Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File:                     F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier:          Hzw1iEdzBQ4AJAqg9L6wk+oM4rVj3zjbmUtOFlgi/sM=
Subject key identifier:   1A:5D:61:2E:BD:C2:14:36:C4:6C:EA:25:33:00:2C:9D:14:FE:05:7F
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer:       /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial:       01962DF3AA55CE4F3265AE334215578B189B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: O7TFFtx6zereio9Ez5fyMoFJCEqkZgn+vW2+GC8w6ys=)
                          2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
                          3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:aa:55:ce:4f:32:65:ae:33:42:15:57:8b:18:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=1a5d612ebdc21436c46cea2533002c9d14fe057f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:67:b1:ff:b5:98:37:2c:d3:b6:45:42:ae:
                    8d:64:45:5c:1e:5e:80:af:c9:e1:81:42:9d:53:63:
                    c2:96:4b:3b:50:a6:98:28:92:01:34:8a:a0:aa:d8:
                    76:57:fd:f8:05:af:5d:93:20:05:ef:be:df:e1:8a:
                    5f:69:89:d6:dd:9e:f3:c6:88:1c:0d:05:f0:96:59:
                    07:20:8c:ab:8d:0f:4e:81:7e:14:28:5a:3e:f2:c3:
                    3d:bf:ea:84:ca:fd:03:48:4a:25:9c:f7:90:ee:56:
                    47:f7:58:16:50:10:e4:f2:e3:fc:df:23:fc:0b:2d:
                    bc:50:e7:02:0d:21:85:04:47:9f:b8:aa:9b:d6:47:
                    f3:e0:6c:66:0c:93:13:a8:35:7a:8c:e5:b1:c9:63:
                    35:fa:d3:c9:d1:d0:3b:41:5e:50:88:7a:d5:18:a9:
                    e8:50:7a:2c:9a:c1:b3:b9:ea:91:54:6b:88:b1:bd:
                    c1:1e:15:6e:96:a0:80:2f:bf:ed:9c:f2:55:0e:d9:
                    ad:85:3a:04:50:2c:c9:5e:ce:9c:d5:76:3a:99:b1:
                    77:e9:28:ef:b1:07:c5:ea:d4:1e:1c:ef:48:38:e6:
                    3d:b1:23:29:29:48:14:9c:1d:23:e4:af:13:d1:35:
                    96:6c:7d:04:49:08:93:6d:dc:33:66:cb:b7:1e:4f:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:61:2E:BD:C2:14:36:C4:6C:EA:25:33:00:2C:9D:14:FE:05:7F
            X509v3 Authority Key Identifier:
                keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:dd:1a:47:d1:17:1a:5d:57:2b:e2:99:0b:25:67:58:b5:
         00:68:c9:61:f1:f8:e3:11:d9:01:f8:8d:59:e5:31:bd:f1:db:
         30:a4:47:18:cc:67:fd:e7:a5:2d:bc:dc:9f:cf:b2:d8:15:99:
         84:e7:02:4b:4f:67:af:1d:f6:d1:31:aa:26:72:ae:9f:30:95:
         07:ed:db:aa:ce:d9:0e:28:03:42:a1:2b:0e:0a:6e:fc:1e:6f:
         ec:78:bc:46:94:1b:89:3d:4f:98:7c:91:eb:e7:44:33:f7:b7:
         3b:d2:bc:23:a6:2a:c7:0b:cc:0e:26:0f:be:ce:7c:31:4c:7d:
         a7:d8:52:cb:78:1a:61:1d:4e:47:0a:1f:8a:f6:3b:13:c0:b3:
         b3:1f:b3:3e:cc:63:b5:44:40:f7:5b:3e:76:be:0d:f3:fc:20:
         c7:cf:2e:64:12:22:e3:23:4b:c3:f2:45:73:3d:0e:89:e4:26:
         f1:2d:a9:6e:ca:ad:c3:2b:46:a2:34:b3:52:e5:2c:4a:ff:75:
         5e:e0:2c:ae:70:41:68:41:89:50:75:58:7d:c8:24:db:3d:b8:
         e7:e5:1e:f3:f6:83:2e:f2:3e:68:6a:7c:48:43:26:c6:29:79:
         68:f9:3f:40:db:17:01:18:90:87:81:e7:ac:b7:c8:29:b0:6a:
         2e:20:2e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86pVzk8yZa4zQhVXixibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ODIzNWRmNTM1NTI2ZDllNmQ2YWZmNmZhN2FjNTIyOTNh
OTJjNzEwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
EygxYTVkNjEyZWJkYzIxNDM2YzQ2Y2VhMjUzMzAwMmM5ZDE0ZmUwNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aBnsf+1mDcs07ZFQq6NZEVcHl6A
r8nhgUKdU2PClks7UKaYKJIBNIqgqth2V/34Ba9dkyAF777f4YpfaYnW3Z7zxogc
DQXwllkHIIyrjQ9OgX4UKFo+8sM9v+qEyv0DSEolnPeQ7lZH91gWUBDk8uP83yP8
Cy28UOcCDSGFBEefuKqb1kfz4GxmDJMTqDV6jOWxyWM1+tPJ0dA7QV5QiHrVGKno
UHosmsGzueqRVGuIsb3BHhVulqCAL7/tnPJVDtmthToEUCzJXs6c1XY6mbF36Sjv
sQfF6tQeHO9IOOY9sSMpKUgUnB0j5K8T0TWWbH0ESQiTbdwzZsu3Hk9kewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpdYS69whQ2xGzqJTMALJ0U/gV/MB8GA1UdIwQY
MBaAFBeCNd9TVSbZ5tav9vp6xSKTqSxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgt
ZWU1Y2EzNmYxZDlhLzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9jMzgzYmItZTgwNi00YTZkLWEyZTgtZWU1Y2EzNmYxZDlh
LzEvRjRJMTMxTlZKdG5tMXFfMi1uckZJcE9wTEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhzdGkfR
FxpdVyvimQslZ1i1AGjJYfH44xHZAfiNWeUxvfHbMKRHGMxn/eelLbzcn8+y2BWZ
hOcCS09nrx320TGqJnKunzCVB+3bqs7ZDigDQqErDgpu/B5v7Hi8RpQbiT1PmHyR
6+dEM/e3O9K8I6YqxwvMDiYPvs58MUx9p9hSy3gaYR1ORwofivY7E8Czsx+zPsxj
tURA91s+dr4N8/wgx88uZBIi4yNLw/JFcz0OieQm8S2pbsqtwytGojSzUuUsSv91
XuAsrnBBaEGJUHVYfcgk2z245+Ue8/aDLvI+aGp8SEMmxil5aPk/QNsXARiQh4Hn
rLfIKbBqLiAu6A==
-----END CERTIFICATE-----