Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File:                     h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier:          uaGhWknaFo/ARv+l+IAz/KZ9l9Kv50XXHrm834kRn1Y=
Subject key identifier:   F6:F2:C2:6C:3B:E1:80:E8:F3:90:D6:C3:B7:A7:A2:FE:B6:80:32:89
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer:       /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial:       01962F06A45EF71C56D8579254FD1E772A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number:          0401
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
                          2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
                          3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: dVnXZip/NjMYVlfw9Kfs0dsAzLykTiPJ0WreCAAcAYI=)
                          4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a4:5e:f7:1c:56:d8:57:92:54:fd:1e:77:2a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=f6f2c26c3be180e8f390d6c3b7a7a2feb6803289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:97:cc:d2:50:0e:8c:1d:d5:2c:58:94:26:
                    2d:8d:f8:20:49:d0:29:b0:e9:70:a2:2a:59:54:13:
                    f4:03:d4:06:a4:3d:11:55:0a:5f:38:8b:75:d8:07:
                    2a:e2:e5:ee:55:e3:5d:e3:e7:af:81:df:ed:5b:8a:
                    98:7c:9a:2d:86:f8:f6:f0:06:c0:ac:92:e5:f8:7d:
                    a1:a6:20:d6:7d:4f:97:33:a8:e6:a2:8d:59:ed:c4:
                    ce:f6:ac:d7:d1:ee:9b:f8:40:2c:47:72:76:d8:ae:
                    cd:42:2a:df:11:c6:ff:a4:23:c8:41:63:e4:d5:64:
                    ea:3e:13:88:44:02:88:07:29:34:95:df:22:57:08:
                    ae:9f:1d:bf:42:04:d3:95:6b:de:01:7d:e4:6d:8f:
                    dc:b5:ed:01:6c:7d:bb:b8:f7:b8:2d:e1:8d:0b:f4:
                    01:be:c0:6e:a4:27:41:0c:29:38:a5:e9:2f:2f:ac:
                    4e:47:8b:fc:a2:71:6b:86:1d:3b:50:1e:65:8c:0a:
                    6d:1b:df:70:7f:be:66:35:7f:d8:0c:31:0d:02:6b:
                    9e:16:49:56:56:8d:38:34:f4:22:cb:ee:a3:fd:04:
                    c4:51:24:bc:51:20:ab:9e:c9:4c:05:4f:0f:3a:65:
                    41:d7:96:92:a6:1f:76:7e:e5:90:2d:6d:7d:19:9d:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:C2:6C:3B:E1:80:E8:F3:90:D6:C3:B7:A7:A2:FE:B6:80:32:89
            X509v3 Authority Key Identifier:
                keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:30:f3:93:30:65:37:7c:c1:87:39:83:70:3c:31:a0:a3:
         1d:88:75:b1:fd:b5:52:08:70:67:6b:88:7d:2a:56:c8:f1:97:
         e9:54:ea:d3:ec:97:f4:47:86:57:63:2d:89:e9:ed:83:cd:22:
         b7:8d:03:5d:b1:a8:c2:63:21:6a:d4:3b:db:f3:a6:75:3d:d3:
         2e:a7:45:1c:ab:72:4f:43:90:a8:54:13:24:c4:8a:9e:49:e8:
         1a:31:2a:d6:c5:bc:bb:96:33:ec:45:dc:ca:1e:c2:94:5c:92:
         96:2b:6e:1c:b0:18:ba:22:2f:9a:ce:35:01:9c:a6:d6:fe:d9:
         d0:fa:b9:c2:5e:d7:6c:54:c1:9c:06:90:68:6c:a0:d8:ce:a5:
         ca:79:c5:3e:19:3a:a0:bd:60:77:ca:ec:dd:09:69:46:4d:99:
         7d:c6:b6:25:0c:d8:1a:e5:d1:0c:30:c6:ac:e1:b7:f3:2b:06:
         83:b1:69:bd:5b:5c:23:80:32:d8:de:6b:f0:31:73:33:5e:f2:
         12:bb:d1:7b:cf:93:b8:b0:1f:28:8a:4c:a0:94:0c:8d:42:7c:
         c6:7c:83:ce:57:eb:90:d9:f6:ca:46:8c:59:b3:c6:95:56:57:
         08:2d:41:ab:5d:47:2e:54:df:1b:78:72:1f:04:7b:86:93:e0:
         e5:f2:68:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqRe9xxW2FeSVP0edyoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1
MDRjYjcwHhcNMjUwNDEzMTIwMTI2WhcNMjUwNDE0MTIwMTI2WjAzMTEwLwYDVQQD
EyhmNmYyYzI2YzNiZTE4MGU4ZjM5MGQ2YzNiN2E3YTJmZWI2ODAzMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8uXzNJQDowd1SxYlCYtjfggSdAp
sOlwoipZVBP0A9QGpD0RVQpfOIt12Acq4uXuVeNd4+evgd/tW4qYfJothvj28AbA
rJLl+H2hpiDWfU+XM6jmoo1Z7cTO9qzX0e6b+EAsR3J22K7NQirfEcb/pCPIQWPk
1WTqPhOIRAKIByk0ld8iVwiunx2/QgTTlWveAX3kbY/cte0BbH27uPe4LeGNC/QB
vsBupCdBDCk4pekvL6xOR4v8onFrhh07UB5ljAptG99wf75mNX/YDDENAmueFklW
Vo04NPQiy+6j/QTEUSS8USCrnslMBU8POmVB15aSph92fuWQLW19GZ1qbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbywmw74YDo85DWw7enov62gDKJMB8GA1UdIwQY
MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt
ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm
LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLcw85Mw
ZTd8wYc5g3A8MaCjHYh1sf21UghwZ2uIfSpWyPGX6VTq0+yX9EeGV2Mtientg80i
t40DXbGowmMhatQ72/OmdT3TLqdFHKtyT0OQqFQTJMSKnknoGjEq1sW8u5Yz7EXc
yh7ClFySlituHLAYuiIvms41AZym1v7Z0Pq5wl7XbFTBnAaQaGyg2M6lynnFPhk6
oL1gd8rs3QlpRk2Zfca2JQzYGuXRDDDGrOG38ysGg7FpvVtcI4Ay2N5r8DFzM17y
ErvRe8+TuLAfKIpMoJQMjUJ8xnyDzlfrkNn2ykaMWbPGlVZXCC1Bq11HLlTfG3hy
HwR7hpPg5fJosg==
-----END CERTIFICATE-----