Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File:                     cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier:          nHV8b7g9ENmNVYwRYQJPEXNDNfd1PfmBgPI10BUiCUI=
Subject key identifier:   50:FD:32:C0:16:16:09:37:A4:58:E6:CD:47:01:1C:31:3D:51:E6:FC
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer:       /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial:       01962F7458A786B0A96AB2362F079ACCF3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number:          1071
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: qsP35SzODJ5L9BTIb8oAicUXf9dIXFqTtxa1kIRNcC8=)
                          2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
                          3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:58:a7:86:b0:a9:6a:b2:36:2f:07:9a:cc:f3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=50fd32c016160937a458e6cd47011c313d51e6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:79:df:73:34:e0:3d:3a:77:0b:3f:8a:a6:
                    2c:c4:23:06:35:30:42:17:6b:cd:c0:45:d0:40:84:
                    e2:27:7c:19:0b:c4:aa:bd:0f:6c:b8:88:0e:42:08:
                    67:eb:5e:2a:82:25:98:67:e3:a5:0d:fd:0d:b7:86:
                    79:e9:51:99:eb:d4:c5:73:74:58:a5:b6:8a:8d:d9:
                    24:c1:4e:b5:d9:f0:fd:3f:50:e8:a0:12:01:f7:a7:
                    5f:8b:0d:8d:d1:8f:2b:80:3d:a8:2b:0e:42:43:54:
                    e0:51:c0:5f:8b:71:2a:18:fa:52:25:80:35:be:00:
                    39:33:72:0f:35:0c:59:c1:c8:bc:c9:f9:5a:ad:fa:
                    2c:26:ab:e8:20:c9:ed:18:5e:4a:d7:12:65:6b:70:
                    e8:91:e9:6b:0d:89:41:3e:e3:fe:1f:63:a1:ea:c2:
                    4d:56:5d:7b:b0:c6:92:b2:73:d1:28:41:c2:41:12:
                    4f:2d:59:a6:db:f6:18:e3:4d:cc:49:56:02:98:c9:
                    a9:96:bb:66:eb:d2:dd:78:9f:c3:07:03:8c:bc:e3:
                    4d:3f:41:f4:a6:3e:43:30:a1:99:c5:81:cf:d2:a3:
                    5a:83:13:4c:34:52:4b:c4:2e:e7:7a:0f:92:fe:f8:
                    1d:77:96:c5:b8:82:a6:c2:3e:83:f6:e0:12:f6:25:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:32:C0:16:16:09:37:A4:58:E6:CD:47:01:1C:31:3D:51:E6:FC
            X509v3 Authority Key Identifier:
                keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:65:bc:25:1a:03:1f:31:19:db:dc:b6:c0:84:e2:8c:8a:
         98:8d:ad:a6:f8:a9:c8:0f:5c:0c:02:d8:20:0a:a5:7d:33:41:
         1b:5b:ce:ef:37:bf:1e:65:19:b3:27:29:8f:27:b6:8d:ac:7a:
         a0:ec:a0:ad:fd:77:b7:47:f7:f3:5c:ba:e7:ec:06:e4:dd:67:
         d0:58:35:5c:1b:3a:a4:41:77:aa:4e:71:c9:08:9f:32:3f:54:
         f8:84:c9:e2:68:0d:8b:5d:97:3e:4b:7d:bc:85:c7:f1:4e:df:
         7b:66:fc:fe:01:ce:1b:7b:0a:d5:b4:4a:19:2b:9d:a9:55:a4:
         7c:90:2a:e4:ab:47:d2:8c:a3:5a:53:60:92:49:a8:82:ca:d7:
         45:d9:48:67:fa:27:b8:57:20:01:af:67:eb:16:ea:75:8b:d7:
         4f:ac:70:b0:19:2b:1f:6d:27:d7:d3:ca:9d:43:14:8e:35:f1:
         f7:e1:e6:67:14:dc:c8:2a:11:8d:47:47:5f:ae:a5:c8:ca:72:
         ae:eb:b9:aa:d9:bb:a6:01:b7:dc:c3:4a:d9:ae:69:46:92:37:
         b1:24:9d:06:83:54:c8:93:a5:98:94:c8:a2:9d:5c:64:36:0f:
         50:a9:11:09:cd:cc:88:fc:9e:0b:1a:dc:38:a0:c6:97:21:17:
         0a:15:30:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFinhrCparI2LweazPO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll
ZDlkMzEwHhcNMjUwNDEzMTQwMTE1WhcNMjUwNDE0MTQwMTE1WjAzMTEwLwYDVQQD
Eyg1MGZkMzJjMDE2MTYwOTM3YTQ1OGU2Y2Q0NzAxMWMzMTNkNTFlNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9533M04D06dws/iqYsxCMGNTBC
F2vNwEXQQITiJ3wZC8SqvQ9suIgOQghn614qgiWYZ+OlDf0Nt4Z56VGZ69TFc3RY
pbaKjdkkwU612fD9P1DooBIB96dfiw2N0Y8rgD2oKw5CQ1TgUcBfi3EqGPpSJYA1
vgA5M3IPNQxZwci8yflarfosJqvoIMntGF5K1xJla3DokelrDYlBPuP+H2Oh6sJN
Vl17sMaSsnPRKEHCQRJPLVmm2/YY403MSVYCmMmplrtm69LdeJ/DBwOMvONNP0H0
pj5DMKGZxYHP0qNagxNMNFJLxC7neg+S/vgdd5bFuIKmwj6D9uAS9iWQMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD9MsAWFgk3pFjmzUcBHDE9Ueb8MB8GA1UdIwQY
MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt
OWY2ZmEwZTFhNWE1LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1
LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK19lvCUa
Ax8xGdvctsCE4oyKmI2tpvipyA9cDALYIAqlfTNBG1vO7ze/HmUZsycpjye2jax6
oOygrf13t0f381y65+wG5N1n0Fg1XBs6pEF3qk5xyQifMj9U+ITJ4mgNi12XPkt9
vIXH8U7fe2b8/gHOG3sK1bRKGSudqVWkfJAq5KtH0oyjWlNgkkmogsrXRdlIZ/on
uFcgAa9n6xbqdYvXT6xwsBkrH20n19PKnUMUjjXx9+HmZxTcyCoRjUdHX66lyMpy
ruu5qtm7pgG33MNK2a5pRpI3sSSdBoNUyJOlmJTIop1cZDYPUKkRCc3MiPyeCxrc
OKDGlyEXChUwZQ==
-----END CERTIFICATE-----