Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          Yzhfjkfm4ckLJ1kDoU7vHrLowi7gs0TJjjfd4b0bNZc=
Subject key identifier:   D2:E4:BD:FC:2E:FA:5B:ED:9C:69:B8:DF:4F:2D:1B:D2:3D:D3:AB:B9
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       01962ECF7700B1703F7D7B4540FDAA7D37C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
                          2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
                          3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: yC/zKNlL6HA10zqqIy/Tv66Y5AWc7TNmPMrctNOa1Ao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:77:00:b1:70:3f:7d:7b:45:40:fd:aa:7d:37:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=d2e4bdfc2efa5bed9c69b8df4f2d1bd23dd3abb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:91:cb:97:69:56:28:12:15:6b:bf:23:92:
                    50:8c:d1:cf:80:5e:81:a4:32:d1:d1:e4:a0:c1:d3:
                    99:8c:99:ea:a3:fe:d2:2d:06:25:d5:05:dc:18:a8:
                    0e:ee:cf:e7:8d:33:ed:06:c6:07:94:05:76:7c:92:
                    fd:08:a0:d0:1f:7a:fb:f1:d5:1c:bb:d8:55:77:31:
                    04:10:8a:a7:60:40:e4:fc:46:11:e7:1a:fd:0d:53:
                    cb:33:bf:d7:81:4d:66:e6:77:4f:fc:d3:f4:d5:ba:
                    b4:23:e2:8a:5e:44:84:94:d0:31:ce:88:79:00:f2:
                    85:7a:b1:db:05:d2:3a:7a:c4:e7:e6:5b:e4:50:a2:
                    72:a4:bc:5d:f3:6b:43:f5:9c:49:a9:0e:cf:27:33:
                    07:23:ab:64:e5:06:df:68:bc:7e:04:25:6e:84:0d:
                    0c:b7:ad:29:6f:76:83:2f:b4:53:7e:69:a3:7f:34:
                    36:75:e3:62:7c:7c:bf:a3:68:87:37:8f:3b:a5:b5:
                    15:83:30:51:e5:53:94:88:3d:90:96:4a:4f:d0:71:
                    2b:5d:4a:cc:25:c6:8b:de:0a:44:ee:bc:90:89:43:
                    ba:9f:a2:1a:eb:02:13:2b:2a:3e:1a:78:a5:5e:61:
                    33:ab:ed:56:d5:d4:55:c4:a6:b2:10:76:f1:85:cd:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:BD:FC:2E:FA:5B:ED:9C:69:B8:DF:4F:2D:1B:D2:3D:D3:AB:B9
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:3a:cc:84:3b:69:00:b6:f2:1a:ba:ea:88:48:ec:18:9c:
         72:a6:1d:2c:4a:83:ac:b8:9d:53:08:07:fa:16:f2:cc:97:9b:
         a1:58:84:48:58:3c:78:5a:45:31:a2:32:f9:12:e2:df:bd:c6:
         37:b0:fe:1d:56:af:43:66:c2:44:d7:be:db:ff:b4:aa:33:1b:
         4a:1f:38:e5:97:1f:2a:e1:99:4c:50:75:83:f3:5d:e5:04:aa:
         85:f5:53:11:18:52:d4:4d:3a:ad:9c:5b:dd:16:ed:fa:aa:21:
         cc:d2:50:37:e1:fd:3b:40:28:98:62:bb:fb:22:f8:0e:ad:8a:
         99:50:c0:25:3c:4a:ed:73:40:7c:83:e0:b0:3f:63:c7:45:6a:
         8d:e5:01:b4:10:3b:6e:67:cb:db:de:25:ff:00:0d:7a:2e:5f:
         61:5d:ce:e7:14:fc:f1:57:a4:57:ef:12:44:70:6b:97:c5:26:
         d1:61:bb:a0:73:8a:cc:b5:59:1c:0f:84:a3:5e:dd:c4:4e:88:
         6b:bc:2e:e7:12:74:07:7d:98:bb:76:2d:71:b0:10:78:a9:3a:
         84:cd:ee:12:d2:82:35:2b:e2:e4:71:e9:55:b7:67:59:f3:8c:
         72:1b:7c:18:f5:2a:4d:13:a5:35:1b:13:3c:33:59:a2:5c:fa:
         43:c6:94:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3cAsXA/fXtFQP2qfTfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjUwNDEzMTEwMTEwWhcNMjUwNDE0MTEwMTEwWjAzMTEwLwYDVQQD
EyhkMmU0YmRmYzJlZmE1YmVkOWM2OWI4ZGY0ZjJkMWJkMjNkZDNhYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0SRy5dpVigSFWu/I5JQjNHPgF6B
pDLR0eSgwdOZjJnqo/7SLQYl1QXcGKgO7s/njTPtBsYHlAV2fJL9CKDQH3r78dUc
u9hVdzEEEIqnYEDk/EYR5xr9DVPLM7/XgU1m5ndP/NP01bq0I+KKXkSElNAxzoh5
APKFerHbBdI6esTn5lvkUKJypLxd82tD9ZxJqQ7PJzMHI6tk5QbfaLx+BCVuhA0M
t60pb3aDL7RTfmmjfzQ2deNifHy/o2iHN487pbUVgzBR5VOUiD2QlkpP0HErXUrM
JcaL3gpE7ryQiUO6n6Ia6wITKyo+GnilXmEzq+1W1dRVxKayEHbxhc2gUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLkvfwu+lvtnGm4308tG9I906u5MB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf586zIQ7
aQC28hq66ohI7BiccqYdLEqDrLidUwgH+hbyzJeboViESFg8eFpFMaIy+RLi373G
N7D+HVavQ2bCRNe+2/+0qjMbSh845ZcfKuGZTFB1g/Nd5QSqhfVTERhS1E06rZxb
3Rbt+qohzNJQN+H9O0AomGK7+yL4Dq2KmVDAJTxK7XNAfIPgsD9jx0VqjeUBtBA7
bmfL294l/wANei5fYV3O5xT88VekV+8SRHBrl8Um0WG7oHOKzLVZHA+Eo17dxE6I
a7wu5xJ0B32Yu3YtcbAQeKk6hM3uEtKCNSvi5HHpVbdnWfOMcht8GPUqTROlNRsT
PDNZolz6Q8aUwg==
-----END CERTIFICATE-----