Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File:                     DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier:          udrATWC4NcXG/9gfh73DXO3UHzV13u/9GZAOeLqvSCA=
Subject key identifier:   E8:A3:63:EB:1E:FB:1C:79:65:3D:E2:4F:B8:94:8D:92:1D:69:D5:6D
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer:       /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial:       01962ECFC399CED3861BEFB29732014AA927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number:          37
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=)
                          2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: dSUdhnTx/Vl9LSbpveOyAzffRx+/dqTYkb/Z3MkwE/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c3:99:ce:d3:86:1b:ef:b2:97:32:01:4a:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=e8a363eb1efb1c79653de24fb8948d921d69d56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:fc:72:0c:ca:c3:50:9a:70:55:ad:88:98:
                    55:54:18:50:d7:bd:1c:1d:61:4c:e6:74:6d:91:09:
                    8b:0d:91:25:4f:4b:4e:12:f9:a8:33:d5:9f:0f:97:
                    91:49:55:34:ad:4b:a0:f4:a4:e4:7b:96:a5:d7:4a:
                    8d:a6:a4:9e:48:af:0f:89:ed:6e:4b:fa:0d:0d:2a:
                    cb:64:cc:a5:fe:ee:f3:68:65:c7:3f:ef:5d:54:33:
                    24:3c:eb:f3:e8:2d:6c:ac:cb:58:f6:21:30:72:25:
                    4d:16:c5:bc:70:c8:7c:46:9f:7b:14:e9:ee:d6:04:
                    fb:da:45:5e:90:cd:a6:ca:57:28:7a:7d:a9:c8:44:
                    3d:04:82:d0:3b:81:d8:c7:a0:fd:47:07:5d:ea:3a:
                    e1:da:81:a7:90:6f:3b:68:50:78:be:5a:3a:94:70:
                    20:f2:57:c1:b6:a3:5a:c0:9b:49:72:2b:36:c0:8a:
                    f0:12:71:7f:10:ec:2c:8f:fb:64:65:27:55:ce:14:
                    96:aa:52:a3:62:dd:24:21:21:a6:ea:ed:0a:13:10:
                    36:f6:eb:15:e5:ad:6f:71:6d:be:cb:72:23:5a:1d:
                    43:67:60:15:be:ff:44:ab:9e:c0:ca:78:a9:30:b9:
                    b9:b3:77:4b:6a:b5:9c:f7:c9:fd:97:17:ad:b2:83:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:63:EB:1E:FB:1C:79:65:3D:E2:4F:B8:94:8D:92:1D:69:D5:6D
            X509v3 Authority Key Identifier:
                keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:a2:1d:6d:ae:25:75:fd:1c:1d:ef:7e:bd:96:25:8f:98:
         14:75:c7:2c:fc:af:a8:9c:99:28:9e:8b:80:f8:e5:01:18:a0:
         6d:ee:23:da:37:58:e0:7d:f8:6c:e0:8d:5c:97:98:8f:1d:7d:
         a7:f5:8f:11:83:d1:5a:d0:3e:be:aa:2b:3b:d4:03:da:41:e7:
         c4:2f:43:8e:3d:24:d4:9c:4c:cb:6a:e9:1b:7d:26:5f:59:51:
         2a:ca:88:30:11:42:8a:b2:98:21:3c:d0:7e:6f:98:90:4a:68:
         6f:9e:d7:2d:2f:20:57:d2:f8:52:7e:f8:c3:0e:67:1d:18:e1:
         2c:ac:99:d7:d4:a5:ea:e4:51:14:bb:e2:26:1b:b1:ea:7d:64:
         e8:64:0c:52:4d:62:a6:67:de:4c:6c:23:e9:d7:af:b3:cd:41:
         f0:55:f7:a0:46:3d:56:6b:58:a7:55:bb:c5:a8:3e:59:9d:73:
         8d:3a:29:53:1d:6c:2f:d8:4b:8a:fb:0a:ad:62:56:ad:43:06:
         4f:a5:0f:27:9b:fc:e8:42:89:b4:6e:2d:76:f4:10:56:cb:1a:
         8a:65:1d:7a:7f:40:29:55:ec:93:98:ed:9a:4c:e5:be:be:85:
         2f:f4:5e:b4:98:a5:70:a3:cc:06:e5:ea:15:7d:fa:3c:5a:f0:
         df:62:04:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8OZztOGG++ylzIBSqknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx
ZWJjMDAwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
EyhlOGEzNjNlYjFlZmIxYzc5NjUzZGUyNGZiODk0OGQ5MjFkNjlkNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsab8cgzKw1CacFWtiJhVVBhQ170c
HWFM5nRtkQmLDZElT0tOEvmoM9WfD5eRSVU0rUug9KTke5al10qNpqSeSK8Pie1u
S/oNDSrLZMyl/u7zaGXHP+9dVDMkPOvz6C1srMtY9iEwciVNFsW8cMh8Rp97FOnu
1gT72kVekM2mylcoen2pyEQ9BILQO4HYx6D9Rwdd6jrh2oGnkG87aFB4vlo6lHAg
8lfBtqNawJtJcis2wIrwEnF/EOwsj/tkZSdVzhSWqlKjYt0kISGm6u0KExA29usV
5a1vcW2+y3IjWh1DZ2AVvv9Eq57AynipMLm5s3dLarWc98n9lxetsoNijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOijY+se+xx5ZT3iT7iUjZIdadVtMB8GA1UdIwQY
MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt
NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0
LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHCiHW2u
JXX9HB3vfr2WJY+YFHXHLPyvqJyZKJ6LgPjlARigbe4j2jdY4H34bOCNXJeYjx19
p/WPEYPRWtA+vqorO9QD2kHnxC9Djj0k1JxMy2rpG30mX1lRKsqIMBFCirKYITzQ
fm+YkEpob57XLS8gV9L4Un74ww5nHRjhLKyZ19Sl6uRRFLviJhux6n1k6GQMUk1i
pmfeTGwj6devs81B8FX3oEY9VmtYp1W7xag+WZ1zjTopUx1sL9hLivsKrWJWrUMG
T6UPJ5v86EKJtG4tdvQQVssaimUden9AKVXsk5jtmkzlvr6FL/RetJilcKPMBuXq
FX36PFrw32IEhw==
-----END CERTIFICATE-----