Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          BMdvwS7CQ2cmmmeWd2Rl8h+btIO3cL+UY56cEFdSlQg=
Subject key identifier:   4B:62:01:B0:3E:0E:4B:09:BF:53:1B:51:D5:23:69:48:E4:B0:84:FD
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       01962F06FFCE21A4408C558C346E3CEC9C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
                          2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: 0QPnm9eH44+wUT44ppsZgCQdcy2+WHK0HyuDaNqI+zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ff:ce:21:a4:40:8c:55:8c:34:6e:3c:ec:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=4b6201b03e0e4b09bf531b51d5236948e4b084fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:7c:b6:04:a0:13:f7:46:f1:d6:de:8c:9a:
                    bb:d8:91:c6:c2:db:06:a9:59:ea:7e:02:2f:33:54:
                    42:32:d6:11:60:f3:7d:0a:37:d6:78:63:a4:54:d9:
                    33:fb:c5:9f:fa:e1:58:21:35:9c:60:7f:85:08:99:
                    98:05:37:ce:b0:16:09:f8:29:f2:90:00:49:29:39:
                    01:6b:19:ee:96:f8:3b:cd:92:9a:c2:09:37:3f:87:
                    04:28:5b:1a:72:c9:35:bc:0e:c5:8a:3c:7c:47:2e:
                    d6:ba:e3:53:3b:7d:3e:00:cc:71:7f:d8:a0:62:94:
                    75:1a:81:0a:b9:d0:68:3f:37:0a:ac:31:3b:46:f6:
                    3e:55:a7:20:ea:67:ad:7b:a1:67:3a:e2:81:cf:2d:
                    2d:6d:12:22:85:83:cc:41:01:58:66:27:cf:22:73:
                    c9:4e:81:56:62:cd:51:14:6e:20:df:81:26:da:77:
                    5c:74:1b:09:d2:ce:83:8f:d6:86:3a:d6:60:c5:b9:
                    0b:b2:36:23:32:61:9f:24:f7:79:5f:81:4e:d8:53:
                    bd:77:20:31:aa:23:54:a9:2a:f1:01:d4:c0:3f:b6:
                    da:ab:92:8b:3e:85:bf:91:0e:c6:3a:03:07:a0:97:
                    84:3a:54:8f:ad:27:49:c1:bb:23:8b:fc:4c:9b:37:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:62:01:B0:3E:0E:4B:09:BF:53:1B:51:D5:23:69:48:E4:B0:84:FD
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:c0:1c:40:43:0b:a5:64:09:c5:d9:91:65:20:e0:9b:32:
         0a:7c:01:6e:68:5d:7c:1d:d7:20:e7:e6:1c:e3:93:86:88:cf:
         53:21:fe:35:c2:1e:1b:bf:a0:90:a5:bf:2c:60:38:4d:c2:cc:
         23:35:ec:a4:89:6e:f2:eb:cf:3e:91:12:7f:e5:f6:53:e5:83:
         9a:f6:50:25:e1:c4:d3:64:8c:0c:49:85:80:3d:73:ff:ab:30:
         9f:59:e3:03:4a:9a:89:31:c9:89:9e:ec:c0:0a:db:7b:38:70:
         0f:ed:1a:3d:81:b5:ed:4e:52:40:ef:01:5b:f1:7e:91:03:df:
         56:d3:13:29:f4:11:fb:6e:62:1c:04:0d:b9:ef:8d:43:82:02:
         ed:fa:1b:73:1d:e6:73:c6:43:c2:f7:42:54:a7:16:b2:c7:6f:
         a6:ac:3c:fd:53:21:cc:a6:4a:a1:56:c4:2c:9f:52:79:19:f1:
         70:ac:e9:b3:30:79:3f:bd:ca:3f:be:62:d5:ba:0f:cd:05:fc:
         c5:32:39:c1:da:6f:41:a9:fd:f9:6e:e0:93:c9:56:53:f1:ba:
         67:0f:67:a8:4d:23:b6:b0:f3:60:31:bf:b6:fe:3a:86:59:21:
         00:a7:16:e2:64:db:9b:de:f6:56:f7:6b:32:d6:07:3d:57:f4:
         fc:53:29:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBv/OIaRAjFWMNG487JyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj
MTgxYWUwHhcNMjUwNDEzMTIwMTQ5WhcNMjUwNDE0MTIwMTQ5WjAzMTEwLwYDVQQD
Eyg0YjYyMDFiMDNlMGU0YjA5YmY1MzFiNTFkNTIzNjk0OGU0YjA4NGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO18tgSgE/dG8dbejJq72JHGwtsG
qVnqfgIvM1RCMtYRYPN9CjfWeGOkVNkz+8Wf+uFYITWcYH+FCJmYBTfOsBYJ+Cny
kABJKTkBaxnulvg7zZKawgk3P4cEKFsacsk1vA7Fijx8Ry7WuuNTO30+AMxxf9ig
YpR1GoEKudBoPzcKrDE7RvY+Vacg6mete6FnOuKBzy0tbRIihYPMQQFYZifPInPJ
ToFWYs1RFG4g34Em2ndcdBsJ0s6Dj9aGOtZgxbkLsjYjMmGfJPd5X4FO2FO9dyAx
qiNUqSrxAdTAP7baq5KLPoW/kQ7GOgMHoJeEOlSPrSdJwbsji/xMmzd7ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtiAbA+DksJv1MbUdUjaUjksIT9MB8GA1UdIwQY
MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt
OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3
LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFLAHEBD
C6VkCcXZkWUg4JsyCnwBbmhdfB3XIOfmHOOThojPUyH+NcIeG7+gkKW/LGA4TcLM
IzXspIlu8uvPPpESf+X2U+WDmvZQJeHE02SMDEmFgD1z/6swn1njA0qaiTHJiZ7s
wArbezhwD+0aPYG17U5SQO8BW/F+kQPfVtMTKfQR+25iHAQNue+NQ4IC7fobcx3m
c8ZDwvdCVKcWssdvpqw8/VMhzKZKoVbELJ9SeRnxcKzpszB5P73KP75i1boPzQX8
xTI5wdpvQan9+W7gk8lWU/G6Zw9nqE0jtrDzYDG/tv46hlkhAKcW4mTbm972Vvdr
MtYHPVf0/FMp9g==
-----END CERTIFICATE-----