Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File:                     Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier:          LHjSBNl20r0fOLKD1scO8kV5orcJDLxoMmxledsGC60=
Subject key identifier:   97:DF:38:52:C5:B1:C4:3B:E9:A6:78:99:D3:6E:3D:46:18:C0:F7:95
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer:       /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial:       01962F3DC3727DAC4BF68ABCE66704F209CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: lp58bQ2yEqGctZqglFdnYuahmJdZ1XjvNaxMJH2JZA4=)
                          2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
                          3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c3:72:7d:ac:4b:f6:8a:bc:e6:67:04:f2:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=97df3852c5b1c43be9a67899d36e3d4618c0f795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:15:3a:d9:40:ae:30:43:84:d3:33:0a:24:
                    2e:12:a8:5a:ea:fd:3b:0c:ad:46:22:42:66:e9:a5:
                    e0:eb:e7:3e:ed:d5:c4:db:99:51:d6:90:83:0e:a8:
                    48:3d:79:3e:a9:23:63:f6:58:7a:0f:f6:94:32:99:
                    47:05:1e:65:87:ba:b5:e6:12:c8:b7:2a:55:13:31:
                    40:f5:f1:5f:86:11:6a:ef:0e:10:22:bc:74:ed:7c:
                    9a:c6:55:9c:c3:f5:ea:f8:32:42:e7:90:29:1c:b2:
                    3a:fb:9d:ea:5a:46:bb:ee:2f:0d:89:d1:2b:3e:b2:
                    71:f2:47:40:f9:0d:b3:65:bb:a4:df:63:a1:48:5d:
                    3a:d3:d8:1b:81:24:0e:cf:2e:b2:87:fe:9d:39:ff:
                    28:37:90:b9:fb:33:99:67:78:27:09:74:a5:97:0b:
                    8e:1f:fd:63:9b:25:1e:a6:3f:ef:27:92:cd:df:a2:
                    f6:66:08:c1:25:03:00:c5:26:dd:45:c8:03:29:12:
                    1e:ed:b5:b2:2a:ee:7b:11:49:4a:14:43:56:d6:7f:
                    79:7a:92:d4:66:d9:dc:ce:d9:39:4a:fb:64:d0:1d:
                    60:d0:d4:a3:4a:79:ba:2e:b6:b5:53:f5:5d:8b:10:
                    e0:d0:f2:c3:12:6f:76:0a:3a:a7:87:75:e5:f6:81:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DF:38:52:C5:B1:C4:3B:E9:A6:78:99:D3:6E:3D:46:18:C0:F7:95
            X509v3 Authority Key Identifier:
                keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:36:20:15:1e:67:53:5c:9b:88:4b:a6:26:c1:37:c6:e5:
         8d:c0:08:c2:b9:ed:0e:fa:b5:1a:8c:b9:f4:f5:c9:74:7d:82:
         bf:b2:50:8f:19:b2:ef:54:9f:4f:b3:c6:7e:55:bf:d1:bb:34:
         70:fd:e4:b6:33:a8:f9:76:8d:2b:40:69:ad:45:2b:a5:c1:3c:
         58:ea:47:e4:e8:5c:40:71:14:e0:1b:aa:5a:a5:52:3f:be:32:
         6e:7b:05:73:48:02:78:67:66:ae:9d:c3:fc:1e:85:09:7d:a5:
         64:72:a1:40:7f:69:2a:09:6b:7a:a4:4f:fd:e2:0a:4a:6f:2c:
         4a:43:fa:7f:d2:ad:c3:f9:ff:45:10:a5:ca:9b:cc:3a:d4:fb:
         f2:3d:15:d8:2e:54:aa:0d:0d:a0:e2:a7:88:97:0a:4f:39:83:
         7f:97:6a:31:73:e3:6b:5d:2f:49:1d:cb:4e:81:28:58:fb:03:
         3e:7a:cc:a4:28:0f:dd:ec:89:c7:7a:91:f1:4a:bf:7f:a3:cb:
         36:fc:58:05:5d:e0:b6:03:26:56:9b:ab:a3:62:f4:00:9c:05:
         83:24:ad:8a:ec:dc:40:55:51:00:e5:9c:43:76:44:f3:6b:98:
         a4:31:ac:cb:47:b9:92:8e:25:5b:79:16:28:bb:32:03:ce:08:
         51:40:96:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcNyfaxL9oq85mcE8gnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGQwZjlkY2Q4ODk0OWI4ZjNhMzc3MTA2MzU2MmEwNTc2
NzkyOTAwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
Eyg5N2RmMzg1MmM1YjFjNDNiZTlhNjc4OTlkMzZlM2Q0NjE4YzBmNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6IVOtlArjBDhNMzCiQuEqha6v07
DK1GIkJm6aXg6+c+7dXE25lR1pCDDqhIPXk+qSNj9lh6D/aUMplHBR5lh7q15hLI
typVEzFA9fFfhhFq7w4QIrx07XyaxlWcw/Xq+DJC55ApHLI6+53qWka77i8NidEr
PrJx8kdA+Q2zZbuk32OhSF0609gbgSQOzy6yh/6dOf8oN5C5+zOZZ3gnCXSllwuO
H/1jmyUepj/vJ5LN36L2ZgjBJQMAxSbdRcgDKRIe7bWyKu57EUlKFENW1n95epLU
Ztncztk5Svtk0B1g0NSjSnm6Lra1U/VdixDg0PLDEm92Cjqnh3Xl9oHlvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJffOFLFscQ76aZ4mdNuPUYYwPeVMB8GA1UdIwQY
MBaAFE3dD53NiJSbjzo3cQY1YqBXZ5KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYt
NmY2Y2NiNmUyY2RhLzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYtNmY2Y2NiNmUyY2Rh
LzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzA2IBUe
Z1Ncm4hLpibBN8bljcAIwrntDvq1Goy59PXJdH2Cv7JQjxmy71SfT7PGflW/0bs0
cP3ktjOo+XaNK0BprUUrpcE8WOpH5OhcQHEU4BuqWqVSP74ybnsFc0gCeGdmrp3D
/B6FCX2lZHKhQH9pKglreqRP/eIKSm8sSkP6f9Ktw/n/RRClypvMOtT78j0V2C5U
qg0NoOKniJcKTzmDf5dqMXPja10vSR3LToEoWPsDPnrMpCgP3eyJx3qR8Uq/f6PL
NvxYBV3gtgMmVpuro2L0AJwFgyStiuzcQFVRAOWcQ3ZE82uYpDGsy0e5ko4lW3kW
KLsyA84IUUCWRw==
-----END CERTIFICATE-----