Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File:                     Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier:          kGYuO0pXl11c8I3ewT/z8VcZoAAPNa8SIl5uhmgfGDo=
Subject key identifier:   95:0A:A3:31:D4:63:67:44:91:59:E0:A3:83:22:2E:D2:F5:6F:45:81
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer:       /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial:       01962DF3B12CD8704639DD54B34D286EADDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
                          2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: /XfqFoNdoWDEL+lcZzqTFkyjlOXaIaw6iiszR3VdnzM=)
                          3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b1:2c:d8:70:46:39:dd:54:b3:4d:28:6e:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=950aa331d46367449159e0a383222ed2f56f4581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:c5:e7:65:21:63:ef:d6:79:a7:20:cd:a3:
                    79:a4:58:82:da:ca:fc:61:b4:d3:5d:d0:b7:04:f9:
                    73:ae:8f:4d:8a:ec:00:73:67:d5:c1:00:79:df:bd:
                    a8:db:a1:7a:35:9c:cb:74:64:41:d4:54:c5:e1:de:
                    12:c2:0c:cb:8e:76:e1:e9:54:57:df:9c:2d:25:fb:
                    2e:7f:e2:28:9a:5c:9d:96:e8:a2:0e:04:4b:93:8d:
                    fc:5c:e1:63:ac:7e:40:a2:12:d4:67:34:78:3e:70:
                    f5:22:ab:a1:f3:f5:5d:a1:20:3f:11:dc:a4:0d:18:
                    c7:57:4d:9b:b5:6b:28:22:b4:17:ab:07:ca:e7:dd:
                    db:ab:d2:e2:7a:7e:a1:af:f6:04:cf:54:90:9a:0e:
                    7a:a6:cf:35:d2:24:06:cc:5e:2b:89:68:55:ee:7f:
                    9d:88:be:fb:36:f4:41:0d:26:79:e7:f1:e7:b0:0b:
                    d2:38:84:2e:eb:c1:14:22:ea:3a:13:73:fd:fb:2d:
                    7c:94:fd:ce:60:3d:a5:a1:c6:92:3f:c9:54:c9:89:
                    f5:b0:21:0e:41:c1:3c:0b:69:ba:3f:af:f6:5b:1e:
                    b1:92:51:5b:4b:49:0d:72:78:9a:f8:c7:0b:13:e6:
                    4b:03:4c:58:d1:45:c9:15:9a:9a:70:ef:77:b2:16:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:A3:31:D4:63:67:44:91:59:E0:A3:83:22:2E:D2:F5:6F:45:81
            X509v3 Authority Key Identifier:
                keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:3c:1c:65:55:96:69:ab:09:aa:7b:07:6f:f4:d0:1c:2f:
         68:a1:de:e5:81:b6:f0:f6:5b:34:6f:21:43:69:f6:d8:dc:46:
         c9:64:ec:7a:dd:2b:f7:b8:a8:8d:e5:2d:1a:54:ec:ef:45:23:
         28:e7:c9:37:b9:9f:89:41:06:19:05:ca:de:5c:ef:fd:20:a3:
         46:ac:b2:90:f2:31:e8:78:a5:1d:29:92:02:62:cc:3c:3d:09:
         6e:73:d7:67:63:4f:bb:ef:2b:5b:64:d0:16:44:a9:cf:4b:0c:
         d6:36:fb:44:af:ff:31:6d:36:11:b6:b9:ac:7d:c6:b6:43:25:
         4d:91:3d:77:4f:be:76:c5:40:c7:b0:cf:a2:16:67:e3:84:a5:
         b4:d1:08:f1:4f:73:86:ba:89:bc:c0:c4:66:fb:dd:f4:dc:b9:
         60:70:54:9a:4d:ee:ab:d7:4f:a5:27:ec:15:21:cd:93:f2:40:
         0e:b6:7d:7e:4b:da:44:1a:35:ff:af:32:76:1e:68:17:0a:f6:
         aa:71:ed:98:f4:b8:65:30:34:a1:3d:eb:16:2b:c3:7e:83:87:
         dd:c7:9e:7e:7e:ce:ec:3f:95:3a:04:af:47:08:be:a3:3b:f4:
         bb:cc:e1:65:83:3e:a8:68:d4:ba:46:98:d4:dd:6b:9c:27:2e:
         7e:5b:ce:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87Es2HBGOd1Us00obq3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi
NDRjMjYwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
Eyg5NTBhYTMzMWQ0NjM2NzQ0OTE1OWUwYTM4MzIyMmVkMmY1NmY0NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1rF52UhY+/WeacgzaN5pFiC2sr8
YbTTXdC3BPlzro9NiuwAc2fVwQB5372o26F6NZzLdGRB1FTF4d4SwgzLjnbh6VRX
35wtJfsuf+IomlydluiiDgRLk438XOFjrH5AohLUZzR4PnD1Iquh8/VdoSA/Edyk
DRjHV02btWsoIrQXqwfK593bq9Lien6hr/YEz1SQmg56ps810iQGzF4riWhV7n+d
iL77NvRBDSZ55/HnsAvSOIQu68EUIuo6E3P9+y18lP3OYD2locaSP8lUyYn1sCEO
QcE8C2m6P6/2Wx6xklFbS0kNcnia+McLE+ZLA0xY0UXJFZqacO93shZK4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUKozHUY2dEkVngo4MiLtL1b0WBMB8GA1UdIwQY
MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt
OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh
LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYw8HGVV
lmmrCap7B2/00BwvaKHe5YG28PZbNG8hQ2n22NxGyWTset0r97iojeUtGlTs70Uj
KOfJN7mfiUEGGQXK3lzv/SCjRqyykPIx6HilHSmSAmLMPD0JbnPXZ2NPu+8rW2TQ
FkSpz0sM1jb7RK//MW02Eba5rH3GtkMlTZE9d0++dsVAx7DPohZn44SltNEI8U9z
hrqJvMDEZvvd9Ny5YHBUmk3uq9dPpSfsFSHNk/JADrZ9fkvaRBo1/68ydh5oFwr2
qnHtmPS4ZTA0oT3rFivDfoOH3ceefn7O7D+VOgSvRwi+ozv0u8zhZYM+qGjUukaY
1N1rnCcuflvOUA==
-----END CERTIFICATE-----