Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File:                     ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier:          UQakXG4JW1HFzNgHT2oguAefymBrvoJLZNSAwbmTVNk=
Subject key identifier:   70:E7:34:3F:06:66:66:A7:73:5C:BF:A9:6B:44:8E:6F:43:1B:D2:DF
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer:       /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial:       01962F3D9642C57C6BAD0175215585C601EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number:          1263
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
                          2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 8EpNJSnQfz+sdaMtjG2idTEd3+QXaJFiBJuxaHoq4is=)
                          3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:42:c5:7c:6b:ad:01:75:21:55:85:c6:01:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=70e7343f066666a7735cbfa96b448e6f431bd2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:49:84:ae:f0:43:9c:2b:f8:13:c7:f8:87:
                    28:0d:5f:5d:48:23:11:86:3a:bc:15:9f:09:e2:bc:
                    07:82:a8:9e:cb:20:2c:54:f2:4d:27:7c:51:fd:8c:
                    5c:ec:64:2e:72:6a:e5:a9:bc:80:ca:f6:d9:70:9e:
                    f0:78:1b:bf:81:c1:8f:45:60:13:41:7f:53:53:7f:
                    38:81:84:d4:00:33:49:d6:47:5f:0c:26:84:dd:0d:
                    e8:f8:b5:3b:57:6b:f9:4c:19:67:c1:a1:ad:55:4e:
                    6c:67:94:4e:09:81:c6:94:4d:4c:ab:1a:ba:88:41:
                    28:a3:67:42:03:61:6d:c3:4a:a5:37:71:1a:30:83:
                    ad:44:32:3b:35:51:2b:2c:11:30:60:a6:77:ce:fa:
                    bb:90:21:58:66:5e:78:18:ca:4e:a4:05:06:c6:30:
                    19:be:87:be:35:71:f3:94:bd:e3:b1:81:95:c8:30:
                    d9:4f:44:4c:69:2a:1b:26:37:5f:8b:de:ec:85:56:
                    78:bf:b9:47:df:7d:8a:68:02:5b:aa:ba:10:0e:e0:
                    a9:53:4a:98:52:a1:9e:9c:15:e6:a2:da:d2:04:7b:
                    de:d3:e0:48:0d:cc:ad:63:89:b5:3c:c4:a8:8d:a9:
                    ce:53:af:8e:db:c4:c0:01:ed:30:84:b0:9b:22:7b:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E7:34:3F:06:66:66:A7:73:5C:BF:A9:6B:44:8E:6F:43:1B:D2:DF
            X509v3 Authority Key Identifier:
                keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:af:79:6d:ad:1d:4c:b8:76:27:c9:e7:6b:7e:5e:11:4e:
         4c:83:de:a5:4b:2c:89:3e:fa:8c:20:e2:69:b3:e1:fa:51:93:
         28:6c:e3:cc:b2:cf:db:d6:b0:3e:a5:3d:aa:8c:78:ba:7a:52:
         51:97:76:72:d4:28:a3:25:7c:e3:ae:01:1b:c9:e5:59:b3:f2:
         7c:7a:8c:9c:d1:bc:7d:58:6b:e5:cd:f4:1e:1e:d8:ef:98:d2:
         f1:13:29:22:32:bb:9d:59:bd:7c:e4:eb:6c:28:d4:f1:5d:04:
         4a:26:60:43:1e:f1:d7:da:df:cf:00:23:b1:e0:c4:bd:d0:59:
         73:69:b0:f9:d2:77:fb:1e:5b:2b:97:2c:b6:41:31:11:5e:6f:
         1b:82:c3:25:f1:32:39:ed:33:c7:e5:c6:37:56:1a:89:0e:d0:
         97:7d:a4:1f:df:0c:ff:4b:b0:52:61:d0:be:95:b3:38:70:61:
         eb:f7:3d:e4:7e:4c:c1:48:fb:9e:8d:48:24:8e:9b:07:a7:9f:
         a6:91:8d:1e:0f:c4:04:88:77:55:5e:d3:c2:75:f7:47:bf:9b:
         0e:e5:6c:36:2e:92:4f:39:22:e6:fb:00:f8:d2:f6:10:67:86:
         28:5b:f4:95:c4:f1:5d:df:54:aa:7c:ec:94:83:74:3d:9c:56:
         3f:6b:eb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZZCxXxrrQF1IVWFxgHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5
MTFmYzkwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
Eyg3MGU3MzQzZjA2NjY2NmE3NzM1Y2JmYTk2YjQ0OGU2ZjQzMWJkMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKdJhK7wQ5wr+BPH+IcoDV9dSCMR
hjq8FZ8J4rwHgqieyyAsVPJNJ3xR/Yxc7GQucmrlqbyAyvbZcJ7weBu/gcGPRWAT
QX9TU384gYTUADNJ1kdfDCaE3Q3o+LU7V2v5TBlnwaGtVU5sZ5ROCYHGlE1Mqxq6
iEEoo2dCA2Ftw0qlN3EaMIOtRDI7NVErLBEwYKZ3zvq7kCFYZl54GMpOpAUGxjAZ
voe+NXHzlL3jsYGVyDDZT0RMaSobJjdfi97shVZ4v7lH332KaAJbqroQDuCpU0qY
UqGenBXmotrSBHve0+BIDcytY4m1PMSojanOU6+O28TAAe0whLCbInsKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDnND8GZmanc1y/qWtEjm9DG9LfMB8GA1UdIwQY
MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt
Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky
LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5eveW2t
HUy4difJ52t+XhFOTIPepUssiT76jCDiabPh+lGTKGzjzLLP29awPqU9qox4unpS
UZd2ctQooyV8464BG8nlWbPyfHqMnNG8fVhr5c30Hh7Y75jS8RMpIjK7nVm9fOTr
bCjU8V0ESiZgQx7x19rfzwAjseDEvdBZc2mw+dJ3+x5bK5cstkExEV5vG4LDJfEy
Oe0zx+XGN1YaiQ7Ql32kH98M/0uwUmHQvpWzOHBh6/c95H5MwUj7no1IJI6bB6ef
ppGNHg/EBIh3VV7TwnX3R7+bDuVsNi6STzki5vsA+NL2EGeGKFv0lcTxXd9Uqnzs
lIN0PZxWP2vr7Q==
-----END CERTIFICATE-----