Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          t25BKQX2YZPitSUdIzKBZXuPXkHNyx5SX0Yco2L4/ng=
Subject key identifier:   1B:01:02:A0:1A:BE:62:48:F4:FF:EC:43:A4:1D:62:C6:A7:8A:DD:13
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       01962E61B4AB6AFCF5F347B32193B68D3C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: hRKBxpQ6lPYa1y+jAaym5YTBDIMvpAHdcIuZjqlyDdE=)
                          2: z7Y6upJ_TkHMEGYoplQxNU1SqZQ.roa (hash: g8ersIEKF+DbLZ7cbrjxi/sIsUM2GOmUMJe3QIftaDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:ab:6a:fc:f5:f3:47:b3:21:93:b6:8d:3c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=1b0102a01abe6248f4ffec43a41d62c6a78add13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:72:5f:7a:c7:73:50:79:f7:23:60:4c:9e:
                    75:a6:42:2d:a5:11:21:73:96:9e:60:ef:bd:a6:34:
                    99:f4:6f:a5:34:e1:51:99:5f:f5:c0:9a:26:89:62:
                    63:97:77:c3:50:61:d5:4a:69:be:34:d2:bd:47:58:
                    b0:cd:fe:ad:11:43:ff:8a:c4:98:70:93:a8:f3:7b:
                    53:52:19:3b:af:45:68:e4:f7:3a:fd:1e:e4:47:6c:
                    b8:eb:dc:c5:49:9b:21:1c:3a:38:a8:4c:68:c1:f5:
                    e1:36:d1:6d:d6:f7:89:9b:99:70:9f:df:13:92:b9:
                    85:e2:83:7b:4d:14:85:ae:26:08:74:d0:48:61:1a:
                    1d:84:de:31:83:af:aa:52:48:c4:3d:63:3f:91:db:
                    69:8e:03:89:67:1a:44:f6:84:21:14:a0:9c:e8:52:
                    ba:48:e5:d8:71:6f:0d:63:44:70:e5:30:bc:d2:20:
                    84:a0:e9:80:b5:81:89:84:0f:3d:18:6c:ee:bc:f5:
                    52:aa:46:e6:aa:04:bf:ae:30:40:50:8c:2d:a9:18:
                    14:18:59:5a:ac:57:c4:ab:8a:71:8c:04:e8:1d:50:
                    85:18:ed:86:6b:7b:b3:e8:ab:47:00:8b:56:71:1d:
                    5c:65:c2:e5:58:d3:ba:61:f9:f3:90:3d:80:72:90:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:02:A0:1A:BE:62:48:F4:FF:EC:43:A4:1D:62:C6:A7:8A:DD:13
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:46:c2:cc:02:b1:42:57:ae:9c:de:df:49:d7:6f:81:d2:8a:
         09:b5:a7:1a:b6:79:1e:8e:df:f9:61:69:ee:fc:9e:c8:a3:44:
         b5:d3:e5:8b:91:a4:ce:10:b0:43:c7:16:6e:ba:ac:31:b6:24:
         61:5e:8b:75:7c:6c:dd:dd:a4:10:55:5e:a9:1b:67:57:e3:2f:
         e1:49:90:6d:d8:f0:88:51:d0:85:06:17:3d:49:37:06:55:10:
         8b:cc:69:c0:16:df:0d:98:39:02:f0:5f:06:99:97:1d:73:12:
         cc:5a:f5:5d:b9:70:c6:75:aa:fa:1f:3b:4f:94:ce:85:ab:db:
         a5:02:f0:98:06:69:9d:68:f5:bf:5d:c5:68:30:7c:fa:67:28:
         1d:a0:05:68:9a:53:e2:f5:73:d5:26:9d:77:93:36:92:44:8a:
         b8:8b:60:2e:ec:bc:ee:f4:e5:32:e6:71:a9:cd:fe:b3:ea:78:
         eb:71:fd:1e:e3:71:68:f8:64:4a:40:38:99:31:92:9e:a8:06:
         20:b4:13:c0:20:f5:fa:dd:05:82:0f:68:80:56:ad:eb:05:66:
         8b:8f:b5:99:01:69:3b:e7:2b:0d:d5:cb:3f:55:bc:95:cf:b3:
         21:ec:73:bf:6d:5d:a1:ad:b6:90:52:cc:da:38:ab:9a:69:43:
         0f:e3:4a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbSravz180ezIZO2jTyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTA0ZDUwOWVkMWU5Y2RiMzU0Yjc0NTk5OWRiOTQxN2E4
Y2I4NzMwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
EygxYjAxMDJhMDFhYmU2MjQ4ZjRmZmVjNDNhNDFkNjJjNmE3OGFkZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9xyX3rHc1B59yNgTJ51pkItpREh
c5aeYO+9pjSZ9G+lNOFRmV/1wJomiWJjl3fDUGHVSmm+NNK9R1iwzf6tEUP/isSY
cJOo83tTUhk7r0Vo5Pc6/R7kR2y469zFSZshHDo4qExowfXhNtFt1veJm5lwn98T
krmF4oN7TRSFriYIdNBIYRodhN4xg6+qUkjEPWM/kdtpjgOJZxpE9oQhFKCc6FK6
SOXYcW8NY0Rw5TC80iCEoOmAtYGJhA89GGzuvPVSqkbmqgS/rjBAUIwtqRgUGFla
rFfEq4pxjAToHVCFGO2Ga3uz6KtHAItWcR1cZcLlWNO6YfnzkD2AcpD/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsBAqAavmJI9P/sQ6QdYsanit0TMB8GA1UdIwQY
MBaAFNbgTVCe0enNs1S3RZmduUF6jLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVCTlVKN1I2YzJ6VkxkRm1aMjVRWHFNdUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZWYxYTgtNjc5MC00NGRkLTlkMjQt
ODhlMmFkYzIwMzBiLzEvMXVCTlVKN1I2YzJ6VkxkRm1aMjVRWHFNdUhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZWYxYTgtNjc5MC00NGRkLTlkMjQtODhlMmFkYzIwMzBi
LzEvMXVCTlVKN1I2YzJ6VkxkRm1aMjVRWHFNdUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUbCzAKx
QleunN7fSddvgdKKCbWnGrZ5Ho7f+WFp7vyeyKNEtdPli5GkzhCwQ8cWbrqsMbYk
YV6LdXxs3d2kEFVeqRtnV+Mv4UmQbdjwiFHQhQYXPUk3BlUQi8xpwBbfDZg5AvBf
BpmXHXMSzFr1XblwxnWq+h87T5TOhavbpQLwmAZpnWj1v13FaDB8+mcoHaAFaJpT
4vVz1Sadd5M2kkSKuItgLuy87vTlMuZxqc3+s+p463H9HuNxaPhkSkA4mTGSnqgG
ILQTwCD1+t0Fgg9ogFat6wVmi4+1mQFpO+crDdXLP1W8lc+zIexzv21doa22kFLM
2jirmmlDD+NKHQ==
-----END CERTIFICATE-----