Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File:                     mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier:          cay3j4D0uqtq55Fy2VnPEP3MAn4vu/CKo5rKxoFper0=
Subject key identifier:   DA:C4:33:D5:B1:F3:16:9B:F4:A7:60:23:47:ED:48:F7:0C:BF:D9:BF
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer:       /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial:       01962FAB350C5EB646B92F3EEF3C744E3718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number:          0E14
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
                          2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: M9SeTQaiZLqxPb6xlUP4YfPXyFP77u/Cjg8oadw1bNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:35:0c:5e:b6:46:b9:2f:3e:ef:3c:74:4e:37:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=dac433d5b1f3169bf4a7602347ed48f70cbfd9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:ff:55:ae:55:30:dc:89:3f:9b:51:2e:10:
                    0c:84:74:0d:76:25:e6:ce:76:29:0e:e7:19:a7:9f:
                    51:9d:59:b5:e9:04:6e:16:75:10:eb:21:28:73:ac:
                    15:58:80:a7:7a:c2:76:a9:3b:3a:89:78:f0:90:1f:
                    dd:d2:6a:3f:2e:32:46:c8:ad:48:ed:7c:01:52:54:
                    6a:4a:41:7c:29:c7:e3:90:a6:72:8a:b9:ef:8d:3e:
                    2a:fa:22:4c:a3:73:e6:47:6d:5c:b4:9d:a5:86:76:
                    01:99:d9:b0:3b:86:c1:8c:4b:c5:44:51:ee:91:af:
                    61:a7:bd:90:45:ad:23:0c:93:e2:ef:6a:e5:7e:96:
                    f1:bb:c2:7c:7a:3f:0c:1b:61:63:27:e4:7d:0d:77:
                    8f:ee:69:5a:7f:d5:80:ce:09:fd:8f:4f:23:79:5e:
                    3f:31:eb:4b:2c:b0:75:e3:2e:be:0b:70:e3:ac:5b:
                    90:37:72:64:a8:2b:7d:f2:47:55:12:23:56:eb:02:
                    bb:da:48:93:af:89:57:07:43:30:c9:16:5b:ab:ed:
                    6a:b1:6c:b5:37:43:ee:38:17:13:7c:ba:d3:7b:31:
                    43:e1:28:63:71:aa:17:bb:43:d0:d6:f0:e8:31:2f:
                    09:cc:0c:f4:94:70:57:f6:bb:f2:52:27:71:8c:f9:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:33:D5:B1:F3:16:9B:F4:A7:60:23:47:ED:48:F7:0C:BF:D9:BF
            X509v3 Authority Key Identifier:
                keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:33:eb:82:2f:d5:a2:d4:73:54:39:c7:ef:03:77:09:1b:83:
         32:32:b7:e4:e0:83:5e:21:8e:4e:0e:38:3a:4c:de:4b:4b:84:
         4d:aa:3d:66:a9:fe:58:43:06:1d:09:4a:37:32:87:cc:e5:97:
         eb:db:de:b1:16:3b:47:06:c5:d3:3a:8a:c6:0f:a5:53:3e:d7:
         72:a8:41:63:b9:dd:93:8d:57:36:0b:4f:11:d0:68:c8:a8:d8:
         95:91:fd:80:cd:11:fa:77:f3:e2:33:f8:75:cd:86:d6:a0:f0:
         21:99:89:fa:37:8a:67:72:23:28:79:18:af:fc:65:8f:3b:d8:
         cf:43:a0:5b:b3:42:6b:7b:b6:76:d3:13:92:60:22:73:01:66:
         f7:09:eb:fd:e9:61:e9:cd:f8:5b:67:7f:14:a7:d5:eb:4a:40:
         01:ad:c0:8c:89:74:10:f3:5a:53:78:1e:d3:17:df:af:d0:af:
         1e:08:aa:4f:68:da:41:9e:a1:66:21:16:03:65:0b:83:00:a9:
         14:11:25:fc:92:46:a0:8e:00:96:b6:f5:c8:18:22:fc:45:d5:
         d3:38:5f:2e:d4:67:80:8a:35:56:db:ef:b6:80:a2:05:b9:df:
         19:ff:ad:e1:e3:00:d1:7b:4d:b6:74:45:98:8b:23:ab:7b:94:
         d1:13:23:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzUMXrZGuS8+7zx0TjcYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMWYxMjNiNWJhNGJjMWI3NzkzYjllOWZhMWI0M2RhYzQ5
YTY2MGEwHhcNMjUwNDEzMTUwMTExWhcNMjUwNDE0MTUwMTExWjAzMTEwLwYDVQQD
EyhkYWM0MzNkNWIxZjMxNjliZjRhNzYwMjM0N2VkNDhmNzBjYmZkOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0L/Va5VMNyJP5tRLhAMhHQNdiXm
znYpDucZp59RnVm16QRuFnUQ6yEoc6wVWICnesJ2qTs6iXjwkB/d0mo/LjJGyK1I
7XwBUlRqSkF8KcfjkKZyirnvjT4q+iJMo3PmR21ctJ2lhnYBmdmwO4bBjEvFRFHu
ka9hp72QRa0jDJPi72rlfpbxu8J8ej8MG2FjJ+R9DXeP7mlaf9WAzgn9j08jeV4/
MetLLLB14y6+C3DjrFuQN3JkqCt98kdVEiNW6wK72kiTr4lXB0MwyRZbq+1qsWy1
N0PuOBcTfLrTezFD4ShjcaoXu0PQ1vDoMS8JzAz0lHBX9rvyUidxjPmnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrEM9Wx8xab9KdgI0ftSPcMv9m/MB8GA1UdIwQY
MBaAFJsfEjtbpLwbd5O56fobQ9rEmmYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQt
N2M1ZTdlMzI0NTMwLzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81MjNlYjgtMzY3Ny00YzlmLWI2YmQtN2M1ZTdlMzI0NTMw
LzEvbXg4U08xdWt2QnQzazducC1odEQyc1NhWmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1zPrgi/V
otRzVDnH7wN3CRuDMjK35OCDXiGOTg44OkzeS0uETao9Zqn+WEMGHQlKNzKHzOWX
69vesRY7RwbF0zqKxg+lUz7XcqhBY7ndk41XNgtPEdBoyKjYlZH9gM0R+nfz4jP4
dc2G1qDwIZmJ+jeKZ3IjKHkYr/xljzvYz0OgW7NCa3u2dtMTkmAicwFm9wnr/elh
6c34W2d/FKfV60pAAa3AjIl0EPNaU3ge0xffr9CvHgiqT2jaQZ6hZiEWA2ULgwCp
FBEl/JJGoI4Alrb1yBgi/EXV0zhfLtRngIo1VtvvtoCiBbnfGf+t4eMA0XtNtnRF
mIsjq3uU0RMjeA==
-----END CERTIFICATE-----