Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          BnaTRrtUHBdlsj7PgiigTD3tVKT1UAibq9pPYhJvpC8=
Subject key identifier:   9E:63:A4:EE:41:E1:66:2C:5B:D5:79:EE:04:6F:09:B9:83:D5:BB:4E
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       01962ECF74CDF7523E9FAE56D7DD86176BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 5SBRKvoUR77xMW-RFvy5_fTtMLs.roa (hash: cAg8Pd/EdFW/XOWvfVIMShqz0a9B/X838ZxVv7gFhww=)
                          2: Hu3G8484fKZTgdfl16c2pwBVLzw.roa (hash: 3SfpQQtf4mcFv0Cl8RORRLy8kXw31wWhyAgb5576Kg0=)
                          3: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: FpGrV/PBBlqgZiGsRPshFxcTlhoGIINlJGqjIVwmQWw=)
                          4: hnVCR69RVtD6DOQtKUfA66di3v8.roa (hash: tMJ65Uy32W65OI2kXkCrStjDFzn3a6wfoxc74YD8CGM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:cd:f7:52:3e:9f:ae:56:d7:dd:86:17:6b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=9e63a4ee41e1662c5bd579ee046f09b983d5bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:af:39:66:e3:71:63:4a:7a:ce:6f:1c:e6:
                    33:09:c3:95:5f:c9:91:05:9f:77:78:88:32:bc:41:
                    fd:42:ff:80:ac:39:4a:80:b7:f7:a3:7e:3d:ae:16:
                    c6:bc:87:84:d8:d0:ae:d0:59:62:b1:3c:9b:c0:d3:
                    25:61:bf:52:db:ee:5e:9d:10:01:ba:c4:bc:65:13:
                    7e:54:5e:91:4e:0c:90:4e:65:30:b6:b7:d4:dc:66:
                    95:7f:5d:32:4d:bc:6c:5d:e7:cd:93:6d:76:98:11:
                    f3:23:71:a9:12:55:e6:2c:4b:2e:69:70:71:ab:e9:
                    89:f6:87:13:c6:49:3e:a4:3a:19:d2:d3:64:48:5e:
                    eb:6e:1c:18:65:91:93:35:d9:35:75:1f:37:37:06:
                    07:49:47:8e:e1:d9:be:17:8f:73:86:dc:5b:5b:4a:
                    0a:e3:a0:51:f0:f5:77:53:b7:ac:06:b8:4b:23:1b:
                    89:42:1d:c8:f2:91:32:ac:e8:3c:a4:53:29:49:9d:
                    46:e4:e0:79:64:03:ef:8b:9f:45:bb:a1:13:3a:2d:
                    4a:4f:3a:fc:9c:a5:41:ac:6b:5c:d2:31:94:2c:43:
                    0a:35:4a:0a:ce:37:13:d5:2c:1f:9c:b3:28:01:5f:
                    d4:4e:fd:e9:9f:89:b4:42:e2:d8:5b:9c:27:62:7d:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:63:A4:EE:41:E1:66:2C:5B:D5:79:EE:04:6F:09:B9:83:D5:BB:4E
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:d9:cf:75:f6:a1:e7:56:cd:8f:6b:d4:9d:5a:56:3a:eb:
         6b:59:85:c5:2c:5f:26:f2:d5:4a:a9:aa:8e:5d:85:80:90:6e:
         e8:6b:2b:bb:63:2c:06:0e:bf:20:00:7a:e1:fc:30:50:d2:2f:
         fa:dd:8c:2a:b1:8a:2a:8f:99:f9:c8:35:27:0e:b6:c8:db:d4:
         18:8e:d2:f2:d2:71:8f:dc:a5:23:26:ff:f6:cf:91:35:27:fb:
         29:d6:22:08:7a:59:cf:32:43:63:87:d2:25:14:33:22:f7:5f:
         f0:83:5e:8b:d8:43:16:08:87:e7:06:c7:56:58:ba:8e:ba:e5:
         92:a3:d1:95:76:04:ba:5d:dc:61:d8:39:60:56:fd:b4:26:88:
         6c:e7:3c:19:4d:62:ea:30:83:b9:5f:b7:42:f3:10:f0:77:71:
         d2:e3:55:47:36:3d:85:52:2a:ae:89:a6:ad:50:91:96:29:34:
         80:1a:c0:3a:ab:9a:e6:20:6e:30:8c:0f:52:e3:15:c5:8c:2c:
         9a:7b:6f:a1:34:0b:60:0f:a2:20:00:ae:62:60:e8:0e:0d:33:
         94:59:95:b3:8e:0d:11:74:5b:d5:4d:82:31:f8:2e:f7:ca:6d:
         3e:dc:0a:8f:9c:3b:88:7c:f4:ad:8e:1f:df:b9:b6:2f:99:56:
         2a:a2:09:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3TN91I+n65W192GF2ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYzI1ZmYzMjkxOGYwYjQ5MzA2MjU5ZDQ4M2FmYjllMzgx
YTM5MTUwHhcNMjUwNDEzMTEwMTA5WhcNMjUwNDE0MTEwMTA5WjAzMTEwLwYDVQQD
Eyg5ZTYzYTRlZTQxZTE2NjJjNWJkNTc5ZWUwNDZmMDliOTgzZDViYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmievOWbjcWNKes5vHOYzCcOVX8mR
BZ93eIgyvEH9Qv+ArDlKgLf3o349rhbGvIeE2NCu0FlisTybwNMlYb9S2+5enRAB
usS8ZRN+VF6RTgyQTmUwtrfU3GaVf10yTbxsXefNk212mBHzI3GpElXmLEsuaXBx
q+mJ9ocTxkk+pDoZ0tNkSF7rbhwYZZGTNdk1dR83NwYHSUeO4dm+F49zhtxbW0oK
46BR8PV3U7esBrhLIxuJQh3I8pEyrOg8pFMpSZ1G5OB5ZAPvi59Fu6ETOi1KTzr8
nKVBrGtc0jGULEMKNUoKzjcT1SwfnLMoAV/UTv3pn4m0QuLYW5wnYn1nNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5jpO5B4WYsW9V57gRvCbmD1btOMB8GA1UdIwQY
MBaAFCzCX/MpGPC0kwYlnUg6+544GjkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMt
ZTI1NzUxYjNmZmQ1LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xMjc3ZWMtMTU2YS00NmM0LTlmMDMtZTI1NzUxYjNmZmQ1
LzEvTE1KZjh5a1k4TFNUQmlXZFNEcjduamdhT1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex3Zz3X2
oedWzY9r1J1aVjrra1mFxSxfJvLVSqmqjl2FgJBu6Gsru2MsBg6/IAB64fwwUNIv
+t2MKrGKKo+Z+cg1Jw62yNvUGI7S8tJxj9ylIyb/9s+RNSf7KdYiCHpZzzJDY4fS
JRQzIvdf8INei9hDFgiH5wbHVli6jrrlkqPRlXYEul3cYdg5YFb9tCaIbOc8GU1i
6jCDuV+3QvMQ8Hdx0uNVRzY9hVIqrommrVCRlik0gBrAOqua5iBuMIwPUuMVxYws
mntvoTQLYA+iIACuYmDoDg0zlFmVs44NEXRb1U2CMfgu98ptPtwKj5w7iHz0rY4f
37m2L5lWKqIJTA==
-----END CERTIFICATE-----