Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File:                     1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier:          JRvAWZkEPLJWjttotCKlvdmJyYGXLmR6B+b2NLhrNBc=
Subject key identifier:   A3:0B:CA:17:15:29:83:A0:6C:C2:B2:D8:E9:4B:0C:AB:5A:C3:AF:90
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer:       /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial:       01962F071273B175518C108DDF9A269BC5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: F5F5lV05K2ElkfsE4i+Ftv8dRa6RYO+oRtwXE2FpLqs=)
                          2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
                          3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
                          4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:73:b1:75:51:8c:10:8d:df:9a:26:9b:c5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=a30bca17152983a06cc2b2d8e94b0cab5ac3af90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ae:7a:5f:52:e0:19:d6:4d:4e:55:ba:57:5e:
                    db:06:0f:b7:18:c6:ea:93:95:c3:a0:49:1d:3d:35:
                    62:73:a2:ed:e8:ad:3c:86:f4:fc:c5:67:5f:ae:47:
                    1a:4b:b4:db:5b:c5:02:ed:76:fd:9b:db:b5:2a:aa:
                    18:63:95:bc:61:69:7a:f9:82:98:fb:bc:d0:01:13:
                    01:da:fe:2d:2c:2d:19:f6:36:06:67:a8:4a:4e:40:
                    f2:d3:46:44:11:c3:a0:ed:ef:00:b5:e2:05:60:6d:
                    6b:68:36:75:bd:5e:4b:46:04:72:ee:aa:9c:04:e2:
                    f8:57:2c:b0:82:d8:e1:58:35:a4:e6:bd:88:d4:2e:
                    27:f1:c7:b5:04:33:99:4a:a8:db:e8:c2:9c:35:e4:
                    a0:d9:37:7e:69:e5:81:b1:76:2a:5a:fa:28:a4:b6:
                    e7:9a:bf:01:aa:3c:08:89:af:ba:9a:ff:96:9c:34:
                    50:a8:0e:72:b8:3e:f0:f2:79:84:1d:8b:31:c6:30:
                    75:45:f6:93:10:a4:6f:88:76:2c:f7:7c:e3:8c:06:
                    8b:56:75:bf:04:9a:93:b7:45:e8:90:bb:a1:89:62:
                    17:cb:53:57:3f:da:c3:fa:1c:c6:f5:9b:1f:8d:3e:
                    fe:d1:29:fb:c0:91:7a:14:47:01:82:f4:3f:b4:87:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:CA:17:15:29:83:A0:6C:C2:B2:D8:E9:4B:0C:AB:5A:C3:AF:90
            X509v3 Authority Key Identifier:
                keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:91:9c:5b:4f:ef:55:08:26:a7:96:15:64:e3:3a:57:14:4b:
         3e:ff:90:3f:c6:c1:5d:5c:b7:c4:e0:d1:80:b1:03:58:11:e4:
         c0:9f:08:31:30:ec:fa:14:5b:86:ed:74:d5:cc:e2:8c:2b:90:
         b5:39:8e:c7:12:85:12:89:76:92:82:b3:23:87:36:ce:0e:4d:
         44:cd:31:70:56:61:8a:38:0f:12:35:5a:7b:59:a4:16:75:8f:
         48:1d:89:48:f7:30:18:06:c2:75:0c:f2:07:f6:4b:f2:c5:12:
         b6:a6:a0:35:b5:5f:cb:1f:f9:f3:d4:8b:1f:22:6c:50:e6:0f:
         2a:b8:dd:c9:a7:5c:3f:3c:52:a6:1b:52:74:b5:a7:34:a4:98:
         06:82:e2:af:95:19:ab:50:6b:4c:74:0a:6d:2b:04:21:31:04:
         ec:6f:de:40:d3:71:24:8e:ff:25:5e:5b:1b:65:9d:8a:1e:bb:
         36:99:0f:13:ef:1f:f1:35:1b:da:4e:c4:f1:25:35:3e:ab:4f:
         37:35:fa:d9:98:7f:12:5f:e5:91:a4:b6:12:a5:9d:4c:c2:1e:
         aa:58:51:fe:7a:cc:25:49:04:6f:fe:68:d6:5a:a7:cd:bb:2f:
         30:4e:2c:6a:42:b2:53:92:6f:89:4a:6d:56:59:a9:be:62:f9:
         8a:3d:f4:ba
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBxJzsXVRjBCN35omm8XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk
N2JjNzIwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EyhhMzBiY2ExNzE1Mjk4M2EwNmNjMmIyZDhlOTRiMGNhYjVhYzNhZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7656X1LgGdZNTlW6V17bBg+3GMbq
k5XDoEkdPTVic6Lt6K08hvT8xWdfrkcaS7TbW8UC7Xb9m9u1KqoYY5W8YWl6+YKY
+7zQARMB2v4tLC0Z9jYGZ6hKTkDy00ZEEcOg7e8AteIFYG1raDZ1vV5LRgRy7qqc
BOL4VyywgtjhWDWk5r2I1C4n8ce1BDOZSqjb6MKcNeSg2Td+aeWBsXYqWvoopLbn
mr8BqjwIia+6mv+WnDRQqA5yuD7w8nmEHYsxxjB1RfaTEKRviHYs93zjjAaLVnW/
BJqTt0XokLuhiWIXy1NXP9rD+hzG9ZsfjT7+0Sn7wJF6FEcBgvQ/tIcm/QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKMLyhcVKYOgbMKy2OlLDKtaw6+QMB8GA1UdIwQY
MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm
LThiZjRmZTRjNzczMi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgyLzI3NmMyNC0yYTdmLTQ3MjYtOGQ5Zi04YmY0ZmU0Yzc3
MzIvMS8xLWxiSDVtQ3h4MDQ3QXhpeFF6akQ4QTNYdkhJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppGc
W0/vVQgmp5YVZOM6VxRLPv+QP8bBXVy3xODRgLEDWBHkwJ8IMTDs+hRbhu101czi
jCuQtTmOxxKFEol2koKzI4c2zg5NRM0xcFZhijgPEjVae1mkFnWPSB2JSPcwGAbC
dQzyB/ZL8sUStqagNbVfyx/589SLHyJsUOYPKrjdyadcPzxSphtSdLWnNKSYBoLi
r5UZq1BrTHQKbSsEITEE7G/eQNNxJI7/JV5bG2Wdih67NpkPE+8f8TUb2k7E8SU1
PqtPNzX62Zh/El/lkaS2EqWdTMIeqlhR/nrMJUkEb/5o1lqnzbsvME4sakKyU5Jv
iUptVlmpvmL5ij30ug==
-----END CERTIFICATE-----