Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File:                     Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier:          YwCqw8Pd24buNaKy4dzpCwNWH+GMNda7cNQDODO/LhM=
Subject key identifier:   80:B7:34:4B:E8:0F:9A:0B:FE:F7:C7:50:76:A3:44:F0:ED:A6:E9:C5
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer:       /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial:       01962F74431401A8D86CC95BCEC208AB959E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number:          0C29
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
                          2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: T1uhxiYAkyHLPa1mSLbfcaZsnhPkcRcpGjJzPtODUOM=)
                          3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
                          4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:14:01:a8:d8:6c:c9:5b:ce:c2:08:ab:95:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=80b7344be80f9a0bfef7c75076a344f0eda6e9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:46:a0:5f:89:9e:89:f9:46:b0:c0:b3:ca:
                    68:62:4e:37:6b:d8:7c:93:db:09:38:45:fa:ee:af:
                    f1:60:c8:50:6b:9b:4d:ef:88:61:0f:32:67:73:70:
                    76:28:06:68:c4:f2:36:dd:64:1f:50:7d:d3:85:84:
                    68:57:ff:35:0d:51:d5:2b:6b:20:49:f0:ee:43:39:
                    4b:f4:c4:56:16:bb:aa:b3:57:a7:42:21:bc:b1:89:
                    67:64:a5:e1:99:7c:f1:77:9d:d6:06:45:c6:ee:76:
                    99:af:16:bc:a5:96:91:55:d4:eb:08:7a:0b:9f:1e:
                    e1:2f:04:61:77:22:26:f1:c9:bd:52:52:d5:41:db:
                    13:ea:a2:f4:03:1d:df:63:34:b6:d9:94:a3:7e:68:
                    7b:6d:d5:ce:36:e3:19:eb:05:2d:2e:cd:07:cf:61:
                    58:4d:7f:2d:74:de:75:02:3b:c1:92:0a:04:6f:b3:
                    66:07:66:e7:78:46:86:98:3e:b5:24:3a:ca:3e:d0:
                    62:68:41:aa:ed:c4:a1:a8:5b:d7:3d:f2:63:c6:29:
                    24:9d:b1:0a:20:1d:e2:5c:3c:8d:98:06:8e:a1:ef:
                    92:7a:55:a7:bd:38:de:79:81:82:e5:ea:98:a9:d0:
                    66:89:f0:fd:14:fe:42:f5:7e:0d:f8:9a:de:ba:8e:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:34:4B:E8:0F:9A:0B:FE:F7:C7:50:76:A3:44:F0:ED:A6:E9:C5
            X509v3 Authority Key Identifier:
                keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:12:41:dc:5e:0a:af:03:41:43:14:9f:98:1e:bc:2c:ec:
         14:01:3b:fe:1f:fe:88:f1:01:ff:b8:82:06:a1:71:fd:bb:db:
         09:27:4d:b3:a3:16:51:08:71:1b:12:7b:83:2a:89:e8:18:6a:
         9d:21:30:5d:13:0b:ee:d0:46:ae:83:bc:b3:20:bf:bc:ee:1c:
         82:a7:63:af:98:8f:db:19:23:46:3f:f4:8d:ab:97:2e:50:10:
         6d:b8:97:d3:ae:8a:b4:86:17:99:23:c7:26:f7:a2:bb:55:40:
         cc:97:63:ba:59:b9:ec:a1:77:08:dc:96:a9:78:04:3a:1b:c2:
         a6:85:0a:a8:f5:8b:66:80:9a:71:43:c0:d4:fb:0e:b0:fc:f3:
         a7:76:1e:53:56:41:86:0e:0c:3a:3e:30:fc:55:b7:17:36:3b:
         58:a8:9b:f0:1f:5f:cc:8a:23:09:8e:0f:71:a9:7d:35:b5:b7:
         15:9c:a3:07:07:1d:cb:dd:2c:f8:97:f4:9b:1f:1c:96:6b:21:
         5a:28:c1:76:4e:ac:1d:4e:00:c4:7a:88:03:4f:d6:5a:7c:b1:
         d1:34:46:0d:d2:e6:2d:f2:7a:e3:0e:b9:45:1f:2b:1e:8e:b2:
         43:5f:f3:f3:bf:74:84:71:f1:9e:6c:53:7c:63:35:6c:ca:66:
         86:f9:fb:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEMUAajYbMlbzsIIq5WeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjUwNDEzMTQwMTEwWhcNMjUwNDE0MTQwMTEwWjAzMTEwLwYDVQQD
Eyg4MGI3MzQ0YmU4MGY5YTBiZmVmN2M3NTA3NmEzNDRmMGVkYTZlOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5pGoF+Jnon5RrDAs8poYk43a9h8
k9sJOEX67q/xYMhQa5tN74hhDzJnc3B2KAZoxPI23WQfUH3ThYRoV/81DVHVK2sg
SfDuQzlL9MRWFruqs1enQiG8sYlnZKXhmXzxd53WBkXG7naZrxa8pZaRVdTrCHoL
nx7hLwRhdyIm8cm9UlLVQdsT6qL0Ax3fYzS22ZSjfmh7bdXONuMZ6wUtLs0Hz2FY
TX8tdN51AjvBkgoEb7NmB2bneEaGmD61JDrKPtBiaEGq7cShqFvXPfJjxikknbEK
IB3iXDyNmAaOoe+SelWnvTjeeYGC5eqYqdBmifD9FP5C9X4N+Jreuo6TowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC3NEvoD5oL/vfHUHajRPDtpunFMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkwSQdxe
Cq8DQUMUn5gevCzsFAE7/h/+iPEB/7iCBqFx/bvbCSdNs6MWUQhxGxJ7gyqJ6Bhq
nSEwXRML7tBGroO8syC/vO4cgqdjr5iP2xkjRj/0jauXLlAQbbiX066KtIYXmSPH
Jveiu1VAzJdjulm57KF3CNyWqXgEOhvCpoUKqPWLZoCacUPA1PsOsPzzp3YeU1ZB
hg4MOj4w/FW3FzY7WKib8B9fzIojCY4Pcal9NbW3FZyjBwcdy90s+Jf0mx8clmsh
WijBdk6sHU4AxHqIA0/WWnyx0TRGDdLmLfJ64w65RR8rHo6yQ1/z8790hHHxnmxT
fGM1bMpmhvn70A==
-----END CERTIFICATE-----