Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File:                     uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier:          +PXiM66/n4GhaPFWQ6UViiU+zYxc2la+WCrHw0bmO2k=
Subject key identifier:   BB:2E:F2:18:27:61:EA:40:FA:59:F6:9A:68:F8:84:E0:27:75:CD:AD
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer:       /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial:       01962E2B42E3B3EC42767AB0BE7A7315F9DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number:          0B2B
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
                          2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: 9Jg8eZKvS4WC+DXIy3u0uGmp8zZJH7o3pK4pl0R1zUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:42:e3:b3:ec:42:76:7a:b0:be:7a:73:15:f9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=bb2ef2182761ea40fa59f69a68f884e02775cdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:e3:26:d0:92:b2:44:96:1a:7e:90:c5:56:
                    e3:3b:85:7b:d6:9c:11:ae:4d:2b:8a:8f:bd:9e:3d:
                    fd:b1:48:8a:fb:50:e3:56:40:6f:0a:48:4f:7c:ff:
                    00:0b:56:d5:7f:72:40:ad:d1:43:e6:33:f5:c4:2e:
                    50:bf:5c:fa:8b:ac:de:75:9c:fc:6e:ae:33:f2:87:
                    70:b7:90:e6:31:57:6c:5b:c6:73:9f:13:4c:a0:c9:
                    80:3d:bb:98:08:61:33:c9:e3:21:5b:a7:3d:2f:1b:
                    e4:53:2a:e5:2e:d5:9c:e1:f7:fe:e4:dc:2d:78:04:
                    89:18:a6:03:9d:80:aa:25:8f:43:04:61:09:6e:0d:
                    22:7b:bd:c1:13:5b:61:7d:6b:28:a5:66:4b:e7:ff:
                    34:2e:80:c0:5e:db:d0:d6:1e:30:e4:ec:27:eb:ba:
                    06:04:c7:1d:7c:92:e0:0b:c1:61:cc:e5:d5:97:3e:
                    db:91:c8:28:25:c8:3b:57:89:f1:72:a0:f4:11:7b:
                    e2:7a:5e:ef:8b:ea:dd:2d:1c:ec:43:fc:c6:a9:34:
                    9c:9f:8d:0e:5e:70:6d:6e:ea:36:f8:bc:ea:0f:1e:
                    59:23:16:df:9b:f4:7a:7f:5a:e6:66:a8:10:94:43:
                    81:8e:e9:e0:64:13:5a:37:f7:a7:87:8f:8e:27:d6:
                    b3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:F2:18:27:61:EA:40:FA:59:F6:9A:68:F8:84:E0:27:75:CD:AD
            X509v3 Authority Key Identifier:
                keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:c5:57:5c:9c:d5:3e:75:c0:d1:3e:b7:ce:7a:fe:5a:28:
         5c:bd:8c:79:6c:2b:27:b2:f5:09:da:09:27:bc:ca:51:32:95:
         4a:c7:0a:36:7e:c1:b6:10:8e:84:86:e1:67:f9:f9:e8:5a:49:
         18:b1:1b:4f:62:eb:6a:11:49:e1:f5:29:55:44:9a:71:1e:e4:
         b1:ce:da:e9:08:a2:89:ec:99:e9:47:cd:61:56:ea:ed:6f:a7:
         ae:bf:a5:de:1a:95:4b:4d:ef:e4:3a:7a:76:f0:e5:52:f4:02:
         9c:3f:06:37:c3:b4:da:ee:91:c7:ae:5d:73:6b:3c:5f:4d:62:
         d9:1a:87:13:0a:0b:e2:40:89:31:4d:a4:a8:76:17:21:8a:59:
         7b:52:e7:3d:bf:10:3b:80:bc:9c:66:15:e9:0c:9e:36:50:75:
         81:71:45:ba:62:ad:1e:88:e2:28:f8:53:c9:2a:d0:df:7e:9c:
         87:7c:69:d7:d1:c7:9f:50:9b:60:60:ff:f1:ed:36:1a:73:af:
         ca:2a:69:42:8a:27:b4:c2:72:17:86:87:1d:63:14:49:43:f5:
         d6:34:55:86:96:ad:87:8b:50:d0:bc:00:ed:99:1c:f6:e0:91:
         1c:84:ff:e3:d7:d3:be:da:2a:bb:21:10:8a:fb:74:7b:a4:12:
         25:7e:eb:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0Ljs+xCdnqwvnpzFfneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh
MmE1MGYwHhcNMjUwNDEzMDgwMTQ5WhcNMjUwNDE0MDgwMTQ5WjAzMTEwLwYDVQQD
EyhiYjJlZjIxODI3NjFlYTQwZmE1OWY2OWE2OGY4ODRlMDI3NzVjZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrjJtCSskSWGn6QxVbjO4V71pwR
rk0rio+9nj39sUiK+1DjVkBvCkhPfP8AC1bVf3JArdFD5jP1xC5Qv1z6i6zedZz8
bq4z8odwt5DmMVdsW8ZznxNMoMmAPbuYCGEzyeMhW6c9LxvkUyrlLtWc4ff+5Nwt
eASJGKYDnYCqJY9DBGEJbg0ie73BE1thfWsopWZL5/80LoDAXtvQ1h4w5Own67oG
BMcdfJLgC8FhzOXVlz7bkcgoJcg7V4nxcqD0EXviel7vi+rdLRzsQ/zGqTScn40O
XnBtbuo2+LzqDx5ZIxbfm/R6f1rmZqgQlEOBjungZBNaN/enh4+OJ9azbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsu8hgnYepA+ln2mmj4hOAndc2tMB8GA1UdIwQY
MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt
ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm
LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwjFV1yc
1T51wNE+t856/looXL2MeWwrJ7L1CdoJJ7zKUTKVSscKNn7BthCOhIbhZ/n56FpJ
GLEbT2LrahFJ4fUpVUSacR7ksc7a6QiiieyZ6UfNYVbq7W+nrr+l3hqVS03v5Dp6
dvDlUvQCnD8GN8O02u6Rx65dc2s8X01i2RqHEwoL4kCJMU2kqHYXIYpZe1LnPb8Q
O4C8nGYV6QyeNlB1gXFFumKtHojiKPhTySrQ336ch3xp19HHn1CbYGD/8e02GnOv
yippQoontMJyF4aHHWMUSUP11jRVhpath4tQ0LwA7Zkc9uCRHIT/49fTvtoquyEQ
ivt0e6QSJX7rOw==
-----END CERTIFICATE-----