Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File:                     u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier:          mSTIE8cboIzDo6D/tYs/McSrxjW/tTvSzA4ifDpgMm0=
Subject key identifier:   D3:FA:2B:5D:E4:22:72:41:09:97:F2:B3:39:ED:EE:FC:19:C1:EB:65
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer:       /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial:       01962E98D5FEE029D7BCBD818898F3CBA099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number:          027A
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
                          2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
                          3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
                          4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: 4Dzw/nAYJHDq1ibqpu30bNb3bQu2qWqipsbDGiLixk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:fe:e0:29:d7:bc:bd:81:88:98:f3:cb:a0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=d3fa2b5de42272410997f2b339edeefc19c1eb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:04:22:76:32:85:b8:6f:c2:79:56:83:7f:
                    23:98:6a:f5:21:02:5c:13:03:5c:47:83:ae:0c:fc:
                    f0:64:ad:0e:24:b7:8f:7b:c3:8e:99:36:8d:e3:6f:
                    e2:a0:05:13:71:f3:41:30:55:a4:c8:65:a1:57:35:
                    4c:af:ec:87:c5:5d:03:41:de:8e:95:e6:a6:3f:7e:
                    71:1f:c1:8c:79:84:a6:36:d5:f4:0f:22:47:4b:d9:
                    78:4c:ae:66:d3:65:a1:59:94:46:ff:c0:70:21:e6:
                    cc:95:72:30:12:ae:8a:e0:42:d7:19:cd:4b:69:e4:
                    e0:1f:eb:7e:65:bf:cc:f4:a5:9c:35:f5:a0:7f:d8:
                    96:43:f3:f7:d5:89:01:8a:14:42:7d:e2:9d:b0:9c:
                    79:9c:fa:8d:03:1f:1b:31:31:34:4e:6c:32:1e:c5:
                    d1:2d:46:5d:ae:8b:3b:49:25:ef:eb:54:ef:81:9b:
                    89:53:52:d8:3c:f1:85:af:cc:f7:4c:56:33:94:a8:
                    ca:0d:bc:81:6c:b5:56:7d:4c:a2:e9:e9:9c:0d:36:
                    e5:9a:15:72:c7:37:e2:74:88:46:9f:e5:52:d3:15:
                    24:e9:d4:ad:67:40:3b:44:91:9b:3b:b1:68:60:6f:
                    a5:8c:3f:24:96:10:ae:0d:c1:c7:d8:91:7e:3d:f4:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:2B:5D:E4:22:72:41:09:97:F2:B3:39:ED:EE:FC:19:C1:EB:65
            X509v3 Authority Key Identifier:
                keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:8f:66:28:ad:03:f9:c1:54:c6:2a:94:00:cb:11:72:16:
         94:93:0d:f5:0b:7a:b1:d9:39:8c:c3:69:4b:93:1a:ca:1a:e9:
         23:8c:48:0d:e7:27:25:65:87:9b:79:31:43:cc:1e:6e:7a:de:
         8b:36:f7:11:d5:62:ae:d6:36:d9:94:08:88:9d:94:70:8b:28:
         29:a8:98:09:34:ff:90:5b:36:dc:7b:73:43:82:94:8d:b2:11:
         65:ac:03:be:ff:3e:77:0f:78:04:51:8e:a0:d6:b6:c5:07:a3:
         ef:6f:05:c6:e0:db:0b:d5:ed:ca:d1:2b:35:63:a3:ec:e3:6e:
         d0:5e:70:9a:ec:cf:72:d3:e7:a0:19:08:dd:3e:2b:49:a5:22:
         8e:0f:16:5d:80:d4:36:fd:bf:3e:7d:ec:ca:d3:7b:eb:3c:5f:
         de:0c:2b:93:e5:97:de:5c:76:96:dd:b4:b0:64:dc:66:9b:ac:
         5d:18:45:92:9d:0c:61:81:51:05:3b:4b:7a:06:70:b0:c5:e3:
         62:43:a5:8c:6b:87:83:d2:9f:1d:01:b2:3c:a9:db:6a:e1:b0:
         d4:9b:5d:f6:1e:1a:91:6f:46:96:73:d2:69:77:67:7e:ff:51:
         9f:64:8a:c1:33:53:89:ce:64:0f:19:df:b3:cf:e5:df:e2:dd:
         87:75:e5:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNX+4CnXvL2BiJjzy6CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjUwNDEzMTAwMTMwWhcNMjUwNDE0MTAwMTMwWjAzMTEwLwYDVQQD
EyhkM2ZhMmI1ZGU0MjI3MjQxMDk5N2YyYjMzOWVkZWVmYzE5YzFlYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVoEInYyhbhvwnlWg38jmGr1IQJc
EwNcR4OuDPzwZK0OJLePe8OOmTaN42/ioAUTcfNBMFWkyGWhVzVMr+yHxV0DQd6O
leamP35xH8GMeYSmNtX0DyJHS9l4TK5m02WhWZRG/8BwIebMlXIwEq6K4ELXGc1L
aeTgH+t+Zb/M9KWcNfWgf9iWQ/P31YkBihRCfeKdsJx5nPqNAx8bMTE0TmwyHsXR
LUZdros7SSXv61TvgZuJU1LYPPGFr8z3TFYzlKjKDbyBbLVWfUyi6emcDTblmhVy
xzfidIhGn+VS0xUk6dStZ0A7RJGbO7FoYG+ljD8klhCuDcHH2JF+PfRIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP6K13kInJBCZfysznt7vwZwetlMB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2ePZiit
A/nBVMYqlADLEXIWlJMN9Qt6sdk5jMNpS5MayhrpI4xIDecnJWWHm3kxQ8webnre
izb3EdVirtY22ZQIiJ2UcIsoKaiYCTT/kFs23HtzQ4KUjbIRZawDvv8+dw94BFGO
oNa2xQej728FxuDbC9XtytErNWOj7ONu0F5wmuzPctPnoBkI3T4rSaUijg8WXYDU
Nv2/Pn3sytN76zxf3gwrk+WX3lx2lt20sGTcZpusXRhFkp0MYYFRBTtLegZwsMXj
YkOljGuHg9KfHQGyPKnbauGw1Jtd9h4akW9GlnPSaXdnfv9Rn2SKwTNTic5kDxnf
s8/l3+Ldh3Xl6w==
-----END CERTIFICATE-----