Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File:                     d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier:          qjLxrQep8/zXp9rTtd/4Hs/DZkSJ4l+wN80V0gQHHp4=
Subject key identifier:   E3:8D:05:56:BD:BE:D1:B7:E3:50:C1:78:2E:84:C9:C9:EC:60:85:03
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer:       /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial:       01962E2B2C01F289ED7A289EE762766899A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
                          2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
                          3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: TMZLiYA9BCPDx3A+w+YeXxKGt4PWVj8e5oeo2KwSQkc=)
                          4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2c:01:f2:89:ed:7a:28:9e:e7:62:76:68:99:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=e38d0556bdbed1b7e350c1782e84c9c9ec608503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:8a:6f:5a:eb:9d:cc:3e:18:2e:88:96:72:
                    9b:f4:07:e2:8f:99:ff:45:eb:0b:be:d0:09:9d:ba:
                    3f:bf:e5:da:41:6b:09:55:7e:f1:2d:71:65:82:74:
                    e2:27:aa:fa:59:eb:a4:59:ee:05:e3:fc:dc:69:ac:
                    8a:96:c3:d2:f4:09:ec:18:48:92:ab:be:16:51:43:
                    00:84:98:09:c2:f6:d9:e0:22:43:79:d0:e5:39:52:
                    43:d5:d1:2d:68:e2:55:38:90:96:4b:52:3b:f0:2a:
                    c2:f0:f0:c2:ea:25:18:a7:df:b2:19:68:aa:81:e8:
                    28:86:0c:36:ec:54:89:d0:3b:71:85:09:00:8e:ff:
                    fd:8b:82:88:a0:9d:ce:b3:72:d0:d8:12:40:88:83:
                    c9:76:f6:ba:54:22:9e:ac:df:5d:c4:a0:74:75:90:
                    58:e2:27:ea:fd:70:3c:91:d7:8d:42:17:bd:e8:e3:
                    b3:df:ce:b8:59:cc:6a:ac:ad:75:be:e5:d7:2e:02:
                    5b:2c:68:17:51:2e:e1:19:2d:fb:4c:9b:ea:b9:68:
                    80:93:b3:0e:36:43:ca:37:5e:ee:db:ed:a0:c6:27:
                    d4:02:b2:fe:23:e0:8a:83:63:61:7f:9b:79:44:2e:
                    d7:f1:7f:f1:1e:ac:47:03:a8:89:a8:f4:47:e4:2d:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8D:05:56:BD:BE:D1:B7:E3:50:C1:78:2E:84:C9:C9:EC:60:85:03
            X509v3 Authority Key Identifier:
                keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:37:66:84:55:cb:16:51:d1:2c:98:0a:79:e3:3f:64:c9:
         b9:e7:6e:cb:b9:32:df:eb:e0:d1:f7:c1:a6:bf:f8:cd:2e:27:
         f8:5e:5d:fd:e0:dc:14:60:fb:dd:e8:19:8b:97:6b:3f:15:fa:
         a5:94:f6:4d:07:fe:62:6b:ba:2a:13:91:6e:d7:5d:4b:ae:fc:
         0f:20:9f:9e:a3:bd:d7:cd:8e:c2:68:e4:b2:7c:3f:40:99:ca:
         e9:da:b5:fd:8c:87:cd:78:f7:73:59:d2:88:85:b3:6e:7c:f1:
         03:7e:ae:6b:ea:27:6a:c2:05:72:85:cc:8c:fc:e4:1c:2d:c5:
         ec:23:3e:19:88:2c:7e:3a:b3:d5:da:bb:6d:e0:dd:6d:3f:fc:
         d3:33:a6:96:90:e0:f8:81:db:d3:f3:74:28:47:4c:33:b4:74:
         e9:6e:4d:d0:6c:94:a5:49:87:b9:6d:f4:53:2e:fb:51:14:e8:
         ed:f6:48:99:03:3b:55:e9:4b:03:dd:55:2e:c3:2b:a9:4d:7b:
         e1:64:c0:76:f2:be:43:f5:ee:14:ec:f3:6d:21:af:df:39:01:
         50:08:ad:98:14:91:a4:d4:d4:3f:ec:d8:e8:0c:9d:80:88:40:
         84:a2:13:c6:83:d8:cd:85:c3:a6:15:09:bc:64:09:8f:0b:f2:
         5f:bd:55:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKywB8onteiie52J2aJmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjUwNDEzMDgwMTQzWhcNMjUwNDE0MDgwMTQzWjAzMTEwLwYDVQQD
EyhlMzhkMDU1NmJkYmVkMWI3ZTM1MGMxNzgyZTg0YzljOWVjNjA4NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZGKb1rrncw+GC6IlnKb9Afij5n/
ResLvtAJnbo/v+XaQWsJVX7xLXFlgnTiJ6r6WeukWe4F4/zcaayKlsPS9AnsGEiS
q74WUUMAhJgJwvbZ4CJDedDlOVJD1dEtaOJVOJCWS1I78CrC8PDC6iUYp9+yGWiq
gegohgw27FSJ0DtxhQkAjv/9i4KIoJ3Os3LQ2BJAiIPJdva6VCKerN9dxKB0dZBY
4ifq/XA8kdeNQhe96OOz3864WcxqrK11vuXXLgJbLGgXUS7hGS37TJvquWiAk7MO
NkPKN17u2+2gxifUArL+I+CKg2Nhf5t5RC7X8X/xHqxHA6iJqPRH5C2tOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOONBVa9vtG341DBeC6EycnsYIUDMB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1s3ZoRV
yxZR0SyYCnnjP2TJueduy7ky3+vg0ffBpr/4zS4n+F5d/eDcFGD73egZi5drPxX6
pZT2TQf+Ymu6KhORbtddS678DyCfnqO9182Owmjksnw/QJnK6dq1/YyHzXj3c1nS
iIWzbnzxA36ua+onasIFcoXMjPzkHC3F7CM+GYgsfjqz1dq7beDdbT/80zOmlpDg
+IHb0/N0KEdMM7R06W5N0GyUpUmHuW30Uy77URTo7fZImQM7VelLA91VLsMrqU17
4WTAdvK+Q/XuFOzzbSGv3zkBUAitmBSRpNTUP+zY6AydgIhAhKITxoPYzYXDphUJ
vGQJjwvyX71VPQ==
-----END CERTIFICATE-----