Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File:                     lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier:          O8fL7vYKIiLmQHuMqMmgICRc+ThK6kdqnn7uJchfbYs=
Subject key identifier:   F5:F3:41:18:BD:2A:2D:73:8F:C0:4C:E7:11:6B:73:01:65:54:00:B1
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer:       /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial:       01962ECF9FB9D1FD585A3ABAA657230548B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number:          0809
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
                          2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: xXin0qPVJZTCETcBHXWH1Ne9Llc02uyZscU4aHMYFRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9f:b9:d1:fd:58:5a:3a:ba:a6:57:23:05:48:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=f5f34118bd2a2d738fc04ce7116b7301655400b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:bc:c9:5a:2b:8f:33:26:97:25:d9:78:5a:
                    5a:3d:b9:b1:e2:28:e2:92:65:4e:1f:06:f1:fe:28:
                    4a:b8:ca:1b:b1:ca:69:d9:fd:86:f9:38:66:d6:f9:
                    0c:42:cf:9a:2d:a0:88:8c:16:17:2d:84:34:14:ba:
                    2d:c4:25:6b:75:41:b2:d3:3b:df:60:60:89:47:37:
                    fd:b7:47:c8:82:c0:1c:47:5c:99:83:22:a5:7d:a8:
                    23:4c:17:fd:55:e9:58:80:0b:5d:03:af:0a:e8:91:
                    96:54:85:d4:6e:9d:72:43:b1:f3:8c:25:79:17:e3:
                    91:88:bd:b2:90:76:c8:1c:f8:0a:41:21:53:41:81:
                    a9:31:ea:ca:8e:35:d3:97:07:dd:0e:05:9c:f9:43:
                    a3:5a:43:69:95:3b:4b:fb:08:dc:8c:2b:15:4b:68:
                    10:9a:b9:9d:35:0c:82:8e:eb:67:64:ad:ad:e9:6c:
                    61:d1:bf:23:78:f9:5d:ed:e8:cb:83:f4:aa:c8:67:
                    ae:9d:c7:72:b0:3e:2a:64:94:8b:77:85:75:4d:78:
                    ee:d8:2c:38:79:0e:35:46:09:9c:c6:15:30:c3:39:
                    df:e0:d0:ab:a4:7b:fb:2e:47:67:ad:00:d1:94:48:
                    b8:48:ac:16:e7:4e:f8:d9:6c:ee:e4:9c:86:a6:24:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:41:18:BD:2A:2D:73:8F:C0:4C:E7:11:6B:73:01:65:54:00:B1
            X509v3 Authority Key Identifier:
                keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:18:aa:c5:65:b8:11:b8:49:77:25:23:38:1f:6b:2c:f0:ba:
         0a:74:04:46:87:02:2d:46:88:0c:2b:4d:05:d4:71:93:15:8d:
         ae:08:de:a1:53:3f:28:cf:91:b9:9e:23:e0:5f:e8:69:2e:08:
         77:50:2d:ad:d5:3e:a8:2c:0b:54:4a:eb:92:fc:36:01:df:bf:
         af:02:aa:a2:99:e1:e8:1f:bf:e9:41:04:8a:ae:07:2c:20:e7:
         7b:1b:aa:c9:83:f8:76:fd:2c:04:82:a4:f3:d7:89:9f:57:04:
         b0:29:03:78:c5:11:59:d3:70:5f:54:e1:c0:be:11:7e:68:e4:
         fd:df:33:0c:a7:b4:99:a1:52:ff:af:d5:77:e7:db:bb:46:cb:
         34:c8:ce:c4:9a:73:cc:2c:50:6e:f6:94:25:de:c2:c7:04:92:
         20:f8:2b:c6:90:0b:dd:00:7b:cc:6b:b4:2c:44:b5:ad:39:83:
         13:1f:9d:6b:86:0a:37:c7:17:25:c4:cb:6d:64:96:3a:80:3b:
         29:e0:f8:93:8b:a7:ef:5b:f1:41:16:a1:3c:ef:ae:81:77:83:
         dd:0c:96:bd:a2:2f:16:4b:8b:0b:cd:3d:6e:c8:78:58:dd:26:
         7c:ce:d3:3f:20:c5:24:ef:20:46:c6:90:d3:dd:9b:b2:99:62:
         41:e7:6c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5+50f1YWjq6plcjBUi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjUwNDEzMTEwMTIwWhcNMjUwNDE0MTEwMTIwWjAzMTEwLwYDVQQD
EyhmNWYzNDExOGJkMmEyZDczOGZjMDRjZTcxMTZiNzMwMTY1NTQwMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOy8yVorjzMmlyXZeFpaPbmx4iji
kmVOHwbx/ihKuMobscpp2f2G+Thm1vkMQs+aLaCIjBYXLYQ0FLotxCVrdUGy0zvf
YGCJRzf9t0fIgsAcR1yZgyKlfagjTBf9VelYgAtdA68K6JGWVIXUbp1yQ7HzjCV5
F+ORiL2ykHbIHPgKQSFTQYGpMerKjjXTlwfdDgWc+UOjWkNplTtL+wjcjCsVS2gQ
mrmdNQyCjutnZK2t6Wxh0b8jePld7ejLg/SqyGeuncdysD4qZJSLd4V1TXju2Cw4
eQ41RgmcxhUwwznf4NCrpHv7LkdnrQDRlEi4SKwW50742Wzu5JyGpiSY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXzQRi9Ki1zj8BM5xFrcwFlVACxMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhiqxWW4
EbhJdyUjOB9rLPC6CnQERocCLUaIDCtNBdRxkxWNrgjeoVM/KM+RuZ4j4F/oaS4I
d1AtrdU+qCwLVErrkvw2Ad+/rwKqopnh6B+/6UEEiq4HLCDnexuqyYP4dv0sBIKk
89eJn1cEsCkDeMURWdNwX1ThwL4Rfmjk/d8zDKe0maFS/6/Vd+fbu0bLNMjOxJpz
zCxQbvaUJd7CxwSSIPgrxpAL3QB7zGu0LES1rTmDEx+da4YKN8cXJcTLbWSWOoA7
KeD4k4un71vxQRahPO+ugXeD3QyWvaIvFkuLC809bsh4WN0mfM7TPyDFJO8gRsaQ
092bspliQeds2g==
-----END CERTIFICATE-----