Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File:                     ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier:          0fQuvqe17TRSXmuKPDSsr8NPAfnKkY2ikwThDiYuc54=
Subject key identifier:   71:E5:BB:0A:0D:41:11:FC:F0:6D:89:51:0F:C4:11:A1:99:82:96:29
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer:       /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial:       01962E61908CD34025D83FC5C4D7DF97CD4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
                          2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
                          3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: fSv87WQeWb319+GClwWenjt0mcY/OmGF0s0kg9VSpp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:90:8c:d3:40:25:d8:3f:c5:c4:d7:df:97:cd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=71e5bb0a0d4111fcf06d89510fc411a199829629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:98:49:cd:b6:df:f1:98:b0:cc:27:a2:21:
                    fd:e3:5d:19:c3:64:de:f8:62:9d:21:a9:f7:da:70:
                    97:f8:5b:30:e9:db:14:85:96:de:2d:77:9d:32:12:
                    98:10:63:77:47:db:54:51:49:1c:67:2c:6b:8d:1c:
                    93:97:28:81:52:f3:e5:ab:1f:9e:ea:05:8f:37:a3:
                    84:6e:07:85:fa:49:2c:9b:64:ab:d3:d7:90:a4:10:
                    58:39:24:f5:e5:cb:36:bf:fd:02:f7:86:ff:85:33:
                    bc:b6:28:44:d3:c4:29:10:d9:32:9f:7c:75:e3:6e:
                    c8:51:b2:27:58:da:aa:56:2b:94:cc:7c:30:fa:6b:
                    04:45:e9:d3:b2:41:eb:98:6a:f1:25:a6:22:e6:2a:
                    82:7d:50:61:2a:71:df:ab:e3:a3:64:0b:a6:f5:7f:
                    67:77:31:5d:38:a0:5f:d0:5a:7f:5a:6e:73:b3:7f:
                    89:72:86:af:5d:b0:47:32:4b:f8:57:dc:f9:d1:5a:
                    9b:59:79:82:52:18:15:7c:fc:bc:0b:86:bc:80:ca:
                    d9:34:9a:a4:ed:18:b5:fc:8c:08:4f:be:a7:53:d7:
                    1e:3f:04:fc:23:2b:16:7a:e6:63:9c:02:08:d2:04:
                    2c:fd:38:56:1b:07:87:5b:c1:58:e9:9e:85:de:c5:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E5:BB:0A:0D:41:11:FC:F0:6D:89:51:0F:C4:11:A1:99:82:96:29
            X509v3 Authority Key Identifier:
                keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:9f:c4:68:a7:b1:22:40:ec:c6:0f:48:c1:20:3a:ea:ed:
         98:fd:b6:7d:23:c5:20:08:b8:a0:29:dd:b5:04:a3:2e:41:40:
         5e:6b:7a:6f:14:36:da:cc:0b:ec:7d:93:e5:af:73:8f:a0:96:
         56:29:53:c5:49:8d:6b:06:d1:d2:94:3e:b2:b5:d1:20:9f:e2:
         46:e0:1a:f7:3d:53:04:ed:b1:25:f8:c1:c1:ed:2f:99:7e:a9:
         99:bf:cd:1f:10:03:4c:1c:28:de:02:8c:da:66:c2:73:86:8e:
         bd:c8:56:60:61:59:00:a8:fd:a1:12:ec:33:89:ce:5c:df:7c:
         2d:a1:c2:8d:4b:cf:84:02:07:dc:a9:3b:a4:1c:e1:e8:3f:05:
         96:90:7c:ea:e4:82:56:50:37:ca:56:1a:1e:97:2e:68:e9:1c:
         ee:ac:dc:a5:0e:cc:90:af:af:62:92:60:3a:6a:51:f6:3a:df:
         09:1e:2f:26:c2:e9:ae:fd:54:d0:1c:70:36:4d:e8:de:e4:60:
         84:7c:1f:90:a4:d7:49:bd:72:88:3f:99:ba:d2:db:63:93:b1:
         10:ce:0d:68:d7:94:4f:f8:e7:5b:09:79:6f:bf:a5:71:b7:75:
         85:8b:ea:c9:a5:1f:f6:d9:0d:9d:58:fa:8a:23:1f:3a:d6:59:
         b3:ae:70:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZCM00Al2D/FxNffl81KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx
MDc4NTQwHhcNMjUwNDEzMDkwMTA4WhcNMjUwNDE0MDkwMTA4WjAzMTEwLwYDVQQD
Eyg3MWU1YmIwYTBkNDExMWZjZjA2ZDg5NTEwZmM0MTFhMTk5ODI5NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35mYSc223/GYsMwnoiH9410Zw2Te
+GKdIan32nCX+Fsw6dsUhZbeLXedMhKYEGN3R9tUUUkcZyxrjRyTlyiBUvPlqx+e
6gWPN6OEbgeF+kksm2Sr09eQpBBYOST15cs2v/0C94b/hTO8tihE08QpENkyn3x1
427IUbInWNqqViuUzHww+msERenTskHrmGrxJaYi5iqCfVBhKnHfq+OjZAum9X9n
dzFdOKBf0Fp/Wm5zs3+JcoavXbBHMkv4V9z50VqbWXmCUhgVfPy8C4a8gMrZNJqk
7Ri1/IwIT76nU9cePwT8IysWeuZjnAII0gQs/ThWGweHW8FY6Z6F3sUb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHluwoNQRH88G2JUQ/EEaGZgpYpMB8GA1UdIwQY
MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt
Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2
LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFifxGin
sSJA7MYPSMEgOurtmP22fSPFIAi4oCndtQSjLkFAXmt6bxQ22swL7H2T5a9zj6CW
VilTxUmNawbR0pQ+srXRIJ/iRuAa9z1TBO2xJfjBwe0vmX6pmb/NHxADTBwo3gKM
2mbCc4aOvchWYGFZAKj9oRLsM4nOXN98LaHCjUvPhAIH3Kk7pBzh6D8FlpB86uSC
VlA3ylYaHpcuaOkc7qzcpQ7MkK+vYpJgOmpR9jrfCR4vJsLprv1U0BxwNk3o3uRg
hHwfkKTXSb1yiD+ZutLbY5OxEM4NaNeUT/jnWwl5b7+lcbd1hYvqyaUf9tkNnVj6
iiMfOtZZs65wWQ==
-----END CERTIFICATE-----