Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File:                     Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier:          MYWpNYHN+2NnDnREUovnbvRCh2mE2elCEuCP7rIyaw8=
Subject key identifier:   7F:A4:9B:1F:ED:E3:DD:5B:BC:CD:DB:FC:63:49:07:98:60:D1:0E:53
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer:       /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial:       01962E98D0DCCA732E4E546B158C4F095A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number:          0552
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: 1-wMS9vZvBAuCKDz03PRK_gSnUfI.roa (hash: 4UrgxrRXQe+UtWoEsv9eaDsHmSudcco9i9klqNnetCQ=)
                          2: 20NLCG2yB3P_lJPfZuVuzFu-TU4.roa (hash: m9SiJ2stUV8q1CVCQ7Ha/GjMgmYPtHRZSUs0RL8C5GE=)
                          3: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=)
                          4: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: vR6rhFFJ4Vg5AApNfM/MKTqZ4iOIJjINWxQzUF1Qdtk=)
                          5: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=)
                          6: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d0:dc:ca:73:2e:4e:54:6b:15:8c:4f:09:5a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=7fa49b1fede3dd5bbccddbfc6349079860d10e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:fc:59:a2:1b:09:62:ba:e6:3d:eb:d2:09:
                    db:c6:bc:59:3e:c1:38:3e:c1:fd:b8:0a:15:02:2a:
                    3b:03:37:2e:a8:6f:e2:ee:81:07:b9:db:5a:ad:3d:
                    fa:8a:70:27:69:7f:41:04:89:0e:de:00:43:ae:2b:
                    a2:71:36:6a:8f:95:d6:4d:34:cb:f0:5c:c3:9f:76:
                    4f:2c:4c:2c:c0:ac:67:fa:c2:b6:db:10:23:39:2d:
                    de:62:be:6f:59:61:28:9e:ac:90:2f:7a:be:59:62:
                    ef:7b:6e:38:55:14:79:aa:2d:94:c5:0f:91:5f:d0:
                    22:2e:c1:21:f3:3c:27:c3:1f:7b:b5:dc:c6:b8:48:
                    1b:10:5b:0d:cb:c1:44:c1:23:ea:b1:2b:79:f6:f0:
                    33:c9:b8:4b:43:5f:57:d8:78:3f:ce:b5:d4:39:88:
                    f2:96:46:51:13:f8:ca:9e:e3:b7:c7:7f:75:97:02:
                    06:9d:0e:3a:e2:d2:75:aa:60:f2:f9:2e:5a:a6:ce:
                    f4:10:2e:7a:a1:fc:c0:b9:99:38:7f:9d:ad:f2:ad:
                    63:c6:18:e2:ae:ac:a1:d2:6f:17:cb:93:95:20:f9:
                    25:23:70:f2:ba:ab:07:6b:88:4f:e2:da:2e:d2:87:
                    e8:49:2c:08:92:85:24:1c:f6:32:0c:d4:95:8e:b6:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:9B:1F:ED:E3:DD:5B:BC:CD:DB:FC:63:49:07:98:60:D1:0E:53
            X509v3 Authority Key Identifier:
                keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:25:f5:6a:7e:fc:a8:77:41:e0:22:9f:44:3e:5c:e9:10:
         f3:38:1e:7b:83:0c:22:84:f4:45:5c:ef:86:77:08:fc:34:d8:
         6f:b0:7b:f7:c3:25:34:2d:1d:e6:f9:f2:2b:5b:9b:20:83:cd:
         54:d7:30:96:02:a2:f5:e8:aa:52:74:7a:2c:fc:63:34:a5:3c:
         5b:9a:7b:9d:49:51:fa:f8:3d:17:5a:92:c3:b9:37:41:23:39:
         ff:ce:f9:56:44:9e:2f:f6:0f:55:a1:b4:b5:8e:60:b7:ba:16:
         91:51:b2:36:34:82:76:76:a1:1f:58:26:d7:43:cf:b0:44:91:
         70:60:63:9c:28:cb:a9:54:15:8f:28:39:dc:0d:74:b3:ea:95:
         c1:53:19:99:f8:fa:57:a1:89:70:79:7f:02:2b:70:af:eb:2b:
         21:66:ee:ed:14:33:0b:f7:19:20:8f:3b:bf:bc:38:2b:b8:99:
         b2:ef:93:b7:4b:b2:11:9b:19:cd:fb:e5:df:87:02:9c:c9:05:
         99:f6:c7:23:96:24:b4:ce:78:92:20:fb:64:34:3c:ca:1a:5e:
         c8:74:74:29:00:b1:6e:9f:b5:84:92:62:c1:cf:73:e5:e8:04:
         e9:d8:e1:b2:0a:88:cb:9f:11:b2:bd:73:66:6d:a2:9c:fe:a3:
         33:3d:65:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNDcynMuTlRrFYxPCVp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjUwNDEzMTAwMTI4WhcNMjUwNDE0MTAwMTI4WjAzMTEwLwYDVQQD
Eyg3ZmE0OWIxZmVkZTNkZDViYmNjZGRiZmM2MzQ5MDc5ODYwZDEwZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRr8WaIbCWK65j3r0gnbxrxZPsE4
PsH9uAoVAio7AzcuqG/i7oEHudtarT36inAnaX9BBIkO3gBDriuicTZqj5XWTTTL
8FzDn3ZPLEwswKxn+sK22xAjOS3eYr5vWWEonqyQL3q+WWLve244VRR5qi2UxQ+R
X9AiLsEh8zwnwx97tdzGuEgbEFsNy8FEwSPqsSt59vAzybhLQ19X2Hg/zrXUOYjy
lkZRE/jKnuO3x391lwIGnQ464tJ1qmDy+S5aps70EC56ofzAuZk4f52t8q1jxhji
rqyh0m8Xy5OVIPklI3DyuqsHa4hP4tou0ofoSSwIkoUkHPYyDNSVjrZ0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+kmx/t491bvM3b/GNJB5hg0Q5TMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbP8l9Wp+
/Kh3QeAin0Q+XOkQ8zgee4MMIoT0RVzvhncI/DTYb7B798MlNC0d5vnyK1ubIIPN
VNcwlgKi9eiqUnR6LPxjNKU8W5p7nUlR+vg9F1qSw7k3QSM5/875VkSeL/YPVaG0
tY5gt7oWkVGyNjSCdnahH1gm10PPsESRcGBjnCjLqVQVjyg53A10s+qVwVMZmfj6
V6GJcHl/Aitwr+srIWbu7RQzC/cZII87v7w4K7iZsu+Tt0uyEZsZzfvl34cCnMkF
mfbHI5YktM54kiD7ZDQ8yhpeyHR0KQCxbp+1hJJiwc9z5egE6djhsgqIy58Rsr1z
Zm2inP6jMz1l1w==
-----END CERTIFICATE-----