Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
File:                     Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft (raw, json)
Hash identifier:          wg0XeZGVbSY/OOktfj/OvX+vt4fbVa+ygAgXoygm52Y=
Subject key identifier:   36:26:B5:88:F8:0D:76:CE:6D:68:B8:D0:C5:BA:AE:76:05:B9:41:80
Authority key identifier: 52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04
Certificate issuer:       /CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
Certificate serial:       01962FAB52363E9E833CC6EF1BED9F757C79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: 9JadLiuorP5WBtAK4ahko9XzHjQ.roa (hash: qnkmqt5DjArPix3ByqvfUIsWSJTvM73SLxqKVoYiGls=)
                          2: Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl (hash: IAYIEVWI70id5FonsPooAkASE3A/oUdJ4rX49susLpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:36:3e:9e:83:3c:c6:ef:1b:ed:9f:75:7c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5289b6a8bfaac5c8c09a48c042819dfc5ea45104
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=3626b588f80d76ce6d68b8d0c5baae7605b94180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:a9:57:64:87:92:ed:97:ac:e2:36:8b:86:
                    85:85:dd:b1:11:02:c0:02:d4:11:f0:52:4c:05:96:
                    0d:d8:ea:a4:f9:c0:ee:76:7d:96:bc:4b:9c:1c:75:
                    57:0b:1f:68:b9:b2:b7:26:ab:7f:9e:60:45:42:51:
                    70:bc:50:6e:f7:4b:96:ad:a7:37:fb:2b:94:0a:72:
                    dd:08:85:80:f1:af:6e:d6:b6:90:d9:5a:0f:9d:ee:
                    99:c9:0b:8d:ed:0e:59:82:90:cd:6b:ce:05:58:3e:
                    e9:0a:18:64:39:b1:59:3d:64:49:58:14:6f:d9:24:
                    fd:d7:49:25:80:d0:93:79:44:7b:70:6e:71:73:50:
                    21:9d:06:48:0d:4e:a0:7c:b3:ed:eb:70:27:cc:e7:
                    85:26:f9:33:10:5c:15:0a:e0:1d:91:dc:d0:8f:c4:
                    92:5a:33:19:1c:dc:35:e3:c9:b8:20:aa:66:09:77:
                    28:b2:72:74:12:a8:36:07:3a:96:0f:55:23:45:e3:
                    fb:09:9c:56:22:7f:9f:7b:78:c7:d2:e8:91:f2:4a:
                    ff:04:71:ff:15:28:fd:4d:ed:60:78:fc:ff:f0:2d:
                    a7:58:de:af:16:3a:10:37:84:0c:0a:fb:fa:91:80:
                    db:f5:b3:18:91:bd:87:a8:b8:17:b5:22:3f:82:70:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:B5:88:F8:0D:76:CE:6D:68:B8:D0:C5:BA:AE:76:05:B9:41:80
            X509v3 Authority Key Identifier:
                keyid:52:89:B6:A8:BF:AA:C5:C8:C0:9A:48:C0:42:81:9D:FC:5E:A4:51:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b66c2c-3d01-4bdb-8c4c-b2da977e407d/1/Uom2qL-qxcjAmkjAQoGd_F6kUQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:c5:e6:53:ff:78:d8:df:8b:94:b2:e4:61:d7:2e:d2:74:
         e3:5d:6d:ab:fb:33:ab:86:db:db:91:a8:78:6d:2e:5a:73:d9:
         08:16:87:7f:c0:3f:11:81:61:b8:73:ad:07:f9:8d:c3:7c:d8:
         81:cc:a4:0a:79:d6:63:c8:98:e5:10:e5:ce:d7:2d:c7:26:39:
         f8:c9:79:7d:56:0c:09:47:7c:dd:59:ae:75:6b:d7:04:d7:0a:
         4f:73:56:b1:f8:11:05:02:90:b3:3a:ca:00:a5:cd:85:96:1f:
         e0:7d:1d:f4:19:be:04:73:7e:2f:20:51:d8:17:03:53:fe:03:
         6d:fa:20:69:64:f5:4a:6c:80:3c:77:0d:cd:06:8a:a3:0a:a6:
         a1:ae:69:9c:f5:f8:7d:50:bf:59:40:25:b9:ac:07:9d:9f:e4:
         63:ca:ad:56:bb:88:3b:55:cb:e8:c7:51:cf:27:f7:01:aa:a9:
         4e:5d:2d:e0:2d:15:47:df:9f:9f:2b:6d:eb:6c:52:82:b7:fc:
         74:25:5c:22:cd:36:88:05:ea:ab:22:78:5b:bc:fd:3f:cf:1e:
         cb:1f:5f:64:ff:ac:20:5f:68:6e:89:f6:53:b3:5f:ad:10:01:
         63:52:a6:50:11:9e:e6:5f:70:f8:a0:30:7c:61:a1:99:77:be:
         6e:86:a7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1I2Pp6DPMbvG+2fdXx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODliNmE4YmZhYWM1YzhjMDlhNDhjMDQyODE5ZGZjNWVh
NDUxMDQwHhcNMjUwNDEzMTUwMTE4WhcNMjUwNDE0MTUwMTE4WjAzMTEwLwYDVQQD
EygzNjI2YjU4OGY4MGQ3NmNlNmQ2OGI4ZDBjNWJhYWU3NjA1Yjk0MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bSpV2SHku2XrOI2i4aFhd2xEQLA
AtQR8FJMBZYN2Oqk+cDudn2WvEucHHVXCx9oubK3Jqt/nmBFQlFwvFBu90uWrac3
+yuUCnLdCIWA8a9u1raQ2VoPne6ZyQuN7Q5ZgpDNa84FWD7pChhkObFZPWRJWBRv
2ST910klgNCTeUR7cG5xc1AhnQZIDU6gfLPt63AnzOeFJvkzEFwVCuAdkdzQj8SS
WjMZHNw148m4IKpmCXcosnJ0Eqg2BzqWD1UjReP7CZxWIn+fe3jH0uiR8kr/BHH/
FSj9Te1gePz/8C2nWN6vFjoQN4QMCvv6kYDb9bMYkb2HqLgXtSI/gnCRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYmtYj4DXbObWi40MW6rnYFuUGAMB8GA1UdIwQY
MBaAFFKJtqi/qsXIwJpIwEKBnfxepFEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMt
YjJkYTk3N2U0MDdkLzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iNjZjMmMtM2QwMS00YmRiLThjNGMtYjJkYTk3N2U0MDdk
LzEvVW9tMnFMLXF4Y2pBbWtqQVFvR2RfRjZrVVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+HF5lP/
eNjfi5Sy5GHXLtJ0411tq/szq4bb25GoeG0uWnPZCBaHf8A/EYFhuHOtB/mNw3zY
gcykCnnWY8iY5RDlztctxyY5+Ml5fVYMCUd83VmudWvXBNcKT3NWsfgRBQKQszrK
AKXNhZYf4H0d9Bm+BHN+LyBR2BcDU/4DbfogaWT1SmyAPHcNzQaKowqmoa5pnPX4
fVC/WUAluawHnZ/kY8qtVruIO1XL6MdRzyf3AaqpTl0t4C0VR9+fnytt62xSgrf8
dCVcIs02iAXqqyJ4W7z9P88eyx9fZP+sIF9obon2U7NfrRABY1KmUBGe5l9w+KAw
fGGhmXe+boanKA==
-----END CERTIFICATE-----