Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File:                     UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier:          k9eSKiFQg1lNMQvi8UarxTXa+uLgJVyFOkuz3DvV71I=
Subject key identifier:   30:54:D4:18:D7:50:FA:EB:BC:32:6D:6A:3C:C5:6B:DC:44:A8:91:F8
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer:       /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial:       01962ECF8F51E13C1C8A57DBE6A2E4905F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
                          2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
                          3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: jagN9d9rpxXGMGtOMU9ZUGEdrJQQRXjj1RxMBLJyIvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:51:e1:3c:1c:8a:57:db:e6:a2:e4:90:5f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509df728d1b46634054972d2945fda58073b5762
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=3054d418d750faebbc326d6a3cc56bdc44a891f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:fd:9e:2f:e3:b1:0e:9d:f2:0e:a4:96:b5:
                    22:a3:61:ba:d9:f6:8b:a3:c4:f0:11:fa:c9:a2:40:
                    3d:d9:5c:af:e8:f1:8b:01:75:51:df:97:f7:77:c7:
                    16:06:66:d5:01:73:72:a9:df:33:f8:0c:3c:67:42:
                    28:6a:e9:37:02:d9:72:ba:ee:0c:31:c3:17:4f:26:
                    0a:45:1b:0b:ff:6f:ca:d9:42:91:c8:24:5b:6b:8b:
                    dd:f3:f1:06:91:8a:aa:d7:e7:b6:05:d0:79:0a:69:
                    c9:d2:89:c1:25:83:f8:7f:0c:0a:92:5f:55:5c:4d:
                    7b:2a:4c:12:f4:07:ce:d9:63:f4:b4:b5:c8:ac:a2:
                    2b:ac:d4:b9:ed:30:a0:eb:b7:b1:53:d8:41:15:40:
                    ac:cb:cc:c8:f2:71:da:69:f7:0a:6b:10:ef:0a:e3:
                    06:56:dc:26:8e:3c:d1:d7:1b:16:2f:09:8e:2f:7d:
                    28:66:1c:7a:be:1c:25:2f:39:21:d3:da:37:5b:22:
                    32:35:6f:7c:b7:26:93:f1:cc:7b:7e:f8:65:22:38:
                    9c:f5:28:05:bb:ac:9c:3d:ac:c4:b4:8c:7f:04:c1:
                    08:00:94:46:27:20:42:11:8c:84:d9:88:95:53:d3:
                    62:0f:ae:b8:a7:fb:f4:58:1e:6e:b1:d5:a7:8c:a4:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:D4:18:D7:50:FA:EB:BC:32:6D:6A:3C:C5:6B:DC:44:A8:91:F8
            X509v3 Authority Key Identifier:
                keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:c4:f1:cb:55:88:39:86:cf:c9:f9:cb:20:41:bf:45:07:
         c7:5e:e1:6c:60:ce:60:47:95:cc:d8:39:d6:cb:3a:1e:99:df:
         a7:97:c4:08:56:9d:48:de:d9:f2:25:ec:8d:49:9e:bf:aa:94:
         f0:a1:1f:29:be:38:b1:8c:18:e3:b9:a2:00:82:ba:bd:cf:ef:
         b1:a4:5a:08:3a:35:3d:cd:96:40:82:3f:82:f6:85:50:8b:b1:
         2f:a7:4d:87:4b:58:b7:5f:6a:c9:bf:1e:ae:25:2d:21:0f:f4:
         6b:8a:36:12:f9:ea:7a:65:f6:03:28:82:ac:b7:44:05:f7:86:
         7e:4f:65:c9:da:ed:91:c6:d3:b5:b4:cb:4a:e7:84:e4:ca:3f:
         aa:be:dd:65:41:a8:05:bc:84:b8:13:e2:5e:f8:5b:bb:40:eb:
         5f:27:82:f5:ec:1b:28:0c:df:5f:6f:1e:b3:0d:91:55:21:20:
         b4:94:a8:17:32:e2:ed:46:e0:a2:33:c1:a7:2b:35:ab:0f:ef:
         ab:6c:36:ee:db:2c:8e:85:f7:50:ad:58:b9:62:05:d4:50:8d:
         7c:45:48:88:8b:13:6d:61:b8:62:8a:98:1c:fd:fb:a0:a4:ee:
         1f:d9:24:70:39:c8:1a:f3:87:0f:07:6c:29:fb:5c:6b:61:d2:
         7d:88:71:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz49R4Twcilfb5qLkkF+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
EygzMDU0ZDQxOGQ3NTBmYWViYmMzMjZkNmEzY2M1NmJkYzQ0YTg5MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIz9ni/jsQ6d8g6klrUio2G62faL
o8TwEfrJokA92Vyv6PGLAXVR35f3d8cWBmbVAXNyqd8z+Aw8Z0Ioauk3Atlyuu4M
McMXTyYKRRsL/2/K2UKRyCRba4vd8/EGkYqq1+e2BdB5CmnJ0onBJYP4fwwKkl9V
XE17KkwS9AfO2WP0tLXIrKIrrNS57TCg67exU9hBFUCsy8zI8nHaafcKaxDvCuMG
VtwmjjzR1xsWLwmOL30oZhx6vhwlLzkh09o3WyIyNW98tyaT8cx7fvhlIjic9SgF
u6ycPazEtIx/BMEIAJRGJyBCEYyE2YiVU9NiD664p/v0WB5usdWnjKRuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBU1BjXUPrrvDJtajzFa9xEqJH4MB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqM7E8ctV
iDmGz8n5yyBBv0UHx17hbGDOYEeVzNg51ss6Hpnfp5fECFadSN7Z8iXsjUmev6qU
8KEfKb44sYwY47miAIK6vc/vsaRaCDo1Pc2WQII/gvaFUIuxL6dNh0tYt19qyb8e
riUtIQ/0a4o2EvnqemX2AyiCrLdEBfeGfk9lydrtkcbTtbTLSueE5Mo/qr7dZUGo
BbyEuBPiXvhbu0DrXyeC9ewbKAzfX28esw2RVSEgtJSoFzLi7UbgojPBpys1qw/v
q2w27tssjoX3UK1YuWIF1FCNfEVIiIsTbWG4YoqYHP37oKTuH9kkcDnIGvOHDwds
Kftca2HSfYhxZw==
-----END CERTIFICATE-----