Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File:                     TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier:          iPM6yC0MkmL4QP5aNZiSdsghsMy+Pt0na7MhwSSNK9Y=
Subject key identifier:   9B:44:E9:2D:04:A5:13:A7:67:B3:6A:BA:F0:0F:E8:33:57:B8:63:74
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer:       /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial:       01962E61A67FAD371189EF2EB688FA1A529F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=)
                          2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: Vf83BlqWtgDjNGDC2E5UCEaqw8Bf1uJKFrmKbJjDvRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:7f:ad:37:11:89:ef:2e:b6:88:fa:1a:52:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=9b44e92d04a513a767b36abaf00fe83357b86374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:c5:ce:ae:e4:96:47:74:bd:1a:25:1e:02:
                    b5:3d:99:47:81:17:fe:ea:49:22:85:28:d2:96:9a:
                    26:c3:75:3a:68:4b:d5:fd:80:39:c9:89:8c:3f:15:
                    e2:e3:38:81:84:10:60:08:53:a7:6d:c3:a7:e9:6a:
                    0d:c1:0b:27:ca:ec:84:1f:7f:b4:df:45:f6:6c:2f:
                    d2:7d:98:73:2b:77:fa:9f:f9:5d:9f:42:05:9e:73:
                    f7:e7:5e:65:45:04:9c:3c:b9:55:18:7c:54:4d:25:
                    4a:cb:69:a6:81:2c:0d:d9:aa:a5:b4:b7:b6:3b:4d:
                    89:d7:65:ba:d4:6d:60:d1:1a:3a:67:6f:eb:c5:de:
                    90:d2:fc:e9:fa:8b:26:40:78:e4:9b:59:ba:a9:07:
                    a3:32:c8:3b:58:89:b7:e6:ce:b1:30:35:47:77:4d:
                    84:13:71:56:4e:f1:41:7a:01:58:5a:dd:90:c3:a4:
                    a2:d8:fa:7a:76:18:6a:5d:c8:49:94:d9:8f:1c:bf:
                    b8:a4:fd:a2:6b:e8:38:ba:43:cd:25:2d:25:87:df:
                    03:b7:15:e6:17:37:7b:39:4f:18:0b:32:06:51:75:
                    db:9d:03:12:b5:5a:97:de:58:e0:76:3b:27:c2:a4:
                    0f:6a:51:80:c4:52:7c:e4:cc:bc:ff:d0:86:c9:27:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:E9:2D:04:A5:13:A7:67:B3:6A:BA:F0:0F:E8:33:57:B8:63:74
            X509v3 Authority Key Identifier:
                keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:08:d2:39:94:a8:13:e0:29:d7:ee:d1:3d:51:66:bf:2b:
         95:16:76:0d:9a:88:5d:46:4a:4a:58:78:c6:7a:26:92:b2:06:
         e4:96:d2:7f:5d:39:f5:d4:a2:e7:00:c1:7f:e6:df:eb:e6:c8:
         a9:01:e7:da:fc:af:01:38:18:07:9d:46:13:bb:bf:a8:0b:4c:
         e2:a3:98:6e:5b:6c:f6:cb:34:da:b5:c3:70:d3:a9:1f:b4:7a:
         57:12:5e:2f:7d:2f:6a:7a:8a:0d:bd:31:45:7d:60:8d:a1:a4:
         50:ec:61:15:e4:54:2b:d0:7e:38:0a:9a:a6:d7:9b:cf:c4:10:
         ad:66:b3:8b:82:63:d4:5c:c5:44:ff:fc:44:de:89:36:e7:13:
         98:e8:59:1b:02:8a:77:47:78:88:de:15:b7:1c:dc:61:fd:56:
         39:2a:c8:93:87:fd:1b:d2:3b:fc:87:d6:b8:8e:82:e0:36:50:
         16:8b:76:18:fd:12:2f:c8:de:ee:ad:a5:63:24:a7:a1:2a:ec:
         e3:2d:a9:d4:66:c3:43:97:47:40:73:52:d3:99:70:50:3d:7e:
         5c:db:09:07:c7:6f:32:c0:51:1d:35:84:4c:13:58:92:d9:6e:
         47:ba:5a:0b:4e:7f:1a:04:fd:2f:fe:7c:4e:05:68:79:85:25:
         ed:01:fc:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaZ/rTcRie8utoj6GlKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWFhMzhlZWEzMjRlMmJkN2FiNjQyN2U3NTk2YTlmYTQx
ZGIwZTMwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
Eyg5YjQ0ZTkyZDA0YTUxM2E3NjdiMzZhYmFmMDBmZTgzMzU3Yjg2Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTFzq7klkd0vRolHgK1PZlHgRf+
6kkihSjSlpomw3U6aEvV/YA5yYmMPxXi4ziBhBBgCFOnbcOn6WoNwQsnyuyEH3+0
30X2bC/SfZhzK3f6n/ldn0IFnnP3515lRQScPLlVGHxUTSVKy2mmgSwN2aqltLe2
O02J12W61G1g0Ro6Z2/rxd6Q0vzp+osmQHjkm1m6qQejMsg7WIm35s6xMDVHd02E
E3FWTvFBegFYWt2Qw6Si2Pp6dhhqXchJlNmPHL+4pP2ia+g4ukPNJS0lh98DtxXm
Fzd7OU8YCzIGUXXbnQMStVqX3ljgdjsnwqQPalGAxFJ85My8/9CGyScRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtE6S0EpROnZ7NquvAP6DNXuGN0MB8GA1UdIwQY
MBaAFE5ao47qMk4r16tkJ+dZap+kHbDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEt
NGVlZWQ4YTQzMDhiLzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEtNGVlZWQ4YTQzMDhi
LzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADX0I0jmU
qBPgKdfu0T1RZr8rlRZ2DZqIXUZKSlh4xnomkrIG5JbSf1059dSi5wDBf+bf6+bI
qQHn2vyvATgYB51GE7u/qAtM4qOYblts9ss02rXDcNOpH7R6VxJeL30vanqKDb0x
RX1gjaGkUOxhFeRUK9B+OAqaptebz8QQrWazi4Jj1FzFRP/8RN6JNucTmOhZGwKK
d0d4iN4VtxzcYf1WOSrIk4f9G9I7/IfWuI6C4DZQFot2GP0SL8je7q2lYySnoSrs
4y2p1GbDQ5dHQHNS05lwUD1+XNsJB8dvMsBRHTWETBNYktluR7paC05/GgT9L/58
TgVoeYUl7QH8Qg==
-----END CERTIFICATE-----