Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
File:                     d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft (raw, json)
Hash identifier:          0fxbQhJQk0LiMD+mJOJbyl+8JFKg3uah9ZTRgFBUXfc=
Subject key identifier:   31:94:B7:02:A7:A1:CB:9E:E0:55:84:06:53:D4:F5:78:D1:F1:2A:A1
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       01962FAB5A4284E2EFCD0ED360EB98F80949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
Manifest number:          0E54
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 1-CTcDUEdN5WfEm_rs3o0JHhk5XU.roa (hash: lk5WrQW7f4eLUx+kxUxuWVLfFLTkEmxU4/4R6+50tjM=)
                          2: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (hash: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=)
                          3: d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl (hash: k8qKgTSNxlj91KpqQ1Tq5KQJZs8UwvXlfOIOP9G+xQs=)
                          4: g7sPwfEyrg2GU6nX9GnEZI5ry6U.roa (hash: gvrZns7JDU/MxjbK6KJTEHNI6mOo43rYah4+1PHu7cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:42:84:e2:ef:cd:0e:d3:60:eb:98:f8:09:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=3194b702a7a1cb9ee055840653d4f578d1f12aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:84:3f:c5:4e:ed:7e:52:29:3e:e3:b8:3a:a6:
                    15:ba:1d:8b:31:b5:dd:0a:8e:d9:bf:72:3e:b6:fd:
                    aa:58:1c:0c:00:15:4a:d5:77:d7:e6:88:6e:7e:0b:
                    df:88:fd:25:37:b9:09:ff:25:bc:66:25:6d:db:50:
                    4d:a5:40:02:b9:50:2f:e9:b3:86:94:70:e9:fe:7d:
                    9c:d6:29:e6:0f:2f:a8:34:48:05:f5:04:ed:4e:c3:
                    c0:6e:86:4e:3d:e9:55:1f:d1:b8:b3:95:91:9e:91:
                    8f:c4:64:94:a5:64:9d:19:cf:64:45:8d:ca:9b:02:
                    18:3a:41:b6:5f:80:6e:4b:9d:a4:58:bb:f4:ff:97:
                    89:59:ab:3a:06:e8:39:2c:37:a8:b7:f7:8c:a9:89:
                    e5:1f:3f:8c:fa:08:74:de:9b:b9:fd:04:ac:af:d8:
                    75:df:22:01:aa:aa:88:53:a3:b8:3d:54:74:15:1b:
                    72:c2:07:1c:14:7a:8a:5f:5f:f7:ea:ff:87:57:dc:
                    23:b7:6b:ff:63:cb:a1:4e:11:bd:d0:af:17:7c:55:
                    ab:30:7b:9c:03:79:88:f0:20:0c:83:31:a2:ac:41:
                    e9:c0:f0:1b:da:cd:14:34:52:4a:e0:ca:fc:95:79:
                    87:20:a4:2b:a5:fe:2c:d2:77:a6:cc:7b:d2:93:c7:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:94:B7:02:A7:A1:CB:9E:E0:55:84:06:53:D4:F5:78:D1:F1:2A:A1
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:e1:b1:c8:6d:d2:d1:31:55:b7:8a:17:14:e3:43:7f:03:
         bd:65:28:0d:dc:e2:83:74:ac:68:14:73:83:ad:e7:72:fd:ab:
         f6:e5:09:ac:b4:37:29:60:72:2f:f4:ea:16:ed:a2:07:14:37:
         75:06:3a:6d:bc:af:4a:32:d6:5b:4c:b6:24:71:7b:0c:f3:16:
         ba:3c:ce:2d:22:e4:58:56:10:2c:cd:13:02:36:d9:9d:e7:ea:
         9c:0f:88:6c:29:47:18:b2:fc:20:7d:6f:bd:19:66:93:fc:35:
         87:e4:54:59:de:e7:aa:66:97:3b:62:e5:95:18:99:20:c7:1a:
         75:c4:0c:4e:bb:db:05:d3:08:88:09:48:59:af:e5:df:7d:27:
         55:62:c3:0f:5c:ed:d5:c6:45:0c:f9:bf:00:9b:4f:ce:d3:60:
         7f:a6:41:b3:aa:ce:07:e2:12:4d:70:50:7a:80:7e:5d:e0:96:
         ec:6a:10:45:fc:7a:e2:df:a4:8b:b0:6a:3c:cc:b5:35:4c:29:
         79:5a:e5:0c:42:f2:70:bd:cc:98:a1:28:62:3e:71:67:9b:82:
         0c:7c:46:64:d3:3c:11:c4:fa:3f:10:b8:b8:bd:d1:93:c5:9d:
         80:32:50:6f:29:18:db:13:39:ed:cb:86:75:bc:56:7e:b5:88:
         b5:f3:fe:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1pChOLvzQ7TYOuY+AlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5
YjhmNjEwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
EygzMTk0YjcwMmE3YTFjYjllZTA1NTg0MDY1M2Q0ZjU3OGQxZjEyYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94Q/xU7tflIpPuO4OqYVuh2LMbXd
Co7Zv3I+tv2qWBwMABVK1XfX5ohufgvfiP0lN7kJ/yW8ZiVt21BNpUACuVAv6bOG
lHDp/n2c1inmDy+oNEgF9QTtTsPAboZOPelVH9G4s5WRnpGPxGSUpWSdGc9kRY3K
mwIYOkG2X4BuS52kWLv0/5eJWas6Bug5LDeot/eMqYnlHz+M+gh03pu5/QSsr9h1
3yIBqqqIU6O4PVR0FRtywgccFHqKX1/36v+HV9wjt2v/Y8uhThG90K8XfFWrMHuc
A3mI8CAMgzGirEHpwPAb2s0UNFJK4Mr8lXmHIKQrpf4s0nemzHvSk8fsuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGUtwKnocue4FWEBlPU9XjR8SqhMB8GA1UdIwQY
MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt
OWIyNTdmNGZlYThkLzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk
LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcvhscht
0tExVbeKFxTjQ38DvWUoDdzig3SsaBRzg63ncv2r9uUJrLQ3KWByL/TqFu2iBxQ3
dQY6bbyvSjLWW0y2JHF7DPMWujzOLSLkWFYQLM0TAjbZnefqnA+IbClHGLL8IH1v
vRlmk/w1h+RUWd7nqmaXO2LllRiZIMcadcQMTrvbBdMIiAlIWa/l330nVWLDD1zt
1cZFDPm/AJtPztNgf6ZBs6rOB+ISTXBQeoB+XeCW7GoQRfx64t+ki7BqPMy1NUwp
eVrlDELycL3MmKEoYj5xZ5uCDHxGZNM8EcT6PxC4uL3Rk8WdgDJQbykY2xM57cuG
dbxWfrWItfP+vg==
-----END CERTIFICATE-----