Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File:                     p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier:          ONRABi+VYdMpszZd/IvtHgzuhRtjcCzYzbthnCz4S4A=
Subject key identifier:   13:36:C6:07:AD:5F:BF:0A:1F:53:D3:45:DF:B2:58:59:68:EF:9D:8C
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer:       /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial:       01962DF4270FB84CC6C1CBCFCE0783F7FA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number:          0D57
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: KwzEIp75onUC_lpKml-NOoNKJjY.roa (hash: GQCN6crgegQmnKF7ZO3NXUg43Rz3kWRc/3PmchskVr8=)
                          2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
                          3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: EdDHytaqZsiCxtMw4seVV1L/lNA4g/CeG5nHEb97c4c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:0f:b8:4c:c6:c1:cb:cf:ce:07:83:f7:fa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=1336c607ad5fbf0a1f53d345dfb2585968ef9d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:0b:3a:32:bf:ce:7c:7e:4d:f4:3f:c4:2a:
                    8c:74:59:af:2f:10:66:33:4b:16:6a:5c:9e:97:27:
                    70:1e:4c:2c:5a:9e:3d:19:d7:54:1a:02:d5:d0:28:
                    7b:34:f6:c4:da:97:cb:3f:3f:aa:40:7c:d5:09:c7:
                    14:67:b1:9e:b3:73:42:cb:1f:26:ce:d2:ea:a2:5b:
                    0d:b0:65:5b:f6:c5:93:f1:cf:bd:40:5d:c1:97:41:
                    85:bd:2a:f0:c3:96:f7:3f:1a:e3:03:f1:70:81:f9:
                    4a:52:e8:17:ec:48:f6:f2:36:e6:09:a6:d0:3b:41:
                    35:4e:30:83:67:50:37:34:ae:3a:01:c4:8e:ca:33:
                    22:1b:6d:a8:08:24:98:b2:15:56:6b:d0:5f:e7:a8:
                    1b:23:11:17:a1:2c:34:07:ee:c4:ab:f7:b7:02:37:
                    cf:e7:92:3a:bd:38:29:af:ae:f7:fd:ab:95:a5:02:
                    bd:b5:5c:be:fb:23:f0:2b:7b:40:f7:b2:6a:7e:be:
                    6e:49:2a:26:9c:48:b7:3f:a4:41:c0:c5:b3:54:b5:
                    10:8f:df:9a:aa:d1:cb:6f:34:ba:86:83:db:97:f2:
                    8c:8b:c3:51:4d:bd:eb:3f:d2:42:2a:db:ca:f3:84:
                    19:21:35:d0:f2:ce:3c:2b:f4:19:2a:1d:5c:14:90:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:36:C6:07:AD:5F:BF:0A:1F:53:D3:45:DF:B2:58:59:68:EF:9D:8C
            X509v3 Authority Key Identifier:
                keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bc:e2:da:c1:b5:b0:e6:81:18:aa:2a:56:4b:1e:e8:09:73:
         aa:a9:6a:83:38:32:35:a1:90:1b:94:d5:43:86:8a:2c:32:87:
         05:c5:4a:f8:0a:cb:59:03:c2:90:ad:16:62:a7:1c:d3:da:2b:
         62:8e:52:f7:2c:6a:2f:df:d9:d7:84:bb:cb:d3:75:aa:35:79:
         44:2a:fc:29:6d:37:c5:db:31:ac:56:ea:6a:7d:cb:5b:f1:ce:
         19:04:31:50:70:d0:1c:d0:8a:6d:20:99:50:8c:ce:11:c1:83:
         2e:c7:a9:c3:66:a1:ce:23:95:7b:5f:7b:c0:6a:b1:85:b0:14:
         11:73:00:d1:b1:47:95:02:0f:29:e3:67:55:c0:61:83:3e:90:
         29:eb:c1:4d:a5:a8:fd:f7:e6:ec:8a:5a:25:25:ec:0c:47:15:
         42:44:c7:63:2c:57:24:2c:01:2a:33:42:6c:6e:28:1f:7a:f7:
         88:cb:ec:2b:4e:0e:a8:71:02:67:e4:c0:57:b5:fa:b9:cb:5e:
         80:67:fa:9d:e1:ca:01:13:85:3e:3c:fe:b5:2c:85:b6:da:ec:
         15:69:e5:88:b6:a7:7d:f4:73:88:a3:ff:93:0b:be:73:f9:4e:
         5d:2b:08:c1:02:7e:6f:15:32:98:33:ca:c1:73:88:83:d3:51:
         9f:27:9a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CcPuEzGwcvPzgeD9/oDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj
NzJmMzIwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
EygxMzM2YzYwN2FkNWZiZjBhMWY1M2QzNDVkZmIyNTg1OTY4ZWY5ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ELOjK/znx+TfQ/xCqMdFmvLxBm
M0sWalyelydwHkwsWp49GddUGgLV0Ch7NPbE2pfLPz+qQHzVCccUZ7Ges3NCyx8m
ztLqolsNsGVb9sWT8c+9QF3Bl0GFvSrww5b3PxrjA/FwgflKUugX7Ej28jbmCabQ
O0E1TjCDZ1A3NK46AcSOyjMiG22oCCSYshVWa9Bf56gbIxEXoSw0B+7Eq/e3AjfP
55I6vTgpr673/auVpQK9tVy++yPwK3tA97Jqfr5uSSomnEi3P6RBwMWzVLUQj9+a
qtHLbzS6hoPbl/KMi8NRTb3rP9JCKtvK84QZITXQ8s48K/QZKh1cFJCHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM2xgetX78KH1PTRd+yWFlo752MMB8GA1UdIwQY
MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt
MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3
LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrzi2sG1
sOaBGKoqVkse6AlzqqlqgzgyNaGQG5TVQ4aKLDKHBcVK+ArLWQPCkK0WYqcc09or
Yo5S9yxqL9/Z14S7y9N1qjV5RCr8KW03xdsxrFbqan3LW/HOGQQxUHDQHNCKbSCZ
UIzOEcGDLsepw2ahziOVe197wGqxhbAUEXMA0bFHlQIPKeNnVcBhgz6QKevBTaWo
/ffm7IpaJSXsDEcVQkTHYyxXJCwBKjNCbG4oH3r3iMvsK04OqHECZ+TAV7X6ucte
gGf6neHKAROFPjz+tSyFttrsFWnliLanffRziKP/kwu+c/lOXSsIwQJ+bxUymDPK
wXOIg9NRnyea5g==
-----END CERTIFICATE-----