Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File:                     lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier:          3LLko3mfb04NuhJEcYYBDfql9YjqG5q2zS7H97sVOKY=
Subject key identifier:   8C:09:0F:5A:F3:74:D8:96:25:67:E2:98:2C:D4:68:3E:B1:F8:3E:A1
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer:       /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial:       01962F3DB8978FF362797AA4E773409DD857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
                          2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
                          3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: Zk5mgV0kU8uv+QGX1KvnAay0nSe4T6AoSJEMQLAJoAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b8:97:8f:f3:62:79:7a:a4:e7:73:40:9d:d8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=8c090f5af374d8962567e2982cd4683eb1f83ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:aa:72:8c:e3:c2:1d:f7:c5:83:89:55:ad:
                    b0:c4:16:32:03:68:e7:9a:66:6c:c6:31:35:af:f2:
                    8f:50:0d:e6:e0:9c:a3:ae:16:87:34:58:71:0f:ba:
                    15:b3:6e:b1:33:9f:bf:6d:3d:ef:07:56:58:b5:d7:
                    61:cc:7b:23:22:19:d7:48:bc:30:cb:de:21:db:87:
                    5b:11:75:e5:13:c1:13:c5:8d:30:05:9c:b2:6a:65:
                    de:07:3d:cb:94:b0:3d:3b:72:0c:7f:e8:e5:84:06:
                    86:7a:0e:6e:da:f4:e4:f2:31:84:61:37:d0:8a:ea:
                    be:1a:47:10:90:19:39:29:ad:14:15:fa:89:8c:d3:
                    17:ad:08:10:b0:c4:cf:de:80:e8:79:54:f9:be:84:
                    64:95:96:59:a7:79:a2:8a:c1:8d:6d:d0:6c:a6:14:
                    3c:fb:87:0d:16:9d:57:64:1a:df:86:2f:94:80:16:
                    5f:bb:e6:bd:d1:5e:9f:fc:b0:96:c0:48:81:20:94:
                    47:14:28:4c:b6:fd:e7:61:a6:95:63:46:b9:f8:0e:
                    c8:ba:e1:f0:02:9e:63:88:de:a5:28:ab:18:3b:e9:
                    3b:58:06:20:75:10:0e:bd:8b:e2:0f:b5:33:cf:34:
                    30:bf:cf:48:9d:b1:21:73:9a:71:8b:02:8c:0e:b9:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:0F:5A:F3:74:D8:96:25:67:E2:98:2C:D4:68:3E:B1:F8:3E:A1
            X509v3 Authority Key Identifier:
                keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:bf:ff:8d:d9:6d:85:2c:c4:45:3e:69:59:79:62:f4:8f:
         4c:44:e1:ea:ed:76:30:ec:f4:2a:f6:ae:fa:ed:b3:99:8e:d9:
         99:f4:34:c3:eb:f8:57:17:e4:35:d6:0a:10:ea:89:2a:db:52:
         1a:30:f6:d3:6d:53:ec:bf:5b:4f:f1:74:80:17:ef:3f:93:22:
         88:1a:b8:1c:0e:08:21:91:f0:f9:fa:a4:ce:ed:c4:44:82:1d:
         a2:3e:c3:54:2e:44:b2:d4:04:7c:b7:1e:de:01:b8:81:75:93:
         a6:fa:68:ae:a1:2e:21:53:4c:43:27:67:19:b6:c1:7f:ec:d8:
         a8:71:9c:f0:2b:fb:d8:02:e4:dd:86:65:34:47:88:d7:16:ab:
         cf:fc:36:57:2c:98:46:ff:7c:88:3e:8a:4a:b6:fa:12:31:6e:
         66:af:ef:2e:f3:1d:91:50:fc:5f:b1:0c:ba:65:66:70:1d:cb:
         9d:c8:7c:77:49:72:b5:5d:56:3a:5e:fb:ca:86:c3:24:7a:aa:
         3b:a2:91:37:98:72:cd:15:d6:6d:fe:29:3d:5d:63:97:02:9c:
         a7:ab:8b:00:3c:46:2d:d7:c4:ff:13:56:54:5b:06:d9:6c:54:
         3c:9d:77:3c:4b:bf:1c:aa:10:94:04:1c:a9:53:17:80:6e:8e:
         de:5c:36:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbiXj/NieXqk53NAndhXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njg2NjU2MmQ5ZjI1ODMxZWMwYWNlOGE5ZDhjZDBlNTk0
ZDcxZmMwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
Eyg4YzA5MGY1YWYzNzRkODk2MjU2N2UyOTgyY2Q0NjgzZWIxZjgzZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTWqcozjwh33xYOJVa2wxBYyA2jn
mmZsxjE1r/KPUA3m4JyjrhaHNFhxD7oVs26xM5+/bT3vB1ZYtddhzHsjIhnXSLww
y94h24dbEXXlE8ETxY0wBZyyamXeBz3LlLA9O3IMf+jlhAaGeg5u2vTk8jGEYTfQ
iuq+GkcQkBk5Ka0UFfqJjNMXrQgQsMTP3oDoeVT5voRklZZZp3miisGNbdBsphQ8
+4cNFp1XZBrfhi+UgBZfu+a90V6f/LCWwEiBIJRHFChMtv3nYaaVY0a5+A7IuuHw
Ap5jiN6lKKsYO+k7WAYgdRAOvYviD7UzzzQwv89InbEhc5pxiwKMDrm+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwJD1rzdNiWJWfimCzUaD6x+D6hMB8GA1UdIwQY
MBaAFJVoZlYtnyWDHsCs6KnYzQ5ZTXH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmIt
OWQ3Zjg2ZjBkNDc3LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jYjJlZTgtODc4Mi00YWY0LThmNmItOWQ3Zjg2ZjBkNDc3
LzEvbFdobVZpMmZKWU1ld0t6b3Fkak5EbGxOY2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXW//43Z
bYUsxEU+aVl5YvSPTETh6u12MOz0Kvau+u2zmY7ZmfQ0w+v4VxfkNdYKEOqJKttS
GjD2021T7L9bT/F0gBfvP5MiiBq4HA4IIZHw+fqkzu3ERIIdoj7DVC5EstQEfLce
3gG4gXWTpvporqEuIVNMQydnGbbBf+zYqHGc8Cv72ALk3YZlNEeI1xarz/w2VyyY
Rv98iD6KSrb6EjFuZq/vLvMdkVD8X7EMumVmcB3Lnch8d0lytV1WOl77yobDJHqq
O6KRN5hyzRXWbf4pPV1jlwKcp6uLADxGLdfE/xNWVFsG2WxUPJ13PEu/HKoQlAQc
qVMXgG6O3lw2ng==
-----END CERTIFICATE-----