Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
File:                     ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json)
Hash identifier:          0H6Gh+sg5qSC5w/j/XGTrN43ftR/p+BTD0rkPDoGgnk=
Subject key identifier:   8C:D3:5B:09:5C:F7:1C:4A:F2:58:A7:FA:91:9E:D1:58:B6:B1:74:4A
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Certificate issuer:       /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial:       01962E2B45E957F429A2F03082F1C9D240AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
Manifest number:          078B
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: irRe1yhYgVAF6wvZ/dUdVrWhY8EHVZCQLt5Xoihi/oE=)
                          2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=)
                          3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:e9:57:f4:29:a2:f0:30:82:f1:c9:d2:40:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=8cd35b095cf71c4af258a7fa919ed158b6b1744a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:c1:93:9f:3a:9a:2e:ba:48:bb:9f:ed:76:
                    6c:0f:0e:b2:be:29:06:b5:d9:f0:c9:c2:ba:2f:22:
                    db:e8:bf:cb:4c:1d:4f:15:32:ba:56:52:26:05:13:
                    5a:00:0e:b8:2b:f2:ac:3c:de:dd:87:a2:b8:be:11:
                    60:e2:1a:e7:88:e2:a8:41:91:53:af:c9:1d:c5:b1:
                    0d:eb:dd:74:43:46:60:1c:20:fb:73:b9:e8:6a:e3:
                    9e:93:8d:ee:43:e2:a7:46:01:7b:25:b9:74:b7:a5:
                    89:db:e7:61:d6:ca:de:49:0c:db:46:fc:71:fa:08:
                    b5:ee:06:4c:1d:d9:d7:1a:65:d9:51:dc:32:a0:e3:
                    67:18:c2:5e:0c:f3:d8:f2:c9:fe:18:67:7f:94:b4:
                    4e:a0:0b:97:2c:70:b8:99:e0:be:2c:33:ec:2c:4b:
                    c3:39:eb:da:60:80:f4:82:41:23:79:b0:ff:85:8a:
                    ee:86:92:44:b5:7a:0b:30:13:8e:63:34:a3:40:aa:
                    3a:24:a0:49:2f:4f:f4:9e:24:71:12:3c:a2:22:dc:
                    4d:8c:02:03:0f:ec:c4:a7:5b:25:1c:4b:83:bb:e6:
                    a8:4b:66:b2:4d:0f:e5:22:0a:46:e7:1f:00:e5:9b:
                    c8:aa:42:85:a2:22:bb:76:e6:f2:a5:ec:dc:da:54:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D3:5B:09:5C:F7:1C:4A:F2:58:A7:FA:91:9E:D1:58:B6:B1:74:4A
            X509v3 Authority Key Identifier:
                keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:c4:8d:41:fc:4d:96:2d:3d:60:ac:d1:c5:b7:9d:39:97:
         29:a3:5f:04:79:a9:74:01:7b:95:b7:f9:3b:6d:4e:55:c5:36:
         fd:26:b0:f0:a6:29:b0:83:c2:b0:fe:1b:06:29:77:24:a3:5f:
         b5:0b:87:75:a1:98:fb:dd:8a:a5:90:c4:3b:72:8d:b4:a8:8c:
         b5:31:d6:0c:41:ec:c8:73:76:ef:e1:6e:21:4f:d6:41:5b:70:
         8f:5f:99:32:a4:bb:84:8a:b9:05:5e:ec:c2:5b:05:96:6a:7d:
         2f:70:c8:29:49:b6:0e:be:16:09:54:bb:ba:a8:be:c3:ec:37:
         e8:56:44:8c:3c:36:91:99:84:2d:43:5a:ff:ca:79:49:c8:2c:
         87:12:16:36:9f:f7:64:24:9d:ae:b2:ce:37:31:e5:2f:f5:af:
         b4:b9:93:5b:12:ea:6c:c1:88:c9:84:02:41:ae:48:b9:e3:6c:
         6e:f1:15:70:a7:85:aa:a0:2d:cb:fe:32:ab:8a:48:db:c0:3c:
         f6:b7:e5:45:e6:aa:1e:0f:5e:60:a1:e9:d6:d6:06:5e:0e:b6:
         96:6a:c8:3e:a9:54:e7:e4:34:a6:5d:45:f8:7b:03:b6:d6:22:
         b3:b9:76:51:7c:ec:bc:0a:eb:54:24:2d:11:c7:5f:9b:66:d4:
         67:ca:c6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0XpV/QpovAwgvHJ0kCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1
ODQ2MzEwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
Eyg4Y2QzNWIwOTVjZjcxYzRhZjI1OGE3ZmE5MTllZDE1OGI2YjE3NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHjBk586mi66SLuf7XZsDw6yvikG
tdnwycK6LyLb6L/LTB1PFTK6VlImBRNaAA64K/KsPN7dh6K4vhFg4hrniOKoQZFT
r8kdxbEN6910Q0ZgHCD7c7noauOek43uQ+KnRgF7Jbl0t6WJ2+dh1sreSQzbRvxx
+gi17gZMHdnXGmXZUdwyoONnGMJeDPPY8sn+GGd/lLROoAuXLHC4meC+LDPsLEvD
OevaYID0gkEjebD/hYruhpJEtXoLMBOOYzSjQKo6JKBJL0/0niRxEjyiItxNjAID
D+zEp1slHEuDu+aoS2ayTQ/lIgpG5x8A5ZvIqkKFoiK7dubypezc2lQMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzTWwlc9xxK8lin+pGe0Vi2sXRKMB8GA1UdIwQY
MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt
M2Q1N2I2NmIyMTM0LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0
LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSPEjUH8
TZYtPWCs0cW3nTmXKaNfBHmpdAF7lbf5O21OVcU2/Saw8KYpsIPCsP4bBil3JKNf
tQuHdaGY+92KpZDEO3KNtKiMtTHWDEHsyHN27+FuIU/WQVtwj1+ZMqS7hIq5BV7s
wlsFlmp9L3DIKUm2Dr4WCVS7uqi+w+w36FZEjDw2kZmELUNa/8p5ScgshxIWNp/3
ZCSdrrLONzHlL/WvtLmTWxLqbMGIyYQCQa5IueNsbvEVcKeFqqAty/4yq4pI28A8
9rflReaqHg9eYKHp1tYGXg62lmrIPqlU5+Q0pl1F+HsDttYis7l2UXzsvArrVCQt
Ecdfm2bUZ8rG8g==
-----END CERTIFICATE-----