Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          huTOklouNF5YLFiOHNVaEqa1B8aefkvLGv/Ecz5Nby8=
Subject key identifier:   B9:AB:CF:CA:09:09:CE:F4:2F:A9:4D:4F:D0:2F:2D:F3:C8:1C:B7:AB
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       0195E0EB01072B8CDE4D071CD5DF4556363A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          14C7
Signing time:             Sat 29 Mar 2025 08:00:52 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:52 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:52 +0000
Files and hashes:         1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
                          2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
                          3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
                          4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: Xn9cgK/55vAdKC7G6VgHKoieowp54obP36RW30As7VM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:01:07:2b:8c:de:4d:07:1c:d5:df:45:56:36:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Mar 29 08:00:52 2025 GMT
            Not After : Mar 30 08:00:52 2025 GMT
        Subject: CN=b9abcfca0909cef42fa94d4fd02f2df3c81cb7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:53:5a:77:e6:3c:06:47:49:e9:a1:c1:46:
                    f3:85:eb:29:e3:11:4c:96:e8:2d:c4:bb:1f:d1:9a:
                    1d:a3:b2:0f:3a:70:75:20:d0:3f:47:91:a1:b1:52:
                    25:8b:8b:65:31:93:88:d8:0c:38:e4:ea:c1:34:6b:
                    2f:e8:b9:07:1d:13:ba:a7:80:a3:4f:7c:d2:7d:78:
                    2f:08:a1:5d:f0:e4:a1:b1:fe:a3:7d:7b:0c:29:d8:
                    f8:e6:08:9d:26:ec:af:a4:74:63:ff:79:50:90:fa:
                    28:96:04:7b:a6:1e:36:42:72:1c:52:d0:da:91:09:
                    79:06:e6:1b:71:c2:7a:b8:75:93:ff:2f:3e:ad:33:
                    2b:1b:2d:44:db:a5:2f:92:3c:98:e3:7f:c0:66:4e:
                    d1:19:c3:28:4d:01:0d:d6:f8:86:16:b3:9d:ba:85:
                    69:9e:24:7f:75:c9:31:03:77:b5:83:ee:dd:22:33:
                    8a:70:b7:d8:1e:68:ae:49:c6:df:6c:ea:21:4b:bf:
                    51:78:ea:f1:e7:74:94:66:ce:4f:44:ef:ae:47:d7:
                    c5:f3:9a:b5:5b:99:9b:88:9a:8f:fd:8e:0f:62:bc:
                    66:23:56:f7:37:8c:22:8f:56:00:03:d9:28:c9:47:
                    9b:d9:7c:e9:8d:5e:8f:c0:6d:05:73:23:c6:48:4d:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:CF:CA:09:09:CE:F4:2F:A9:4D:4F:D0:2F:2D:F3:C8:1C:B7:AB
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:e5:8f:78:7a:4b:4f:04:ad:ac:d2:5b:11:26:22:4a:64:
         de:90:a4:8c:6e:59:a9:a8:0d:c4:c9:6f:88:fe:6b:34:40:3f:
         22:26:ba:7d:54:3d:3e:54:a4:98:0f:0c:ec:e4:8f:e5:75:97:
         3e:21:ad:cd:46:17:73:f4:c7:3f:12:06:84:69:a3:aa:3d:52:
         68:4a:f8:81:a3:90:76:55:da:d6:ea:4e:8c:c3:03:9b:43:99:
         1c:f3:7e:4b:8c:0a:5a:f9:16:04:63:4b:67:68:38:45:a6:c8:
         88:69:8d:24:ed:70:71:16:86:4a:34:e6:63:bf:3b:ff:a2:dd:
         11:c0:f1:52:21:d3:9d:d5:b2:cf:b6:2c:1a:6c:bc:ad:76:3c:
         0b:5e:69:dd:3e:70:b5:70:cb:0a:91:14:94:9d:6c:f3:c0:05:
         5b:8a:dd:fd:50:d8:0e:d8:96:e4:0f:3d:df:f8:3b:13:8b:cd:
         d2:27:d2:a3:2a:c1:db:77:89:66:99:bc:0b:58:01:41:8f:59:
         a4:38:e8:70:29:b6:1b:a0:ca:86:5f:ca:23:99:93:79:5e:20:
         9b:ce:c3:82:0b:d1:5a:22:db:f4:f7:5f:51:a5:6f:1c:c5:65:
         00:36:e3:b0:7c:e4:6a:89:b4:00:fd:eb:b3:35:b4:90:5c:f8:
         ec:0b:a6:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6wEHK4zeTQcc1d9FVjY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw
MDZlY2MwHhcNMjUwMzI5MDgwMDUyWhcNMjUwMzMwMDgwMDUyWjAzMTEwLwYDVQQD
EyhiOWFiY2ZjYTA5MDljZWY0MmZhOTRkNGZkMDJmMmRmM2M4MWNiN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFpTWnfmPAZHSemhwUbzhesp4xFM
lugtxLsf0Zodo7IPOnB1INA/R5GhsVIli4tlMZOI2Aw45OrBNGsv6LkHHRO6p4Cj
T3zSfXgvCKFd8OShsf6jfXsMKdj45gidJuyvpHRj/3lQkPoolgR7ph42QnIcUtDa
kQl5BuYbccJ6uHWT/y8+rTMrGy1E26UvkjyY43/AZk7RGcMoTQEN1viGFrOduoVp
niR/dckxA3e1g+7dIjOKcLfYHmiuScbfbOohS79ReOrx53SUZs5PRO+uR9fF85q1
W5mbiJqP/Y4PYrxmI1b3N4wij1YAA9koyUeb2XzpjV6PwG0FcyPGSE2yxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmrz8oJCc70L6lNT9AvLfPIHLerMB8GA1UdIwQY
MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt
NjA3MjcyZDczN2NiLzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni
LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfflj3h6
S08ErazSWxEmIkpk3pCkjG5ZqagNxMlviP5rNEA/Iia6fVQ9PlSkmA8M7OSP5XWX
PiGtzUYXc/THPxIGhGmjqj1SaEr4gaOQdlXa1upOjMMDm0OZHPN+S4wKWvkWBGNL
Z2g4RabIiGmNJO1wcRaGSjTmY787/6LdEcDxUiHTndWyz7YsGmy8rXY8C15p3T5w
tXDLCpEUlJ1s88AFW4rd/VDYDtiW5A893/g7E4vN0ifSoyrB23eJZpm8C1gBQY9Z
pDjocCm2G6DKhl/KI5mTeV4gm87DggvRWiLb9PdfUaVvHMVlADbjsHzkaom0AP3r
szW0kFz47AumIw==
-----END CERTIFICATE-----