Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File:                     0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier:          WWtxAuv0mDASYnQwrAduYq+kWzh9lhBL7zZ4Gao2a7E=
Subject key identifier:   18:72:71:A3:E8:7B:07:A5:DF:8A:99:D8:B1:87:67:34:42:30:07:B9
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer:       /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial:       01962E2ACE342FB8E1EEF649856CE9499958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: kVrAs1CpY+F553PAePP88Da3m3IEEVGhJd1BDwhRdow=)
                          2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
                          3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:34:2f:b8:e1:ee:f6:49:85:6c:e9:49:99:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=187271a3e87b07a5df8a99d8b1876734423007b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e2:92:8a:9d:be:3b:19:db:23:95:5b:1d:a7:
                    d6:d8:ea:ca:99:c9:5e:26:bb:9f:fb:7d:61:fa:f2:
                    e1:05:cf:20:fd:7a:25:39:0d:d9:e9:c1:47:b3:22:
                    43:7b:04:32:69:d8:1b:db:4d:06:68:8b:c7:62:13:
                    ed:01:1c:eb:b7:5e:2f:d4:7d:56:b1:56:cc:11:72:
                    e9:c2:1e:e7:59:7d:80:cc:99:63:60:89:33:e7:da:
                    8c:84:7e:01:31:50:54:bd:40:da:40:d1:1b:c6:79:
                    35:cb:6d:a8:cb:79:2f:48:37:80:d3:d9:0b:0a:b0:
                    23:8b:0c:8d:b8:e1:6e:00:25:0a:6b:a2:06:57:32:
                    ee:c0:f1:03:22:de:e4:0f:81:b9:32:b8:50:c1:a9:
                    1a:44:e0:99:0e:8e:19:72:b5:68:4d:79:07:eb:6c:
                    4d:e6:b9:a5:d5:23:1b:8c:af:45:dd:f4:04:fa:2d:
                    18:97:2b:ca:32:90:2f:31:10:dd:e7:16:b7:1b:20:
                    6f:af:87:7f:66:48:ba:35:64:e2:48:52:a1:07:d6:
                    39:40:b9:9e:ef:3d:66:81:20:c1:35:0e:0b:66:5b:
                    35:12:20:89:db:bf:cd:be:e5:30:db:c4:93:28:f7:
                    a7:55:64:07:e1:e1:7f:ba:32:ee:eb:8d:cf:4f:a8:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:71:A3:E8:7B:07:A5:DF:8A:99:D8:B1:87:67:34:42:30:07:B9
            X509v3 Authority Key Identifier:
                keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:12:97:c8:7c:6f:62:9e:fb:a4:20:1d:a1:fb:a0:56:0b:
         81:6d:c1:ea:46:e1:8e:7e:8b:ec:2a:49:3a:e6:73:2e:ab:75:
         f2:f3:aa:52:6e:f3:af:91:53:c4:7d:d5:82:7f:a7:75:72:71:
         80:3a:e5:11:76:73:11:3b:4d:3e:91:7d:28:a9:00:f9:62:fe:
         7a:3f:4e:41:b1:77:9e:74:e3:05:5b:c9:96:eb:19:c1:46:95:
         60:f3:05:d4:08:12:8c:1b:2a:cc:eb:01:a4:cb:fb:38:91:8a:
         47:a1:cc:9b:d1:19:95:84:f2:5d:fa:d2:61:c8:84:3b:23:3c:
         0d:48:a8:89:e0:77:87:36:21:18:55:be:54:2a:6d:69:b4:cc:
         7c:b9:de:9a:75:2e:85:fe:f5:a3:e0:f5:26:b1:ce:9a:04:17:
         3a:1a:44:c2:91:72:2e:50:a4:e1:2e:44:53:b4:7d:65:3b:8f:
         5a:42:f5:c9:3e:72:e8:42:56:b0:39:70:c0:35:05:1b:a0:4a:
         7d:1b:2b:d3:fd:e9:b3:26:35:ae:87:f9:ba:72:d7:4e:cf:c0:
         b1:e7:6c:ab:2a:a4:0a:d4:f4:9e:5b:52:89:4c:18:b6:40:ef:
         b6:63:d3:9b:6e:5e:28:46:98:43:d3:4f:a2:fa:38:44:db:dc:
         00:ae:d9:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKs40L7jh7vZJhWzpSZlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3
N2JiYzEwHhcNMjUwNDEzMDgwMTE5WhcNMjUwNDE0MDgwMTE5WjAzMTEwLwYDVQQD
EygxODcyNzFhM2U4N2IwN2E1ZGY4YTk5ZDhiMTg3NjczNDQyMzAwN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OKSip2+OxnbI5VbHafW2OrKmcle
Jruf+31h+vLhBc8g/XolOQ3Z6cFHsyJDewQyadgb200GaIvHYhPtARzrt14v1H1W
sVbMEXLpwh7nWX2AzJljYIkz59qMhH4BMVBUvUDaQNEbxnk1y22oy3kvSDeA09kL
CrAjiwyNuOFuACUKa6IGVzLuwPEDIt7kD4G5MrhQwakaROCZDo4ZcrVoTXkH62xN
5rml1SMbjK9F3fQE+i0YlyvKMpAvMRDd5xa3GyBvr4d/Zki6NWTiSFKhB9Y5QLme
7z1mgSDBNQ4LZls1EiCJ27/NvuUw28STKPenVWQH4eF/ujLu643PT6hNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhycaPoewel34qZ2LGHZzRCMAe5MB8GA1UdIwQY
MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt
NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm
LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtMSl8h8
b2Ke+6QgHaH7oFYLgW3B6kbhjn6L7CpJOuZzLqt18vOqUm7zr5FTxH3Vgn+ndXJx
gDrlEXZzETtNPpF9KKkA+WL+ej9OQbF3nnTjBVvJlusZwUaVYPMF1AgSjBsqzOsB
pMv7OJGKR6HMm9EZlYTyXfrSYciEOyM8DUioieB3hzYhGFW+VCptabTMfLnemnUu
hf71o+D1JrHOmgQXOhpEwpFyLlCk4S5EU7R9ZTuPWkL1yT5y6EJWsDlwwDUFG6BK
fRsr0/3psyY1rof5unLXTs/AsedsqyqkCtT0nltSiUwYtkDvtmPTm25eKEaYQ9NP
ovo4RNvcAK7ZMw==
-----END CERTIFICATE-----