Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          0gmGJG45/LFeO2LVsrgD99g6Af71caIeJfKHkfWjPlU=
Subject key identifier:   A1:37:2B:3D:05:C9:9F:B3:32:B9:8C:1C:FD:EE:13:8F:D3:0B:28:05
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       01962F06B5BEF3A6989521FF80D773AACBD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          0F3D
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: 6CjqGayZirF7mqEJvPKn4UG8yTo/RYG+4MjY5cBCE2c=)
                          2: BHjifWVoQKxqVIzEnX32wai1mHI.roa (hash: AjeiL3e+XMTL7CQVb6tcAbQ4dMq9NOjai1XiWf1vXec=)
                          3: QXbfJIh1eRteU9Wzrebe-Y-tzSY.roa (hash: SsanvIDWtEhKsoV2dkvCk+7YzGR4haX0tXLi2hZEJiE=)
                          4: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:be:f3:a6:98:95:21:ff:80:d7:73:aa:cb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=a1372b3d05c99fb332b98c1cfdee138fd30b2805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:4d:08:17:47:c7:74:14:aa:52:d9:fc:56:
                    21:cb:50:7b:05:42:41:53:a5:74:9a:5e:2e:3d:a9:
                    6f:1f:4f:05:c1:13:09:e2:00:47:d8:9d:88:ac:6a:
                    21:eb:ee:93:d1:27:58:b9:fd:b6:7d:aa:97:be:3f:
                    a2:ae:b1:c1:dc:af:dd:59:8f:fc:38:08:bc:8a:9d:
                    26:3b:63:ee:77:81:43:a9:64:bd:ea:da:60:bc:c9:
                    c8:68:85:11:1e:07:c5:b4:7f:52:f8:31:e3:74:9b:
                    30:83:2f:90:3a:ff:ed:23:0e:eb:51:76:5a:13:33:
                    c7:a7:8a:58:5e:cf:5f:be:5b:f4:f5:52:a2:a2:90:
                    c8:8d:1d:a7:93:a4:1f:77:31:8f:51:7c:e7:81:ab:
                    15:48:35:b2:13:19:42:9d:be:9f:a5:ab:39:33:ab:
                    be:9f:71:67:62:90:64:da:eb:84:2d:c0:25:a7:7d:
                    73:d7:bd:19:72:35:0b:ea:2f:81:b1:22:06:43:53:
                    56:ff:5d:b8:cf:43:36:05:1c:82:d0:9a:66:61:5f:
                    02:30:60:9e:5e:77:e3:7c:b5:c1:a4:43:84:83:21:
                    85:de:23:3e:a3:0b:98:e6:08:b8:f3:83:c6:60:48:
                    bb:25:52:e4:a9:10:8c:0b:59:05:f9:a2:78:2f:5e:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:2B:3D:05:C9:9F:B3:32:B9:8C:1C:FD:EE:13:8F:D3:0B:28:05
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:4f:db:3d:7c:d1:a4:5b:7d:37:9e:9e:d9:64:84:ed:62:
         7c:7d:ae:68:72:1f:f4:5c:99:8d:5f:95:3f:e2:4e:c5:ad:a8:
         a7:9b:b3:bd:58:e4:aa:b4:ec:8a:65:f7:9a:ea:b7:18:d3:d9:
         67:57:1a:42:6a:d7:46:e8:d4:02:1a:5d:1d:7f:b6:df:2d:5e:
         45:a4:d7:49:06:4d:6a:e4:b6:96:56:63:dd:b9:f0:c3:69:b6:
         d0:74:5c:12:62:cf:c4:98:ab:c9:dc:3d:a9:1c:6a:df:ca:e0:
         5d:09:72:c4:21:95:87:a3:3f:3c:ba:2e:e6:74:92:ee:37:34:
         51:be:2d:5a:35:ed:dd:cc:45:ad:dd:7c:01:6e:62:d9:e5:5f:
         94:94:d1:a8:53:07:cf:c3:0a:63:09:1c:d7:00:75:92:57:98:
         a2:42:23:b1:ba:1a:d7:86:9a:f5:87:25:1a:d7:a1:c3:50:9b:
         21:c4:7a:6e:0b:67:04:74:60:e1:9b:fa:36:a4:63:e1:5c:5a:
         33:ff:e8:2e:6d:1e:fc:09:8c:63:39:a0:54:33:20:f2:7b:43:
         f5:54:32:a6:dd:60:75:ec:1b:39:12:8c:ca:d5:85:ca:c2:7c:
         fb:74:27:06:23:14:44:3f:44:b9:17:cd:11:11:58:d8:d7:68:
         95:cd:21:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrW+86aYlSH/gNdzqsvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjUwNDEzMTIwMTMwWhcNMjUwNDE0MTIwMTMwWjAzMTEwLwYDVQQD
EyhhMTM3MmIzZDA1Yzk5ZmIzMzJiOThjMWNmZGVlMTM4ZmQzMGIyODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18VNCBdHx3QUqlLZ/FYhy1B7BUJB
U6V0ml4uPalvH08FwRMJ4gBH2J2IrGoh6+6T0SdYuf22faqXvj+irrHB3K/dWY/8
OAi8ip0mO2Pud4FDqWS96tpgvMnIaIURHgfFtH9S+DHjdJswgy+QOv/tIw7rUXZa
EzPHp4pYXs9fvlv09VKiopDIjR2nk6QfdzGPUXzngasVSDWyExlCnb6fpas5M6u+
n3FnYpBk2uuELcAlp31z170ZcjUL6i+BsSIGQ1NW/124z0M2BRyC0JpmYV8CMGCe
XnfjfLXBpEOEgyGF3iM+owuY5gi484PGYEi7JVLkqRCMC1kF+aJ4L15TLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE3Kz0FyZ+zMrmMHP3uE4/TCygFMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeFP2z18
0aRbfTeentlkhO1ifH2uaHIf9FyZjV+VP+JOxa2op5uzvVjkqrTsimX3muq3GNPZ
Z1caQmrXRujUAhpdHX+23y1eRaTXSQZNauS2llZj3bnww2m20HRcEmLPxJirydw9
qRxq38rgXQlyxCGVh6M/PLou5nSS7jc0Ub4tWjXt3cxFrd18AW5i2eVflJTRqFMH
z8MKYwkc1wB1kleYokIjsboa14aa9YclGtehw1CbIcR6bgtnBHRg4Zv6NqRj4Vxa
M//oLm0e/AmMYzmgVDMg8ntD9VQypt1gdewbORKMytWFysJ8+3QnBiMURD9EuRfN
ERFY2Ndolc0h+A==
-----END CERTIFICATE-----