Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File:                     dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier:          6kFVLwiBHvGjE7KKGfVN+g6/Z+hDJ4WNNitQDfSpx60=
Subject key identifier:   5F:52:83:ED:69:14:3E:13:A1:E0:B8:A8:AA:C4:79:12:BA:9F:FE:2C
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer:       /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial:       01962FAB4926449C3640D40105E73D56CE0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
                          2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: oiPt8A7LkqzV3nw0Ojk60KjVTcdgSJcSdC0wWs4Xmlg=)
                          3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:26:44:9c:36:40:d4:01:05:e7:3d:56:ce:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=5f5283ed69143e13a1e0b8a8aac47912ba9ffe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:da:5d:26:44:1f:ea:aa:4d:0c:3d:8c:75:
                    54:9c:07:ac:11:aa:91:b2:9f:c8:e4:e5:bb:4e:24:
                    ed:6b:d6:d6:35:89:5d:36:00:d4:2c:f5:3c:52:d5:
                    ed:4f:9e:bd:03:69:ea:b7:1b:37:44:52:ab:b4:fa:
                    2e:06:08:ea:f2:30:55:cd:bc:77:7a:e6:e7:f0:f0:
                    13:bd:e5:2a:19:51:5f:3e:40:3f:02:24:01:f3:51:
                    f4:a5:74:02:17:33:ef:62:05:b5:63:34:b0:18:b2:
                    db:16:9b:ee:3c:5d:1e:39:50:4e:5c:9e:77:d1:d3:
                    3a:82:79:02:b9:5c:53:34:89:4f:a2:d8:0d:ce:44:
                    48:67:52:95:06:bd:5e:21:30:79:56:19:96:61:d4:
                    c4:05:7c:be:04:23:8d:92:ac:dc:50:2b:2c:9f:dd:
                    bf:cc:e5:66:eb:e7:c8:9e:b0:b6:b0:77:75:30:f3:
                    74:88:58:82:d6:77:35:81:80:84:19:ce:73:ce:9b:
                    ba:d3:55:d2:38:2c:48:a5:40:a5:a1:1a:90:a9:20:
                    ae:82:ec:a6:75:f2:d2:96:5a:5a:00:d9:ed:be:d8:
                    d2:41:a5:94:b9:af:f8:41:da:c1:07:9d:58:06:08:
                    79:2c:44:4c:0d:d2:2b:43:65:a4:b0:87:02:76:82:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:83:ED:69:14:3E:13:A1:E0:B8:A8:AA:C4:79:12:BA:9F:FE:2C
            X509v3 Authority Key Identifier:
                keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:ed:55:be:57:fb:17:a8:01:8a:14:1c:ad:dd:c4:9e:04:
         12:a6:2c:7d:0f:cb:89:2f:3e:a7:98:4d:d5:6c:04:3d:29:cb:
         a3:f8:f9:58:02:e3:fa:29:45:d8:ae:6f:4d:81:0a:80:8f:aa:
         17:5b:47:3e:c3:01:fd:7b:fb:9e:8b:c9:8f:ca:01:d6:89:ff:
         e4:94:1b:8f:8a:e4:ef:82:c6:b5:6b:ac:60:55:0f:2e:8a:83:
         58:80:8c:97:01:da:25:88:4c:db:66:41:8f:61:3a:e2:be:97:
         2a:2a:83:d7:c2:38:de:7f:0d:40:37:f0:a3:f0:21:d1:54:db:
         5c:42:9a:6f:c5:21:b8:15:3b:c2:26:b0:57:af:d2:5b:92:1f:
         ba:7f:3f:43:bf:89:09:85:84:5f:f4:cf:49:08:38:fd:7d:67:
         40:fc:49:cb:21:ee:d4:e1:23:17:5c:62:d5:21:00:dd:23:f7:
         4a:e6:09:12:a9:29:2b:55:7d:70:41:c7:e1:ad:3e:cd:bc:5a:
         f7:e1:6f:ad:b5:87:a9:d2:2b:17:8f:be:e2:27:4f:ae:e7:77:
         fe:46:17:7d:80:ed:f9:69:48:88:5a:e4:c4:b9:8b:03:a6:75:
         79:27:60:9d:4b:73:1f:aa:cb:25:ed:87:80:b8:24:9f:05:38:
         9d:13:d9:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0kmRJw2QNQBBec9Vs4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz
OTZjZWEwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
Eyg1ZjUyODNlZDY5MTQzZTEzYTFlMGI4YThhYWM0NzkxMmJhOWZmZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpvaXSZEH+qqTQw9jHVUnAesEaqR
sp/I5OW7TiTta9bWNYldNgDULPU8UtXtT569A2nqtxs3RFKrtPouBgjq8jBVzbx3
eubn8PATveUqGVFfPkA/AiQB81H0pXQCFzPvYgW1YzSwGLLbFpvuPF0eOVBOXJ53
0dM6gnkCuVxTNIlPotgNzkRIZ1KVBr1eITB5VhmWYdTEBXy+BCONkqzcUCssn92/
zOVm6+fInrC2sHd1MPN0iFiC1nc1gYCEGc5zzpu601XSOCxIpUCloRqQqSCuguym
dfLSllpaANntvtjSQaWUua/4QdrBB51YBgh5LERMDdIrQ2WksIcCdoLOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9Sg+1pFD4ToeC4qKrEeRK6n/4sMB8GA1UdIwQY
MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt
OGI2NGY3YzNhNzZlLzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl
LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdntVb5X
+xeoAYoUHK3dxJ4EEqYsfQ/LiS8+p5hN1WwEPSnLo/j5WALj+ilF2K5vTYEKgI+q
F1tHPsMB/Xv7novJj8oB1on/5JQbj4rk74LGtWusYFUPLoqDWICMlwHaJYhM22ZB
j2E64r6XKiqD18I43n8NQDfwo/Ah0VTbXEKab8UhuBU7wiawV6/SW5Ifun8/Q7+J
CYWEX/TPSQg4/X1nQPxJyyHu1OEjF1xi1SEA3SP3SuYJEqkpK1V9cEHH4a0+zbxa
9+FvrbWHqdIrF4++4idPrud3/kYXfYDt+WlIiFrkxLmLA6Z1eSdgnUtzH6rLJe2H
gLgknwU4nRPZHQ==
-----END CERTIFICATE-----