Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File:                     SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier:          1X3SK02bUra9fHJnqBHINjUZZTlXV8KGSzwe3m1/JgU=
Subject key identifier:   87:C8:82:A3:FB:60:27:1F:A7:F5:52:A6:C0:C8:8E:3C:96:FD:AB:AC
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer:       /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial:       01962F0704F87F9514BC5F60FEB0DB40A47C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number:          0EDD
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
                          2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
                          3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: aTEhJqGFDp1e4BHYJCSxh0TwOfkRbtGUkXe9wUW7T7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:f8:7f:95:14:bc:5f:60:fe:b0:db:40:a4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=87c882a3fb60271fa7f552a6c0c88e3c96fdabac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:8a:ae:57:2c:ed:44:bd:d8:ad:f4:27:48:
                    ed:20:a4:ec:cf:3b:fa:49:5c:2f:bd:45:de:be:0c:
                    70:ff:23:22:7d:f0:cf:14:23:86:c9:e2:b3:bb:15:
                    06:36:62:2e:8d:71:fd:55:a2:37:1a:b2:ee:f5:1e:
                    25:df:b4:b7:bd:fb:f9:55:f2:79:7e:1e:ae:03:bb:
                    a3:61:09:6c:26:e6:ab:31:ab:d2:6b:60:75:47:b0:
                    9f:19:75:0d:91:bd:cb:2b:59:df:dd:65:db:af:df:
                    7b:a6:47:91:44:30:6d:2c:a0:72:c2:5f:64:4f:7a:
                    d4:8e:f8:68:08:12:73:d7:00:30:ff:57:77:f0:68:
                    92:37:53:bf:06:83:9a:45:31:4a:37:11:98:c2:39:
                    d2:8d:32:07:59:16:88:c4:f0:be:73:75:98:e6:9b:
                    68:db:15:48:54:e3:b7:a6:5e:01:d6:e7:dd:93:d2:
                    7c:3d:b8:d3:15:8d:68:00:df:bf:a3:57:51:20:16:
                    3f:2e:db:eb:58:f9:0c:6f:d5:d7:d7:af:33:f5:6c:
                    e4:f0:8f:d9:b1:d9:3e:73:98:05:72:d1:1c:f7:72:
                    22:ec:5f:20:b9:45:d3:7f:ee:49:a8:5c:66:45:3a:
                    7d:0f:9b:9a:35:06:b4:f3:16:08:d5:aa:59:4c:e4:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C8:82:A3:FB:60:27:1F:A7:F5:52:A6:C0:C8:8E:3C:96:FD:AB:AC
            X509v3 Authority Key Identifier:
                keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:27:f5:af:de:a0:05:55:e3:8f:6e:d1:3d:c5:b3:a7:bb:
         61:cc:f0:67:c9:91:a3:e0:bc:ae:fe:90:b2:c1:88:58:26:fd:
         66:8b:21:04:52:b3:ce:e1:16:f4:79:04:13:98:e4:9c:b5:e8:
         fb:fb:25:e8:37:8e:29:35:37:f8:ed:a0:11:40:eb:7c:e5:fd:
         0e:2d:a0:7d:b3:c5:3f:ec:20:21:77:fd:63:13:b4:85:a7:8d:
         49:7b:85:31:08:2f:9d:a5:c2:2f:d9:8d:e1:8a:30:79:21:77:
         48:9a:0d:a8:d8:fa:3c:61:c3:21:7f:65:1d:d3:73:db:ac:89:
         a1:c7:c9:ab:97:a0:0c:4d:1c:f1:9c:ff:41:95:9f:93:47:74:
         09:e1:a6:44:70:4b:f2:94:4e:03:ea:3e:37:5d:f1:3d:dc:c9:
         25:fa:75:74:bf:15:c3:38:54:97:98:a7:41:69:bf:75:d7:9c:
         71:7e:8e:37:52:bb:2c:ea:15:97:c5:ba:55:fc:01:9f:2b:43:
         ee:01:54:51:19:ff:c1:68:e9:78:8c:c4:88:d1:26:31:2a:36:
         23:7c:5e:05:66:60:88:79:1a:7f:d5:8c:9f:35:f2:b1:07:f1:
         14:65:b0:ee:85:88:3b:b2:3d:a3:00:3b:72:c7:ab:09:7d:07:
         d1:45:2f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwT4f5UUvF9g/rDbQKR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg4N2M4ODJhM2ZiNjAyNzFmYTdmNTUyYTZjMGM4OGUzYzk2ZmRhYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14CKrlcs7US92K30J0jtIKTszzv6
SVwvvUXevgxw/yMiffDPFCOGyeKzuxUGNmIujXH9VaI3GrLu9R4l37S3vfv5VfJ5
fh6uA7ujYQlsJuarMavSa2B1R7CfGXUNkb3LK1nf3WXbr997pkeRRDBtLKBywl9k
T3rUjvhoCBJz1wAw/1d38GiSN1O/BoOaRTFKNxGYwjnSjTIHWRaIxPC+c3WY5pto
2xVIVOO3pl4B1ufdk9J8PbjTFY1oAN+/o1dRIBY/LtvrWPkMb9XX168z9Wzk8I/Z
sdk+c5gFctEc93Ii7F8guUXTf+5JqFxmRTp9D5uaNQa08xYI1apZTORftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfIgqP7YCcfp/VSpsDIjjyW/ausMB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv0n9a/e
oAVV449u0T3Fs6e7YczwZ8mRo+C8rv6QssGIWCb9ZoshBFKzzuEW9HkEE5jknLXo
+/sl6DeOKTU3+O2gEUDrfOX9Di2gfbPFP+wgIXf9YxO0haeNSXuFMQgvnaXCL9mN
4YoweSF3SJoNqNj6PGHDIX9lHdNz26yJocfJq5egDE0c8Zz/QZWfk0d0CeGmRHBL
8pROA+o+N13xPdzJJfp1dL8VwzhUl5inQWm/ddeccX6ON1K7LOoVl8W6VfwBnytD
7gFUURn/wWjpeIzEiNEmMSo2I3xeBWZgiHkaf9WMnzXysQfxFGWw7oWIO7I9owA7
cserCX0H0UUveA==
-----END CERTIFICATE-----