Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          RxgCQfGlKmSWTgQxU5vvUIAC8K6Jlk5f+KxqJMyQCAs=
Subject key identifier:   4B:05:B5:10:FB:F9:7F:58:D8:EA:C3:D7:94:1A:ED:0B:75:E6:2C:02
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       01962F3D6B55AEB125017B3948425D8B0500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
                          2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: 4rWkS9jer5fOTqOjKgVqhkQbdJbHoYGl5bRLU0XTzss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:55:ae:b1:25:01:7b:39:48:42:5d:8b:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=4b05b510fbf97f58d8eac3d7941aed0b75e62c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:2d:dd:40:88:41:f4:04:37:d4:16:7c:8e:
                    8b:aa:c0:8a:fc:78:51:84:08:98:d9:c8:c8:4b:64:
                    2a:8f:0c:cb:d0:7b:53:63:54:8b:f5:ca:32:f9:a6:
                    0c:81:9f:15:22:a9:17:ef:29:15:d5:0b:3d:af:8b:
                    66:39:44:d5:c9:12:f1:9c:0c:26:df:9f:2c:b7:5e:
                    ed:a7:23:2a:ad:66:11:b0:79:3a:e7:3c:ce:99:e1:
                    81:23:da:da:98:0a:2d:13:52:36:05:1c:0a:dd:b3:
                    f8:3b:1b:0e:ea:e3:9f:e6:43:97:c8:85:93:cf:84:
                    06:95:4c:f8:ca:f7:0c:86:27:d1:b2:f7:2f:29:96:
                    3f:c0:c6:57:55:20:71:71:5f:5f:6a:38:1a:6f:bc:
                    fa:30:f4:97:2e:f7:64:75:e1:e6:1b:c8:fa:16:f0:
                    63:6b:10:a0:0e:fa:c8:65:6a:b3:ee:32:fa:bb:82:
                    48:d7:43:14:3e:26:0e:d8:ec:b3:52:54:89:cd:88:
                    b7:3f:6d:28:1a:8c:6b:c5:49:85:4a:b6:6c:ce:6c:
                    4f:1b:9a:8c:7c:e0:df:06:b8:1a:6c:79:34:04:26:
                    27:69:13:1d:31:2e:7e:0c:79:f5:13:ba:28:e0:82:
                    b7:a5:fa:97:a0:c6:05:b2:e4:90:d2:4f:17:76:5f:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:B5:10:FB:F9:7F:58:D8:EA:C3:D7:94:1A:ED:0B:75:E6:2C:02
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:a8:98:3d:36:4f:8e:50:b3:31:98:3b:4d:dd:60:03:32:
         d1:f5:80:bc:07:e3:01:9b:ad:87:0c:03:82:57:8f:0d:79:fe:
         74:9e:97:e5:3d:b7:5a:98:fa:82:7f:0e:78:db:5f:11:28:ff:
         61:f6:f7:30:c4:82:37:7f:94:86:60:70:44:35:16:a8:ea:34:
         3c:9e:c1:98:95:65:e6:c3:f6:09:5e:8f:41:eb:c4:4c:12:40:
         21:0c:ee:39:4c:79:16:84:f0:d8:76:04:88:6d:77:b2:6f:3b:
         75:8a:13:b2:f4:60:6f:b3:da:06:cd:6d:37:01:72:e4:03:db:
         1b:47:5a:04:b2:9a:bb:0d:8d:b8:4a:84:6a:55:2c:4f:9b:a5:
         ff:63:55:85:24:73:99:41:56:77:6f:e0:22:a1:89:6e:15:72:
         f6:15:3d:0f:cd:96:61:e8:36:fa:49:6b:a8:d0:36:8e:bb:b9:
         fa:8f:b7:b1:63:7a:0c:bc:33:de:f5:6d:c5:a1:f8:55:8a:c0:
         d9:45:aa:1f:aa:cb:23:89:a0:5c:bf:40:4a:1d:a7:55:ce:56:
         07:58:de:d0:07:cb:13:6b:37:f9:e0:67:71:cb:ff:9c:d9:53:
         01:22:61:d8:65:86:d4:2c:14:83:2b:b3:5a:44:4f:d4:93:55:
         39:b3:e7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWtVrrElAXs5SEJdiwUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg0YjA1YjUxMGZiZjk3ZjU4ZDhlYWMzZDc5NDFhZWQwYjc1ZTYyYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypYt3UCIQfQEN9QWfI6LqsCK/HhR
hAiY2cjIS2QqjwzL0HtTY1SL9coy+aYMgZ8VIqkX7ykV1Qs9r4tmOUTVyRLxnAwm
358st17tpyMqrWYRsHk65zzOmeGBI9ramAotE1I2BRwK3bP4OxsO6uOf5kOXyIWT
z4QGlUz4yvcMhifRsvcvKZY/wMZXVSBxcV9fajgab7z6MPSXLvdkdeHmG8j6FvBj
axCgDvrIZWqz7jL6u4JI10MUPiYO2OyzUlSJzYi3P20oGoxrxUmFSrZszmxPG5qM
fODfBrgabHk0BCYnaRMdMS5+DHn1E7oo4IK3pfqXoMYFsuSQ0k8Xdl8amwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsFtRD7+X9Y2OrD15Qa7Qt15iwCMB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC2omD02
T45QszGYO03dYAMy0fWAvAfjAZuthwwDglePDXn+dJ6X5T23Wpj6gn8OeNtfESj/
Yfb3MMSCN3+UhmBwRDUWqOo0PJ7BmJVl5sP2CV6PQevETBJAIQzuOUx5FoTw2HYE
iG13sm87dYoTsvRgb7PaBs1tNwFy5APbG0daBLKauw2NuEqEalUsT5ul/2NVhSRz
mUFWd2/gIqGJbhVy9hU9D82WYeg2+klrqNA2jru5+o+3sWN6DLwz3vVtxaH4VYrA
2UWqH6rLI4mgXL9ASh2nVc5WB1je0AfLE2s3+eBnccv/nNlTASJh2GWG1CwUgyuz
WkRP1JNVObPn2g==
-----END CERTIFICATE-----