Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File:                     1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier:          N9hxHkxVvlvvJEIviDpPL6fHIg0lTteU91Ltam8lmik=
Subject key identifier:   CE:72:A4:6D:64:44:9B:23:09:70:43:58:84:A1:86:A9:EF:67:2A:F7
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer:       /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial:       01962F74D9C1FCAD072E3E04A49D1AF82BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number:          0A97
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: YYn8CFmQ5BX2+lp6nOso7OqgHPpExWtbBjcK8iCQroo=)
                          2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:c1:fc:ad:07:2e:3e:04:a4:9d:1a:f8:2b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=ce72a46d64449b230970435884a186a9ef672af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:eb:60:6c:cc:4a:9a:3e:c9:55:ab:0c:87:
                    08:31:22:6e:13:38:95:82:2b:a8:16:cb:d3:a1:3c:
                    1f:8c:46:d8:f5:09:cc:0b:bc:8d:53:f8:06:04:fe:
                    6a:9b:74:61:14:c0:5d:ed:51:0c:18:a4:91:39:31:
                    c6:a3:5a:cb:c7:3e:ba:9b:c5:8d:08:e4:d4:83:fd:
                    17:b7:84:ed:f2:8b:fd:c9:73:fa:37:dd:84:ad:f8:
                    fa:cb:a6:5b:8b:d2:f2:cc:95:74:7e:05:31:aa:e0:
                    be:36:7f:bf:d5:e9:b7:7f:cf:14:ca:6b:94:9c:09:
                    3d:c9:52:53:c9:66:c2:44:7e:b2:ab:e7:fb:a5:33:
                    44:51:33:2f:7e:dc:d6:b4:fb:4a:6e:50:95:dc:6d:
                    63:db:75:a6:3f:92:1f:45:14:c5:c2:f9:4e:cb:fe:
                    75:5f:2f:66:30:8e:73:6a:1a:3d:6f:9a:7a:c5:5b:
                    e3:ea:4a:7f:a4:d5:4f:68:96:59:20:17:81:b5:41:
                    d2:db:ca:22:33:2f:1f:a4:7b:d4:4c:b7:50:4c:d4:
                    ab:51:84:ea:4e:7b:60:f8:77:42:ec:39:e8:e9:ee:
                    f1:a3:8f:69:5f:5b:8b:42:e9:d0:90:08:64:f3:8a:
                    00:1d:76:86:c3:dc:3b:4e:7e:e1:84:78:05:79:05:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:72:A4:6D:64:44:9B:23:09:70:43:58:84:A1:86:A9:EF:67:2A:F7
            X509v3 Authority Key Identifier:
                keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:11:89:8d:c7:16:12:33:37:ad:f8:7d:e5:12:b7:89:f5:
         6c:02:67:03:c9:bb:9e:1e:64:15:68:16:18:6b:13:90:f7:70:
         f6:c6:ad:dd:b4:ef:1c:3b:76:ea:e5:26:50:7e:b6:a0:33:63:
         e6:38:fe:40:74:da:f9:dc:10:a2:e1:d5:6a:e1:d6:7c:40:0a:
         01:51:8a:44:50:15:bf:7a:6d:42:62:35:37:33:18:cd:14:a3:
         2d:07:e6:63:f2:e1:f4:67:af:ca:f8:94:08:c8:e4:ec:37:65:
         d6:6d:9b:a4:6f:76:89:e3:76:68:6b:58:58:65:e1:15:dc:0a:
         12:cf:dc:01:1f:f5:aa:88:bc:47:ea:f1:af:82:ab:82:ce:06:
         9e:86:49:85:55:22:19:68:95:5f:e7:69:9b:a4:08:83:14:74:
         3b:58:0f:09:34:39:97:94:cb:d6:4c:f2:a4:ab:04:02:07:1a:
         c9:39:cd:3d:18:66:55:af:44:4f:ac:95:6a:78:81:c3:cf:ac:
         6b:34:63:c1:79:0d:b2:cd:6b:dc:03:3a:e5:c5:10:cb:d1:98:
         19:32:02:59:c2:c5:3b:c5:c0:c4:c0:8b:16:f0:c5:c0:65:4a:
         0f:fd:a5:e3:c6:47:59:14:cb:3d:8e:e7:bd:5b:a5:8b:a5:79:
         76:a8:45:37
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvdNnB/K0HLj4EpJ0a+CvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2
ZGMxNTkwHhcNMjUwNDEzMTQwMTQ5WhcNMjUwNDE0MTQwMTQ5WjAzMTEwLwYDVQQD
EyhjZTcyYTQ2ZDY0NDQ5YjIzMDk3MDQzNTg4NGExODZhOWVmNjcyYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvujrYGzMSpo+yVWrDIcIMSJuEziV
giuoFsvToTwfjEbY9QnMC7yNU/gGBP5qm3RhFMBd7VEMGKSROTHGo1rLxz66m8WN
COTUg/0Xt4Tt8ov9yXP6N92Erfj6y6Zbi9LyzJV0fgUxquC+Nn+/1em3f88UymuU
nAk9yVJTyWbCRH6yq+f7pTNEUTMvftzWtPtKblCV3G1j23WmP5IfRRTFwvlOy/51
Xy9mMI5zaho9b5p6xVvj6kp/pNVPaJZZIBeBtUHS28oiMy8fpHvUTLdQTNSrUYTq
Tntg+HdC7Dno6e7xo49pX1uLQunQkAhk84oAHXaGw9w7Tn7hhHgFeQXe5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFM5ypG1kRJsjCXBDWIShhqnvZyr3MB8GA1UdIwQY
MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm
LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1
NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIsR
iY3HFhIzN634feUSt4n1bAJnA8m7nh5kFWgWGGsTkPdw9sat3bTvHDt26uUmUH62
oDNj5jj+QHTa+dwQouHVauHWfEAKAVGKRFAVv3ptQmI1NzMYzRSjLQfmY/Lh9Gev
yviUCMjk7Ddl1m2bpG92ieN2aGtYWGXhFdwKEs/cAR/1qoi8R+rxr4Krgs4GnoZJ
hVUiGWiVX+dpm6QIgxR0O1gPCTQ5l5TL1kzypKsEAgcayTnNPRhmVa9ET6yVaniB
w8+sazRjwXkNss1r3AM65cUQy9GYGTICWcLFO8XAxMCLFvDFwGVKD/2l48ZHWRTL
PY7nvVuli6V5dqhFNw==
-----END CERTIFICATE-----