Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File:                     rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier:          VeW9413mbqdVquy3IIHixn8Wg2QPk6cEBv0DXjxacqY=
Subject key identifier:   14:1B:BF:C9:23:47:07:E7:35:B2:F8:38:7F:D3:3B:99:77:C7:54:4D
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer:       /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial:       01962FAB415B7A3D0A8190543E285E681754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number:          0AF3
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
                          2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: XfOOaoJ2ttmy1/q/M7phep5BU5fbs8dkHJAiQzCYt5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:5b:7a:3d:0a:81:90:54:3e:28:5e:68:17:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=141bbfc9234707e735b2f8387fd33b9977c7544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:a6:01:8c:79:06:2a:7f:2c:34:50:13:d9:
                    b4:b5:fd:f7:1b:bc:de:a8:a8:c5:47:e0:88:4f:3e:
                    c0:c9:11:52:84:68:a8:d8:b6:52:d5:9b:fb:e6:a1:
                    cf:9b:eb:f0:44:eb:af:15:16:0d:cd:0a:2e:ba:90:
                    99:cc:14:57:69:63:c3:c3:dd:0e:0b:ec:9b:a6:aa:
                    b7:89:e0:ce:b4:2a:8b:ae:f9:d2:df:82:26:06:4a:
                    cf:2d:ba:d2:e0:02:8a:d1:02:a7:ba:4a:3d:0d:00:
                    8f:5f:e9:2a:71:95:4c:31:c4:d6:5c:05:bd:32:5a:
                    cb:01:e8:06:90:47:a3:4f:58:d6:dc:44:cb:3a:85:
                    cf:a9:4a:10:14:94:ff:52:f0:3d:e7:99:2b:20:e4:
                    80:d8:42:0a:f8:4d:c5:e9:a0:8b:8a:cc:59:d7:7d:
                    0e:62:5d:97:c6:b5:c7:2d:e5:85:b8:65:7b:1a:d3:
                    bd:1c:4e:45:98:90:5d:1b:55:e3:ae:7d:b3:2a:74:
                    5e:25:2b:fb:c9:94:9c:9e:6a:1e:8b:6f:98:4d:ae:
                    c6:55:c1:0d:39:67:c4:09:9a:e7:15:f8:8c:58:02:
                    a9:61:06:a5:cc:58:ec:d3:60:83:dd:70:79:07:aa:
                    e0:08:eb:7a:d6:0a:68:4c:e9:dc:aa:23:55:2c:0e:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1B:BF:C9:23:47:07:E7:35:B2:F8:38:7F:D3:3B:99:77:C7:54:4D
            X509v3 Authority Key Identifier:
                keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:ef:f2:5e:26:55:e0:8d:e0:48:1e:90:7f:02:09:62:93:
         9f:2f:96:e8:7d:ec:6b:c9:a5:7e:d2:af:61:d0:64:1b:89:0d:
         78:9f:7d:26:94:af:3a:7a:45:06:e8:2d:d6:84:ac:fc:79:9d:
         b9:e9:b3:c7:5f:a0:38:d5:72:5b:b5:f8:f0:d5:19:3f:b5:a2:
         4c:b3:0f:05:41:9d:87:87:c3:8c:f9:e5:a0:ea:01:0d:6a:8e:
         35:44:19:67:8f:67:97:5e:13:aa:ae:70:a4:33:28:a5:d8:f8:
         cc:c7:c3:7b:3a:b7:34:51:97:58:03:2b:82:70:b1:c4:06:f2:
         b8:62:e7:d2:30:10:5c:a9:b1:f0:cf:c4:9b:03:d0:07:35:1f:
         bb:af:16:e6:1b:a3:29:6a:93:5c:16:ce:48:69:5a:62:73:68:
         07:54:a9:90:1b:6c:1b:4c:c0:6a:c5:ae:71:73:2f:ac:ec:5b:
         21:22:d4:db:1f:d5:24:61:95:1d:d2:ee:38:1b:74:a8:7c:bc:
         3e:c1:5a:ed:68:eb:e6:f6:bf:8f:41:f7:d6:10:60:21:09:ba:
         cf:47:2a:6b:a7:76:35:cd:44:d8:e5:9c:a4:31:35:b4:a7:0f:
         8e:61:db:31:14:27:c9:22:e3:da:42:83:b2:8b:2b:7b:5e:c9:
         ad:d7:58:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0Fbej0KgZBUPiheaBdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz
MDE0NjAwHhcNMjUwNDEzMTUwMTE0WhcNMjUwNDE0MTUwMTE0WjAzMTEwLwYDVQQD
EygxNDFiYmZjOTIzNDcwN2U3MzViMmY4Mzg3ZmQzM2I5OTc3Yzc1NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OmmAYx5Bip/LDRQE9m0tf33G7ze
qKjFR+CITz7AyRFShGio2LZS1Zv75qHPm+vwROuvFRYNzQouupCZzBRXaWPDw90O
C+ybpqq3ieDOtCqLrvnS34ImBkrPLbrS4AKK0QKnuko9DQCPX+kqcZVMMcTWXAW9
MlrLAegGkEejT1jW3ETLOoXPqUoQFJT/UvA955krIOSA2EIK+E3F6aCLisxZ130O
Yl2XxrXHLeWFuGV7GtO9HE5FmJBdG1Xjrn2zKnReJSv7yZScnmoei2+YTa7GVcEN
OWfECZrnFfiMWAKpYQalzFjs02CD3XB5B6rgCOt61gpoTOncqiNVLA7D9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQbv8kjRwfnNbL4OH/TO5l3x1RNMB8GA1UdIwQY
MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt
MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj
LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbjv8l4m
VeCN4EgekH8CCWKTny+W6H3sa8mlftKvYdBkG4kNeJ99JpSvOnpFBugt1oSs/Hmd
uemzx1+gONVyW7X48NUZP7WiTLMPBUGdh4fDjPnloOoBDWqONUQZZ49nl14Tqq5w
pDMopdj4zMfDezq3NFGXWAMrgnCxxAbyuGLn0jAQXKmx8M/EmwPQBzUfu68W5huj
KWqTXBbOSGlaYnNoB1SpkBtsG0zAasWucXMvrOxbISLU2x/VJGGVHdLuOBt0qHy8
PsFa7Wjr5va/j0H31hBgIQm6z0cqa6d2Nc1E2OWcpDE1tKcPjmHbMRQnySLj2kKD
sosre17JrddYsg==
-----END CERTIFICATE-----