Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File:                     UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier:          zTiXQ28rwvqcd2jGLR0K9rFewES8/wmvm12TNwuRrNk=
Subject key identifier:   B7:55:04:A4:70:9D:10:A9:0F:3C:0F:56:D7:BD:55:17:E5:A6:C7:D3
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer:       /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial:       01962E2B40C6752367DA9AD6AA4265646EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
                          2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: tucTY3kewGL4MYtRaRnDlmbAGoRRCCrlyDRw0qQdHVQ=)
                          3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:40:c6:75:23:67:da:9a:d6:aa:42:65:64:6e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=b75504a4709d10a90f3c0f56d7bd5517e5a6c7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:f3:b7:f9:7d:be:62:32:b8:0b:f8:20:f0:
                    80:a8:7a:49:36:2a:9e:af:ad:94:15:73:27:67:9c:
                    94:6f:da:c1:5e:ab:96:ba:d5:e4:8e:61:0b:be:7e:
                    3c:43:ae:a3:dd:d5:1b:43:c0:82:f8:d0:80:b3:01:
                    ff:13:0d:ae:71:56:09:e7:09:50:95:15:f6:fb:18:
                    f5:f1:e0:8f:73:7f:a3:e6:5b:34:6a:e1:cb:12:fb:
                    f9:33:8d:2d:a3:06:72:b1:56:0d:35:63:53:2e:c3:
                    88:49:1c:14:30:02:b3:0f:06:5f:d1:20:c9:ee:3e:
                    0e:32:3f:42:9a:77:2e:9d:ff:c6:69:60:fe:0f:ae:
                    0c:40:3e:59:5b:2a:ac:42:07:68:05:78:fe:e2:eb:
                    e9:72:27:7d:d2:78:18:6b:7b:fe:09:f4:7f:71:e9:
                    08:8a:af:9c:f0:4a:7f:b7:04:e2:21:3d:6e:45:bc:
                    f7:1c:ae:e9:2c:42:3d:f3:c1:7f:a6:00:5e:60:d3:
                    bf:16:02:62:c2:5d:04:2e:62:61:98:d3:c5:a2:19:
                    22:a5:60:0b:f2:f9:33:ab:fc:23:a9:02:06:87:c6:
                    72:17:1f:1c:ce:b6:48:98:af:5a:83:39:83:0e:88:
                    cd:fb:99:ca:73:73:cb:8e:81:43:b0:71:4c:eb:80:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:55:04:A4:70:9D:10:A9:0F:3C:0F:56:D7:BD:55:17:E5:A6:C7:D3
            X509v3 Authority Key Identifier:
                keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:41:66:b0:11:16:2a:74:10:33:13:64:67:37:e5:a4:63:06:
         29:ca:fc:58:34:bc:fa:ac:2d:3e:67:79:df:ca:e6:5b:da:5a:
         d4:96:b3:ef:71:54:72:0f:95:e0:c3:a9:87:4a:78:ef:b0:fa:
         42:22:34:49:36:25:7d:0d:f8:5c:34:7a:fe:ae:33:e2:66:3b:
         00:93:66:60:96:af:9b:64:7b:4e:b8:e8:78:18:0b:ac:37:d6:
         c1:1e:a7:f9:93:ee:4c:a1:e5:d1:a4:a7:a5:56:3b:7d:56:b7:
         b4:18:07:d5:d4:01:f1:c4:05:79:d6:7b:61:1e:d2:1e:3d:76:
         cb:c9:5c:38:64:00:24:10:7a:a0:fd:b9:84:b0:57:ac:0f:40:
         16:9e:04:d3:f4:70:6f:10:6a:07:0c:88:5b:77:1c:79:83:50:
         1b:33:c1:1c:85:af:4d:4d:77:21:4e:c3:26:dd:6d:8a:a8:02:
         51:d3:32:a8:20:e0:ac:f6:6d:0f:25:90:e0:0c:c2:0f:86:00:
         be:d5:80:4a:39:fa:d9:dc:c1:80:76:62:94:38:92:f6:b3:fa:
         6d:68:f8:8e:78:10:d1:13:03:7b:07:37:37:ca:65:68:df:44:
         46:2b:e9:c0:5d:27:22:e0:66:26:f5:4e:5c:07:46:a9:17:d5:
         49:7e:8b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0DGdSNn2prWqkJlZG79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODFiODQxZjEyNzY5NDg5ZDVmZDM0M2I3MmJhNDRmOTBj
OTZmMzIwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EyhiNzU1MDRhNDcwOWQxMGE5MGYzYzBmNTZkN2JkNTUxN2U1YTZjN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rTzt/l9vmIyuAv4IPCAqHpJNiqe
r62UFXMnZ5yUb9rBXquWutXkjmELvn48Q66j3dUbQ8CC+NCAswH/Ew2ucVYJ5wlQ
lRX2+xj18eCPc3+j5ls0auHLEvv5M40towZysVYNNWNTLsOISRwUMAKzDwZf0SDJ
7j4OMj9Cmncunf/GaWD+D64MQD5ZWyqsQgdoBXj+4uvpcid90ngYa3v+CfR/cekI
iq+c8Ep/twTiIT1uRbz3HK7pLEI988F/pgBeYNO/FgJiwl0ELmJhmNPFohkipWAL
8vkzq/wjqQIGh8ZyFx8czrZImK9agzmDDojN+5nKc3PLjoFDsHFM64CVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdVBKRwnRCpDzwPVte9VRflpsfTMB8GA1UdIwQY
MBaAFFKBuEHxJ2lInV/TQ7crpE+QyW8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2It
ZmMyNWQ0NTVhZjg1LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xNDIyNWItYmY5NS00NWM5LThkN2ItZmMyNWQ0NTVhZjg1
LzEvVW9HNFFmRW5hVWlkWDlORHR5dWtUNURKYnpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0FmsBEW
KnQQMxNkZzflpGMGKcr8WDS8+qwtPmd538rmW9pa1Jaz73FUcg+V4MOph0p477D6
QiI0STYlfQ34XDR6/q4z4mY7AJNmYJavm2R7TrjoeBgLrDfWwR6n+ZPuTKHl0aSn
pVY7fVa3tBgH1dQB8cQFedZ7YR7SHj12y8lcOGQAJBB6oP25hLBXrA9AFp4E0/Rw
bxBqBwyIW3cceYNQGzPBHIWvTU13IU7DJt1tiqgCUdMyqCDgrPZtDyWQ4AzCD4YA
vtWASjn62dzBgHZilDiS9rP6bWj4jngQ0RMDewc3N8plaN9ERivpwF0nIuBmJvVO
XAdGqRfVSX6LTQ==
-----END CERTIFICATE-----