Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File:                     SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier:          IYrB2OL79CyMq+rtPq24Gitj0P8Q6JKNWtfXbL0W+bY=
Subject key identifier:   39:73:DC:D8:C4:6D:21:9F:46:70:98:FC:87:02:B1:0C:27:8C:2E:3A
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer:       /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial:       01962F3D6CB0DFE9877D6FE58ABA278D198F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=)
                          2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: FNZZ1jOJop7/rEX1bob1dOgLhSWntCTbGOboQT7Nn4Q=)
                          3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=)
                          4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:b0:df:e9:87:7d:6f:e5:8a:ba:27:8d:19:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=3973dcd8c46d219f467098fc8702b10c278c2e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:28:20:81:6a:ec:a8:41:02:6c:74:b1:28:
                    23:97:9f:4c:5b:bd:34:b7:db:1d:99:23:e4:32:08:
                    38:fe:e0:d4:05:b0:c4:f6:bb:50:93:dc:a0:28:be:
                    a3:bc:b0:ca:e3:4f:de:08:1d:ea:c4:11:4e:1d:15:
                    7d:5d:ea:97:db:fd:0a:1e:cb:a1:05:a6:9c:6c:59:
                    06:80:6f:3a:57:39:a1:c3:8c:f3:1f:4b:ec:f0:58:
                    e6:28:b7:82:0c:a2:21:e4:5c:ec:eb:41:c6:b1:85:
                    de:a1:ac:3d:ec:b2:12:0e:b1:b9:1b:4d:01:c5:3d:
                    eb:39:1c:74:b7:cc:2c:49:ba:dd:6a:5a:cf:3f:0e:
                    6c:94:4a:89:a1:6f:47:64:13:01:e1:a8:08:77:64:
                    56:8a:0a:be:3f:09:12:11:67:d6:7a:55:a1:32:39:
                    35:8d:04:2b:c6:6f:4f:06:5d:bd:93:e5:cb:6e:e3:
                    ec:e1:f0:03:f4:ca:4d:1f:3c:7b:e6:5f:de:8a:d2:
                    f3:ce:f0:4d:05:15:07:8d:5c:cb:d9:31:e6:b8:06:
                    ae:65:a9:98:15:1b:e9:f3:fb:31:ac:e5:48:75:ef:
                    25:59:e4:41:c3:09:b8:c8:21:e3:d2:e5:e6:73:3d:
                    15:6c:53:e3:10:01:3d:fd:67:fa:7e:ad:04:d9:a7:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:DC:D8:C4:6D:21:9F:46:70:98:FC:87:02:B1:0C:27:8C:2E:3A
            X509v3 Authority Key Identifier:
                keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:60:9a:cc:69:b8:54:2d:ca:49:62:2d:1f:d0:14:49:32:
         eb:4c:c0:34:52:5d:11:c6:84:fc:c6:35:9b:4d:15:a1:56:d4:
         a0:c7:ee:be:94:cd:34:b0:ef:e6:67:95:8e:5b:7e:68:f6:ff:
         0c:a3:9e:0f:d6:9c:c8:54:83:5d:f0:74:8c:1c:64:37:04:19:
         8a:9c:25:33:f2:86:32:2d:0b:09:5a:3f:0c:70:11:9b:ac:6d:
         c0:8a:96:2d:86:1a:04:5a:87:55:db:ba:15:3f:fa:6b:1f:63:
         56:66:7d:56:a8:b4:41:fd:14:91:25:00:1a:8e:7a:f4:03:1e:
         a7:3e:64:ae:22:46:f0:43:e7:66:b4:90:4c:da:07:22:40:00:
         2f:e6:6c:cd:b4:d7:ec:39:59:dc:e5:d6:41:db:bc:7b:07:f1:
         32:38:1d:57:47:19:4d:65:3d:1f:a9:db:b1:c3:8d:3b:32:40:
         f0:50:d2:4f:6a:4f:5c:8d:5b:4c:34:bd:9f:51:5a:cc:b2:67:
         95:81:70:ba:e3:60:3b:ca:d8:32:04:cc:14:8e:0b:04:fb:f1:
         a2:15:11:e8:ff:12:ee:3d:88:84:87:9e:da:27:2a:e0:df:d6:
         79:8b:38:45:25:6f:d2:a9:27:36:ca:77:11:60:12:93:fc:40:
         82:f3:2d:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWyw3+mHfW/lironjRmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi
NWQ1YzkwHhcNMjUwNDEzMTMwMTE2WhcNMjUwNDE0MTMwMTE2WjAzMTEwLwYDVQQD
EygzOTczZGNkOGM0NmQyMTlmNDY3MDk4ZmM4NzAyYjEwYzI3OGMyZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt38oIIFq7KhBAmx0sSgjl59MW700
t9sdmSPkMgg4/uDUBbDE9rtQk9ygKL6jvLDK40/eCB3qxBFOHRV9XeqX2/0KHsuh
BaacbFkGgG86Vzmhw4zzH0vs8FjmKLeCDKIh5Fzs60HGsYXeoaw97LISDrG5G00B
xT3rORx0t8wsSbrdalrPPw5slEqJoW9HZBMB4agId2RWigq+PwkSEWfWelWhMjk1
jQQrxm9PBl29k+XLbuPs4fAD9MpNHzx75l/eitLzzvBNBRUHjVzL2THmuAauZamY
FRvp8/sxrOVIde8lWeRBwwm4yCHj0uXmcz0VbFPjEAE9/Wf6fq0E2ad0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlz3NjEbSGfRnCY/IcCsQwnjC46MB8GA1UdIwQY
MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt
NDljNmZkYmJhZmI3LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3
LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAxgmsxp
uFQtykliLR/QFEky60zANFJdEcaE/MY1m00VoVbUoMfuvpTNNLDv5meVjlt+aPb/
DKOeD9acyFSDXfB0jBxkNwQZipwlM/KGMi0LCVo/DHARm6xtwIqWLYYaBFqHVdu6
FT/6ax9jVmZ9Vqi0Qf0UkSUAGo569AMepz5kriJG8EPnZrSQTNoHIkAAL+ZszbTX
7DlZ3OXWQdu8ewfxMjgdV0cZTWU9H6nbscONOzJA8FDST2pPXI1bTDS9n1FazLJn
lYFwuuNgO8rYMgTMFI4LBPvxohUR6P8S7j2IhIee2icq4N/WeYs4RSVv0qknNsp3
EWASk/xAgvMt3Q==
-----END CERTIFICATE-----