Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File:                     Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier:          udN8WspsK9mLehytnBeG2xy30zZ4PpK00qJJ1xZpXrY=
Subject key identifier:   4A:05:09:2C:9A:3C:B9:A6:9A:6B:80:A2:1F:7A:B3:C2:D3:79:34:42
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer:       /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial:       01962F3D49A2A49B6A846AEEF54701800378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number:          1434
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=)
                          2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: a5T8mtwUxbIbM4hfNBXgsgLLAO8XP0ZbfCB2+haI6Zk=)
                          3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:a2:a4:9b:6a:84:6a:ee:f5:47:01:80:03:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=4a05092c9a3cb9a69a6b80a21f7ab3c2d3793442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:37:8e:44:3d:bd:d9:35:38:f6:43:55:36:
                    5f:cb:d2:76:b3:28:4c:c5:c4:c3:91:1a:69:ce:c5:
                    51:7e:34:5a:d9:3c:ef:d4:3c:ed:2a:7e:fd:36:d2:
                    74:e3:b6:1e:5f:46:90:d4:04:4c:1e:33:70:38:73:
                    a2:cb:31:ca:cf:91:79:99:e7:39:e7:b5:6a:1f:a8:
                    c4:55:30:f6:8e:aa:09:48:1e:6d:fb:71:74:4e:4d:
                    2c:b8:b0:e7:97:62:36:e9:99:29:31:19:a5:b7:8a:
                    7e:07:b2:f7:57:3f:1b:89:f4:c6:90:33:f9:bd:39:
                    9e:6f:40:a3:ad:2f:86:e8:d4:92:75:3b:74:7c:12:
                    3b:7c:00:30:40:4f:6c:fe:68:35:a5:01:36:fb:57:
                    66:e2:b1:b8:b3:2a:f4:c6:1c:f5:be:e4:1e:50:98:
                    2d:48:5a:2c:7b:a3:df:79:ea:57:c7:21:f0:a7:38:
                    d8:f1:68:1c:31:20:66:46:61:5b:cf:bd:cf:d4:f5:
                    ef:64:a7:55:85:f5:37:71:01:f1:4b:7b:81:8f:4b:
                    f0:16:68:35:16:70:e7:6f:92:da:a3:dc:c3:2a:57:
                    eb:4b:3c:89:f9:12:c1:b4:b4:23:1b:2f:dc:45:15:
                    e7:9e:dd:7e:aa:db:d2:7e:23:da:b0:21:7e:88:84:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:05:09:2C:9A:3C:B9:A6:9A:6B:80:A2:1F:7A:B3:C2:D3:79:34:42
            X509v3 Authority Key Identifier:
                keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:06:4f:89:d9:6f:0e:e6:79:97:ac:25:0e:25:27:92:1b:
         13:95:39:1d:95:08:1e:ee:ce:ce:7f:c0:2c:79:1c:9c:59:ae:
         34:86:13:41:4c:ce:36:58:ef:65:d6:b7:94:2a:ef:19:22:af:
         1e:87:49:f7:68:51:fc:a5:c1:e1:ab:96:42:09:26:fd:d0:c2:
         cf:c7:39:b9:b8:4a:b8:e5:b6:f7:a7:93:20:b7:64:74:be:f6:
         4d:83:4a:73:46:db:0b:33:22:3f:f6:ef:23:0a:d3:a2:7a:c0:
         4c:f7:24:7a:31:f7:61:86:8a:59:f5:32:c8:08:f2:0e:5f:3f:
         84:22:17:47:7b:c3:84:d2:3c:6a:26:6e:de:bd:0c:59:c4:75:
         03:39:f7:1b:cb:7e:c3:3a:68:eb:39:f4:b0:66:0c:01:e7:f7:
         a3:eb:15:13:02:af:1d:c4:8c:90:79:5b:57:4b:58:71:90:e5:
         83:74:b5:e0:f4:65:3b:d3:a8:3d:1d:86:ac:2c:ce:7f:c3:bc:
         b7:41:02:11:d6:30:3a:1b:3c:e4:62:24:3c:27:f5:47:28:b6:
         da:9a:36:02:60:cf:8d:3e:96:08:f9:02:88:b8:c8:8c:ab:53:
         3c:c5:05:bb:ac:ef:36:39:b9:d7:e2:03:c6:08:fc:12:69:aa:
         fb:41:d3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUmipJtqhGru9UcBgAN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2VmNDVmYmIwZjI2OTMwYWViODMzY2Y3OWZjNDFlMjJj
YTkyMzUwHhcNMjUwNDEzMTMwMTA3WhcNMjUwNDE0MTMwMTA3WjAzMTEwLwYDVQQD
Eyg0YTA1MDkyYzlhM2NiOWE2OWE2YjgwYTIxZjdhYjNjMmQzNzkzNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Q3jkQ9vdk1OPZDVTZfy9J2syhM
xcTDkRppzsVRfjRa2Tzv1DztKn79NtJ047YeX0aQ1ARMHjNwOHOiyzHKz5F5mec5
57VqH6jEVTD2jqoJSB5t+3F0Tk0suLDnl2I26ZkpMRmlt4p+B7L3Vz8bifTGkDP5
vTmeb0CjrS+G6NSSdTt0fBI7fAAwQE9s/mg1pQE2+1dm4rG4syr0xhz1vuQeUJgt
SFose6PfeepXxyHwpzjY8WgcMSBmRmFbz73P1PXvZKdVhfU3cQHxS3uBj0vwFmg1
FnDnb5Lao9zDKlfrSzyJ+RLBtLQjGy/cRRXnnt1+qtvSfiPasCF+iIQxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoFCSyaPLmmmmuAoh96s8LTeTRCMB8GA1UdIwQY
MBaAFErO9F+7DyaTCuuDPPefxB4iypI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUt
MDZmNzI5MGRjNDRhLzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUtMDZmNzI5MGRjNDRh
LzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/kGT4nZ
bw7meZesJQ4lJ5IbE5U5HZUIHu7Ozn/ALHkcnFmuNIYTQUzONljvZda3lCrvGSKv
HodJ92hR/KXB4auWQgkm/dDCz8c5ubhKuOW296eTILdkdL72TYNKc0bbCzMiP/bv
IwrTonrATPckejH3YYaKWfUyyAjyDl8/hCIXR3vDhNI8aiZu3r0MWcR1Azn3G8t+
wzpo6zn0sGYMAef3o+sVEwKvHcSMkHlbV0tYcZDlg3S14PRlO9OoPR2GrCzOf8O8
t0ECEdYwOhs85GIkPCf1Ryi22po2AmDPjT6WCPkCiLjIjKtTPMUFu6zvNjm51+ID
xgj8Emmq+0HToA==
-----END CERTIFICATE-----