Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          QCaySNVuiTb57AdPoPOJq5uM2/pr+6wBAedVhxs7wAM=
Subject key identifier:   69:F4:44:8F:5A:A5:E4:71:98:D4:9E:50:28:C0:EA:FD:06:6D:FD:8A
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       01962E98E22C4234466734CE17E2361A599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          0966
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: 7CKfogXRSb/xmQtLHJ2JuqISCM2djVQbo+SX1pfK/SM=)
                          3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
                          4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
                          5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:2c:42:34:46:67:34:ce:17:e2:36:1a:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=69f4448f5aa5e47198d49e5028c0eafd066dfd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:d9:3d:98:44:3f:32:90:83:33:90:1a:9a:
                    e8:e0:45:7a:1b:6b:50:81:a6:95:e2:cd:01:fe:01:
                    f3:d8:f7:24:3d:d0:71:6f:be:a7:60:b2:63:49:1b:
                    83:34:34:a0:0d:e9:8d:98:d6:01:ad:4d:23:d5:55:
                    8e:0d:fd:b4:a1:bb:95:1e:3a:32:c2:86:b1:ea:e0:
                    f0:c0:a0:31:e7:78:b3:fd:52:b4:b8:0f:4c:e6:5f:
                    66:4e:9c:f4:72:f9:68:43:d0:1c:08:5b:d6:11:08:
                    ed:bc:44:81:67:1a:e3:d5:ca:cd:1d:b2:54:50:f2:
                    df:1b:f7:16:52:e9:38:45:3f:7f:08:51:fc:fa:d8:
                    9e:bf:0d:aa:a5:d4:44:07:87:57:89:ec:88:c7:09:
                    d1:22:e0:1b:d1:22:c8:90:00:2d:77:35:e1:e3:97:
                    26:29:e9:7e:d0:56:a8:33:10:89:fe:b4:af:91:69:
                    14:2c:2d:ff:71:5b:40:9e:47:41:a7:96:4f:70:f1:
                    c7:b6:2f:17:c1:ba:6a:34:1a:f3:f5:0a:67:da:6f:
                    44:01:26:f0:88:23:a2:7a:df:a6:c7:04:16:bc:e2:
                    ee:39:e8:b3:3e:3e:12:7b:0c:5e:bc:90:b6:da:74:
                    e0:da:2d:2c:9c:9d:91:1c:ff:67:15:e7:54:bc:11:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:44:8F:5A:A5:E4:71:98:D4:9E:50:28:C0:EA:FD:06:6D:FD:8A
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:a7:66:51:cf:25:14:1a:41:9d:2a:9a:5e:56:e7:63:fa:
         45:90:ae:2f:b0:28:42:ac:08:db:49:52:d0:47:54:b0:0c:e8:
         fd:50:a9:3a:5b:f3:fd:39:5f:28:47:d4:08:11:13:b8:86:81:
         3d:ad:7d:df:d8:fc:0c:c6:8d:50:15:03:dc:8d:5c:46:8b:5f:
         a6:bc:04:95:61:33:78:8b:07:a6:eb:47:79:58:74:81:35:6f:
         3d:e2:2b:dd:c5:1a:80:55:8d:a2:ef:4a:65:43:87:e8:d7:bd:
         72:b2:77:78:96:09:bc:fb:1f:3c:10:4f:d6:35:48:55:92:1a:
         a4:cb:e2:7e:03:02:3f:7d:1b:80:03:f0:93:26:36:38:c1:3f:
         97:ab:1b:d9:cb:1f:4c:93:b2:4d:dd:c0:70:89:1a:da:29:39:
         bb:09:71:9a:97:4b:54:60:4d:10:80:e8:71:47:16:b8:6f:48:
         b4:56:54:48:2c:21:f2:79:bd:ec:6f:86:f6:65:1a:81:f2:18:
         96:cf:b9:a4:f8:94:99:b6:bb:0e:26:d4:7d:08:0c:8d:8e:89:
         19:49:ab:bf:4a:03:68:f8:d9:48:89:41:a6:07:91:16:20:19:
         ba:e7:50:e0:63:55:8c:15:be:ac:e2:16:d2:ef:70:6c:5e:23:
         fc:1e:0e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOIsQjRGZzTOF+I2GlmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1
YjcyZTEwHhcNMjUwNDEzMTAwMTMzWhcNMjUwNDE0MTAwMTMzWjAzMTEwLwYDVQQD
Eyg2OWY0NDQ4ZjVhYTVlNDcxOThkNDllNTAyOGMwZWFmZDA2NmRmZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmfZPZhEPzKQgzOQGpro4EV6G2tQ
gaaV4s0B/gHz2PckPdBxb76nYLJjSRuDNDSgDemNmNYBrU0j1VWODf20obuVHjoy
woax6uDwwKAx53iz/VK0uA9M5l9mTpz0cvloQ9AcCFvWEQjtvESBZxrj1crNHbJU
UPLfG/cWUuk4RT9/CFH8+tievw2qpdREB4dXieyIxwnRIuAb0SLIkAAtdzXh45cm
Kel+0FaoMxCJ/rSvkWkULC3/cVtAnkdBp5ZPcPHHti8XwbpqNBrz9Qpn2m9EASbw
iCOiet+mxwQWvOLuOeizPj4SewxevJC22nTg2i0snJ2RHP9nFedUvBFrqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn0RI9apeRxmNSeUCjA6v0Gbf2KMB8GA1UdIwQY
MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt
NTU3YTdkMTFlMmFlLzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl
LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2anZlHP
JRQaQZ0qml5W52P6RZCuL7AoQqwI20lS0EdUsAzo/VCpOlvz/TlfKEfUCBETuIaB
Pa1939j8DMaNUBUD3I1cRotfprwElWEzeIsHputHeVh0gTVvPeIr3cUagFWNou9K
ZUOH6Ne9crJ3eJYJvPsfPBBP1jVIVZIapMvifgMCP30bgAPwkyY2OME/l6sb2csf
TJOyTd3AcIka2ik5uwlxmpdLVGBNEIDocUcWuG9ItFZUSCwh8nm97G+G9mUagfIY
ls+5pPiUmba7DibUfQgMjY6JGUmrv0oDaPjZSIlBpgeRFiAZuudQ4GNVjBW+rOIW
0u9wbF4j/B4OTg==
-----END CERTIFICATE-----