Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File:                     tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier:          p1IoFwg2pZG3DQaFTeFew7APCtT1R3lWaudeKKPhkn4=
Subject key identifier:   C7:F9:C3:77:CF:9F:BA:94:CB:D5:4C:8F:D7:24:7E:64:C3:08:A7:DE
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer:       /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial:       01962FAB5A270FBD6FA029292DBF9E92CCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number:          0B4F
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: J0ZgfR5U6lkaUqXFqkaevK5zE7Y.roa (hash: /1drMWi8WHeYZMzayKCKRAt2zHYV3mIjXjepj/lhD8k=)
                          2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: Hs3mjXKkc3lPQtIhKQGMWTBokZBNTB0GGZ8znpKIBsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5a:27:0f:bd:6f:a0:29:29:2d:bf:9e:92:cc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=c7f9c377cf9fba94cbd54c8fd7247e64c308a7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:97:5e:58:26:ab:08:ca:76:8c:df:47:e9:
                    5a:19:3e:1e:06:64:2b:c2:cd:3b:07:77:bf:72:d6:
                    fc:92:8c:b8:ad:04:11:3f:64:84:64:c7:24:c3:21:
                    2c:71:97:24:4e:82:bb:ab:be:3a:37:43:40:8d:04:
                    1c:c1:e9:2d:88:43:87:6f:53:af:1a:74:4a:b1:bc:
                    62:5a:20:9e:03:0b:d2:19:0b:e6:26:ad:cb:49:8b:
                    8b:d1:c5:fc:9c:b4:1c:c7:07:b8:6a:ab:62:85:b8:
                    27:15:72:63:4a:72:a3:9f:4e:eb:08:b7:29:57:12:
                    4f:f5:56:66:3a:c8:1f:cf:02:4e:11:8d:01:de:36:
                    21:5b:e8:38:b8:c9:32:91:b7:be:65:aa:09:76:74:
                    93:0c:b2:1b:a9:93:87:85:47:f9:73:60:38:1c:e4:
                    f0:eb:49:6a:a1:d4:7b:cc:8e:0f:43:88:13:71:5f:
                    da:0f:b2:0e:f2:02:24:ca:2e:a6:80:29:a4:e7:6c:
                    bb:ae:2d:c0:c8:6d:da:fd:8f:57:8c:49:19:f2:0c:
                    b2:9b:f6:b9:89:88:c8:cd:58:dd:0b:75:7a:57:b1:
                    25:76:8c:16:33:e4:87:80:5b:60:b5:63:7c:a0:3b:
                    6d:07:3b:19:d8:9f:94:62:6e:3b:0e:39:27:6e:32:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:C3:77:CF:9F:BA:94:CB:D5:4C:8F:D7:24:7E:64:C3:08:A7:DE
            X509v3 Authority Key Identifier:
                keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:37:ff:1a:97:51:36:08:e4:48:a4:e0:fa:71:9f:fd:8f:3d:
         70:bf:cb:3a:33:7a:54:3e:e8:9d:fa:a8:7d:19:cb:e9:4a:a3:
         98:d6:9d:15:f5:36:16:21:ae:fb:3a:89:6c:a2:b5:5e:50:26:
         93:f6:3d:b0:09:0f:72:d5:33:18:59:cc:4a:c1:99:4e:46:6e:
         47:2f:43:12:2b:65:4e:f3:14:50:52:e9:e5:be:f3:ca:26:54:
         e7:1e:a0:46:53:80:07:62:71:2c:47:5d:fc:ca:c4:c0:03:6b:
         cf:df:f1:8c:91:80:69:14:1f:e6:c6:31:00:ff:9f:37:b3:4a:
         93:ac:b4:bc:8e:c2:d8:d7:a3:86:72:7c:39:a2:da:19:da:ee:
         9c:3c:c6:34:2d:cf:d7:c2:6d:1e:14:84:6e:47:76:a4:2d:85:
         ec:fb:8c:76:1c:b1:7a:01:7b:57:b5:d5:f4:f5:39:24:df:55:
         21:65:c5:20:1c:02:cf:44:1e:a1:a9:f1:b7:79:17:43:99:ab:
         12:00:25:c5:51:ce:ce:0c:07:c4:59:55:8d:14:bf:3e:9f:69:
         2f:12:22:dc:bd:23:01:ac:f0:1d:6b:76:e9:99:6a:fa:5d:ba:
         9a:67:eb:b1:29:a4:57:19:38:92:85:2a:b2:02:e2:a4:34:e5:
         c9:1c:44:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1onD71voCkpLb+eksziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzMxNjc5MTNhZjczZTRmNjM3NDE3MGM0Zjk0NWY4YjBk
ZDdkNjQwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
EyhjN2Y5YzM3N2NmOWZiYTk0Y2JkNTRjOGZkNzI0N2U2NGMzMDhhN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PuXXlgmqwjKdozfR+laGT4eBmQr
ws07B3e/ctb8koy4rQQRP2SEZMckwyEscZckToK7q746N0NAjQQcwektiEOHb1Ov
GnRKsbxiWiCeAwvSGQvmJq3LSYuL0cX8nLQcxwe4aqtihbgnFXJjSnKjn07rCLcp
VxJP9VZmOsgfzwJOEY0B3jYhW+g4uMkykbe+ZaoJdnSTDLIbqZOHhUf5c2A4HOTw
60lqodR7zI4PQ4gTcV/aD7IO8gIkyi6mgCmk52y7ri3AyG3a/Y9XjEkZ8gyym/a5
iYjIzVjdC3V6V7EldowWM+SHgFtgtWN8oDttBzsZ2J+UYm47DjknbjK/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf5w3fPn7qUy9VMj9ckfmTDCKfeMB8GA1UdIwQY
MBaAFLRzFnkTr3Pk9jdBcMT5Rfiw3X1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAt
Zjg2ZGNhYWQ4YzQ5LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lNTZkNDEtNWJiOC00YTkxLWE0ZjAtZjg2ZGNhYWQ4YzQ5
LzEvdEhNV2VST3ZjLVQyTjBGd3hQbEYtTERkZldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDf/GpdR
NgjkSKTg+nGf/Y89cL/LOjN6VD7onfqofRnL6UqjmNadFfU2FiGu+zqJbKK1XlAm
k/Y9sAkPctUzGFnMSsGZTkZuRy9DEitlTvMUUFLp5b7zyiZU5x6gRlOAB2JxLEdd
/MrEwANrz9/xjJGAaRQf5sYxAP+fN7NKk6y0vI7C2NejhnJ8OaLaGdrunDzGNC3P
18JtHhSEbkd2pC2F7PuMdhyxegF7V7XV9PU5JN9VIWXFIBwCz0Qeoanxt3kXQ5mr
EgAlxVHOzgwHxFlVjRS/Pp9pLxIi3L0jAazwHWt26Zlq+l26mmfrsSmkVxk4koUq
sgLipDTlyRxE+Q==
-----END CERTIFICATE-----