Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File:                     cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier:          qIliwnJ6+XKkU91FX0p7OEN6iS0pU/nK0YLdqqO0gQg=
Subject key identifier:   D7:02:A3:D6:DA:78:C1:D6:E8:67:33:52:C0:DA:FE:25:B8:C1:94:25
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer:       /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial:       01962E98D73DC734AB5C894EFE01F204FBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number:          06D0
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
                          2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: 31pw1UPtYn0v/hIndLxPT3/IufYq9oSBH0rChiaQJXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d7:3d:c7:34:ab:5c:89:4e:fe:01:f2:04:fb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=d702a3d6da78c1d6e8673352c0dafe25b8c19425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:44:8d:20:92:34:54:bb:78:69:dc:b6:1c:
                    8e:1f:59:53:ea:d5:74:30:62:57:83:0c:4d:b5:c6:
                    e2:b5:2d:76:28:1b:c2:a8:4b:6d:16:a6:6a:45:d6:
                    94:c3:15:a8:23:dc:ad:75:21:17:a4:a3:b9:c6:2f:
                    55:27:c6:7f:28:cf:5f:48:db:69:fc:9e:db:5d:ca:
                    94:23:52:ea:49:79:6b:0d:e5:13:b4:8a:20:60:3f:
                    61:0f:18:ca:9a:80:13:f5:39:00:f3:65:83:e9:87:
                    ef:65:6c:4f:a9:a4:43:94:f1:cb:ef:cb:fd:34:94:
                    29:6a:0c:41:81:48:db:7c:a3:6c:fc:af:a5:ab:9a:
                    75:50:27:5a:d8:44:bc:43:83:dc:ec:8e:3b:ec:94:
                    50:34:86:8b:83:c6:6f:a7:1d:71:1c:b0:b3:8b:79:
                    ff:c1:15:b7:4a:ec:68:c1:9d:25:97:fe:c9:d3:2c:
                    d9:99:2f:ca:2b:8e:ab:c4:39:95:cf:04:cc:42:ae:
                    64:bc:84:41:82:61:3c:ba:9d:4b:1a:87:31:ce:15:
                    7f:0e:b4:3a:81:d6:4c:69:2a:29:5b:d3:74:e7:fb:
                    d9:2e:21:fe:4d:91:1a:2e:48:5f:69:29:2b:dd:c2:
                    bd:1d:0b:24:ce:b9:59:4e:76:93:ce:22:c5:00:65:
                    51:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:A3:D6:DA:78:C1:D6:E8:67:33:52:C0:DA:FE:25:B8:C1:94:25
            X509v3 Authority Key Identifier:
                keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3e:34:15:e6:c4:9c:db:c7:01:9b:97:85:2e:e1:7c:bc:76:
         d9:58:16:8a:3a:60:04:d4:45:c2:66:e7:ba:81:61:be:fa:d9:
         f3:cc:ef:5b:05:72:4d:fc:11:36:46:9a:f2:52:66:1a:97:2f:
         24:e9:a1:cf:a7:78:0e:11:86:70:a0:60:b2:8d:2e:aa:6a:34:
         f2:e5:fa:9a:9c:17:2e:71:8b:e5:92:1d:5a:1f:98:79:c1:68:
         2b:f0:9e:79:f3:85:ca:3e:9a:1f:5a:59:5e:bc:df:22:c8:69:
         59:58:24:56:5c:7b:54:12:99:d4:85:85:8e:d6:2c:2e:e3:90:
         92:4c:ba:41:f9:ab:9a:25:8b:c8:19:e8:2a:f9:2c:37:7c:06:
         d1:7a:50:c5:72:61:7e:83:4a:b4:eb:d0:ce:d5:8d:31:6d:a4:
         cd:c6:b9:f9:6c:f6:02:71:bf:21:60:cc:95:7e:1a:66:08:41:
         86:65:5c:d0:d7:13:6d:26:30:cd:50:fd:f6:4f:bf:96:1d:b1:
         ca:ae:c0:94:43:4f:d2:0f:21:39:fc:66:e3:4b:0f:0f:6e:28:
         46:9a:c5:51:4b:a5:1d:74:a2:67:71:26:3f:63:c2:a9:4d:93:
         72:e0:17:ee:1b:4d:7a:82:d3:16:86:70:53:8a:92:41:48:2f:
         5c:f2:1f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNc9xzSrXIlO/gHyBPuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1
Njk2NjcwHhcNMjUwNDEzMTAwMTMwWhcNMjUwNDE0MTAwMTMwWjAzMTEwLwYDVQQD
EyhkNzAyYTNkNmRhNzhjMWQ2ZTg2NzMzNTJjMGRhZmUyNWI4YzE5NDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RdEjSCSNFS7eGncthyOH1lT6tV0
MGJXgwxNtcbitS12KBvCqEttFqZqRdaUwxWoI9ytdSEXpKO5xi9VJ8Z/KM9fSNtp
/J7bXcqUI1LqSXlrDeUTtIogYD9hDxjKmoAT9TkA82WD6YfvZWxPqaRDlPHL78v9
NJQpagxBgUjbfKNs/K+lq5p1UCda2ES8Q4Pc7I477JRQNIaLg8Zvpx1xHLCzi3n/
wRW3SuxowZ0ll/7J0yzZmS/KK46rxDmVzwTMQq5kvIRBgmE8up1LGocxzhV/DrQ6
gdZMaSopW9N05/vZLiH+TZEaLkhfaSkr3cK9HQskzrlZTnaTziLFAGVRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcCo9baeMHW6GczUsDa/iW4wZQlMB8GA1UdIwQY
MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt
NDZmZjdjZTJjMTQwLzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw
LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz40FebE
nNvHAZuXhS7hfLx22VgWijpgBNRFwmbnuoFhvvrZ88zvWwVyTfwRNkaa8lJmGpcv
JOmhz6d4DhGGcKBgso0uqmo08uX6mpwXLnGL5ZIdWh+YecFoK/CeefOFyj6aH1pZ
XrzfIshpWVgkVlx7VBKZ1IWFjtYsLuOQkky6QfmrmiWLyBnoKvksN3wG0XpQxXJh
foNKtOvQztWNMW2kzca5+Wz2AnG/IWDMlX4aZghBhmVc0NcTbSYwzVD99k+/lh2x
yq7AlENP0g8hOfxm40sPD24oRprFUUulHXSiZ3EmP2PCqU2TcuAX7htNeoLTFoZw
U4qSQUgvXPIfPA==
-----END CERTIFICATE-----