Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File:                     xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier:          48ftaqltYdwbI6TfjHF4rMnChux8Xh73tbAQSRGqmPo=
Subject key identifier:   BA:C1:C5:90:E7:34:F4:DF:C7:15:A9:37:DB:EE:F6:5C:8E:FA:E2:9A
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer:       /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial:       01962F74B0DC3DCCA0B62F3BB78643EDE85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
                          2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
                          3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: KZIFfMnsBVv6Tm+684HNp5schkAAum7OCituKyMQFOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:dc:3d:cc:a0:b6:2f:3b:b7:86:43:ed:e8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=bac1c590e734f4dfc715a937dbeef65c8efae29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:cd:67:d8:39:ae:be:c9:ff:3e:e6:3a:9d:
                    c9:0a:67:bc:26:28:5b:5d:68:40:8a:ae:02:31:7f:
                    ec:65:c4:50:46:02:22:6a:36:3a:57:2a:d4:e4:d1:
                    ef:f2:c4:04:14:2d:1c:a9:51:0d:ee:17:1a:ad:f9:
                    b2:72:78:c2:24:10:c0:80:02:62:8f:85:9c:85:74:
                    ed:d0:c4:2b:ea:b6:74:a6:e9:14:77:31:a0:0e:45:
                    d3:c1:bf:3a:92:74:2f:28:ef:ad:ba:23:87:b2:e0:
                    a9:7f:28:de:21:fe:e8:95:43:b9:b6:26:c3:74:57:
                    f9:9e:a9:8e:e9:62:f0:4a:bb:1d:48:a4:f7:af:8f:
                    0b:99:4f:9c:d3:e9:8d:8b:73:ae:7e:c2:c5:f3:ec:
                    a0:75:f5:c1:36:8e:e4:d8:f7:d9:6b:1b:8e:a8:4a:
                    94:e7:27:6a:29:d0:92:b4:08:a2:c9:19:55:49:2d:
                    ba:4b:2c:dd:75:53:ec:4a:6b:2f:df:a0:a4:1d:ee:
                    8b:37:0a:39:00:8c:ab:b4:c9:13:f7:bc:78:de:a9:
                    ef:a1:44:e9:9d:37:ea:3e:60:3b:b7:06:d7:f4:67:
                    55:9d:f8:b9:ef:0a:04:61:0e:7c:9b:e8:44:fd:bb:
                    74:c9:8a:b1:47:ab:17:2f:49:eb:aa:22:8c:f7:3f:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:C5:90:E7:34:F4:DF:C7:15:A9:37:DB:EE:F6:5C:8E:FA:E2:9A
            X509v3 Authority Key Identifier:
                keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:ce:25:26:51:a7:1d:10:c1:1a:a3:0e:0c:9a:eb:98:8f:
         d6:52:23:6c:70:00:6b:da:b4:b4:79:d3:02:00:57:4f:77:09:
         e7:70:5b:35:0d:e7:a7:b0:8e:8e:b3:01:30:a3:04:40:59:58:
         6d:ce:71:ca:bc:77:6d:40:21:ae:bd:f9:fb:8a:7f:d8:b0:48:
         cb:85:ef:b8:47:00:49:f9:60:02:b4:19:ff:fe:04:bf:37:59:
         5b:4a:0f:11:7c:df:25:03:4a:c7:36:26:ae:fb:8c:de:d1:10:
         e6:e5:9b:35:7c:0c:ee:02:59:12:00:e3:7b:ee:de:18:01:91:
         44:78:bb:91:61:6f:94:81:e5:c4:10:b1:0f:bc:61:22:d6:c9:
         e8:9d:59:19:5f:54:54:aa:09:df:b6:3b:25:24:a9:c0:a9:e1:
         ec:b5:91:fb:2f:e7:04:12:7e:0b:91:3c:dc:1b:cf:15:51:6f:
         1d:8c:1f:51:b6:8c:f9:7e:0d:c8:26:04:9e:ce:85:4b:a4:fb:
         22:7a:85:c7:55:ec:92:8c:ba:12:ed:9a:72:8d:62:8f:a7:b7:
         a5:c1:0a:a2:03:96:5c:2d:88:bc:d6:7d:8d:e6:94:72:62:94:
         e9:36:f4:1c:d7:0b:b0:e5:3a:8c:22:dc:ff:b1:0e:e4:47:fa:
         4d:8c:7b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLDcPcygti87t4ZD7ehdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4
MTNlNWMwHhcNMjUwNDEzMTQwMTM4WhcNMjUwNDE0MTQwMTM4WjAzMTEwLwYDVQQD
EyhiYWMxYzU5MGU3MzRmNGRmYzcxNWE5MzdkYmVlZjY1YzhlZmFlMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ7NZ9g5rr7J/z7mOp3JCme8Jihb
XWhAiq4CMX/sZcRQRgIiajY6VyrU5NHv8sQEFC0cqVEN7hcarfmycnjCJBDAgAJi
j4WchXTt0MQr6rZ0pukUdzGgDkXTwb86knQvKO+tuiOHsuCpfyjeIf7olUO5tibD
dFf5nqmO6WLwSrsdSKT3r48LmU+c0+mNi3OufsLF8+ygdfXBNo7k2PfZaxuOqEqU
5ydqKdCStAiiyRlVSS26SyzddVPsSmsv36CkHe6LNwo5AIyrtMkT97x43qnvoUTp
nTfqPmA7twbX9GdVnfi57woEYQ58m+hE/bt0yYqxR6sXL0nrqiKM9z+qXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrBxZDnNPTfxxWpN9vu9lyO+uKaMB8GA1UdIwQY
MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt
NzQ2Nzc3ZTIxYzViLzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi
LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsLOJSZR
px0QwRqjDgya65iP1lIjbHAAa9q0tHnTAgBXT3cJ53BbNQ3np7COjrMBMKMEQFlY
bc5xyrx3bUAhrr35+4p/2LBIy4XvuEcASflgArQZ//4EvzdZW0oPEXzfJQNKxzYm
rvuM3tEQ5uWbNXwM7gJZEgDje+7eGAGRRHi7kWFvlIHlxBCxD7xhItbJ6J1ZGV9U
VKoJ37Y7JSSpwKnh7LWR+y/nBBJ+C5E83BvPFVFvHYwfUbaM+X4NyCYEns6FS6T7
InqFx1Xskoy6Eu2aco1ij6e3pcEKogOWXC2IvNZ9jeaUcmKU6Tb0HNcLsOU6jCLc
/7EO5Ef6TYx7sw==
-----END CERTIFICATE-----