Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File:                     pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier:          +81aMb1P/yE6XwjfFB8eJqUdLPuVd8hEiuEgOOI93oQ=
Subject key identifier:   68:9E:5C:88:97:F5:C9:0A:C2:D9:4F:53:1E:DF:A3:33:7F:B9:DA:D8
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer:       /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial:       01962E98B96035B020F91084817CF1C9D5C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
                          2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
                          3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
                          4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: HhBlrFO/nLIb29OUnWiyDPw6HzSWzhHhn0kAtvelT1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b9:60:35:b0:20:f9:10:84:81:7c:f1:c9:d5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=689e5c8897f5c90ac2d94f531edfa3337fb9dad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:31:61:c6:74:b9:c7:f6:86:db:ec:3b:8f:
                    a9:1b:70:62:d2:58:88:86:d2:eb:d3:7d:18:ab:3e:
                    28:80:c5:f4:e0:a8:a7:d8:31:cd:d8:4f:dc:12:0b:
                    3b:1f:63:6f:51:50:89:ae:a0:2d:de:57:8c:12:5d:
                    ea:34:a9:49:7a:50:69:ef:d8:df:1f:63:1f:3a:76:
                    5a:32:b0:79:d6:8d:78:74:9b:79:06:8b:06:a2:cf:
                    c1:9a:16:4e:36:8d:8c:ff:a5:bc:a2:9e:3a:bf:51:
                    c6:93:7f:3c:4d:4f:20:6e:66:89:d3:53:f3:57:19:
                    6f:47:a2:b4:d3:08:4f:75:58:e6:4f:9f:f7:34:4d:
                    89:f7:a7:20:15:5b:6c:2a:96:9e:cb:4f:b4:23:49:
                    78:a2:63:1f:83:18:0b:ef:91:25:b9:51:cf:73:83:
                    10:4a:23:31:72:3e:52:5f:44:f1:b0:23:44:45:23:
                    58:59:30:66:2f:4b:80:9a:fc:2e:f6:5e:52:c0:13:
                    f6:35:3d:1f:0d:96:c3:80:0c:77:e8:ca:65:90:21:
                    88:6d:d3:39:a6:66:11:06:83:0b:8a:1c:01:45:50:
                    96:2b:27:a3:a9:17:cb:a5:69:06:10:3f:dc:d9:44:
                    77:1a:82:ca:7c:c9:3a:64:ac:41:3b:b9:a9:2d:73:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:5C:88:97:F5:C9:0A:C2:D9:4F:53:1E:DF:A3:33:7F:B9:DA:D8
            X509v3 Authority Key Identifier:
                keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:79:68:da:44:b0:61:52:82:4d:10:47:bc:d8:7b:5a:c0:7c:
         4b:66:6a:95:d2:37:93:9c:fc:d7:b3:62:c3:29:0e:c2:36:d0:
         fb:7d:38:2c:d3:1f:1d:1f:b3:21:94:c5:9e:78:e8:b7:d2:0f:
         51:a8:5d:f4:f1:e3:2d:1b:9d:80:b0:de:32:2f:43:a4:bf:12:
         a4:d7:db:8e:63:48:7b:15:14:ef:1f:58:00:2c:d2:fa:3f:18:
         6b:a2:4d:92:be:28:61:27:6f:5f:4a:7f:8b:cf:f5:55:82:2f:
         64:3e:db:57:71:02:07:8b:82:b2:c5:71:a6:cd:24:fa:7b:f0:
         3f:2e:1e:d4:b1:c1:35:c4:9c:a9:28:64:7f:61:6a:7d:af:fe:
         c8:95:37:1e:a5:ea:3e:b0:07:f2:f9:1d:67:22:8f:b8:5c:05:
         c8:06:18:02:91:21:0d:88:ba:c5:7e:ab:96:36:ec:1f:ec:c2:
         18:f9:ca:88:98:3c:24:d5:29:5f:b4:39:15:7f:88:66:52:45:
         a7:75:ec:1f:53:61:d7:dd:76:7e:04:27:89:28:f6:a9:58:ad:
         5c:e3:be:94:cb:fd:40:3f:c2:7b:da:b3:42:ca:3c:16:2f:d9:
         1f:f7:29:41:16:17:40:79:92:8f:da:3b:59:d8:42:b6:29:ef:
         6d:24:88:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLlgNbAg+RCEgXzxydXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3
ODU2ZWYwHhcNMjUwNDEzMTAwMTIyWhcNMjUwNDE0MTAwMTIyWjAzMTEwLwYDVQQD
Eyg2ODllNWM4ODk3ZjVjOTBhYzJkOTRmNTMxZWRmYTMzMzdmYjlkYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCAxYcZ0ucf2htvsO4+pG3Bi0liI
htLr030Yqz4ogMX04Kin2DHN2E/cEgs7H2NvUVCJrqAt3leMEl3qNKlJelBp79jf
H2MfOnZaMrB51o14dJt5BosGos/BmhZONo2M/6W8op46v1HGk388TU8gbmaJ01Pz
VxlvR6K00whPdVjmT5/3NE2J96cgFVtsKpaey0+0I0l4omMfgxgL75EluVHPc4MQ
SiMxcj5SX0TxsCNERSNYWTBmL0uAmvwu9l5SwBP2NT0fDZbDgAx36MplkCGIbdM5
pmYRBoMLihwBRVCWKyejqRfLpWkGED/c2UR3GoLKfMk6ZKxBO7mpLXNfqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGieXIiX9ckKwtlPUx7fozN/udrYMB8GA1UdIwQY
MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt
YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl
LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXlo2kSw
YVKCTRBHvNh7WsB8S2ZqldI3k5z817NiwykOwjbQ+304LNMfHR+zIZTFnnjot9IP
Uahd9PHjLRudgLDeMi9DpL8SpNfbjmNIexUU7x9YACzS+j8Ya6JNkr4oYSdvX0p/
i8/1VYIvZD7bV3ECB4uCssVxps0k+nvwPy4e1LHBNcScqShkf2Fqfa/+yJU3HqXq
PrAH8vkdZyKPuFwFyAYYApEhDYi6xX6rljbsH+zCGPnKiJg8JNUpX7Q5FX+IZlJF
p3XsH1Nh1912fgQniSj2qVitXOO+lMv9QD/Ce9qzQso8Fi/ZH/cpQRYXQHmSj9o7
WdhCtinvbSSIyQ==
-----END CERTIFICATE-----