Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
File:                     smK_Id5ROFhZQWxMYIAB4gJaXSU.mft (raw, json)
Hash identifier:          LPBpzHcz9ckaC5J8nZcbhuk1Lr5xmhhLL3kdGK0ECPA=
Subject key identifier:   A4:05:44:08:14:01:9B:F0:6E:E0:26:61:D3:C9:C0:6D:E2:A1:0F:B8
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       01962DF3BFFD1C7D6BE859E97A70F6709CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 70DfSihtLn-MMeYnWYv7ZjpjEgM.roa (hash: u78wuaLSg6GaDt+rxcnVBh35CQfMs4UrEtrKVLvgnzw=)
                          2: HxSDF3RSnEvi55r0ntqSFgDhGUI.roa (hash: NLofzV7uwWNcSKkUAvo8Nc2AOY4OLfgQGuve63ilrNk=)
                          3: LJDUfh2zlZ_tH_G6HCU58zg5f4I.roa (hash: LqY6hDZmTT8yYm5vXHX0GHlSL9eE6EX8ryuyXk0I54w=)
                          4: YpkkKmboA4aHm_SpF6rE9LejCsY.roa (hash: hvX1xuiKff9tUazulkNao07mga+YtxbInH9ufQvIEJ8=)
                          5: smK_Id5ROFhZQWxMYIAB4gJaXSU.crl (hash: wF0GhEN+iOI7Q73TMirP9o1r5JMzLThqB85en7cSI98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bf:fd:1c:7d:6b:e8:59:e9:7a:70:f6:70:9c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=a405440814019bf06ee02661d3c9c06de2a10fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:24:cf:cb:83:e6:ea:74:4b:08:1d:0a:d9:
                    cd:67:3f:62:34:fd:b1:2c:a8:b7:18:b1:43:d4:8f:
                    e3:3b:32:c3:47:c1:e0:d2:d6:2f:68:0e:ef:fb:35:
                    20:81:16:56:3f:ad:36:1a:13:4a:2f:e8:94:02:ae:
                    a8:50:93:00:94:78:ab:86:96:2c:eb:f8:11:98:c9:
                    f3:be:36:48:70:fe:d2:75:fd:48:6f:07:03:ab:47:
                    c1:79:6c:25:57:b4:46:3d:14:bc:ea:05:dc:22:0d:
                    bd:aa:b0:fc:f3:11:50:b5:3c:7f:72:ec:63:5b:11:
                    14:41:ae:fb:e2:bd:df:40:18:a0:35:5d:0c:64:5d:
                    47:c7:77:6e:13:39:90:6b:33:71:7e:99:d2:4c:33:
                    2b:a0:92:5a:b5:30:6f:fc:18:84:9a:13:1b:b6:f9:
                    48:fb:3a:1e:e7:21:14:7e:f9:31:7c:9b:c2:58:92:
                    71:cb:56:3b:3a:9d:db:b4:e6:fb:18:0f:3a:33:da:
                    e0:76:37:bf:8d:74:06:54:62:e8:00:13:82:75:b2:
                    b8:6e:db:9e:27:9b:5a:b1:f9:cc:38:9a:b7:f4:17:
                    48:98:41:a8:41:1c:65:27:b3:13:63:c1:ef:5e:0b:
                    78:d5:78:c0:18:49:59:f9:57:93:5e:f9:9e:fd:0b:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:05:44:08:14:01:9B:F0:6E:E0:26:61:D3:C9:C0:6D:E2:A1:0F:B8
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:11:c6:df:14:bd:c1:b7:c3:5a:82:26:0d:24:af:56:32:
         6b:83:b3:77:fe:cb:08:4d:1b:4b:bd:2e:7e:f9:d0:fe:ad:5b:
         41:ea:a6:25:f0:91:6a:39:7c:13:a2:49:bf:c2:ad:0b:85:ab:
         d1:bc:89:ca:f6:1d:f6:08:21:f5:45:de:67:96:0f:4b:61:b4:
         7d:31:3d:b9:51:30:d5:94:08:cb:64:78:c5:1f:4a:67:05:06:
         af:f1:f0:9b:62:aa:98:93:53:2a:2a:52:2e:e0:19:5d:91:2e:
         d4:97:3d:c5:d9:c6:cf:90:0f:ae:2c:ee:0f:ab:2b:02:12:60:
         12:40:02:5d:3e:84:06:69:7f:7b:a3:8d:30:0a:d3:3d:c7:cf:
         2f:b6:d9:61:ea:e9:90:96:3d:49:3b:b4:8c:5b:cb:2f:60:60:
         6a:b8:8b:c1:05:e0:25:cc:56:7a:29:72:0c:e7:93:0d:f4:0d:
         9c:c6:e9:63:c9:05:71:e7:ba:e9:c4:84:e5:92:9a:da:00:c8:
         b4:da:bb:0d:d6:ba:76:cb:47:a5:37:63:21:38:a2:3a:ba:28:
         59:7f:0d:65:3d:8e:31:64:37:21:59:c7:78:ec:03:90:ef:b6:
         67:24:27:da:28:1a:08:5e:3d:7b:dd:54:0b:97:4d:41:a4:51:
         17:e5:82:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87/9HH1r6FnpenD2cJz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjJiZjIxZGU1MTM4NTg1OTQxNmM0YzYwODAwMWUyMDI1
YTVkMjUwHhcNMjUwNDEzMDcwMTExWhcNMjUwNDE0MDcwMTExWjAzMTEwLwYDVQQD
EyhhNDA1NDQwODE0MDE5YmYwNmVlMDI2NjFkM2M5YzA2ZGUyYTEwZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxUkz8uD5up0SwgdCtnNZz9iNP2x
LKi3GLFD1I/jOzLDR8Hg0tYvaA7v+zUggRZWP602GhNKL+iUAq6oUJMAlHirhpYs
6/gRmMnzvjZIcP7Sdf1IbwcDq0fBeWwlV7RGPRS86gXcIg29qrD88xFQtTx/cuxj
WxEUQa774r3fQBigNV0MZF1Hx3duEzmQazNxfpnSTDMroJJatTBv/BiEmhMbtvlI
+zoe5yEUfvkxfJvCWJJxy1Y7Op3btOb7GA86M9rgdje/jXQGVGLoABOCdbK4btue
J5tasfnMOJq39BdImEGoQRxlJ7MTY8HvXgt41XjAGElZ+VeTXvme/Qt6uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQFRAgUAZvwbuAmYdPJwG3ioQ+4MB8GA1UdIwQY
MBaAFLJivyHeUThYWUFsTGCAAeICWl0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEt
MTRjNmM1MDU1Zjg4LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4
LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRwRxt8U
vcG3w1qCJg0kr1Yya4Ozd/7LCE0bS70ufvnQ/q1bQeqmJfCRajl8E6JJv8KtC4Wr
0byJyvYd9ggh9UXeZ5YPS2G0fTE9uVEw1ZQIy2R4xR9KZwUGr/Hwm2KqmJNTKipS
LuAZXZEu1Jc9xdnGz5APrizuD6srAhJgEkACXT6EBml/e6ONMArTPcfPL7bZYerp
kJY9STu0jFvLL2BgariLwQXgJcxWeilyDOeTDfQNnMbpY8kFcee66cSE5ZKa2gDI
tNq7Dda6dstHpTdjITiiOrooWX8NZT2OMWQ3IVnHeOwDkO+2ZyQn2igaCF49e91U
C5dNQaRRF+WCQQ==
-----END CERTIFICATE-----