Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File:                     tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier:          5tpMX3D4tPbB0s9k/ffHREeVrItndHmsFAg9LnmX7sA=
Subject key identifier:   29:E4:7B:8F:E6:3A:19:1C:9F:A3:FD:BC:9D:DE:88:54:4B:81:3B:62
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer:       /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial:       01962E99C5A236424420D1B188D4A30090DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 10:02:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:31 +0000
Files and hashes:         1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
                          2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
                          3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: fGwRn1iR0Tu6iia9WSPmPJx7zg0mtBJniXteVS6qeKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c5:a2:36:42:44:20:d1:b1:88:d4:a3:00:90:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
        Validity
            Not Before: Apr 13 10:02:31 2025 GMT
            Not After : Apr 14 10:02:31 2025 GMT
        Subject: CN=29e47b8fe63a191c9fa3fdbc9dde88544b813b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:50:10:d8:64:3c:83:21:49:01:c6:8e:4e:
                    12:2e:80:0a:1a:ab:f3:4c:f7:f8:c8:3d:5c:86:11:
                    e0:77:f4:8c:5b:21:bf:2b:a2:0b:f7:95:89:17:f7:
                    95:c3:03:7f:9c:3f:5d:f0:2d:ed:c6:aa:a4:33:6d:
                    28:fd:aa:6d:4b:ce:70:91:d9:d7:84:3d:ad:bc:07:
                    0c:fc:3b:8e:4a:ab:20:a5:47:6d:0a:6a:4f:b1:60:
                    e9:0b:f1:6e:1a:24:df:87:d7:6f:83:34:58:8b:03:
                    17:48:bd:52:9d:49:eb:f1:82:ab:d6:17:a3:51:4c:
                    c4:ef:8e:e6:42:ec:04:a3:4d:1c:71:e0:b5:6d:b8:
                    b4:7d:34:ae:53:69:b1:8b:c1:41:59:cb:1b:69:f0:
                    ac:ea:25:6c:ca:f2:47:55:6b:98:b4:dd:01:52:d0:
                    5f:0c:b8:fd:4e:b5:c4:ea:27:1c:3f:f9:df:63:d3:
                    e7:9e:a8:cc:53:92:73:79:d2:84:27:bc:01:7d:60:
                    d2:36:56:ce:4a:e1:77:ef:d1:41:f0:f4:69:8c:8e:
                    f9:6b:8e:03:36:eb:a2:ba:bd:80:3b:a8:7b:0e:b9:
                    e0:0c:21:94:00:67:f3:22:f5:c5:8e:61:54:18:dd:
                    9c:5c:3f:af:65:c1:da:2b:49:bb:c6:7e:a2:20:22:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E4:7B:8F:E6:3A:19:1C:9F:A3:FD:BC:9D:DE:88:54:4B:81:3B:62
            X509v3 Authority Key Identifier:
                keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:c5:6c:20:93:3c:b2:74:93:7a:af:88:ac:78:fe:bb:93:
         a9:51:57:d1:32:1b:e4:88:33:1a:ea:e6:3e:40:95:e4:9d:7a:
         ff:1b:f6:ee:64:a8:06:be:9c:58:28:e2:46:c9:cc:dc:5f:74:
         ad:bd:05:e3:2e:44:0f:62:c8:66:c5:82:b5:44:5c:26:e6:7f:
         fa:4e:2c:c4:bc:c7:4a:a4:06:3f:28:91:d9:f0:c0:ed:bb:78:
         3a:e8:19:bb:d3:c7:95:1d:0f:f8:41:1d:83:1a:cc:2e:f6:c3:
         22:c4:e5:af:53:48:9a:78:58:fc:e2:71:4a:20:0a:1e:89:f8:
         13:b6:c7:46:1d:dd:b8:8a:3a:30:f2:f0:1a:60:86:44:4d:ae:
         e9:84:01:5b:81:bd:17:72:0b:cb:c6:a9:d4:7f:f8:52:c0:81:
         bc:50:de:9b:91:4d:aa:76:1f:1b:d9:98:d8:e6:2b:3f:26:d4:
         85:c3:cc:8b:cf:10:76:1c:b0:b6:d7:0e:2e:7e:b8:a0:1d:f3:
         be:7e:34:52:f9:58:11:b3:ca:73:58:59:00:b0:14:e9:7e:be:
         b8:df:2f:f8:71:b4:8c:2d:a2:18:36:56:06:a4:59:f9:fe:4f:
         49:7a:ba:15:4f:70:7b:9b:79:96:a9:b8:c0:b9:e6:e7:2c:da:
         6e:55:c0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumcWiNkJEINGxiNSjAJDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDNlZjliYzNjMjEzMjM2MWMxMjQwOTcyYTE4MDkxMmJm
N2E4NTkwHhcNMjUwNDEzMTAwMjMxWhcNMjUwNDE0MTAwMjMxWjAzMTEwLwYDVQQD
EygyOWU0N2I4ZmU2M2ExOTFjOWZhM2ZkYmM5ZGRlODg1NDRiODEzYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVFQENhkPIMhSQHGjk4SLoAKGqvz
TPf4yD1chhHgd/SMWyG/K6IL95WJF/eVwwN/nD9d8C3txqqkM20o/aptS85wkdnX
hD2tvAcM/DuOSqsgpUdtCmpPsWDpC/FuGiTfh9dvgzRYiwMXSL1SnUnr8YKr1hej
UUzE747mQuwEo00cceC1bbi0fTSuU2mxi8FBWcsbafCs6iVsyvJHVWuYtN0BUtBf
DLj9TrXE6iccP/nfY9PnnqjMU5JzedKEJ7wBfWDSNlbOSuF379FB8PRpjI75a44D
Nuuiur2AO6h7DrngDCGUAGfzIvXFjmFUGN2cXD+vZcHaK0m7xn6iICIyKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnke4/mOhkcn6P9vJ3eiFRLgTtiMB8GA1UdIwQY
MBaAFLVD75vDwhMjYcEkCXKhgJEr96hZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVQdm04UENFeU5od1NRSmNxR0FrU3YzcUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yNWU2ZDYtY2VkMS00MjgzLThjOWYt
Yzg0Y2NiYTRlNjA3LzEvdFVQdm04UENFeU5od1NRSmNxR0FrU3YzcUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yNWU2ZDYtY2VkMS00MjgzLThjOWYtYzg0Y2NiYTRlNjA3
LzEvdFVQdm04UENFeU5od1NRSmNxR0FrU3YzcUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6PFbCCT
PLJ0k3qviKx4/ruTqVFX0TIb5IgzGurmPkCV5J16/xv27mSoBr6cWCjiRsnM3F90
rb0F4y5ED2LIZsWCtURcJuZ/+k4sxLzHSqQGPyiR2fDA7bt4OugZu9PHlR0P+EEd
gxrMLvbDIsTlr1NImnhY/OJxSiAKHon4E7bHRh3duIo6MPLwGmCGRE2u6YQBW4G9
F3ILy8ap1H/4UsCBvFDem5FNqnYfG9mY2OYrPybUhcPMi88QdhywttcOLn64oB3z
vn40UvlYEbPKc1hZALAU6X6+uN8v+HG0jC2iGDZWBqRZ+f5PSXq6FU9we5t5lqm4
wLnm5yzablXAKA==
-----END CERTIFICATE-----