Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File:                     e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier:          cadkVsQTRYdZn7hRVBsmctaRqwa2OpG1vPbMUGvAXr8=
Subject key identifier:   D0:94:80:71:B8:EA:ED:E5:39:7D:9A:71:74:AD:77:5E:D3:3A:45:8E
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer:       /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial:       01962DF416396433CFF7B876DDB0EAB00847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number:          0946
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
                          2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
                          3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: v5GtoFrtE2iOUVCEsOCQV+6rMomgr09RZtaiiWLrXA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:16:39:64:33:cf:f7:b8:76:dd:b0:ea:b0:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=d0948071b8eaede5397d9a7174ad775ed33a458e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:0f:a7:c8:b6:d5:f3:7b:55:34:97:ab:75:
                    85:97:55:c2:b5:53:be:7a:78:8f:44:88:7b:66:11:
                    69:d6:2a:51:7f:8c:33:36:ed:52:c6:6f:30:26:c5:
                    e8:a8:25:b0:d5:26:6e:46:4d:6e:89:e2:bb:0c:47:
                    5d:18:6e:35:ee:07:35:b6:81:7b:89:bb:36:f6:38:
                    a5:9c:d5:a4:5c:c6:04:04:9a:e2:4f:3c:84:78:dc:
                    ca:11:96:78:4d:81:13:1f:9a:6d:37:ba:73:42:9c:
                    20:7d:fd:55:54:a3:30:4a:8b:f6:f0:21:ec:fa:4a:
                    0c:51:10:82:66:72:7d:f8:86:99:95:72:8b:d0:91:
                    47:84:4e:b2:e7:06:fe:42:e6:8c:b7:5d:c9:03:cf:
                    84:2d:bf:b7:c7:23:4d:ca:93:28:5e:39:e9:f0:9a:
                    33:8f:1f:3e:78:e9:38:8f:c5:8f:39:ac:26:7e:7f:
                    24:ec:52:56:df:ec:af:3d:7e:fa:ff:8c:78:a5:00:
                    a3:0b:bf:65:ea:69:95:dd:86:3d:26:2b:e1:9a:fb:
                    52:d3:32:c9:43:ca:6b:8f:3a:68:6b:70:77:a0:5d:
                    8e:88:e2:e8:7b:ab:f0:f3:c2:d3:22:f3:37:e8:be:
                    4b:56:49:a9:bd:a4:58:87:ed:ae:6b:65:7b:e5:17:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:80:71:B8:EA:ED:E5:39:7D:9A:71:74:AD:77:5E:D3:3A:45:8E
            X509v3 Authority Key Identifier:
                keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:ba:9a:52:a7:fe:63:50:41:92:3d:2d:b2:26:f3:bc:a0:
         dd:3a:c9:82:67:f5:4a:d8:63:8a:fd:4c:9e:b5:83:03:7b:8e:
         f9:64:86:63:85:c8:9c:1a:59:a2:7d:5c:19:f7:52:e8:e9:63:
         60:15:c7:d1:12:f5:29:3e:05:66:43:c0:70:b8:e7:40:84:97:
         98:b1:7d:12:78:09:7f:55:78:90:a2:b2:d0:73:25:b9:de:31:
         b5:c4:8b:c5:ac:a2:41:1c:4b:5f:dc:02:f0:1f:f5:3f:a1:a8:
         74:75:3c:ca:95:d0:a6:5c:21:8c:63:e8:30:6f:23:78:e7:7f:
         7a:0d:c9:20:d5:89:45:1b:29:f6:2b:c7:ec:e2:e6:1d:1a:7f:
         9f:7e:ad:8d:27:9c:47:ac:31:b7:74:dc:6e:f7:b3:d7:32:27:
         b9:d0:4e:c3:a3:f6:23:47:c5:f4:a0:05:8e:b0:e7:c0:d1:74:
         be:11:1a:97:66:89:a3:81:3e:40:e6:d4:8a:97:35:14:90:93:
         e7:7b:88:39:8c:29:2f:12:ad:d4:ec:f0:a4:de:89:df:17:bd:
         3a:ec:d3:ca:40:f5:af:bf:4e:65:8b:c6:c3:bb:9e:ec:ca:e9:
         91:e2:5a:6c:1c:fb:c9:f3:89:e3:6f:44:0c:a8:c2:f3:de:ee:
         73:a4:0b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BY5ZDPP97h23bDqsAhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTc1NGU0ZDIwOGM2NDM1ZjFhYmVjOTM3Y2RlMjAwMDky
MDRkYzAwHhcNMjUwNDEzMDcwMTMzWhcNMjUwNDE0MDcwMTMzWjAzMTEwLwYDVQQD
EyhkMDk0ODA3MWI4ZWFlZGU1Mzk3ZDlhNzE3NGFkNzc1ZWQzM2E0NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEPp8i21fN7VTSXq3WFl1XCtVO+
eniPRIh7ZhFp1ipRf4wzNu1Sxm8wJsXoqCWw1SZuRk1uieK7DEddGG417gc1toF7
ibs29jilnNWkXMYEBJriTzyEeNzKEZZ4TYETH5ptN7pzQpwgff1VVKMwSov28CHs
+koMURCCZnJ9+IaZlXKL0JFHhE6y5wb+QuaMt13JA8+ELb+3xyNNypMoXjnp8Joz
jx8+eOk4j8WPOawmfn8k7FJW3+yvPX76/4x4pQCjC79l6mmV3YY9JivhmvtS0zLJ
Q8prjzpoa3B3oF2OiOLoe6vw88LTIvM36L5LVkmpvaRYh+2ua2V75RcZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCUgHG46u3lOX2acXStd17TOkWOMB8GA1UdIwQY
MBaAFHtXVOTSCMZDXxq+yTfN4gAJIE3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTIt
ZmQ0OTNjNmE1Yzc2LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTItZmQ0OTNjNmE1Yzc2
LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXy6mlKn
/mNQQZI9LbIm87yg3TrJgmf1Sthjiv1MnrWDA3uO+WSGY4XInBpZon1cGfdS6Olj
YBXH0RL1KT4FZkPAcLjnQISXmLF9EngJf1V4kKKy0HMlud4xtcSLxayiQRxLX9wC
8B/1P6GodHU8ypXQplwhjGPoMG8jeOd/eg3JINWJRRsp9ivH7OLmHRp/n36tjSec
R6wxt3Tcbvez1zInudBOw6P2I0fF9KAFjrDnwNF0vhEal2aJo4E+QObUipc1FJCT
53uIOYwpLxKt1OzwpN6J3xe9OuzTykD1r79OZYvGw7ue7MrpkeJabBz7yfOJ429E
DKjC897uc6QLkg==
-----END CERTIFICATE-----