Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File:                     i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier:          JWbY/VdVlfRUZGtMRLvSuuiED3d4DMfXRP0Gm5PtXB8=
Subject key identifier:   F7:BE:FD:D6:99:6B:E0:06:75:30:26:76:00:52:2A:9D:62:9A:45:14
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer:       /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial:       01962E99986E46341878EF7E7CFD2594B95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
                          2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
                          3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: i8oomwu8UbN1448owudgEnN6JOIFSZjk/YdxbBArT6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:98:6e:46:34:18:78:ef:7e:7c:fd:25:94:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=f7befdd6996be0067530267600522a9d629a4514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:eb:2f:07:e7:5c:d3:b8:e9:c3:74:e2:71:
                    14:51:e7:08:e6:6e:06:14:24:d8:f3:71:c6:84:48:
                    a0:c2:91:26:18:1d:f3:ae:ba:60:f7:bd:fe:59:f4:
                    ee:25:ac:30:0d:4b:d6:b2:41:9e:58:77:75:ec:d0:
                    1a:43:dc:9b:f0:1b:64:81:6a:42:9c:e3:79:9c:3d:
                    01:3d:4b:4b:3b:50:a5:68:89:1d:f8:82:0e:3f:63:
                    f0:17:48:af:6d:a5:a0:28:78:69:8f:19:61:92:dd:
                    32:34:73:32:50:18:0d:72:4f:4c:1b:27:b9:10:05:
                    3f:b8:ef:d7:7f:d2:f2:f9:33:c4:26:26:bb:d2:be:
                    0b:ac:08:bb:05:c6:8a:1d:c8:06:b7:10:03:66:37:
                    1e:5b:e1:da:cb:7f:0b:05:b1:9f:51:42:e7:71:0d:
                    96:70:50:8a:02:fb:8b:a9:25:a6:bd:81:6d:9b:f1:
                    93:3c:ab:60:5f:70:ea:c4:54:9e:6b:16:14:24:ec:
                    32:61:66:5a:31:8b:a6:a0:70:fb:80:39:53:36:47:
                    da:01:0a:33:c0:e5:56:69:bc:fb:9d:19:03:28:30:
                    73:61:77:0a:6d:c1:4a:70:a7:32:3d:f1:f3:31:09:
                    bb:94:e6:0c:94:1e:0e:a7:72:b3:d0:03:5e:34:d0:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:FD:D6:99:6B:E0:06:75:30:26:76:00:52:2A:9D:62:9A:45:14
            X509v3 Authority Key Identifier:
                keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bd:a4:6b:55:1e:68:d1:87:73:74:77:90:1f:3e:76:ec:6c:
         19:b3:e7:b4:53:fb:99:9c:a3:a1:d0:4f:03:0f:37:1d:06:e2:
         9d:5b:42:23:5a:23:f7:68:35:04:06:44:19:9a:e6:4b:3b:4d:
         f1:b8:9f:02:5a:5f:d9:68:56:d1:b7:cf:a7:bd:f8:5f:ca:9b:
         4f:33:ea:9c:3b:0f:72:77:d6:7b:5e:6e:21:2c:e5:1c:ff:07:
         35:48:55:67:f6:86:33:b9:66:83:ed:15:4f:86:f2:cf:c8:d4:
         5c:70:d9:54:4b:bb:d7:54:e0:e4:d4:98:5c:db:fd:44:98:b0:
         8e:a9:7d:0e:d7:7d:95:3f:63:93:03:c1:65:80:2a:1f:8d:fe:
         9c:1f:ca:0b:15:60:9d:60:89:ab:0d:eb:61:e0:7f:6e:10:56:
         a0:4e:42:d8:34:ac:55:99:c6:3d:59:6d:93:66:86:12:4c:20:
         67:ae:a1:bc:4f:cd:48:ff:55:de:d1:d4:69:58:59:43:fa:ab:
         6b:80:fd:59:20:84:07:cf:55:56:aa:1c:e3:a8:36:34:2c:65:
         ce:ca:85:60:34:94:b3:4e:f5:b2:62:57:65:f4:3f:af:cd:80:
         96:bf:7e:ea:f1:00:3e:ae:65:dd:5c:14:ca:89:24:f1:c9:22:
         a5:e0:8a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZhuRjQYeO9+fP0llLleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmU2NWI4MmZlNDAwN2U4MmZkMmRiMTM0Y2Y0MmM2YWVj
NGUwYmMwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
EyhmN2JlZmRkNjk5NmJlMDA2NzUzMDI2NzYwMDUyMmE5ZDYyOWE0NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcrrLwfnXNO46cN04nEUUecI5m4G
FCTY83HGhEigwpEmGB3zrrpg973+WfTuJawwDUvWskGeWHd17NAaQ9yb8BtkgWpC
nON5nD0BPUtLO1ClaIkd+IIOP2PwF0ivbaWgKHhpjxlhkt0yNHMyUBgNck9MGye5
EAU/uO/Xf9Ly+TPEJia70r4LrAi7BcaKHcgGtxADZjceW+Hay38LBbGfUULncQ2W
cFCKAvuLqSWmvYFtm/GTPKtgX3DqxFSeaxYUJOwyYWZaMYumoHD7gDlTNkfaAQoz
wOVWabz7nRkDKDBzYXcKbcFKcKcyPfHzMQm7lOYMlB4Op3Kz0ANeNNAJtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe+/daZa+AGdTAmdgBSKp1imkUUMB8GA1UdIwQY
MBaAFItuZbgv5AB+gv0tsTTPQsauxOC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMt
YWY5MDM2MmJkM2JhLzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83YmQ2OGMtYTAzNi00Y2ZlLWI3NjMtYWY5MDM2MmJkM2Jh
LzEvaTI1bHVDX2tBSDZDX1MyeE5NOUN4cTdFNEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr2ka1Ue
aNGHc3R3kB8+duxsGbPntFP7mZyjodBPAw83HQbinVtCI1oj92g1BAZEGZrmSztN
8bifAlpf2WhW0bfPp734X8qbTzPqnDsPcnfWe15uISzlHP8HNUhVZ/aGM7lmg+0V
T4byz8jUXHDZVEu711Tg5NSYXNv9RJiwjql9Dtd9lT9jkwPBZYAqH43+nB/KCxVg
nWCJqw3rYeB/bhBWoE5C2DSsVZnGPVltk2aGEkwgZ66hvE/NSP9V3tHUaVhZQ/qr
a4D9WSCEB89VVqoc46g2NCxlzsqFYDSUs071smJXZfQ/r82Alr9+6vEAPq5l3VwU
yokk8ckipeCKgw==
-----END CERTIFICATE-----