Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File:                     ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier:          T39GDEckclYZyQi4NMuO4u9/BwEYrwt9a8sCeXulxfw=
Subject key identifier:   97:6E:F1:84:44:3E:CF:75:20:DB:F5:4D:8C:82:F2:98:5B:D4:13:87
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer:       /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial:       01962E98858FCD85F99A90C314D3463613F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
                          2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
                          3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
                          4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: 6EBhu9Xcwigo6mgKT9aXhmN2O5hPcDycUeIKm/x4pqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:8f:cd:85:f9:9a:90:c3:14:d3:46:36:13:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=976ef184443ecf7520dbf54d8c82f2985bd41387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:10:75:70:6c:0e:57:03:a4:76:54:ff:26:
                    bb:5c:2c:86:04:04:ad:db:4b:50:7e:0b:82:06:fd:
                    1b:ae:2e:57:45:db:28:d7:51:29:cd:51:c5:3f:f9:
                    8f:9d:a2:e7:25:a6:1f:22:9b:2c:81:75:32:41:5b:
                    95:87:8c:bc:64:a1:6d:5f:65:01:e0:4c:33:b8:2f:
                    e9:6e:8e:c4:27:d4:03:49:be:ee:b0:f0:c5:0c:34:
                    38:3f:37:6b:fb:25:24:e0:90:84:b5:07:0c:f4:af:
                    c4:e1:7f:58:0a:27:87:f1:80:42:cf:34:88:9d:a7:
                    01:d1:ce:47:80:80:d9:57:fc:b0:15:01:05:d0:51:
                    16:e7:92:8b:57:b0:7a:a1:d5:e9:db:e1:bb:cd:59:
                    6e:1e:10:70:af:e4:c4:b4:f1:8b:b4:13:63:ca:0c:
                    2b:0e:8b:72:0e:8d:83:00:5b:35:26:89:03:42:e6:
                    a1:65:b1:03:12:ce:99:ed:6a:11:90:18:51:28:07:
                    a1:de:a1:e6:7e:3b:d4:8d:6f:0e:b7:91:17:76:fd:
                    8d:71:8a:07:af:b9:99:e5:5a:c6:4e:95:1f:8f:36:
                    53:5e:0f:e1:55:ae:81:5b:33:cd:ea:a1:85:44:5a:
                    37:1c:b2:e5:a0:2d:64:a6:8e:d6:44:f7:de:fb:34:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:F1:84:44:3E:CF:75:20:DB:F5:4D:8C:82:F2:98:5B:D4:13:87
            X509v3 Authority Key Identifier:
                keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:32:90:90:c3:f4:03:fa:67:0e:5b:1f:29:1a:eb:96:d5:c1:
         b8:74:f6:d9:07:91:3e:8d:2f:f9:e0:13:29:b7:da:22:5d:e7:
         90:98:5e:fe:1c:df:b7:48:f9:4f:32:d0:0a:6f:cd:23:e4:00:
         7d:8d:e5:07:6c:e4:c0:b4:23:42:ff:2b:ca:00:eb:ca:fd:68:
         6b:41:07:05:82:d7:57:b6:fd:3f:2b:20:ca:e9:c4:64:96:c6:
         4a:96:cb:86:67:bd:f8:f8:75:77:3a:07:cc:db:23:3b:21:1b:
         9a:f6:32:d3:fd:24:a4:df:3f:1a:39:9d:bd:34:13:7d:a2:18:
         76:ec:5d:9b:d8:45:ac:e5:f2:65:c7:d7:b0:29:a0:36:05:56:
         bd:bd:34:83:39:aa:49:5f:92:ef:fc:cb:7f:1a:2f:de:25:fc:
         3d:90:35:7f:68:8d:4a:c7:b6:fa:b4:8d:77:f4:f8:1c:96:5f:
         2a:16:c4:be:fa:07:3c:d8:dc:0c:c8:a3:aa:b3:db:2b:db:64:
         65:18:7f:c3:56:63:00:87:2e:10:e0:80:0c:8c:31:c1:3a:4c:
         be:ad:6e:3a:9e:4b:e0:21:5a:b8:69:b0:66:4f:fe:c4:1f:cc:
         fa:c4:62:e1:3e:70:53:b9:e3:38:4a:5c:33:d6:89:e0:f7:eb:
         a4:74:84:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIWPzYX5mpDDFNNGNhPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTdkZTE4ODdmY2ZhOTI0NGI5MzFkOTZkYTgyNjc4YzAx
NDc2NjMwHhcNMjUwNDEzMTAwMTA5WhcNMjUwNDE0MTAwMTA5WjAzMTEwLwYDVQQD
Eyg5NzZlZjE4NDQ0M2VjZjc1MjBkYmY1NGQ4YzgyZjI5ODViZDQxMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisYQdXBsDlcDpHZU/ya7XCyGBASt
20tQfguCBv0bri5XRdso11EpzVHFP/mPnaLnJaYfIpssgXUyQVuVh4y8ZKFtX2UB
4EwzuC/pbo7EJ9QDSb7usPDFDDQ4Pzdr+yUk4JCEtQcM9K/E4X9YCieH8YBCzzSI
nacB0c5HgIDZV/ywFQEF0FEW55KLV7B6odXp2+G7zVluHhBwr+TEtPGLtBNjygwr
DotyDo2DAFs1JokDQuahZbEDEs6Z7WoRkBhRKAeh3qHmfjvUjW8Ot5EXdv2NcYoH
r7mZ5VrGTpUfjzZTXg/hVa6BWzPN6qGFRFo3HLLloC1kpo7WRPfe+zQjJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdu8YREPs91INv1TYyC8phb1BOHMB8GA1UdIwQY
MBaAFGoX3hiH/PqSRLkx2W2oJnjAFHZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzIt
MDc5OWE1MmE2Mzg3LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lYzI1YmQtMjE5ZS00ZDAyLWE1MzItMDc5OWE1MmE2Mzg3
LzEvYWhmZUdJZjgtcEpFdVRIWmJhZ21lTUFVZG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATKQkMP0
A/pnDlsfKRrrltXBuHT22QeRPo0v+eATKbfaIl3nkJhe/hzft0j5TzLQCm/NI+QA
fY3lB2zkwLQjQv8rygDryv1oa0EHBYLXV7b9PysgyunEZJbGSpbLhme9+Ph1dzoH
zNsjOyEbmvYy0/0kpN8/GjmdvTQTfaIYduxdm9hFrOXyZcfXsCmgNgVWvb00gzmq
SV+S7/zLfxov3iX8PZA1f2iNSse2+rSNd/T4HJZfKhbEvvoHPNjcDMijqrPbK9tk
ZRh/w1ZjAIcuEOCADIwxwTpMvq1uOp5L4CFauGmwZk/+xB/M+sRi4T5wU7njOEpc
M9aJ4PfrpHSEaw==
-----END CERTIFICATE-----