Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File:                     I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier:          LeJhA5zmhJWdyh3/7FL/n9STVUKuACdIZLhLENrzkhQ=
Subject key identifier:   E6:62:AC:2B:01:BC:16:18:00:B9:C4:89:B5:74:04:1C:1D:82:E5:3C
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer:       /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial:       01962F74A024D8AEBC072F815C445ACC0385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: 7OwvAno2l244O2H5lKoBs2hR5TM.roa (hash: e9tNLBCWuvvFCB2/sKRegknsmXrZcwUi3KAU/8XQUJc=)
                          2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: E+QADm8/aAKfP/UJYhNFRaIGiTeyTr6ZyeEIYhBBNxQ=)
                          3: k-udsIECVPoVZ4hVJjV1FMS17aY.roa (hash: 76+LdtT2pK7jJlV8hOCIZByBXKgKYoLXUsN/z5PhjRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:24:d8:ae:bc:07:2f:81:5c:44:5a:cc:03:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=e662ac2b01bc161800b9c489b574041c1d82e53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:d0:87:18:eb:84:b1:0a:d5:b4:6f:bc:ae:
                    7d:fc:ba:15:2b:5e:05:fd:b5:f8:4f:c6:34:79:37:
                    b1:93:c2:33:a6:b4:f4:2d:c1:5a:de:1a:35:84:16:
                    a3:51:12:ad:7f:90:c9:35:fb:76:6f:97:15:07:df:
                    a3:a5:3b:be:70:39:c6:ed:0e:66:3f:8d:54:e1:d8:
                    25:e2:03:4c:cf:f8:c5:bc:c4:79:a2:50:0e:1c:b0:
                    48:00:91:ca:79:5c:2f:3d:0d:6f:87:6f:5b:12:54:
                    86:e0:e2:30:70:1f:8b:32:ee:49:02:b9:c3:81:60:
                    f0:c6:ee:5f:22:ba:5f:e9:cd:cc:ea:78:9e:6d:c9:
                    45:a1:7d:fa:f9:01:b5:3b:a1:33:3b:35:64:b1:d6:
                    97:2f:fd:4a:f6:95:72:2e:f2:44:53:10:88:42:c9:
                    02:49:34:d0:6a:d1:89:13:de:0a:30:35:27:c2:a9:
                    19:83:d9:27:8f:bf:75:60:81:86:32:9d:78:95:33:
                    4d:6e:49:9e:c1:19:86:bf:00:95:cf:2a:a4:50:fa:
                    94:cc:b5:24:08:41:09:d6:ba:09:2d:5f:80:c6:2b:
                    98:7d:78:e9:2c:b9:c5:6b:05:01:ef:a6:ac:4a:68:
                    33:e4:9f:5c:8a:8a:d8:b8:52:fd:fe:25:a4:da:65:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:AC:2B:01:BC:16:18:00:B9:C4:89:B5:74:04:1C:1D:82:E5:3C
            X509v3 Authority Key Identifier:
                keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:d5:bf:2e:36:65:ba:ec:87:87:25:1f:c6:c4:78:74:f2:
         9f:54:0f:e4:25:47:92:22:40:36:bf:67:d6:3b:87:69:f4:6a:
         03:62:6a:70:c6:b0:85:dc:cd:95:24:1f:ce:ad:1b:dd:b8:8b:
         75:b0:cf:10:0f:63:28:74:2b:50:e8:f7:36:5e:a6:9f:bd:14:
         5e:75:5f:57:b3:77:19:01:1f:8c:68:80:47:e2:11:1a:26:d0:
         fd:bc:a2:ec:61:0e:9a:5f:f3:12:83:a0:83:8b:a7:83:3f:f3:
         a8:a4:69:ed:33:a3:77:01:6d:76:c9:db:4d:11:61:1d:de:3c:
         23:6f:01:da:64:1d:94:1c:dd:7a:8b:1b:0b:48:dc:26:b0:2e:
         1c:f2:29:b1:0e:9e:65:51:46:9b:7f:aa:f6:ab:ae:de:b4:43:
         b8:e3:cc:8e:2b:1d:6f:d2:56:01:df:c5:14:31:3f:85:c7:fd:
         0e:0f:4c:da:52:97:dd:99:ce:3e:67:31:5a:b0:8c:c3:74:2b:
         61:9f:ad:0d:02:65:42:d0:0a:ff:5b:17:e3:0e:5c:48:f6:c4:
         76:75:68:62:b6:e4:46:9a:ab:d9:a5:71:3d:48:9c:45:63:5e:
         8d:b7:40:3a:0e:94:2f:0c:45:c1:c0:ce:36:0f:15:4a:65:92:
         9c:79:bd:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKAk2K68By+BXERazAOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzA4NDcxMmZkZWJiMWJmYzVhOGMwMjYyZDkxOWE4YWE0
NDA2MDMwHhcNMjUwNDEzMTQwMTM0WhcNMjUwNDE0MTQwMTM0WjAzMTEwLwYDVQQD
EyhlNjYyYWMyYjAxYmMxNjE4MDBiOWM0ODliNTc0MDQxYzFkODJlNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtczQhxjrhLEK1bRvvK59/LoVK14F
/bX4T8Y0eTexk8IzprT0LcFa3ho1hBajURKtf5DJNft2b5cVB9+jpTu+cDnG7Q5m
P41U4dgl4gNMz/jFvMR5olAOHLBIAJHKeVwvPQ1vh29bElSG4OIwcB+LMu5JArnD
gWDwxu5fIrpf6c3M6niebclFoX36+QG1O6EzOzVksdaXL/1K9pVyLvJEUxCIQskC
STTQatGJE94KMDUnwqkZg9knj791YIGGMp14lTNNbkmewRmGvwCVzyqkUPqUzLUk
CEEJ1roJLV+AxiuYfXjpLLnFawUB76asSmgz5J9ciorYuFL9/iWk2mXNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZirCsBvBYYALnEibV0BBwdguU8MB8GA1UdIwQY
MBaAFCNwhHEv3rsb/FqMAmLZGaiqRAYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgt
N2UxMzI5ZTA1ZmY0LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lN2U5ZWUtMTdkOC00ZTdlLWJjMjgtN2UxMzI5ZTA1ZmY0
LzEvSTNDRWNTX2V1eHY4V293Q1l0a1pxS3BFQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR67Vvy42
Zbrsh4clH8bEeHTyn1QP5CVHkiJANr9n1juHafRqA2JqcMawhdzNlSQfzq0b3biL
dbDPEA9jKHQrUOj3Nl6mn70UXnVfV7N3GQEfjGiAR+IRGibQ/byi7GEOml/zEoOg
g4ungz/zqKRp7TOjdwFtdsnbTRFhHd48I28B2mQdlBzdeosbC0jcJrAuHPIpsQ6e
ZVFGm3+q9quu3rRDuOPMjisdb9JWAd/FFDE/hcf9Dg9M2lKX3ZnOPmcxWrCMw3Qr
YZ+tDQJlQtAK/1sX4w5cSPbEdnVoYrbkRpqr2aVxPUicRWNejbdAOg6ULwxFwcDO
Ng8VSmWSnHm9rQ==
-----END CERTIFICATE-----