Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File:                     tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier:          ptc4PUeHHMcL+kwPKhWr3gOGTJxQzN3Mm6Gv+9VZhPc=
Subject key identifier:   BB:A1:FD:18:D0:1B:91:10:AE:65:C4:8B:FC:CB:77:91:C5:F0:EF:FB
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer:       /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial:       01962E2B3EAA45097643EF09679E35165FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=)
                          2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
                          3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=)
                          4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: U8hvl8hokAsNrqrRxDsF47j9M1Zxe5T+1g0OW4x6q0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:aa:45:09:76:43:ef:09:67:9e:35:16:5f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=bba1fd18d01b9110ae65c48bfccb7791c5f0effb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:5c:45:79:bb:22:5c:03:2d:17:0e:b6:29:
                    f7:0d:f9:09:6c:b4:72:af:2d:1c:2a:da:0e:a0:26:
                    28:25:8c:7a:52:aa:06:c2:29:8c:dd:f0:7d:29:43:
                    ae:c8:43:e8:ea:c5:42:30:a7:87:a5:6c:89:5c:64:
                    90:12:cb:fb:7c:ed:3b:cd:bd:79:22:4a:ee:7c:a3:
                    b7:7a:9c:0d:8c:3f:e1:ec:04:f3:ae:ac:3d:25:e6:
                    87:6a:3a:4a:f7:a8:de:12:91:00:78:c8:0f:2e:f0:
                    dd:d2:2f:59:d8:15:5f:6d:13:e7:8e:8a:12:08:1a:
                    65:2d:de:f2:34:1c:b7:bb:13:48:2a:f6:03:a4:cd:
                    1b:c0:5f:55:98:8e:08:96:bf:7f:15:8f:25:05:52:
                    60:fc:d6:d1:01:1c:22:71:1c:1e:9f:93:0c:14:94:
                    87:aa:00:3d:dc:b0:9b:94:d0:aa:28:60:17:0e:d5:
                    9b:80:c5:05:4d:a2:36:d2:90:8f:a9:24:f2:17:8c:
                    67:66:e2:cf:dd:78:24:c1:85:7c:48:76:8d:88:27:
                    09:c0:a1:6a:f9:34:a1:e7:fc:c2:7f:3a:1e:69:bd:
                    61:cf:e6:84:aa:5f:17:41:33:36:16:b6:84:da:01:
                    c6:27:6d:d6:70:86:96:56:33:fb:ff:0f:60:95:cd:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A1:FD:18:D0:1B:91:10:AE:65:C4:8B:FC:CB:77:91:C5:F0:EF:FB
            X509v3 Authority Key Identifier:
                keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:2c:54:64:c6:47:2c:58:6e:45:17:27:b3:cc:36:df:65:
         00:20:46:44:c2:88:fe:be:16:a6:26:d8:db:af:6e:3f:ce:83:
         78:e7:32:e2:d2:31:ee:e4:b1:ea:c4:4a:77:4e:bd:6c:d0:e0:
         38:f3:59:29:a8:d5:ae:25:1f:f6:59:80:06:81:34:ac:6d:68:
         5c:a5:59:e1:23:c4:03:7c:05:0a:ab:3d:d4:2e:8f:d2:c8:a2:
         7d:39:84:ac:b3:7b:0e:e5:11:c6:3e:7a:29:29:74:b5:60:3b:
         38:11:50:35:38:35:c7:5d:59:cc:cd:ba:35:ab:a3:93:7c:47:
         a7:c2:15:6e:4f:2f:34:ce:c6:a8:b1:a6:7b:e7:7e:18:87:bc:
         d8:13:70:2c:fb:2c:97:a0:d2:80:0e:95:da:ca:f8:51:31:2e:
         03:62:be:88:d8:93:1f:07:ac:ac:e1:fe:03:33:a8:31:25:c8:
         9e:6c:e1:a1:c2:e7:b6:25:f0:77:79:f3:13:4e:f3:5f:b2:d1:
         d8:a2:3c:02:bd:11:07:4b:e0:16:1f:6e:20:8a:f3:f5:b8:7c:
         4b:fb:15:a9:80:ac:8f:b9:97:37:22:30:42:84:78:73:88:21:
         ee:57:dc:88:4c:54:18:a2:ea:52:63:d5:99:9f:e6:f4:ca:25:
         e3:bd:65:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKz6qRQl2Q+8JZ541Fl/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw
ZDVkN2EwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EyhiYmExZmQxOGQwMWI5MTEwYWU2NWM0OGJmY2NiNzc5MWM1ZjBlZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpJcRXm7IlwDLRcOtin3DfkJbLRy
ry0cKtoOoCYoJYx6UqoGwimM3fB9KUOuyEPo6sVCMKeHpWyJXGSQEsv7fO07zb15
IkrufKO3epwNjD/h7ATzrqw9JeaHajpK96jeEpEAeMgPLvDd0i9Z2BVfbRPnjooS
CBplLd7yNBy3uxNIKvYDpM0bwF9VmI4Ilr9/FY8lBVJg/NbRARwicRwen5MMFJSH
qgA93LCblNCqKGAXDtWbgMUFTaI20pCPqSTyF4xnZuLP3XgkwYV8SHaNiCcJwKFq
+TSh5/zCfzoeab1hz+aEql8XQTM2FraE2gHGJ23WcIaWVjP7/w9glc2hrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuh/RjQG5EQrmXEi/zLd5HF8O/7MB8GA1UdIwQY
MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt
MGM0OTU0NzdjYTEwLzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw
LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMQsVGTG
RyxYbkUXJ7PMNt9lACBGRMKI/r4WpibY269uP86DeOcy4tIx7uSx6sRKd069bNDg
OPNZKajVriUf9lmABoE0rG1oXKVZ4SPEA3wFCqs91C6P0siifTmErLN7DuURxj56
KSl0tWA7OBFQNTg1x11ZzM26Naujk3xHp8IVbk8vNM7GqLGme+d+GIe82BNwLPss
l6DSgA6V2sr4UTEuA2K+iNiTHwesrOH+AzOoMSXInmzhocLntiXwd3nzE07zX7LR
2KI8Ar0RB0vgFh9uIIrz9bh8S/sVqYCsj7mXNyIwQoR4c4gh7lfciExUGKLqUmPV
mZ/m9Mol471lJw==
-----END CERTIFICATE-----