Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          cGMlm2ZXXw990g3IgVaynzQFaiK3vN7oe63CaZAMzSM=
Subject key identifier:   70:11:33:77:13:6C:01:48:4F:DE:A5:8A:02:16:07:3E:49:99:2C:BF
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       0195E07D5760D8CD842035F036BE35F17D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 06:01:05 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:05 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:05 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: Q97WU7BzI40DgfGM5QPP/NA5uBOe+CiGe6UjcNrNhY8=)
                          2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
                          3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
                          4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:57:60:d8:cd:84:20:35:f0:36:be:35:f1:7d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Mar 29 06:01:05 2025 GMT
            Not After : Mar 30 06:01:05 2025 GMT
        Subject: CN=70113377136c01484fdea58a0216073e49992cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:bc:26:d3:60:d9:e1:f3:97:ca:0d:0d:8a:
                    1a:f2:ed:76:86:93:be:38:b8:64:6d:31:b3:a7:1a:
                    04:60:8d:c6:62:0d:e2:52:79:3a:15:ff:42:d1:35:
                    19:e3:97:46:f2:bf:36:78:8d:b2:76:4e:bc:b3:55:
                    4d:f5:18:3e:40:29:58:68:10:44:f2:35:88:a8:ff:
                    6c:96:6b:50:6d:d7:44:90:e8:67:37:b4:a8:8a:86:
                    d0:9c:6c:2b:d5:83:bd:14:92:55:a9:9e:ee:14:a9:
                    e5:16:84:29:50:04:ed:55:00:ed:41:63:4f:54:f3:
                    cb:33:99:74:47:cd:ef:12:09:f0:5b:5b:f1:42:bd:
                    65:db:7a:82:07:c2:cc:98:84:84:ad:61:12:df:b7:
                    53:50:ac:2a:3e:38:57:04:3f:75:35:01:d4:82:2f:
                    15:d1:16:94:e7:d5:d4:5c:c0:f7:e5:90:11:c5:63:
                    dc:1d:c4:60:75:cf:03:fe:63:ff:a4:de:3c:c7:6d:
                    1b:e7:35:bd:e1:1d:0c:64:86:d5:b2:7f:b9:ed:75:
                    7f:72:20:51:eb:d5:c6:ea:66:b8:1d:af:9b:90:bf:
                    65:99:1f:15:92:fe:79:7f:be:ae:7f:95:12:2b:49:
                    76:5c:76:4f:2f:79:ef:41:7f:ec:d6:ab:76:3c:02:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:33:77:13:6C:01:48:4F:DE:A5:8A:02:16:07:3E:49:99:2C:BF
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:87:bb:27:c1:43:da:6d:0b:0d:d3:7b:30:98:b5:81:a2:c2:
         9b:5b:7e:94:be:1d:6d:05:24:78:e1:08:4c:df:69:81:d0:9c:
         18:c6:19:09:f2:73:05:db:6f:dc:11:00:77:5f:91:b9:90:9a:
         4a:9e:ef:31:8d:b4:1c:03:b5:15:d9:69:cd:59:e1:59:68:54:
         e1:45:e1:fc:30:c1:51:5a:9c:56:7e:b2:f7:fd:66:c4:95:d8:
         6e:14:48:07:f0:97:11:50:30:c5:5f:c5:7c:51:8d:ef:29:21:
         ff:6e:d7:a4:1c:f8:2e:eb:39:e4:e4:74:5c:89:65:24:c4:66:
         5b:2f:5b:c6:0b:dc:2d:70:53:be:94:8f:11:b2:cd:4b:ce:b5:
         02:d7:63:c0:29:4c:50:42:80:ba:d9:34:f1:31:05:01:53:07:
         31:f8:7c:f3:13:86:ef:e2:9f:02:39:d7:d9:08:c5:b7:d1:43:
         9a:bf:a5:06:76:18:d9:9c:2f:0c:e2:51:62:35:da:77:1f:7e:
         86:81:6d:3a:c1:a8:f0:46:00:d6:cf:90:d9:99:8c:a1:3e:cb:
         ea:99:0f:d2:82:45:6c:fd:eb:32:04:b0:f6:67:9c:9d:9c:10:
         e0:5c:f9:1c:dd:e0:c6:a0:5a:30:3c:c6:f9:86:05:16:f2:a1:
         23:2c:c1:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfVdg2M2EIDXwNr418X0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjUwMzI5MDYwMTA1WhcNMjUwMzMwMDYwMTA1WjAzMTEwLwYDVQQD
Eyg3MDExMzM3NzEzNmMwMTQ4NGZkZWE1OGEwMjE2MDczZTQ5OTkyY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOG8JtNg2eHzl8oNDYoa8u12hpO+
OLhkbTGzpxoEYI3GYg3iUnk6Ff9C0TUZ45dG8r82eI2ydk68s1VN9Rg+QClYaBBE
8jWIqP9slmtQbddEkOhnN7SoiobQnGwr1YO9FJJVqZ7uFKnlFoQpUATtVQDtQWNP
VPPLM5l0R83vEgnwW1vxQr1l23qCB8LMmISErWES37dTUKwqPjhXBD91NQHUgi8V
0RaU59XUXMD35ZARxWPcHcRgdc8D/mP/pN48x20b5zW94R0MZIbVsn+57XV/ciBR
69XG6ma4Ha+bkL9lmR8Vkv55f76uf5USK0l2XHZPL3nvQX/s1qt2PAIWswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHARM3cTbAFIT96ligIWBz5JmSy/MB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoe7J8FD
2m0LDdN7MJi1gaLCm1t+lL4dbQUkeOEITN9pgdCcGMYZCfJzBdtv3BEAd1+RuZCa
Sp7vMY20HAO1FdlpzVnhWWhU4UXh/DDBUVqcVn6y9/1mxJXYbhRIB/CXEVAwxV/F
fFGN7ykh/27XpBz4Lus55OR0XIllJMRmWy9bxgvcLXBTvpSPEbLNS861AtdjwClM
UEKAutk08TEFAVMHMfh88xOG7+KfAjnX2QjFt9FDmr+lBnYY2ZwvDOJRYjXadx9+
hoFtOsGo8EYA1s+Q2ZmMoT7L6pkP0oJFbP3rMgSw9mecnZwQ4Fz5HN3gxqBaMDzG
+YYFFvKhIyzB8A==
-----END CERTIFICATE-----