Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          EHoTohQuCjOISZ6q14LS/p/vt2j08BTh9PW++/rGfaI=
Subject key identifier:   EB:E0:F9:1D:A3:40:EE:81:B2:95:58:97:75:79:FA:6C:93:F1:1D:CE
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       01962E2B420EEDED3A40924AB54086D8FB6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          1507
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 1-dpFpZ66BUopKTWddAy3aYd5Q58.roa (hash: a/nFyI+oVdi7douUuLnGlPqM2YOH9iXTA2Ltk7+EQUM=)
                          2: DL1hBwC058Ly5gbOYmTudqMnhLY.roa (hash: ZP95RnK2lnoKaBDaVLfKRWdtbqYZIJodq0FZ93fqmj4=)
                          3: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: odOaH3xbRVVT86SfqXdiaP5aHoGX9k/nhdCACt5e9Ks=)
                          4: TSdQZeiJv87sxq_OJ-PJSQE8GTQ.roa (hash: zeHI0YzPke/O83NDkRPiKpR8/sA4EMZWB7tgWAf8HNc=)
                          5: YG4GH2kbor4nZ_HdlU4bXsM_ISU.roa (hash: orPHPnq001m59xqGhWWhOTcNNv+UhgU5D7ZAydlYwJ0=)
                          6: _YciLAUMll_l6Ad-S-3jEr-WUP0.roa (hash: YLNVgwBOiutPhe7HbfVw0eYS7E9cfJJEs9zT8+FOZFI=)
                          7: ct-_W27EwoC0fOGDJoYPaUOCh1k.roa (hash: Ry7d3ypfHQ+1XBY6nTPep5IZIfXf1osPEMavue76/1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:0e:ed:ed:3a:40:92:4a:b5:40:86:d8:fb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=ebe0f91da340ee81b29558977579fa6c93f11dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:80:f8:14:cf:6e:65:a7:d7:6d:b2:0c:67:
                    66:15:05:75:1c:18:98:f9:30:4f:8f:4a:a6:6a:70:
                    1a:fe:f3:27:1b:19:66:24:a3:43:ba:7b:e2:7f:fe:
                    e7:57:84:56:a3:58:0d:b2:f9:db:70:22:c3:07:55:
                    e7:29:06:4f:53:1e:c0:3f:e1:39:e8:8c:74:fe:8d:
                    35:2f:43:db:e9:37:ae:af:fc:84:18:75:13:a9:4a:
                    eb:37:f2:39:9f:63:2d:8f:9b:81:eb:92:e1:05:b8:
                    ae:4d:1b:1c:d0:17:1c:e7:76:87:46:78:c7:16:e7:
                    ae:66:b1:0f:d7:b7:60:c5:04:38:05:23:df:6b:6b:
                    8e:73:b2:cc:44:0a:c3:de:91:d9:2b:6b:cc:89:43:
                    f0:ab:34:bd:54:ea:2e:ac:04:ec:14:9e:66:d9:b3:
                    33:d1:40:61:85:6f:25:03:04:85:cb:48:53:ef:49:
                    dc:e5:f4:0c:ce:a1:d6:92:77:f6:9b:93:9b:4f:75:
                    dc:08:86:ab:61:20:d5:bd:b5:2f:c1:e1:21:22:f5:
                    8a:b3:fc:ef:6f:b1:1f:6d:30:ed:5e:e5:03:58:1b:
                    1e:8a:7d:9b:16:c1:79:15:ff:96:0a:a0:a4:3b:b9:
                    a4:e8:09:10:e0:6a:02:17:3f:6a:7c:fc:35:a3:da:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E0:F9:1D:A3:40:EE:81:B2:95:58:97:75:79:FA:6C:93:F1:1D:CE
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:b4:c9:ee:38:c3:d0:7f:55:b2:46:9e:b3:94:0f:10:37:
         82:62:c0:36:e0:90:75:ab:4b:3c:b3:ae:53:56:62:63:ae:f7:
         5c:e1:ae:ce:2b:bf:1c:a0:f6:9e:f4:7c:ad:7d:01:17:e3:6c:
         17:15:ff:8a:70:e5:ca:20:78:da:d5:da:22:b7:13:a2:93:e3:
         b4:b0:c1:bc:f3:e2:e5:1f:71:50:73:a8:38:92:f1:81:72:e3:
         6a:51:1d:7e:03:bf:84:0a:b1:35:4f:bf:77:3b:b2:1c:9c:b0:
         68:41:2d:1d:c6:24:f5:ff:03:1f:04:72:c2:46:f8:02:05:01:
         fb:5f:46:d5:05:e1:16:b4:1a:8c:46:17:51:b3:af:87:96:0a:
         64:0e:ff:0a:37:c7:48:75:e7:fa:6f:d5:5f:0b:30:29:9d:6a:
         4d:dd:86:ed:12:37:86:20:97:dd:bd:4b:fd:e8:4c:0b:1d:8c:
         a6:f1:ff:64:0e:33:e7:3e:f9:2b:8f:00:f4:53:98:a0:72:b5:
         34:29:15:fc:39:4e:02:41:7f:4a:97:f4:4b:78:95:d8:6a:85:
         cd:76:d6:b7:2b:1f:ba:08:e4:00:5a:39:c1:73:47:97:50:e9:
         9d:d6:07:d7:9a:87:51:9f:25:67:fa:02:11:d1:bb:d6:0b:2e:
         dd:a3:62:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0IO7e06QJJKtUCG2PtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EyhlYmUwZjkxZGEzNDBlZTgxYjI5NTU4OTc3NTc5ZmE2YzkzZjExZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BiA+BTPbmWn122yDGdmFQV1HBiY
+TBPj0qmanAa/vMnGxlmJKNDunvif/7nV4RWo1gNsvnbcCLDB1XnKQZPUx7AP+E5
6Ix0/o01L0Pb6Teur/yEGHUTqUrrN/I5n2Mtj5uB65LhBbiuTRsc0Bcc53aHRnjH
FueuZrEP17dgxQQ4BSPfa2uOc7LMRArD3pHZK2vMiUPwqzS9VOourATsFJ5m2bMz
0UBhhW8lAwSFy0hT70nc5fQMzqHWknf2m5ObT3XcCIarYSDVvbUvweEhIvWKs/zv
b7EfbTDtXuUDWBsein2bFsF5Ff+WCqCkO7mk6AkQ4GoCFz9qfPw1o9oovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvg+R2jQO6BspVYl3V5+myT8R3OMB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/G0ye44
w9B/VbJGnrOUDxA3gmLANuCQdatLPLOuU1ZiY673XOGuziu/HKD2nvR8rX0BF+Ns
FxX/inDlyiB42tXaIrcTopPjtLDBvPPi5R9xUHOoOJLxgXLjalEdfgO/hAqxNU+/
dzuyHJywaEEtHcYk9f8DHwRywkb4AgUB+19G1QXhFrQajEYXUbOvh5YKZA7/CjfH
SHXn+m/VXwswKZ1qTd2G7RI3hiCX3b1L/ehMCx2MpvH/ZA4z5z75K48A9FOYoHK1
NCkV/DlOAkF/Spf0S3iV2GqFzXbWtysfugjkAFo5wXNHl1DpndYH15qHUZ8lZ/oC
EdG71gsu3aNiWA==
-----END CERTIFICATE-----