Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File:                     J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier:          zTCp4SBgcfEOuOEG8MIL8QsBxS4wMRbRW/MHvxSU5O8=
Subject key identifier:   16:A7:EF:2F:66:62:06:AE:43:F0:CD:3E:05:89:A4:E6:AE:83:28:F8
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer:       /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial:       01962E2AF152AF730112B19FFC65657BA072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number:          07CA
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
                          2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: J9uSnoDPlgFCr5WioAyFBLPC2ee6BchyySTaI7iTdVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:52:af:73:01:12:b1:9f:fc:65:65:7b:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=16a7ef2f666206ae43f0cd3e0589a4e6ae8328f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:5e:ff:47:01:4f:d7:45:5c:fa:07:a6:11:
                    12:ec:a4:ee:d8:eb:ed:45:9e:ab:47:a0:a8:26:e8:
                    8c:e2:ee:90:28:4a:9b:1a:1d:a9:17:48:33:0b:22:
                    cf:08:9b:12:dc:e1:a2:db:dd:58:ac:57:33:c9:84:
                    d9:2a:60:8b:09:be:52:44:2f:2a:d7:41:53:41:40:
                    82:ed:0f:6d:5c:2a:54:27:c7:d8:65:4a:31:0c:fc:
                    c5:34:44:52:75:30:0c:04:c5:3f:31:82:eb:4c:4f:
                    a8:20:5a:dc:5a:98:b1:95:a3:7d:dd:25:81:74:9a:
                    c8:f6:ba:52:19:4d:0d:af:8c:a2:9b:bf:39:db:de:
                    18:bb:82:e7:bd:bb:2c:88:d9:6f:10:09:9b:cb:b7:
                    12:e7:0d:98:23:b9:0d:80:2c:3a:4e:bd:f3:ce:bf:
                    b9:e4:c9:31:21:73:39:57:ae:c9:97:d6:ab:f9:01:
                    75:6c:13:a5:b7:b9:df:ab:95:00:a3:5b:1d:eb:4a:
                    a6:00:a2:5d:e1:02:61:7a:3a:02:3a:8a:6d:6a:a6:
                    4c:0f:68:08:08:3d:eb:5b:f3:da:cb:cf:4d:fe:59:
                    bf:6a:f1:b6:43:a5:0a:5f:a4:b1:a1:03:ac:5f:43:
                    1d:d5:69:e5:18:31:33:e0:4d:19:48:f8:b0:6f:36:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:EF:2F:66:62:06:AE:43:F0:CD:3E:05:89:A4:E6:AE:83:28:F8
            X509v3 Authority Key Identifier:
                keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:2b:72:af:97:f9:c5:ea:2c:f3:36:ce:38:3b:39:ed:b8:
         90:ca:9f:3d:c5:ec:df:c8:cb:f2:e1:fd:47:8c:0b:0e:40:ba:
         d5:db:11:78:c2:9b:7a:1e:97:d1:a7:87:d0:2d:4d:c1:46:06:
         90:e4:a3:b1:0f:e6:4d:f5:47:03:ff:aa:a2:ef:42:f9:2a:6b:
         6b:ef:d3:f9:70:60:6b:f1:bb:fa:fe:23:58:da:05:f6:ca:ea:
         d8:da:c0:d0:36:8e:1c:4d:44:70:ce:f0:47:7d:c7:43:95:29:
         ca:a8:26:95:5f:f9:95:c4:0f:a9:50:fc:25:f0:39:f0:3e:23:
         21:90:c2:5e:c9:a4:6f:f6:0e:87:26:4f:30:2e:86:7e:76:9b:
         ac:c5:63:56:b0:9c:e5:f6:84:cd:97:13:7d:15:08:82:2f:80:
         51:2c:47:15:ff:56:bd:f0:6b:5b:d0:13:81:5d:5c:13:cc:55:
         88:cd:d6:9d:ce:a6:d1:64:b6:ee:ab:b8:b7:6a:18:a1:15:a2:
         54:ff:0b:44:b1:76:3c:4d:62:b3:1e:43:19:bf:f5:8f:c1:e4:
         10:48:d9:45:0f:d0:99:a3:c1:02:76:bd:73:57:e7:35:af:b8:
         3c:d4:2e:9f:0b:64:8f:18:27:bf:a9:6a:06:10:2f:f7:ec:75:
         29:04:c5:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvFSr3MBErGf/GVle6ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy
Mzc0ZDAwHhcNMjUwNDEzMDgwMTI4WhcNMjUwNDE0MDgwMTI4WjAzMTEwLwYDVQQD
EygxNmE3ZWYyZjY2NjIwNmFlNDNmMGNkM2UwNTg5YTRlNmFlODMyOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyte/0cBT9dFXPoHphES7KTu2Ovt
RZ6rR6CoJuiM4u6QKEqbGh2pF0gzCyLPCJsS3OGi291YrFczyYTZKmCLCb5SRC8q
10FTQUCC7Q9tXCpUJ8fYZUoxDPzFNERSdTAMBMU/MYLrTE+oIFrcWpixlaN93SWB
dJrI9rpSGU0Nr4yim785294Yu4LnvbssiNlvEAmby7cS5w2YI7kNgCw6Tr3zzr+5
5MkxIXM5V67Jl9ar+QF1bBOlt7nfq5UAo1sd60qmAKJd4QJhejoCOoptaqZMD2gI
CD3rW/Pay89N/lm/avG2Q6UKX6SxoQOsX0Md1WnlGDEz4E0ZSPiwbzZmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBan7y9mYgauQ/DNPgWJpOaugyj4MB8GA1UdIwQY
MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt
NTM1YmY5YjFlOGI3LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3
LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFcrcq+X
+cXqLPM2zjg7Oe24kMqfPcXs38jL8uH9R4wLDkC61dsReMKbeh6X0aeH0C1NwUYG
kOSjsQ/mTfVHA/+qou9C+Spra+/T+XBga/G7+v4jWNoF9srq2NrA0DaOHE1EcM7w
R33HQ5UpyqgmlV/5lcQPqVD8JfA58D4jIZDCXsmkb/YOhyZPMC6GfnabrMVjVrCc
5faEzZcTfRUIgi+AUSxHFf9WvfBrW9ATgV1cE8xViM3Wnc6m0WS27qu4t2oYoRWi
VP8LRLF2PE1isx5DGb/1j8HkEEjZRQ/QmaPBAna9c1fnNa+4PNQunwtkjxgnv6lq
BhAv9+x1KQTFVw==
-----END CERTIFICATE-----