Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File:                     1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier:          kZHILTH4kIfk6N6AVAGrU5o5FsrMus6PCkfASVgCe/4=
Subject key identifier:   A6:49:9E:96:29:20:BB:0D:11:24:B4:A9:4C:16:D5:3C:90:E0:0C:05
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer:       /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial:       01962F06FCC56B2CBB66603BDDEF80FEF7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: ZofPpWyePpy60QOaEem93GCUXkYQUjjySNuVyTBYknQ=)
                          2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
                          3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fc:c5:6b:2c:bb:66:60:3b:dd:ef:80:fe:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=a6499e962920bb0d1124b4a94c16d53c90e00c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:78:d5:01:62:64:36:d2:50:62:f2:50:f4:
                    73:d5:12:ef:78:e4:f9:19:ab:27:a9:1e:56:c5:f4:
                    04:96:ee:e1:e7:80:e8:db:39:cb:b9:64:ee:cb:24:
                    a6:85:45:e5:36:ca:b2:28:e9:07:59:1f:74:b9:59:
                    b7:c2:64:20:9e:c7:02:bd:92:06:7f:88:5b:bb:91:
                    96:71:5e:02:28:83:fa:e6:d4:8a:15:2b:3d:14:20:
                    1c:15:e2:a9:43:17:de:1e:1e:77:27:53:bb:70:c2:
                    ec:00:63:bb:ea:d0:5f:9b:42:4e:8a:f8:20:05:b9:
                    00:ae:0c:46:c0:9b:1f:82:76:65:ba:11:43:8b:78:
                    de:b1:d3:26:16:a9:7c:1f:c1:f2:32:9d:de:68:2a:
                    75:09:d9:e6:e7:e6:ff:68:00:0e:81:00:9c:3e:5b:
                    7b:00:0a:5b:b0:67:f8:ff:f3:ea:0e:54:bd:14:5c:
                    a5:d1:b4:24:9e:0e:07:4b:c8:c8:bb:87:f3:ba:73:
                    ff:f7:c0:47:0c:19:f8:4a:27:be:44:3d:34:32:b9:
                    ad:7d:85:30:be:c9:32:64:fb:6f:c4:58:b0:41:e2:
                    cf:32:8d:9f:d7:0a:19:ef:be:02:28:5b:ed:b1:24:
                    e5:b2:6b:09:ef:8e:f4:b2:96:4e:69:90:77:42:61:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:9E:96:29:20:BB:0D:11:24:B4:A9:4C:16:D5:3C:90:E0:0C:05
            X509v3 Authority Key Identifier:
                keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:91:a5:97:8d:a9:74:b0:f2:49:3a:d9:d6:92:f5:b0:92:
         fd:b8:27:3f:57:b1:a6:70:ec:cf:a7:2a:27:93:35:52:bb:bc:
         be:b6:f4:38:33:02:f8:25:ad:77:a1:73:08:11:44:ef:da:ea:
         5d:74:71:fa:0b:2c:fe:a7:f5:a2:99:c7:c7:9a:1a:ad:3a:a9:
         bf:e3:55:44:44:14:93:d8:41:7b:e6:45:4e:6f:08:d4:ad:0a:
         4e:5b:a4:ad:46:42:f5:eb:b0:0a:d5:24:40:47:74:e7:5b:70:
         8e:df:bc:28:03:3f:7e:22:59:19:5a:66:15:6a:85:1d:f5:f0:
         99:4b:56:6f:a8:e1:92:44:29:a5:3a:05:c3:22:fb:f2:a4:36:
         72:4c:5f:89:97:d3:b6:36:56:62:81:87:1d:b0:91:ae:91:42:
         40:eb:0d:db:e4:bc:11:86:b3:b5:5d:71:4b:19:9e:4f:b0:8a:
         e2:8e:81:02:a9:f9:a1:ce:ad:6d:ac:f1:f9:ec:18:bb:f9:ee:
         8a:0b:4e:ea:ed:33:48:26:26:1f:3f:64:53:09:9a:ee:f3:98:
         53:cb:d7:f3:70:48:76:94:7b:6b:a1:49:37:62:bf:32:35:d2:
         61:38:b7:05:48:ab:fc:a6:31:9b:d9:ca:80:81:73:af:5e:5b:
         d5:50:d8:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvBvzFayy7ZmA73e+A/vfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4M2ZhZWM5M2Q0MDNmMzcxMzgyM2ZhMzljN2QyN2M2MmU5
MjE0NzEwHhcNMjUwNDEzMTIwMTQ5WhcNMjUwNDE0MTIwMTQ5WjAzMTEwLwYDVQQD
EyhhNjQ5OWU5NjI5MjBiYjBkMTEyNGI0YTk0YzE2ZDUzYzkwZTAwYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Z41QFiZDbSUGLyUPRz1RLveOT5
GasnqR5WxfQElu7h54Do2znLuWTuyySmhUXlNsqyKOkHWR90uVm3wmQgnscCvZIG
f4hbu5GWcV4CKIP65tSKFSs9FCAcFeKpQxfeHh53J1O7cMLsAGO76tBfm0JOivgg
BbkArgxGwJsfgnZluhFDi3jesdMmFql8H8HyMp3eaCp1Cdnm5+b/aAAOgQCcPlt7
AApbsGf4//PqDlS9FFyl0bQkng4HS8jIu4fzunP/98BHDBn4Sie+RD00MrmtfYUw
vskyZPtvxFiwQeLPMo2f1woZ774CKFvtsSTlsmsJ7470spZOaZB3QmGk3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKZJnpYpILsNESS0qUwW1TyQ4AwFMB8GA1UdIwQY
MBaAFPg/rsk9QD83E4I/o5x9J8YukhRxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ELXV5VDFBUHpjVGdqLWpuSDBueGk2U0ZIRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvOTcwY2YwLTkyOTgtNGZmMC1iYWY1
LTIxMGFlMDU2OWE0NS8xLzEtRC11eVQxQVB6Y1Rnai1qbkgwbnhpNlNGSEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I5Lzk3MGNmMC05Mjk4LTRmZjAtYmFmNS0yMTBhZTA1Njlh
NDUvMS8xLUQtdXlUMUFQemNUZ2otam5IMG54aTZTRkhFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCiR
pZeNqXSw8kk62daS9bCS/bgnP1expnDsz6cqJ5M1Uru8vrb0ODMC+CWtd6FzCBFE
79rqXXRx+gss/qf1opnHx5oarTqpv+NVREQUk9hBe+ZFTm8I1K0KTlukrUZC9euw
CtUkQEd051twjt+8KAM/fiJZGVpmFWqFHfXwmUtWb6jhkkQppToFwyL78qQ2ckxf
iZfTtjZWYoGHHbCRrpFCQOsN2+S8EYaztV1xSxmeT7CK4o6BAqn5oc6tbazx+ewY
u/nuigtO6u0zSCYmHz9kUwma7vOYU8vX83BIdpR7a6FJN2K/MjXSYTi3BUir/KYx
m9nKgIFzr15b1VDYng==
-----END CERTIFICATE-----