Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File:                     SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier:          Z9SvjOfb4HBSMBS8oDNV7BVbvxwde7unIDTXfJEoeNY=
Subject key identifier:   CD:9A:00:CC:9C:FE:05:3D:38:DD:D5:A1:5E:39:F6:E0:9A:F2:69:B8
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer:       /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial:       01962F7424CF9E6211DEF4ECD089E4E7EF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number:          14A2
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
                          2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
                          3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: Rc+PSGIML9LOc53+1yhY4vp2y+XZEnmsgjKhDch/xWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:24:cf:9e:62:11:de:f4:ec:d0:89:e4:e7:ef:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=cd9a00cc9cfe053d38ddd5a15e39f6e09af269b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:e4:aa:13:fc:b8:9a:5a:e0:36:20:1b:fb:
                    ac:f9:5b:d0:48:29:ec:aa:61:c6:53:e3:15:a5:51:
                    49:cd:c7:ef:c1:0b:62:b8:4b:8d:56:33:9b:61:fe:
                    ee:19:27:07:99:09:3a:b4:95:f3:9f:9f:a9:54:5d:
                    44:b7:bd:73:cb:ef:6a:7b:89:83:e5:54:b1:b3:7e:
                    35:00:54:33:5b:d2:a5:fe:4f:fb:f6:6e:75:19:97:
                    78:fa:32:ee:ce:76:c7:ae:ef:0d:94:b7:0f:b1:ef:
                    e4:aa:52:57:8f:4a:52:0f:fc:f4:ff:0e:ee:7b:1c:
                    57:dd:e1:44:9a:51:12:ed:5c:74:47:87:d5:de:9f:
                    10:b5:d2:29:07:37:ae:df:cb:21:33:bf:91:b8:bc:
                    a6:6d:a1:8e:f0:f6:44:6b:ec:2b:47:57:fd:67:06:
                    a1:07:ae:06:2f:57:80:07:d0:69:f5:4f:59:28:f6:
                    fd:a0:ff:19:9e:f9:61:47:c8:c0:55:90:c2:f4:b0:
                    1b:27:b4:ac:0b:ce:a5:f3:db:52:2e:3e:5b:07:54:
                    75:53:85:74:b1:82:e8:6b:94:a1:aa:48:4b:be:7e:
                    da:bc:cb:72:30:99:f4:f1:c8:c2:1b:6f:ae:ee:35:
                    43:b0:cd:2b:66:a3:32:64:44:4d:b6:f9:b9:7f:20:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:00:CC:9C:FE:05:3D:38:DD:D5:A1:5E:39:F6:E0:9A:F2:69:B8
            X509v3 Authority Key Identifier:
                keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:85:f9:29:ff:82:f3:8c:55:b4:4d:9d:e2:f5:6d:ad:b6:
         7c:90:e4:2b:05:29:48:20:4e:07:38:85:1b:11:5c:72:b9:e2:
         4f:06:51:b0:f6:f3:cd:9a:14:1d:5e:1e:cc:bc:52:72:95:6a:
         f3:de:80:53:d5:c0:f6:fd:01:67:fd:78:88:fc:dc:33:76:98:
         01:ae:81:4f:49:29:a6:2b:85:24:cc:85:13:4e:1f:a1:e1:bc:
         a3:4f:71:42:5d:5a:bc:89:de:f3:ee:29:cb:b0:c3:21:e2:ee:
         de:00:09:c3:53:a0:6f:3d:5e:84:cd:7b:34:d8:af:2b:52:e0:
         5f:aa:83:30:8c:64:e7:1b:ad:98:80:13:6a:4e:d7:07:b0:12:
         45:f0:db:bd:03:5c:b5:a1:11:5b:aa:ae:84:fa:16:a8:e5:21:
         93:96:cd:aa:d0:75:ac:14:70:32:69:97:8a:ac:2c:26:7d:36:
         56:01:2b:45:eb:d4:b7:ca:5a:28:72:5c:42:5f:10:70:87:42:
         09:3f:a9:ec:73:1e:2d:25:ee:04:f0:29:7c:11:4a:d3:79:9a:
         72:71:b5:9e:05:03:a9:66:d2:69:9c:54:da:c8:bc:59:59:d2:
         6f:25:db:7d:aa:d5:d4:94:fb:aa:ab:4a:fc:3e:d0:be:12:4a:
         e7:b1:d8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCTPnmIR3vTs0Ink5+9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjUwNDEzMTQwMTAyWhcNMjUwNDE0MTQwMTAyWjAzMTEwLwYDVQQD
EyhjZDlhMDBjYzljZmUwNTNkMzhkZGQ1YTE1ZTM5ZjZlMDlhZjI2OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXjkqhP8uJpa4DYgG/us+VvQSCns
qmHGU+MVpVFJzcfvwQtiuEuNVjObYf7uGScHmQk6tJXzn5+pVF1Et71zy+9qe4mD
5VSxs341AFQzW9Kl/k/79m51GZd4+jLuznbHru8NlLcPse/kqlJXj0pSD/z0/w7u
exxX3eFEmlES7Vx0R4fV3p8QtdIpBzeu38shM7+RuLymbaGO8PZEa+wrR1f9Zwah
B64GL1eAB9Bp9U9ZKPb9oP8ZnvlhR8jAVZDC9LAbJ7SsC86l89tSLj5bB1R1U4V0
sYLoa5ShqkhLvn7avMtyMJn08cjCG2+u7jVDsM0rZqMyZERNtvm5fyBP1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2aAMyc/gU9ON3VoV459uCa8mm4MB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6aF+Sn/
gvOMVbRNneL1ba22fJDkKwUpSCBOBziFGxFccrniTwZRsPbzzZoUHV4ezLxScpVq
896AU9XA9v0BZ/14iPzcM3aYAa6BT0kppiuFJMyFE04foeG8o09xQl1avIne8+4p
y7DDIeLu3gAJw1Ogbz1ehM17NNivK1LgX6qDMIxk5xutmIATak7XB7ASRfDbvQNc
taERW6quhPoWqOUhk5bNqtB1rBRwMmmXiqwsJn02VgErRevUt8paKHJcQl8QcIdC
CT+p7HMeLSXuBPApfBFK03macnG1ngUDqWbSaZxU2si8WVnSbyXbfarV1JT7qqtK
/D7QvhJK57HYjg==
-----END CERTIFICATE-----