Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
File:                     5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft (raw, json)
Hash identifier:          Ja56BwVsUK1GSnOMyhgaazfP0lCS9D7uj1LOqXflAYc=
Subject key identifier:   1E:52:BA:7E:D7:CE:8F:E7:77:70:1E:F3:1D:7B:A3:35:C1:F7:B2:3B
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Certificate issuer:       /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial:       01962FAB636D0F06B9DB4DD51A8978E2B7D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 3cpoDZVsvW-d4pgtfjxgApATZ7Y.roa (hash: xAPK20pv8js5ddYc90CC85IhpMi19I8Q/fSeN00Op6M=)
                          2: 5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl (hash: 9+5CsfzRJjEDzo14E8Ky8DJ+9MUkJJXE5Nts5AtJwNE=)
                          3: 9Np_qqUHNhRugA_1xB2ZI6GkPRc.roa (hash: VZhCCAUVQwLPClsCIIsWXL6uNJYCuqsQS18/K+wYTxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:63:6d:0f:06:b9:db:4d:d5:1a:89:78:e2:b7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=1e52ba7ed7ce8fe777701ef31d7ba335c1f7b23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:f8:e2:46:8e:81:17:d3:74:3c:63:21:36:
                    37:88:04:49:37:64:a0:c9:ec:75:08:da:cc:c6:d0:
                    51:90:6a:1c:ac:e0:81:9b:89:e5:e9:71:9e:39:0c:
                    e4:81:ce:ca:f1:cd:d1:ed:b0:75:fe:a9:ae:8e:52:
                    ec:21:10:d2:e6:46:c2:dc:d5:a4:95:aa:3c:48:b2:
                    29:d5:88:90:ac:cd:5c:b0:a6:7d:a6:21:a5:be:2f:
                    b7:4a:6c:b3:00:1d:0a:a1:94:46:8e:51:c0:5b:91:
                    82:52:e9:f3:d5:62:ae:ae:0b:be:06:cf:93:df:bf:
                    6b:13:1c:d7:5e:02:3f:c8:d7:91:02:ed:47:23:c6:
                    77:5f:e8:06:14:f0:21:7d:5b:af:ff:9b:04:e0:8e:
                    d0:5e:12:f9:b6:f7:11:62:7b:76:8b:f0:81:39:af:
                    4e:b4:e8:c2:7a:4d:ec:e5:ed:4f:15:05:6f:e0:a5:
                    8b:12:26:30:04:55:a5:36:87:9a:cc:0c:ca:86:3a:
                    b5:4d:be:d4:e1:d2:dc:27:c6:71:44:7c:b9:3b:cb:
                    00:b9:9d:b5:f9:f0:25:4a:92:93:4f:8a:95:f3:bf:
                    26:0b:0f:96:73:33:ef:88:3f:a6:56:c6:dc:28:6f:
                    f1:67:b6:fc:b5:5b:a4:51:bc:23:1f:48:bc:24:1e:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:BA:7E:D7:CE:8F:E7:77:70:1E:F3:1D:7B:A3:35:C1:F7:B2:3B
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:28:6c:f3:4e:12:30:95:27:a9:96:64:1b:05:43:c9:66:
         90:e9:59:cc:42:ca:7d:0c:f8:05:39:1b:9f:cc:aa:67:3f:d3:
         1a:7d:98:81:a6:5e:64:fe:66:05:ec:78:3e:ca:7e:8a:aa:54:
         2d:5c:28:fe:9e:de:27:20:64:03:7b:b1:0d:e1:97:8a:26:38:
         b5:9e:a1:49:73:b7:8f:82:70:3b:68:56:af:8a:d0:de:f9:19:
         5f:33:0f:c4:5c:30:e3:2f:cb:60:68:fe:ae:0d:10:55:ef:c7:
         25:b8:fe:1a:08:b3:6a:1a:3a:c9:2e:a5:92:75:51:51:81:78:
         91:c8:36:47:92:c3:fc:04:74:73:ef:e3:08:e8:00:21:4d:17:
         97:25:7d:fb:66:16:2b:6e:b6:17:9a:60:cb:da:22:68:02:9b:
         cf:e0:57:1c:93:17:1d:bd:31:58:dc:ff:75:66:3c:9b:8b:f2:
         93:cc:d2:fa:6b:af:df:e6:3b:9d:e5:d7:e8:55:16:53:46:ef:
         23:62:60:29:fc:ac:d1:9b:c5:12:e5:e3:56:30:d6:49:3c:05:
         b0:32:14:58:85:b1:11:d9:d5:ec:e2:8a:86:bb:ed:90:3a:bb:
         7d:ab:a8:8e:72:ac:26:b7:c8:91:45:08:4f:05:26:2a:89:d4:
         83:48:7d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2NtDwa5203VGol44rfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2RkNDI0Mzg0NzU5YjVlODU1OTU4MjUwMTliNjlmZTli
ZjkyMjAwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
EygxZTUyYmE3ZWQ3Y2U4ZmU3Nzc3MDFlZjMxZDdiYTMzNWMxZjdiMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulf44kaOgRfTdDxjITY3iARJN2Sg
yex1CNrMxtBRkGocrOCBm4nl6XGeOQzkgc7K8c3R7bB1/qmujlLsIRDS5kbC3NWk
lao8SLIp1YiQrM1csKZ9piGlvi+3SmyzAB0KoZRGjlHAW5GCUunz1WKurgu+Bs+T
379rExzXXgI/yNeRAu1HI8Z3X+gGFPAhfVuv/5sE4I7QXhL5tvcRYnt2i/CBOa9O
tOjCek3s5e1PFQVv4KWLEiYwBFWlNoeazAzKhjq1Tb7U4dLcJ8ZxRHy5O8sAuZ21
+fAlSpKTT4qV878mCw+WczPviD+mVsbcKG/xZ7b8tVukUbwjH0i8JB62uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5Sun7Xzo/nd3Ae8x17ozXB97I7MB8GA1UdIwQY
MBaAFOQ91CQ4R1m16FWVglAZtp/pv5IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEt
OTNiNjkxZWUxY2NlLzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80YjJjZjktZDhlZC00YTI3LTkzYmEtOTNiNjkxZWUxY2Nl
LzEvNUQzVUpEaEhXYlhvVlpXQ1VCbTJuLW1fa2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqAobPNO
EjCVJ6mWZBsFQ8lmkOlZzELKfQz4BTkbn8yqZz/TGn2YgaZeZP5mBex4Psp+iqpU
LVwo/p7eJyBkA3uxDeGXiiY4tZ6hSXO3j4JwO2hWr4rQ3vkZXzMPxFww4y/LYGj+
rg0QVe/HJbj+Ggizaho6yS6lknVRUYF4kcg2R5LD/AR0c+/jCOgAIU0XlyV9+2YW
K262F5pgy9oiaAKbz+BXHJMXHb0xWNz/dWY8m4vyk8zS+muv3+Y7neXX6FUWU0bv
I2JgKfys0ZvFEuXjVjDWSTwFsDIUWIWxEdnV7OKKhrvtkDq7fauojnKsJrfIkUUI
TwUmKonUg0h93Q==
-----END CERTIFICATE-----