Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File:                     d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier:          b/n9jtnyOUVpwpwGDg9ZxylFEMDIj23WjuXbDB5fOqs=
Subject key identifier:   E9:38:BC:5E:D4:C4:C0:77:2C:E8:A6:50:90:0D:38:A6:BA:98:86:FD
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer:       /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial:       01962E992F7C00AA589E36322B82170116E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
                          2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: GU1YfSm44iYbemZ15i1/NrKV+pKZ7bSJbDgEylK/M0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:7c:00:aa:58:9e:36:32:2b:82:17:01:16:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=e938bc5ed4c4c0772ce8a650900d38a6ba9886fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:04:bc:e5:f0:fd:5c:2e:6f:cd:aa:e5:98:
                    a5:44:a0:5b:15:15:50:ad:8a:19:90:44:88:5c:40:
                    2c:9c:31:d5:93:0a:fb:e2:7a:dd:0f:16:77:21:45:
                    9a:01:64:ca:89:b8:cd:a3:df:a1:03:77:b5:36:a8:
                    a0:12:eb:1c:44:96:b8:4c:de:42:65:c7:52:8f:35:
                    dc:bb:6f:9e:f8:c4:48:d4:8d:d7:95:bd:81:66:cb:
                    05:95:20:25:13:a0:ec:24:d3:e5:db:68:59:99:d0:
                    4f:ef:e5:67:8a:7f:b7:68:ae:46:05:7f:7d:46:d0:
                    12:7a:02:cb:ea:dd:83:18:be:a8:2c:ae:cb:59:a6:
                    1a:3c:8a:4e:23:83:0f:2c:f9:b3:96:9d:2d:97:6e:
                    d2:72:08:de:8d:78:37:f7:e6:ef:8e:02:bb:9b:97:
                    40:27:13:c5:d8:73:5b:22:b4:ed:92:9c:c4:47:df:
                    91:59:0c:f7:ca:2b:d4:33:9b:63:a2:3b:03:b6:c3:
                    06:83:6b:ba:49:25:0b:f9:de:07:21:a1:20:21:94:
                    66:86:a6:2b:fc:00:42:8b:c3:04:9a:e5:e4:08:7d:
                    4d:35:15:20:1e:23:7b:ea:d7:27:c7:f5:d6:9f:c4:
                    4d:59:03:03:e7:d8:41:1d:e6:f5:a2:d3:9b:2b:f3:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:BC:5E:D4:C4:C0:77:2C:E8:A6:50:90:0D:38:A6:BA:98:86:FD
            X509v3 Authority Key Identifier:
                keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:f2:a9:71:e7:de:ef:f8:cc:cc:01:16:de:bf:ba:cd:29:
         e5:80:fe:a1:26:7f:85:b4:50:d4:59:69:48:01:5d:05:65:34:
         8a:7f:1a:36:2e:9c:5c:bf:29:79:9d:50:d3:c8:5d:46:e1:41:
         51:60:3d:17:32:65:f9:c4:8b:f4:29:3f:9e:e6:0d:c9:e9:4c:
         8f:58:36:24:01:9e:dd:50:12:e6:c2:6f:e6:65:0d:dd:ff:3c:
         98:07:c8:07:91:37:ba:1d:40:2a:4f:72:8d:86:d3:a5:cb:4b:
         2d:dd:f5:75:0c:6f:e9:72:48:96:dc:d2:10:04:09:3a:05:4f:
         51:63:d6:c8:4a:2c:d8:a9:32:df:af:12:0d:a2:8b:6a:e8:45:
         87:22:63:c4:fe:5d:b2:c7:f3:ad:eb:74:7e:31:8e:ef:3e:cb:
         f9:66:c9:ad:00:c4:e7:07:8c:13:04:71:b2:87:0b:f1:27:18:
         71:6a:df:86:70:c1:8c:7e:f8:7f:38:48:7c:c6:7d:ed:1d:a0:
         23:2b:b3:53:bd:67:0b:b4:4c:6f:30:f3:43:b8:3e:d6:e6:45:
         95:92:45:8f:3e:e9:51:24:1f:f6:bd:29:ee:14:c3:9e:68:26:
         c9:81:a4:4e:98:01:23:bc:32:6f:f9:51:ce:2f:c0:8e:0e:20:
         ca:a4:96:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumS98AKpYnjYyK4IXARbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5
OWUyMzMwHhcNMjUwNDEzMTAwMTUzWhcNMjUwNDE0MTAwMTUzWjAzMTEwLwYDVQQD
EyhlOTM4YmM1ZWQ0YzRjMDc3MmNlOGE2NTA5MDBkMzhhNmJhOTg4NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+UEvOXw/Vwub82q5ZilRKBbFRVQ
rYoZkESIXEAsnDHVkwr74nrdDxZ3IUWaAWTKibjNo9+hA3e1NqigEuscRJa4TN5C
ZcdSjzXcu2+e+MRI1I3Xlb2BZssFlSAlE6DsJNPl22hZmdBP7+Vnin+3aK5GBX99
RtASegLL6t2DGL6oLK7LWaYaPIpOI4MPLPmzlp0tl27ScgjejXg39+bvjgK7m5dA
JxPF2HNbIrTtkpzER9+RWQz3yivUM5tjojsDtsMGg2u6SSUL+d4HIaEgIZRmhqYr
/ABCi8MEmuXkCH1NNRUgHiN76tcnx/XWn8RNWQMD59hBHeb1otObK/MYEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk4vF7UxMB3LOimUJANOKa6mIb9MB8GA1UdIwQY
MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt
ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy
LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYczyqXHn
3u/4zMwBFt6/us0p5YD+oSZ/hbRQ1FlpSAFdBWU0in8aNi6cXL8peZ1Q08hdRuFB
UWA9FzJl+cSL9Ck/nuYNyelMj1g2JAGe3VAS5sJv5mUN3f88mAfIB5E3uh1AKk9y
jYbTpctLLd31dQxv6XJIltzSEAQJOgVPUWPWyEos2Kky368SDaKLauhFhyJjxP5d
ssfzret0fjGO7z7L+WbJrQDE5weMEwRxsocL8ScYcWrfhnDBjH74fzhIfMZ97R2g
IyuzU71nC7RMbzDzQ7g+1uZFlZJFjz7pUSQf9r0p7hTDnmgmyYGkTpgBI7wyb/lR
zi/Ajg4gyqSWFA==
-----END CERTIFICATE-----