Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File:                     uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier:          LFOE6vYfaBV7aKDeow/sp1MX0aPX3FnBNRQVlBEWZRI=
Subject key identifier:   0B:84:17:E2:7B:BE:6A:BB:73:16:57:5B:2C:83:B6:3C:70:59:1E:BA
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer:       /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial:       01962E995C8AECA56CC9D7F43E012A7760AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number:          0CEA
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
                          2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: PYImGnhkqmg81KJXWpZsgHuHB4LzM9AMT/+1vU5lmIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:8a:ec:a5:6c:c9:d7:f4:3e:01:2a:77:60:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=0b8417e27bbe6abb7316575b2c83b63c70591eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8f:36:9c:e9:60:70:01:45:22:dd:f6:df:b6:
                    6c:c2:86:bd:79:e7:ae:97:d5:bb:db:90:ee:3b:06:
                    4f:6e:04:cb:c4:c2:de:9a:b5:48:69:34:5c:ea:2c:
                    35:5f:cd:14:f9:81:37:41:da:76:af:49:22:0d:46:
                    ff:a5:86:d0:04:d2:e2:6c:f2:8c:6e:fa:92:c7:5c:
                    31:39:8d:2d:7c:b5:18:08:d2:7e:97:d3:f1:01:cb:
                    9b:a4:7d:9c:74:93:21:b6:65:85:f5:16:c0:a0:e2:
                    08:f6:b8:bc:dc:fb:12:72:56:e1:6c:e3:0d:47:49:
                    b6:b7:e2:04:bb:58:11:15:cd:3d:c0:94:b9:53:1e:
                    cb:9e:b7:a5:84:91:7b:f2:6e:2f:5e:36:01:3a:d1:
                    28:81:5e:1a:d1:8e:11:d2:c5:26:0e:39:5c:e1:e3:
                    4a:ba:59:d2:32:31:2e:97:1b:bf:02:45:fd:8e:06:
                    bd:82:12:f8:37:9e:37:48:ae:ae:75:37:fa:9b:65:
                    8a:53:f2:ce:df:a9:29:b5:f7:66:26:02:90:a7:6e:
                    ea:50:53:97:b6:1e:f4:2a:5e:8c:41:b2:91:4d:67:
                    10:96:6a:e7:4e:4f:b6:6d:29:34:2e:ce:07:9f:8b:
                    c1:0b:ee:65:7b:6b:c7:ce:7e:f1:ee:d7:92:9f:0b:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:17:E2:7B:BE:6A:BB:73:16:57:5B:2C:83:B6:3C:70:59:1E:BA
            X509v3 Authority Key Identifier:
                keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:14:48:91:66:c1:2f:bc:17:c8:01:4a:82:84:da:96:d4:
         6c:c1:76:0f:7a:12:c3:33:16:38:6c:ba:9a:27:36:b1:e3:6e:
         8f:b7:67:69:39:5e:19:22:b6:f9:71:b0:cf:d6:1a:4f:0f:24:
         19:f2:47:ec:ef:ee:73:fc:a1:91:09:5c:89:18:28:c6:09:fb:
         3d:35:54:2b:4e:2b:43:27:f1:b0:96:10:89:99:1a:bc:9b:64:
         c6:34:5f:b7:6e:6a:77:4a:90:a8:eb:0a:48:89:f1:60:62:3b:
         9e:ae:c1:51:7e:4d:2d:da:da:93:f7:17:0d:4d:31:73:2f:94:
         8b:fd:a1:bc:b7:70:35:cb:ed:0f:46:71:3a:48:a0:29:4a:c3:
         80:83:20:51:ea:82:c6:d4:a6:6e:cf:ea:12:cf:c3:cd:7e:57:
         99:e7:50:69:22:fe:4d:cd:fb:c1:9b:2c:7d:02:07:72:0c:62:
         a3:7b:dc:b5:05:fe:b4:54:9b:6a:ac:f5:6e:e3:4c:53:a0:a2:
         0a:43:63:0d:00:f2:c0:e2:e6:30:90:b6:c8:e4:98:31:5f:52:
         7b:c4:ef:83:aa:90:21:25:bc:59:52:52:a4:ba:f1:64:27:ad:
         60:5f:97:22:b9:7c:29:f5:5c:a6:5d:a1:9a:c0:a6:d2:c7:2e:
         1e:12:57:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVyK7KVsydf0PgEqd2CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDFjMzMwOTRhMDk5MjJjMGExMDQ4NmQyMWRmNTU4OTY3
NWJjOTQwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
EygwYjg0MTdlMjdiYmU2YWJiNzMxNjU3NWIyYzgzYjYzYzcwNTkxZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I82nOlgcAFFIt3237Zswoa9eeeu
l9W725DuOwZPbgTLxMLemrVIaTRc6iw1X80U+YE3Qdp2r0kiDUb/pYbQBNLibPKM
bvqSx1wxOY0tfLUYCNJ+l9PxAcubpH2cdJMhtmWF9RbAoOII9ri83PsSclbhbOMN
R0m2t+IEu1gRFc09wJS5Ux7LnrelhJF78m4vXjYBOtEogV4a0Y4R0sUmDjlc4eNK
ulnSMjEulxu/AkX9jga9ghL4N543SK6udTf6m2WKU/LO36kptfdmJgKQp27qUFOX
th70Kl6MQbKRTWcQlmrnTk+2bSk0Ls4Hn4vBC+5le2vHzn7x7teSnwtF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuEF+J7vmq7cxZXWyyDtjxwWR66MB8GA1UdIwQY
MBaAFLgBwzCUoJkiwKEEhtId9ViWdbyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEt
M2M4NjI3ZDk3ODhkLzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81YjI5ZmYtYmY5MC00ODgzLTk3ZGEtM2M4NjI3ZDk3ODhk
LzEvdUFIRE1KU2dtU0xBb1FTRzBoMzFXSloxdkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/AUSJFm
wS+8F8gBSoKE2pbUbMF2D3oSwzMWOGy6mic2seNuj7dnaTleGSK2+XGwz9YaTw8k
GfJH7O/uc/yhkQlciRgoxgn7PTVUK04rQyfxsJYQiZkavJtkxjRft25qd0qQqOsK
SInxYGI7nq7BUX5NLdrak/cXDU0xcy+Ui/2hvLdwNcvtD0ZxOkigKUrDgIMgUeqC
xtSmbs/qEs/DzX5XmedQaSL+Tc37wZssfQIHcgxio3vctQX+tFSbaqz1buNMU6Ci
CkNjDQDywOLmMJC2yOSYMV9Se8Tvg6qQISW8WVJSpLrxZCetYF+XIrl8KfVcpl2h
msCm0scuHhJXGg==
-----END CERTIFICATE-----