Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File:                     mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier:          dkYmC+9tme8Y/jKgKArHz1usAilpk6RC8XAyGWZIwXo=
Subject key identifier:   4E:37:E4:82:41:20:91:04:3F:04:6B:0A:49:90:73:09:8B:B5:DD:28
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer:       /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial:       01962DF4464F4E39D811615B4413CCC7EA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number:          1221
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
                          2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
                          3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: juX3MAt7smgLAamvkWOz/uvqYzEb3R7LnNdimUbCC9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:46:4f:4e:39:d8:11:61:5b:44:13:cc:c7:ea:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=4e37e482412091043f046b0a499073098bb5dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:ed:0a:18:a8:cb:02:1e:8a:c3:a0:6d:48:
                    46:e5:2d:ab:8a:a8:40:3e:56:ad:9c:d3:b4:0e:a4:
                    fc:53:da:60:93:3e:bc:fc:d8:f9:ec:6c:dc:80:2d:
                    a6:ce:96:13:78:d5:02:64:1c:0f:5a:a7:bd:9b:d4:
                    87:af:aa:82:18:39:0d:f9:4f:5d:26:f4:68:24:12:
                    ec:73:4e:61:b7:ec:b2:af:3c:03:bf:09:2f:20:7c:
                    45:87:e3:df:3a:44:00:32:8e:94:ac:2f:9f:fe:25:
                    09:67:1b:9d:fd:9a:b6:fe:f9:8b:95:80:c7:5b:ba:
                    6a:1c:2d:5f:1b:58:b6:98:65:38:96:6c:d3:c6:71:
                    b6:71:7c:75:fb:29:3c:b9:9f:6e:d8:0d:b2:93:83:
                    a4:50:60:63:14:92:ca:65:3b:a5:80:67:8c:03:07:
                    fa:9e:22:8d:9e:25:37:63:f4:9a:d6:cd:81:2b:3a:
                    18:2c:8b:79:44:91:a3:4a:40:13:ac:9c:55:1c:83:
                    c3:28:76:25:7f:a0:1e:95:3e:a0:78:aa:64:a2:ad:
                    ec:b8:b1:74:b6:4c:4d:f5:2a:04:c9:9b:d5:1f:c2:
                    b0:b0:2a:45:5d:bb:24:d1:51:28:93:31:c3:88:3c:
                    1b:bf:71:5e:0a:f9:18:c5:63:83:3b:74:be:b4:10:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:37:E4:82:41:20:91:04:3F:04:6B:0A:49:90:73:09:8B:B5:DD:28
            X509v3 Authority Key Identifier:
                keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:94:11:c2:f7:37:15:79:61:18:87:71:86:ab:38:2f:97:4c:
         4e:ef:7b:6b:5e:d3:7b:da:e2:3c:2a:da:a6:63:c6:95:b1:b7:
         c7:9d:3b:81:95:e8:8a:70:4c:c5:26:62:77:ce:29:5d:f4:21:
         30:e6:63:68:11:57:5e:8a:ce:37:b4:34:28:dd:da:44:db:6f:
         90:be:6f:37:d1:c0:ee:ce:85:e7:68:a1:c2:2d:88:5c:23:1a:
         9e:43:bf:c0:88:5a:64:ae:c0:96:0b:d8:11:89:4e:90:9a:1e:
         4a:86:a9:b2:32:40:1e:21:82:5d:e4:56:d4:9a:91:1f:de:07:
         af:5a:99:8a:aa:90:19:9f:1b:f9:5b:1e:fc:a9:1e:ec:43:4a:
         5c:ab:fe:9b:bc:d7:ad:18:7b:34:aa:ed:4d:44:51:0c:e3:d5:
         f9:e3:aa:99:ba:15:fd:3a:66:8a:ab:ae:4b:97:6d:f0:e0:ef:
         12:73:36:3a:41:c3:dd:2f:23:d7:cb:cd:83:a6:db:3f:42:db:
         19:7a:8e:1b:f0:d5:ca:92:f7:5a:ce:71:9e:de:e3:3c:21:e6:
         80:4d:9b:0f:b0:25:33:d3:53:00:91:5d:b9:70:4b:7b:76:b9:
         02:6d:0d:46:62:4d:22:8c:b7:d9:8d:8c:97:72:87:7c:7b:f5:
         3e:29:2f:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EZPTjnYEWFbRBPMx+pWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTYyZjVlZTAyNzhhNjBjYmJjZDQxNjkxOTFmNzE0ODEy
MTZhZDQwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZTM3ZTQ4MjQxMjA5MTA0M2YwNDZiMGE0OTkwNzMwOThiYjVkZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/tChioywIeisOgbUhG5S2riqhA
PlatnNO0DqT8U9pgkz68/Nj57GzcgC2mzpYTeNUCZBwPWqe9m9SHr6qCGDkN+U9d
JvRoJBLsc05ht+yyrzwDvwkvIHxFh+PfOkQAMo6UrC+f/iUJZxud/Zq2/vmLlYDH
W7pqHC1fG1i2mGU4lmzTxnG2cXx1+yk8uZ9u2A2yk4OkUGBjFJLKZTulgGeMAwf6
niKNniU3Y/Sa1s2BKzoYLIt5RJGjSkATrJxVHIPDKHYlf6AelT6geKpkoq3suLF0
tkxN9SoEyZvVH8KwsCpFXbsk0VEokzHDiDwbv3FeCvkYxWODO3S+tBDMMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE435IJBIJEEPwRrCkmQcwmLtd0oMB8GA1UdIwQY
MBaAFJmWL17gJ4pgy7zUFpGR9xSBIWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAt
Zjc2YjgzNTNhZDY4LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAtZjc2YjgzNTNhZDY4
LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJQRwvc3
FXlhGIdxhqs4L5dMTu97a17Te9riPCrapmPGlbG3x507gZXoinBMxSZid84pXfQh
MOZjaBFXXorON7Q0KN3aRNtvkL5vN9HA7s6F52ihwi2IXCMankO/wIhaZK7AlgvY
EYlOkJoeSoapsjJAHiGCXeRW1JqRH94Hr1qZiqqQGZ8b+Vse/Kke7ENKXKv+m7zX
rRh7NKrtTURRDOPV+eOqmboV/TpmiquuS5dt8ODvEnM2OkHD3S8j18vNg6bbP0Lb
GXqOG/DVypL3Ws5xnt7jPCHmgE2bD7AlM9NTAJFduXBLe3a5Am0NRmJNIoy32Y2M
l3KHfHv1PikvsQ==
-----END CERTIFICATE-----