Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File:                     aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier:          ZXJBQBHvrztkCZl/FyPGgsv2AhVF/UkflJ62kLcghyg=
Subject key identifier:   78:FA:E7:76:72:FA:73:47:1A:63:5B:DE:97:30:D6:EA:8E:B4:D5:D4
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer:       /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial:       01962DF41F831A2E86E284EC1D52EF73EF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number:          0CD9
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
                          2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: qhlVmoE0Q23Z9gq+j02VOtL03ZOMEe/oPpa0Izda/wI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:83:1a:2e:86:e2:84:ec:1d:52:ef:73:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=78fae77672fa73471a635bde9730d6ea8eb4d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c9:cc:60:3b:26:20:7a:38:39:2b:8e:e7:ef:
                    0e:d1:f8:3d:4c:39:d7:7b:11:87:a6:d3:e0:05:10:
                    6e:7f:b8:2f:54:30:cb:e2:ac:c5:20:54:91:7e:06:
                    a6:b8:1a:66:32:49:61:89:40:d1:2b:e8:ca:bd:fe:
                    62:5b:00:cb:37:d4:ea:62:d4:d4:9b:c6:f7:8b:e5:
                    52:ad:fc:95:b4:56:e2:b4:2d:b8:22:00:75:76:43:
                    57:8b:7b:70:5e:10:05:d8:31:e3:c9:91:62:d1:20:
                    09:2a:f8:65:0a:e0:43:a7:df:08:19:17:12:d2:2e:
                    85:e1:7a:f5:4f:6e:72:37:ac:c4:ae:f1:e9:75:a3:
                    ae:24:79:cf:51:a0:74:71:7b:ae:84:60:1c:7e:c1:
                    21:04:92:c9:5b:72:b6:6d:60:c0:0a:41:55:a0:29:
                    83:d4:d8:01:d4:f6:48:f1:71:36:10:79:fd:e8:a7:
                    83:8a:93:73:d7:79:e6:dc:66:3a:08:df:eb:08:04:
                    26:97:05:ca:f3:df:5f:b8:1d:7a:51:c1:c6:31:16:
                    24:d6:ee:3d:5e:cb:01:09:f8:ee:71:71:b0:9e:97:
                    1c:88:aa:c6:6f:2d:bc:33:4c:44:67:ae:d1:94:cd:
                    40:f4:ef:c5:8e:13:40:8b:77:83:b9:d4:26:69:58:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:E7:76:72:FA:73:47:1A:63:5B:DE:97:30:D6:EA:8E:B4:D5:D4
            X509v3 Authority Key Identifier:
                keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:25:0e:2c:94:f2:33:25:51:30:6d:e0:b8:6e:bf:b3:f6:c1:
         01:32:18:49:13:85:9a:38:a4:41:99:e7:cc:3b:be:b6:31:74:
         62:c4:da:37:bd:2f:ef:38:c9:65:0f:16:03:e4:1a:7b:66:90:
         4f:3f:8f:e0:0e:c2:5c:17:08:99:20:2e:3a:2e:09:cd:71:56:
         ea:e4:60:ec:2e:54:a6:f8:1f:5b:aa:a3:bb:68:9b:b5:ca:01:
         9c:21:3c:b3:eb:2b:f7:8c:ca:26:8c:56:2a:68:01:a3:6a:d4:
         d6:4b:ad:de:97:a2:91:67:c7:6c:3a:c7:81:ff:9a:a6:ae:5b:
         f3:65:45:3d:a0:6b:b2:a9:67:f8:12:f2:2e:09:c1:82:ce:a8:
         9c:e7:8f:cc:f2:4f:a5:a2:6e:73:fd:c1:a5:73:67:9c:1e:0c:
         7a:f0:2f:30:1b:c1:34:b1:77:49:89:0b:6a:60:e3:48:17:ae:
         3f:78:3b:b8:c8:af:b3:de:96:2e:34:c9:cc:05:46:d3:7e:de:
         9f:56:26:0f:b0:62:1b:9e:48:81:71:42:55:cc:a9:58:19:d5:
         4b:85:fe:2d:5a:5e:00:a5:82:8f:43:86:57:cb:29:63:c8:9f:
         14:4a:df:03:88:80:30:5c:06:6a:d2:01:a2:69:4b:8a:ca:bf:
         33:e3:09:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B+DGi6G4oTsHVLvc+8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4
NzJkMzUwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg3OGZhZTc3NjcyZmE3MzQ3MWE2MzViZGU5NzMwZDZlYThlYjRkNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MnMYDsmIHo4OSuO5+8O0fg9TDnX
exGHptPgBRBuf7gvVDDL4qzFIFSRfgamuBpmMklhiUDRK+jKvf5iWwDLN9TqYtTU
m8b3i+VSrfyVtFbitC24IgB1dkNXi3twXhAF2DHjyZFi0SAJKvhlCuBDp98IGRcS
0i6F4Xr1T25yN6zErvHpdaOuJHnPUaB0cXuuhGAcfsEhBJLJW3K2bWDACkFVoCmD
1NgB1PZI8XE2EHn96KeDipNz13nm3GY6CN/rCAQmlwXK899fuB16UcHGMRYk1u49
XssBCfjucXGwnpcciKrGby28M0xEZ67RlM1A9O/FjhNAi3eDudQmaVg+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj653Zy+nNHGmNb3pcw1uqOtNXUMB8GA1UdIwQY
MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt
YzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk
LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiUOLJTy
MyVRMG3guG6/s/bBATIYSROFmjikQZnnzDu+tjF0YsTaN70v7zjJZQ8WA+Qae2aQ
Tz+P4A7CXBcImSAuOi4JzXFW6uRg7C5UpvgfW6qju2ibtcoBnCE8s+sr94zKJoxW
KmgBo2rU1kut3peikWfHbDrHgf+apq5b82VFPaBrsqln+BLyLgnBgs6onOePzPJP
paJuc/3BpXNnnB4MevAvMBvBNLF3SYkLamDjSBeuP3g7uMivs96WLjTJzAVG037e
n1YmD7BiG55IgXFCVcypWBnVS4X+LVpeAKWCj0OGV8spY8ifFErfA4iAMFwGatIB
omlLisq/M+MJCg==
-----END CERTIFICATE-----