Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File:                     S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier:          wUvW7hjT/187bZbVZ0NQ0yHhsLh8CURvHeUYP6prfQs=
Subject key identifier:   D7:E1:6D:70:C5:EC:07:FC:C0:68:8A:95:AA:48:B4:97:F0:24:59:B7
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer:       /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial:       01962DF441731718DA028D61D9861844E93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number:          01C2
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: F1UjLRrMW4w-z1A5jk_jyEpufnU.roa (hash: H0RAjk+jMZacwgROEVs3RS9XB3a2sWnbKmOF2vnFoYU=)
                          2: N2ivlz1wZCpdYYLO1Jxljykvn4c.roa (hash: qYmGGsXcI2a1eHN7AFVSkBu0axGqB7MkOzzu5zM+aAU=)
                          3: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: zfXHisVYjfQL0wmv1ejrACeiZiEcaRfyx8zAjaIGAOs=)
                          4: y-thR2-wOGxjUF2dmavWMwBsUm0.roa (hash: WQLO7IU5V5iq1uzzyryZYM1QGfm/WLluTpgcnyQ2D8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:41:73:17:18:da:02:8d:61:d9:86:18:44:e9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=d7e16d70c5ec07fcc0688a95aa48b497f02459b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:ea:ef:e3:4a:24:05:47:00:1e:ea:7f:96:
                    7e:2c:63:df:99:9c:92:e8:dd:99:be:a9:68:ad:03:
                    82:d6:56:ec:09:92:f6:b7:97:eb:88:a7:82:f5:40:
                    3e:c2:ff:6e:9d:9c:61:e2:30:0a:bf:73:00:10:2a:
                    a9:4b:e3:41:59:e1:fb:bb:04:6a:6d:24:2b:f2:4a:
                    5b:d1:5d:fe:46:17:11:82:87:3b:13:00:e3:d9:66:
                    1b:25:89:57:5a:9d:f9:ee:f3:1e:8d:ec:54:ee:85:
                    28:f3:d7:2d:98:bb:35:38:29:03:fc:81:7b:ac:67:
                    e3:b2:4e:7b:ad:69:7c:f7:3c:14:70:fb:95:20:64:
                    b2:80:c3:08:87:b3:28:2f:95:30:2c:cc:94:0b:65:
                    39:7c:4c:c1:33:33:89:4c:e6:6d:05:a7:18:85:c5:
                    e5:e0:fc:75:d8:5a:81:96:3a:99:03:58:1c:2f:f2:
                    b4:1b:c6:9c:b1:39:03:ec:7c:6c:21:6e:7f:72:2a:
                    c6:ab:e3:95:b8:cb:f5:38:02:8a:36:39:60:d0:aa:
                    f0:15:a6:ba:4e:81:b9:c8:f1:e8:4b:b5:dd:74:3f:
                    c6:78:23:aa:9c:29:11:ac:9f:ff:ed:62:a4:a6:7a:
                    de:48:a4:a0:52:83:f6:98:2c:75:57:d0:8f:ff:b7:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E1:6D:70:C5:EC:07:FC:C0:68:8A:95:AA:48:B4:97:F0:24:59:B7
            X509v3 Authority Key Identifier:
                keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:e7:57:dd:f1:9f:ad:3d:00:a8:6d:66:6c:71:53:95:f6:
         2a:64:04:4b:9d:94:c8:38:9c:49:8e:9b:72:74:c6:62:18:02:
         87:d7:f0:fc:f7:52:62:23:6c:4d:c4:5d:55:76:a5:8d:7e:56:
         bc:7a:b6:ec:90:96:e7:47:5a:b1:b4:ba:03:33:f8:71:08:19:
         bd:dc:04:76:fb:d3:c9:50:6d:81:3c:dd:7f:06:04:16:da:71:
         79:7d:d5:e8:40:fd:91:95:0a:aa:2d:93:23:45:73:d2:16:f0:
         e4:83:64:36:58:67:0f:55:c7:73:c6:d5:bc:72:b4:31:59:2c:
         42:03:86:0f:06:a0:bc:bb:51:15:41:ed:ad:6f:9f:79:16:fc:
         b3:13:f2:aa:6f:e3:45:32:e6:95:5b:bb:ea:e1:27:77:5f:f1:
         22:3e:b6:97:66:04:dd:41:b7:e0:c9:59:82:0f:54:08:12:e2:
         44:54:cf:91:5a:73:2b:eb:80:a1:d9:c6:1e:12:d5:82:b4:7a:
         16:72:09:89:d6:21:95:e7:d7:7b:97:a3:6c:17:d8:c1:37:a6:
         c2:21:da:77:40:4e:53:b5:a4:24:87:fb:12:cf:7e:2b:db:c9:
         be:b6:26:cf:64:48:86:55:00:c1:94:83:e7:ec:cc:87:11:81:
         9e:ac:68:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EFzFxjaAo1h2YYYROk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm
ZjFkYmQwHhcNMjUwNDEzMDcwMTQ0WhcNMjUwNDE0MDcwMTQ0WjAzMTEwLwYDVQQD
EyhkN2UxNmQ3MGM1ZWMwN2ZjYzA2ODhhOTVhYTQ4YjQ5N2YwMjQ1OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXq7+NKJAVHAB7qf5Z+LGPfmZyS
6N2ZvqlorQOC1lbsCZL2t5friKeC9UA+wv9unZxh4jAKv3MAECqpS+NBWeH7uwRq
bSQr8kpb0V3+RhcRgoc7EwDj2WYbJYlXWp357vMejexU7oUo89ctmLs1OCkD/IF7
rGfjsk57rWl89zwUcPuVIGSygMMIh7MoL5UwLMyUC2U5fEzBMzOJTOZtBacYhcXl
4Px12FqBljqZA1gcL/K0G8acsTkD7HxsIW5/cirGq+OVuMv1OAKKNjlg0KrwFaa6
ToG5yPHoS7XddD/GeCOqnCkRrJ//7WKkpnreSKSgUoP2mCx1V9CP/7fHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfhbXDF7Af8wGiKlapItJfwJFm3MB8GA1UdIwQY
MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt
OTJkZGVjNmJkMGEyLzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy
LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8HnV93x
n609AKhtZmxxU5X2KmQES52UyDicSY6bcnTGYhgCh9fw/PdSYiNsTcRdVXaljX5W
vHq27JCW50dasbS6AzP4cQgZvdwEdvvTyVBtgTzdfwYEFtpxeX3V6ED9kZUKqi2T
I0Vz0hbw5INkNlhnD1XHc8bVvHK0MVksQgOGDwagvLtRFUHtrW+feRb8sxPyqm/j
RTLmlVu76uEnd1/xIj62l2YE3UG34MlZgg9UCBLiRFTPkVpzK+uAodnGHhLVgrR6
FnIJidYhlefXe5ejbBfYwTemwiHad0BOU7WkJIf7Es9+K9vJvrYmz2RIhlUAwZSD
5+zMhxGBnqxozA==
-----END CERTIFICATE-----