Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File:                     m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier:          DKzEyM3gltWaauebufssm9OnGYjinnUl+N16hBf8eHg=
Subject key identifier:   55:43:AC:77:5A:E2:A9:86:E8:BD:11:30:AB:D0:65:0F:17:B0:62:C4
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer:       /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial:       01962E61A570C45D8A181D591DFDCBFBA0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number:          129E
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=)
                          2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=)
                          3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: zuvvN8EvHSl7NePpcbrHzTgLi/qbu8GuKazo7BVNZ9o=)
                          4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:70:c4:5d:8a:18:1d:59:1d:fd:cb:fb:a0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=5543ac775ae2a986e8bd1130abd0650f17b062c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:85:4d:85:4d:0e:1b:08:cb:25:2f:56:8e:
                    38:c0:6f:f3:4e:01:07:27:a4:30:bb:f1:af:25:72:
                    e0:cb:a3:49:9e:e0:80:09:b0:ce:7d:ba:d6:c6:8c:
                    35:d7:bd:2f:23:18:02:f1:1e:8c:4a:77:d7:2f:3f:
                    34:1b:1e:65:78:65:47:31:fc:4b:a9:87:ea:1f:03:
                    cd:05:72:55:ac:10:02:33:9f:09:a8:40:f2:dc:ae:
                    97:47:c4:72:65:b3:04:4d:c5:f9:95:67:31:2e:ef:
                    ba:69:00:02:df:66:ea:86:ca:18:3a:fd:39:dc:cb:
                    2e:44:29:da:af:ee:e5:cd:38:99:eb:b6:d4:bd:92:
                    10:cf:52:58:0d:2f:66:5c:12:2e:3a:05:3c:9a:eb:
                    25:10:68:b6:90:00:46:36:14:71:a6:9a:ac:29:7c:
                    e7:2f:41:d7:b2:91:19:2e:2c:2a:51:1d:6b:e8:6c:
                    c4:98:ec:4f:c4:c6:08:81:bd:3f:db:4c:1e:25:ac:
                    eb:27:f0:69:03:2f:88:38:61:49:87:4b:67:c0:31:
                    bb:c1:01:95:3e:e0:d4:78:dc:de:29:71:8e:25:3c:
                    aa:f2:f9:fc:b1:07:64:d5:29:ec:1f:af:a5:e7:01:
                    4b:ee:35:68:86:70:9a:55:ff:ae:13:95:62:6e:c7:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:AC:77:5A:E2:A9:86:E8:BD:11:30:AB:D0:65:0F:17:B0:62:C4
            X509v3 Authority Key Identifier:
                keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7b:86:56:1f:f3:94:63:7b:b3:44:5d:81:09:fd:df:f9:0b:
         a0:0c:8a:35:ab:40:20:12:45:08:da:41:b8:c1:61:69:ce:55:
         0f:18:4a:c7:74:1c:89:16:66:b5:51:06:1e:7c:97:d7:67:22:
         d9:2a:2f:82:2b:c9:8f:63:cd:91:95:93:a1:fe:0f:77:20:6e:
         ba:cc:03:a3:39:31:2d:6f:35:a3:05:46:62:7c:79:7e:f2:62:
         c7:de:6d:54:86:b7:d8:e4:90:d2:59:a3:33:c7:0b:7f:1b:3d:
         6a:eb:ad:bc:85:93:39:df:91:76:f4:ba:5f:29:f2:cc:4d:fa:
         7f:6c:b6:3b:5a:a8:b6:42:5d:8d:25:a4:bd:32:16:0b:0d:44:
         56:bf:7c:98:1a:66:fb:14:9b:a8:9d:81:49:e0:a6:b2:3d:01:
         b5:b2:64:9a:67:0b:fe:9d:cf:91:5d:48:e9:07:c2:a5:d3:66:
         9d:7f:2b:09:76:76:d6:3e:e0:d2:5b:67:90:f5:c1:bc:46:73:
         f0:32:3b:e6:34:b1:de:40:44:09:f0:f9:08:de:93:20:53:52:
         80:68:2d:cb:4a:d7:66:96:51:e5:bd:84:1c:88:cd:df:5b:ab:
         97:ee:90:4d:e8:8b:9e:22:59:2c:aa:1c:37:e4:f5:17:20:28:
         ca:d7:df:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaVwxF2KGB1ZHf3L+6DlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNzU5ZWM5ZmY1NGRlMDNhN2ZmM2E2NWVkYmIyZTA3NThl
Njg3OGMwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
Eyg1NTQzYWM3NzVhZTJhOTg2ZThiZDExMzBhYmQwNjUwZjE3YjA2MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbeFTYVNDhsIyyUvVo44wG/zTgEH
J6Qwu/GvJXLgy6NJnuCACbDOfbrWxow1170vIxgC8R6MSnfXLz80Gx5leGVHMfxL
qYfqHwPNBXJVrBACM58JqEDy3K6XR8RyZbMETcX5lWcxLu+6aQAC32bqhsoYOv05
3MsuRCnar+7lzTiZ67bUvZIQz1JYDS9mXBIuOgU8muslEGi2kABGNhRxppqsKXzn
L0HXspEZLiwqUR1r6GzEmOxPxMYIgb0/20weJazrJ/BpAy+IOGFJh0tnwDG7wQGV
PuDUeNzeKXGOJTyq8vn8sQdk1SnsH6+l5wFL7jVohnCaVf+uE5VibsfabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVDrHda4qmG6L0RMKvQZQ8XsGLEMB8GA1UdIwQY
MBaAFJt1nsn/VN4Dp/86Ze27LgdY5oeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUt
YjlhOWQ4YWU5NDIxLzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUtYjlhOWQ4YWU5NDIx
LzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonuGVh/z
lGN7s0RdgQn93/kLoAyKNatAIBJFCNpBuMFhac5VDxhKx3QciRZmtVEGHnyX12ci
2SovgivJj2PNkZWTof4PdyBuuswDozkxLW81owVGYnx5fvJix95tVIa32OSQ0lmj
M8cLfxs9auutvIWTOd+RdvS6XynyzE36f2y2O1qotkJdjSWkvTIWCw1EVr98mBpm
+xSbqJ2BSeCmsj0BtbJkmmcL/p3PkV1I6QfCpdNmnX8rCXZ21j7g0ltnkPXBvEZz
8DI75jSx3kBECfD5CN6TIFNSgGgty0rXZpZR5b2EHIjN31url+6QTeiLniJZLKoc
N+T1FyAoytffdA==
-----END CERTIFICATE-----