:a1:11:be:7c:de:dd:8f:e7:2a:70:81:aa:52:45:
                    53:83:4f:49:c7:e0:df:e6:20:40:69:bc:58:76:3d:
                    75:71:f1:b6:ae:f8:b8:1d:9e:08:bb:70:2a:ef:c0:
                    69:c2:51:e3:71:2d:8d:37:35:51:df:93:c8:2e:e3:
                    d0:99:e8:70:61:4b:01:6c:40:57:b7:07:65:d2:91:
                    5b:8b:26:c9:ca:d9:1d:55:2b:5c:06:ca:1c:9b:27:
                    66:88:b3:57:d1:94:c2:34:ff:83:7b:1a:9c:47:38:
                    34:44:07:a4:ab:be:d3:ab:5c:69:fc:ea:88:db:f3:
                    0a:9d:9f:46:4a:ba:50:bd:6c:8c:f9:81:f4:3d:a8:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:19:41:7D:4F:B6:B1:2E:2C:35:97:0A:DE:29:7C:F2:47:43:9E
            X509v3 Authority Key Identifier:
                keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:29:a1:58:1e:45:9e:61:50:8f:a5:7b:d0:f8:40:db:01:ed:
         7f:29:b8:c1:e9:ae:e6:d1:1b:ba:1d:ec:77:b1:6c:e1:8d:fb:
         80:8a:69:09:c5:59:0a:08:1c:af:5c:a9:8c:d9:f9:46:12:12:
         c2:ff:63:a2:51:8d:24:b3:98:6c:af:f3:3b:1f:78:ba:80:d7:
         4e:60:d0:29:b6:52:42:49:65:78:e8:f2:00:da:93:75:8a:62:
         e5:e7:d1:a4:a2:7d:34:19:57:aa:06:fe:09:17:c1:20:81:16:
         f3:ac:04:49:20:e9:6c:2a:ad:06:b1:b1:ed:7e:49:41:b4:8b:
         1f:b5:bb:7e:c8:ea:d5:7a:4c:1a:a1:d9:87:d5:99:ad:dc:83:
         9f:76:c8:ed:db:79:97:f4:e4:9f:81:9c:af:16:7d:76:65:48:
         3c:3f:db:3d:71:dd:0a:4e:d5:cf:5c:81:48:91:39:8a:8b:e0:
         db:ed:68:31:c8:10:4d:e8:80:da:02:50:a2:50:82:ba:d0:bf:
         d5:3e:4e:41:94:27:f9:fe:a6:0e:59:68:83:0e:2f:5b:ed:23:
         cd:a7:d7:2a:d6:e6:71:76:4d:af:26:ce:d6:7b:d0:b7:00:18:
         64:db:70:6d:66:b8:79:5c:c7:ae:e0:62:f0:1d:98:30:74:17:
         03:2d:4c:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyYdHm1jexzVjxkoD9OXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjUwNDEzMDgwMTQxWhcNMjUwNDE0MDgwMTQxWjAzMTEwLwYDVQQD
EyhiNTdlMTk0MTdkNGZiNmIxMmUyYzM1OTcwYWRlMjk3Y2YyNDc0MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwxtdKrbe9iGSDaEPQ9V2udExmgZ
F/fRS1qCuMZXSFHhtSZ6iVzWV+WSjYuDtj0zYG35HxLVSv1I4rZoAvdQ86g/LJSt
S8uukdmsjzJKqUl9zC6nlmDAmi/MFh8P3wOgZAeWJ3NLqwbQ5+CB6/YYc8e16AvU
dNPQoRG+fN7dj+cqcIGqUkVTg09Jx+Df5iBAabxYdj11cfG2rvi4HZ4Iu3Aq78Bp
wlHjcS2NNzVR35PILuPQmehwYUsBbEBXtwdl0pFbiybJytkdVStcBsocmydmiLNX
0ZTCNP+DexqcRzg0RAekq77Tq1xp/OqI2/MKnZ9GSrpQvWyM+YH0PaiyqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV+GUF9T7axLiw1lwreKXzyR0OeMB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSmhWB5F
nmFQj6V70PhA2wHtfym4wemu5tEbuh3sd7Fs4Y37gIppCcVZCggcr1ypjNn5RhIS
wv9jolGNJLOYbK/zOx94uoDXTmDQKbZSQklleOjyANqTdYpi5efRpKJ9NBlXqgb+
CRfBIIEW86wESSDpbCqtBrGx7X5JQbSLH7W7fsjq1XpMGqHZh9WZrdyDn3bI7dt5
l/Tkn4GcrxZ9dmVIPD/bPXHdCk7Vz1yBSJE5iovg2+1oMcgQTeiA2gJQolCCutC/
1T5OQZQn+f6mDllogw4vW+0jzafXKtbmcXZNrybO1nvQtwAYZNtwbWa4eVzHruBi
8B2YMHQXAy1M9w==
-----END CERTIFICATE-----