Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
File:                     kjGbzZsJqYSwcOLvWI_8-otzyKI.mft (raw, json)
Hash identifier:          wqR/QFn3pJdsSjG/4II+r57AJ4SWRVw1b6H5OPpqkAU=
Subject key identifier:   00:CE:C3:3F:C0:B7:83:80:A3:57:46:FF:46:07:68:70:51:56:25:CF
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Certificate issuer:       /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial:       0195A2B1891E1320DE5D05D8507223960E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
Manifest number:          14A9
Signing time:             Mon 17 Mar 2025 06:01:38 +0000
Manifest this update:     Mon 17 Mar 2025 06:01:38 +0000
Manifest next update:     Tue 18 Mar 2025 06:01:38 +0000
Files and hashes:         1: 7bvAiXOGGN5F75C5TPaLkcrMrJ0.roa (hash: zIEK7IKs3VnTSjIwiOz0gcDm6zKT0vC9tWF2HOlgyJ4=)
                          2: f7LoQlg3wh_mDB9M8tJRPc9pjRg.roa (hash: TGm9AlTdN93bdUpETbwDkFaVCWLQGhWDE7lXzrUzU44=)
                          3: fJSSSYyH6Ee1wixn2iid6CkKbD4.roa (hash: r5RuGMIc1UBm/9bI2dDIxiQn3TUA1FzP7ZQdx2BDTw8=)
                          4: kjGbzZsJqYSwcOLvWI_8-otzyKI.crl (hash: dHMzj68WXHCGbiR/MI/EVf+02CupZ+O9eGvV23rPjzw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a2:b1:89:1e:13:20:de:5d:05:d8:50:72:23:96:0e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
        Validity
            Not Before: Mar 17 06:01:38 2025 GMT
            Not After : Mar 18 06:01:38 2025 GMT
        Subject: CN=00cec33fc0b78380a35746ff46076870515625cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:ed:51:c0:0c:db:e1:4a:5c:db:c9:26:73:
                    19:1d:48:0a:a7:78:42:3f:98:de:5f:21:8e:c0:df:
                    76:d3:be:e5:c5:63:29:74:a7:7b:4a:11:9d:f0:eb:
                    3a:73:74:ba:7b:2b:3b:69:c1:f1:07:ca:ca:56:53:
                    be:b5:86:fa:9c:0a:eb:9b:48:2d:b0:c6:ba:cd:e9:
                    64:32:b1:69:a9:95:31:05:3a:28:f3:8a:cd:17:f7:
                    fd:60:c1:80:b6:c7:8a:4c:56:fa:d4:f1:ea:e8:bd:
                    8e:73:cc:e4:66:d3:13:ed:78:86:79:f5:ce:e7:0c:
                    66:22:22:c1:cc:d0:cb:68:1d:51:aa:b3:67:aa:09:
                    d8:d0:b0:94:32:43:e8:f7:e8:3c:88:3b:fb:8f:5c:
                    bc:e6:83:75:14:f9:44:bb:cf:63:1b:10:db:a2:d1:
                    99:f4:81:e4:a8:2f:a5:83:2b:74:2d:3d:cc:a3:0e:
                    90:99:57:0e:c3:28:4c:c7:20:72:ee:f5:b8:a0:95:
                    37:7d:e2:40:cc:40:3e:8f:e3:3b:a5:e8:ac:f0:64:
                    dd:d9:b8:11:1a:89:0b:66:c5:6c:a8:60:c0:d5:b8:
                    35:2a:36:94:fa:b7:84:da:74:3d:65:04:3f:aa:39:
                    a8:f1:20:f6:6e:a9:89:e3:f2:69:8d:17:8e:c8:e1:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:C3:3F:C0:B7:83:80:A3:57:46:FF:46:07:68:70:51:56:25:CF
            X509v3 Authority Key Identifier:
                keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:ec:6c:cc:5f:e9:c6:3c:f3:4b:df:84:73:12:88:8d:b5:
         5f:44:e9:dc:a2:3a:2d:c0:70:92:f8:c1:bb:a3:51:07:1c:36:
         d2:22:eb:15:2f:12:68:cc:b9:7b:f0:ff:a0:33:17:43:8f:3f:
         03:9f:f4:2c:10:9c:86:c9:5c:51:f0:a1:00:c6:97:7f:a7:2f:
         89:bc:48:93:a9:61:4c:a6:52:2b:e5:50:6c:32:63:3f:00:cc:
         b4:77:7b:b0:96:5e:7f:30:63:cf:59:cf:2f:9f:81:25:9e:29:
         ba:2d:ec:36:5a:42:de:dc:c0:d8:9f:e6:69:62:e0:91:58:45:
         a9:81:ed:3f:97:ff:d1:4f:55:8d:7b:d8:23:c6:11:42:03:24:
         6e:78:f7:13:6c:38:07:9a:a4:ed:41:ed:1e:c8:83:0d:2d:b5:
         27:ba:48:c4:5f:ad:e3:fb:a6:ca:d3:dd:ce:1e:95:b2:83:d5:
         5f:bf:93:3a:b4:5f:f5:01:40:95:e8:c3:24:b1:fc:ba:0e:6f:
         14:06:87:d6:57:07:e6:18:17:79:b1:65:3b:b9:35:ff:7c:5d:
         59:8e:b2:d2:b0:f7:0f:5f:45:9d:b8:ef:14:72:d6:45:ef:76:
         5f:a6:0a:a3:b6:0a:53:b6:0d:7e:a9:6b:2c:ad:4a:c9:eb:73:
         09:ef:57:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWisYkeEyDeXQXYUHIjlg5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMzE5YmNkOWIwOWE5ODRiMDcwZTJlZjU4OGZmY2ZhOGI3
M2M4YTIwHhcNMjUwMzE3MDYwMTM4WhcNMjUwMzE4MDYwMTM4WjAzMTEwLwYDVQQD
EygwMGNlYzMzZmMwYjc4MzgwYTM1NzQ2ZmY0NjA3Njg3MDUxNTYyNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVjtUcAM2+FKXNvJJnMZHUgKp3hC
P5jeXyGOwN92077lxWMpdKd7ShGd8Os6c3S6eys7acHxB8rKVlO+tYb6nArrm0gt
sMa6zelkMrFpqZUxBToo84rNF/f9YMGAtseKTFb61PHq6L2Oc8zkZtMT7XiGefXO
5wxmIiLBzNDLaB1RqrNnqgnY0LCUMkPo9+g8iDv7j1y85oN1FPlEu89jGxDbotGZ
9IHkqC+lgyt0LT3Mow6QmVcOwyhMxyBy7vW4oJU3feJAzEA+j+M7peis8GTd2bgR
GokLZsVsqGDA1bg1KjaU+reE2nQ9ZQQ/qjmo8SD2bqmJ4/JpjReOyOEwQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADOwz/At4OAo1dG/0YHaHBRViXPMB8GA1UdIwQY
MBaAFJIxm82bCamEsHDi71iP/PqLc8iiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pHYnpac0pxWVN3Y09MdldJXzgtb3R6eUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMmIyYzYtMzVlZS00MmY1LWEyNjgt
Y2RiZWJiYzY1MmRlLzEva2pHYnpac0pxWVN3Y09MdldJXzgtb3R6eUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iMmIyYzYtMzVlZS00MmY1LWEyNjgtY2RiZWJiYzY1MmRl
LzEva2pHYnpac0pxWVN3Y09MdldJXzgtb3R6eUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzDsbMxf
6cY880vfhHMSiI21X0Tp3KI6LcBwkvjBu6NRBxw20iLrFS8SaMy5e/D/oDMXQ48/
A5/0LBCchslcUfChAMaXf6cvibxIk6lhTKZSK+VQbDJjPwDMtHd7sJZefzBjz1nP
L5+BJZ4pui3sNlpC3tzA2J/maWLgkVhFqYHtP5f/0U9VjXvYI8YRQgMkbnj3E2w4
B5qk7UHtHsiDDS21J7pIxF+t4/umytPdzh6VsoPVX7+TOrRf9QFAlejDJLH8ug5v
FAaH1lcH5hgXebFlO7k1/3xdWY6y0rD3D19FnbjvFHLWRe92X6YKo7YKU7YNfqlr
LK1KyetzCe9X1A==
-----END CERTIFICATE-----