Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
File:                     n5auJ3AmWvMufUvoa6sHoHwtM1M.mft (raw, json)
Hash identifier:          HZoSjBziBOWqRDi6r52y1rFVJASsIB374go4ZEXMPFs=
Subject key identifier:   B1:CB:05:AA:CE:B3:01:34:3F:8A:A9:5B:55:B2:1C:DB:52:D0:F9:64
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Certificate issuer:       /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial:       01962DF3BD9A17A14E6EA42CECE9AA3B833D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: UvEQh_w3pDpxL5Zm-5aViUxyqU0.roa (hash: 1pbBgB/1Q5Ec8C6USLAWvrMVYcZC0MxJ5lbRr8Zsraw=)
                          2: n5auJ3AmWvMufUvoa6sHoHwtM1M.crl (hash: IfQGQ1IutVUAc4iuRJly7FVlZFpl8Q+EU/2aXTA+B1I=)
                          3: oW7xXBoOfOplj3IQ3tHAFq1-5Ro.roa (hash: FvAVYSvPEbqL+jm0fRgeU20CKG+6Yq/KWe4x3D/uqak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bd:9a:17:a1:4e:6e:a4:2c:ec:e9:aa:3b:83:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=b1cb05aaceb301343f8aa95b55b21cdb52d0f964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:c7:d8:8b:65:30:9b:d2:91:53:6a:50:d2:
                    3d:81:e5:8d:ae:83:78:db:6d:79:33:ee:c0:8a:60:
                    ce:f4:3a:91:88:d4:2f:ee:d4:bc:01:0a:2d:64:69:
                    42:da:c4:b7:e8:38:dc:75:99:d6:0d:69:7a:0f:f8:
                    eb:4b:12:66:78:2e:38:ad:c2:49:30:25:f3:92:33:
                    0c:d4:e4:8c:e8:c0:10:87:0c:81:1c:83:30:5c:9a:
                    18:67:1b:75:71:65:8e:c3:3f:f7:13:26:1f:f2:cf:
                    d1:d2:c7:92:29:c2:8d:69:8a:f8:68:b9:8c:67:6c:
                    4b:15:0e:8b:41:05:0a:fb:a0:1e:da:e1:5c:9e:f5:
                    39:2a:f4:64:99:19:67:fb:9f:0e:1c:c0:60:90:4e:
                    18:aa:4d:e0:64:f8:3c:72:41:42:e4:c2:58:b9:57:
                    2f:35:8d:81:b8:d4:a1:e9:f9:21:ff:3c:06:d7:d5:
                    3d:02:25:3c:e7:ae:de:59:e0:fa:0a:a7:c4:27:2d:
                    b5:8a:0e:63:88:10:1c:58:c8:46:af:6b:f0:22:eb:
                    1e:4a:6b:4a:62:67:a5:6f:ba:6e:1b:39:35:c7:6e:
                    a6:47:94:a6:75:fe:4d:da:2b:71:ed:f9:ba:0a:41:
                    88:8c:45:94:07:49:68:26:2c:62:fa:0e:a8:f4:ef:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:05:AA:CE:B3:01:34:3F:8A:A9:5B:55:B2:1C:DB:52:D0:F9:64
            X509v3 Authority Key Identifier:
                keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:da:34:c5:16:a6:bc:61:df:e5:aa:c6:22:f2:35:59:44:
         ee:2d:7b:31:35:dc:e3:73:1b:47:72:d4:4d:2e:23:87:9e:ab:
         e7:51:a1:80:7f:7c:38:5e:4c:6d:b6:04:ed:65:83:82:99:aa:
         44:04:13:57:77:3b:e5:9d:d7:97:a9:98:69:be:94:ed:95:7f:
         42:a0:be:b6:70:13:e6:1c:3d:9c:93:95:70:1a:81:02:33:8b:
         02:b2:9a:3a:0c:11:0e:7d:28:89:1e:02:b2:2b:9d:15:1a:e6:
         6e:7d:88:98:23:b1:5c:b8:16:47:92:74:2a:55:f3:49:1d:03:
         8e:0a:ca:80:ad:b9:6d:39:4a:19:8a:cd:03:d0:3d:fe:1f:f1:
         3e:78:92:c2:a4:19:ac:b9:94:36:e3:19:c6:fe:15:1f:85:42:
         7c:bf:10:87:87:46:e7:44:68:95:fb:39:b2:03:6b:e4:94:8e:
         e4:0b:49:fa:7b:b1:46:8f:82:b8:06:ab:55:b7:7b:44:d0:cb:
         76:4c:40:47:2e:47:60:5c:7c:25:b6:4d:bf:8c:29:a3:2e:ef:
         5c:2c:9c:a3:0b:7f:bb:03:bc:2f:d3:2e:b2:dc:eb:b7:e4:dd:
         fe:24:cd:a7:34:6e:4e:a6:aa:b7:05:7f:58:e6:b8:5d:e4:4a:
         fe:f7:0a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt872aF6FObqQs7OmqO4M9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTZhZTI3NzAyNjVhZjMyZTdkNGJlODZiYWIwN2EwN2My
ZDMzNTMwHhcNMjUwNDEzMDcwMTEwWhcNMjUwNDE0MDcwMTEwWjAzMTEwLwYDVQQD
EyhiMWNiMDVhYWNlYjMwMTM0M2Y4YWE5NWI1NWIyMWNkYjUyZDBmOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoobH2ItlMJvSkVNqUNI9geWNroN4
2215M+7AimDO9DqRiNQv7tS8AQotZGlC2sS36DjcdZnWDWl6D/jrSxJmeC44rcJJ
MCXzkjMM1OSM6MAQhwyBHIMwXJoYZxt1cWWOwz/3EyYf8s/R0seSKcKNaYr4aLmM
Z2xLFQ6LQQUK+6Ae2uFcnvU5KvRkmRln+58OHMBgkE4Yqk3gZPg8ckFC5MJYuVcv
NY2BuNSh6fkh/zwG19U9AiU8567eWeD6CqfEJy21ig5jiBAcWMhGr2vwIuseSmtK
Ymelb7puGzk1x26mR5Smdf5N2itx7fm6CkGIjEWUB0loJixi+g6o9O8rQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHLBarOswE0P4qpW1WyHNtS0PlkMB8GA1UdIwQY
MBaAFJ+WridwJlrzLn1L6GurB6B8LTNTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVhdUozQW1Xdk11ZlV2b2E2c0hvSHd0TTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82YmI1YjEtMWU2YS00NDU1LTlkNzUt
ZTY0Yzg4NWY2MmNlLzEvbjVhdUozQW1Xdk11ZlV2b2E2c0hvSHd0TTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82YmI1YjEtMWU2YS00NDU1LTlkNzUtZTY0Yzg4NWY2MmNl
LzEvbjVhdUozQW1Xdk11ZlV2b2E2c0hvSHd0TTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAraNMUW
prxh3+WqxiLyNVlE7i17MTXc43MbR3LUTS4jh56r51GhgH98OF5MbbYE7WWDgpmq
RAQTV3c75Z3Xl6mYab6U7ZV/QqC+tnAT5hw9nJOVcBqBAjOLArKaOgwRDn0oiR4C
siudFRrmbn2ImCOxXLgWR5J0KlXzSR0DjgrKgK25bTlKGYrNA9A9/h/xPniSwqQZ
rLmUNuMZxv4VH4VCfL8Qh4dG50Rolfs5sgNr5JSO5AtJ+nuxRo+CuAarVbd7RNDL
dkxARy5HYFx8JbZNv4wpoy7vXCycowt/uwO8L9Mustzrt+Td/iTNpzRuTqaqtwV/
WOa4XeRK/vcK1w==
-----END CERTIFICATE-----