Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File:                     V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier:          498r9nkg8/VicP18wR5s0F8lik0Zmi3ZJp0b3CsdyDw=
Subject key identifier:   CD:A8:D9:05:74:8F:5E:EC:0C:14:7D:E4:99:43:35:55:F1:73:FD:52
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer:       /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial:       01962ECF9A3F1174649D984D362034705BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
                          2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: JCZ/M6KNNDaLTt/v75kOPl63j1xyETxh971d8S10fz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:3f:11:74:64:9d:98:4d:36:20:34:70:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=cda8d905748f5eec0c147de499433555f173fd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:4f:c1:2f:d6:3f:19:f2:13:31:c3:e8:0a:
                    20:17:2b:39:74:98:81:8d:e7:3f:3d:c7:c6:57:41:
                    76:ee:6d:e6:e1:12:38:34:d7:5e:52:70:88:af:b7:
                    d9:4f:07:72:fc:d9:7f:0b:2b:55:79:66:73:c5:f9:
                    0d:83:bc:69:6b:92:05:85:d2:b9:d8:0a:cf:7b:72:
                    b6:a5:c7:27:4b:66:f9:41:db:8f:e8:b6:c3:9f:86:
                    e0:b2:f1:43:27:23:62:7f:11:f2:0a:89:3c:aa:42:
                    ae:94:c7:84:a6:2f:a4:e4:ca:15:e8:14:58:45:f2:
                    7c:7a:ef:bf:10:8e:3d:bc:72:10:74:fc:ed:12:87:
                    b0:f5:c1:88:40:30:a2:8f:56:4f:47:98:69:6a:54:
                    70:e9:ec:83:aa:30:25:84:ce:e3:67:c2:67:0f:9a:
                    ba:ce:bc:5b:0c:fb:a2:77:7b:5d:1e:33:07:d9:8f:
                    34:99:90:64:d3:3d:37:46:ca:77:c6:03:c8:99:01:
                    d9:4f:e4:1e:1c:2e:a0:3b:45:fb:e0:59:33:76:9f:
                    c5:85:21:35:66:86:5d:a4:5c:37:4a:08:0c:5d:ae:
                    57:71:15:ab:8c:3e:55:51:fd:f4:a7:3d:1e:c5:c4:
                    e8:85:5b:6a:d2:28:1c:99:89:d2:7e:ce:e9:af:18:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A8:D9:05:74:8F:5E:EC:0C:14:7D:E4:99:43:35:55:F1:73:FD:52
            X509v3 Authority Key Identifier:
                keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:ec:f6:f5:25:52:e2:8d:cb:a3:2b:93:bb:ca:84:71:e5:
         48:d7:77:1f:90:98:47:3e:4d:91:29:57:94:85:8c:d7:fc:dc:
         7c:19:92:8e:8f:b4:1d:a5:c2:e8:53:eb:8c:ec:0e:7b:55:96:
         bc:a0:0b:26:e9:1b:78:94:df:35:85:92:8c:ab:29:d7:52:03:
         0a:63:58:f4:33:d2:3c:18:0a:c3:73:eb:30:1b:c3:e9:e5:cc:
         8a:ee:80:cf:b5:e0:b0:c0:35:d0:30:6f:e7:37:98:44:0b:53:
         8d:97:c7:fe:ac:2c:69:fa:69:d4:25:a4:f2:9a:1c:b8:38:85:
         e4:38:40:5a:34:04:a1:b0:9b:e3:10:b4:cb:3b:12:42:df:83:
         49:a5:42:34:8a:f6:1a:b1:2d:14:c9:49:d9:a0:f3:24:27:f7:
         f4:10:5a:f9:21:e2:92:cb:6c:1a:cb:ef:6b:18:2e:c2:fa:82:
         54:d5:0f:dc:f5:88:21:33:c6:a2:30:9e:c2:ff:ab:88:45:c5:
         8b:8b:d9:72:d1:fd:d4:12:ba:a9:eb:9e:0b:3f:f9:d7:4d:bd:
         35:ec:4c:68:c9:fa:a1:4a:3e:0b:8b:f8:11:ee:32:fc:10:79:
         55:ee:4e:b9:fa:9f:7b:06:7b:7b:10:fb:50:ee:64:56:19:d0:
         f6:8e:2d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5o/EXRknZhNNiA0cFveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy
ZTA5MjEwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
EyhjZGE4ZDkwNTc0OGY1ZWVjMGMxNDdkZTQ5OTQzMzU1NWYxNzNmZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16lPwS/WPxnyEzHD6AogFys5dJiB
jec/PcfGV0F27m3m4RI4NNdeUnCIr7fZTwdy/Nl/CytVeWZzxfkNg7xpa5IFhdK5
2ArPe3K2pccnS2b5QduP6LbDn4bgsvFDJyNifxHyCok8qkKulMeEpi+k5MoV6BRY
RfJ8eu+/EI49vHIQdPztEoew9cGIQDCij1ZPR5hpalRw6eyDqjAlhM7jZ8JnD5q6
zrxbDPuid3tdHjMH2Y80mZBk0z03Rsp3xgPImQHZT+QeHC6gO0X74Fkzdp/FhSE1
ZoZdpFw3SggMXa5XcRWrjD5VUf30pz0excTohVtq0igcmYnSfs7prxjPNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2o2QV0j17sDBR95JlDNVXxc/1SMB8GA1UdIwQY
MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt
NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx
LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqTs9vUl
UuKNy6Mrk7vKhHHlSNd3H5CYRz5NkSlXlIWM1/zcfBmSjo+0HaXC6FPrjOwOe1WW
vKALJukbeJTfNYWSjKsp11IDCmNY9DPSPBgKw3PrMBvD6eXMiu6Az7XgsMA10DBv
5zeYRAtTjZfH/qwsafpp1CWk8pocuDiF5DhAWjQEobCb4xC0yzsSQt+DSaVCNIr2
GrEtFMlJ2aDzJCf39BBa+SHikstsGsvvaxguwvqCVNUP3PWIITPGojCewv+riEXF
i4vZctH91BK6qeueCz/51029NexMaMn6oUo+C4v4Ee4y/BB5Ve5OufqfewZ7exD7
UO5kVhnQ9o4thg==
-----END CERTIFICATE-----