Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File:                     sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier:          2eO2yDxd+k16oWJmWi52WyJkV7dv2oVlMbAb7Pgw4aM=
Subject key identifier:   DE:1E:E8:C7:5E:3E:33:A6:A1:58:0D:2B:8E:75:54:E7:26:C1:A0:F7
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer:       /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial:       01962F068B0E5E1A5C24E1FB28A571F925E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number:          0D34
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: UDhX8BuvHOYMS5e9vYOFjWjGBYk.roa (hash: C1cyztzqKdd1lIZCQFArU9xrG3gU6hCt1VPEU5YkilM=)
                          2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: 2Ssjmwt6vvTSN8UG+2arFyG0MRx3kH+D2oYRvikMKDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8b:0e:5e:1a:5c:24:e1:fb:28:a5:71:f9:25:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=de1ee8c75e3e33a6a1580d2b8e7554e726c1a0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:ce:b6:45:84:8f:60:10:a9:8f:81:8b:56:
                    8e:ed:e3:b8:23:4a:17:04:67:20:1c:91:5d:eb:72:
                    d5:15:ac:3a:a7:ff:b0:1d:14:2f:13:df:62:80:22:
                    90:3a:7b:d4:09:ba:86:55:c7:d7:3d:55:30:67:e2:
                    a6:c5:03:b7:6f:cc:81:a2:25:9f:d2:58:c2:5b:cc:
                    d6:6d:67:bf:6a:48:1c:54:7a:04:d3:7e:1d:9e:a0:
                    68:f5:40:e6:3c:25:64:b5:1c:61:69:f0:b3:39:71:
                    93:5b:b7:0b:46:5d:8f:a1:0c:ac:5c:c7:c9:77:6d:
                    77:20:64:55:9e:3a:43:e8:82:ea:bc:c6:ae:4f:17:
                    5c:77:0f:4b:58:20:b1:75:a8:25:d3:03:e1:89:01:
                    46:51:f2:68:5f:e8:de:91:b0:6f:dc:83:ac:e7:7f:
                    57:de:3d:50:23:45:13:57:a3:a0:01:2c:2b:39:46:
                    9a:a9:f2:4c:a5:19:01:8b:1e:13:82:3c:95:ff:bb:
                    b5:f1:b3:5c:47:ab:88:45:ed:ac:4a:14:b4:43:9a:
                    a8:df:5f:87:1c:ea:fb:37:38:4b:26:53:ca:7e:2c:
                    9d:af:41:26:54:66:a9:bc:5b:66:a5:69:b2:db:37:
                    d2:3a:80:8e:b2:55:a5:6a:80:42:96:74:c6:35:ce:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:E8:C7:5E:3E:33:A6:A1:58:0D:2B:8E:75:54:E7:26:C1:A0:F7
            X509v3 Authority Key Identifier:
                keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0e:ff:65:da:22:12:da:4f:0c:95:24:f7:32:7f:07:6b:f3:
         e5:76:0f:50:22:08:c9:ed:15:e1:65:15:1c:18:32:76:c5:fb:
         b7:33:87:d2:17:a4:a3:b4:62:30:59:2a:30:93:6d:cc:6f:ef:
         4e:7a:16:63:df:63:44:6f:cc:4e:96:cb:7a:6c:91:9d:6b:f4:
         37:f5:6f:68:e9:88:21:cf:87:72:e5:70:84:39:88:b6:49:f5:
         68:16:97:8a:aa:48:c8:3c:c6:cc:60:9d:09:68:bb:d0:41:31:
         0a:0d:f9:5a:81:bb:ed:5b:a7:0b:88:72:45:bd:f9:89:15:c4:
         e8:25:4f:1e:c0:17:d0:94:5d:96:c8:af:24:7c:c1:5b:5c:84:
         35:db:2c:e4:25:95:58:77:0d:a3:6c:cc:89:1f:e8:09:a8:56:
         41:ba:62:74:78:e3:41:3b:6d:dd:2b:db:c8:57:ec:bc:52:6b:
         80:42:c9:7a:12:71:49:24:51:b9:36:2a:92:1f:9b:a2:cb:6d:
         cc:26:9b:7a:4e:4a:d4:f4:ed:6f:9a:21:52:7c:16:32:65:9e:
         32:b7:62:80:4f:12:ad:53:28:36:3b:1e:ab:05:6e:2e:69:2e:
         84:91:4f:51:18:35:c9:b9:29:2a:5e:07:f2:f1:3a:1f:0a:ba:
         f1:00:88:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBosOXhpcJOH7KKVx+SXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxN2I0NDkwNGM3Njk0YTU0MDhhMGQyOTcyYzM5ZmYwYjFi
MDNlYTUwHhcNMjUwNDEzMTIwMTE5WhcNMjUwNDE0MTIwMTE5WjAzMTEwLwYDVQQD
EyhkZTFlZThjNzVlM2UzM2E2YTE1ODBkMmI4ZTc1NTRlNzI2YzFhMGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37DOtkWEj2AQqY+Bi1aO7eO4I0oX
BGcgHJFd63LVFaw6p/+wHRQvE99igCKQOnvUCbqGVcfXPVUwZ+KmxQO3b8yBoiWf
0ljCW8zWbWe/akgcVHoE034dnqBo9UDmPCVktRxhafCzOXGTW7cLRl2PoQysXMfJ
d213IGRVnjpD6ILqvMauTxdcdw9LWCCxdagl0wPhiQFGUfJoX+jekbBv3IOs539X
3j1QI0UTV6OgASwrOUaaqfJMpRkBix4TgjyV/7u18bNcR6uIRe2sShS0Q5qo31+H
HOr7NzhLJlPKfiydr0EmVGapvFtmpWmy2zfSOoCOslWlaoBClnTGNc7JCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4e6MdePjOmoVgNK451VOcmwaD3MB8GA1UdIwQY
MBaAFLF7RJBMdpSlQIoNKXLDn/CxsD6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTct
YTQ1OTE2OTU1ZTZmLzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTctYTQ1OTE2OTU1ZTZm
LzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg7/Zdoi
EtpPDJUk9zJ/B2vz5XYPUCIIye0V4WUVHBgydsX7tzOH0heko7RiMFkqMJNtzG/v
TnoWY99jRG/MTpbLemyRnWv0N/VvaOmIIc+HcuVwhDmItkn1aBaXiqpIyDzGzGCd
CWi70EExCg35WoG77VunC4hyRb35iRXE6CVPHsAX0JRdlsivJHzBW1yENdss5CWV
WHcNo2zMiR/oCahWQbpidHjjQTtt3SvbyFfsvFJrgELJehJxSSRRuTYqkh+bostt
zCabek5K1PTtb5ohUnwWMmWeMrdigE8SrVMoNjseqwVuLmkuhJFPURg1ybkpKl4H
8vE6Hwq68QCINA==
-----END CERTIFICATE-----