Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          RUZCI1Cm5bYZgkAmEycKJD6T/Iknw3/zGn3I2Kqa+Fk=
Subject key identifier:   D2:71:C5:C7:94:4D:C8:C8:E5:3F:2F:2B:AA:EC:87:83:70:F1:C2:51
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       0195E00FA9F88022B17B00D6B5008F59D35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 04:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:17 +0000
Files and hashes:         1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
                          2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: Sz4+CF6GZYrPHvntz15AWCQd7Sbl6X++gKwpKFQ49Wg=)
                          3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
                          4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:a9:f8:80:22:b1:7b:00:d6:b5:00:8f:59:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Mar 29 04:01:17 2025 GMT
            Not After : Mar 30 04:01:17 2025 GMT
        Subject: CN=d271c5c7944dc8c8e53f2f2baaec878370f1c251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:a1:09:97:d6:ac:fb:a6:00:48:4f:77:f3:
                    3f:8a:50:d6:27:ea:20:aa:d3:c4:b3:aa:74:73:ae:
                    a5:1f:5c:f1:10:74:44:8c:80:f2:6d:a7:71:51:e0:
                    58:d3:1a:78:83:e7:6c:cb:5f:32:00:6a:0a:5b:4a:
                    26:3a:85:3a:a9:ab:df:0e:c5:07:db:28:39:59:68:
                    d6:fc:4a:6d:d9:08:4b:7b:15:f1:23:73:ba:92:7e:
                    06:38:25:08:6e:1b:23:b3:f9:db:65:9e:9b:22:f5:
                    54:2f:71:8b:c1:63:3c:70:c9:7c:ee:e2:f1:9c:96:
                    6b:ee:10:a7:d0:3f:03:85:7c:cb:e5:40:ef:69:5e:
                    fc:b0:ea:b0:9e:7e:da:8b:be:a8:04:09:c7:cc:4e:
                    25:b2:f8:b8:db:03:eb:c5:d3:f5:25:58:51:e8:3e:
                    74:da:b7:c2:d1:8e:91:75:85:c5:55:0b:74:29:8a:
                    a3:9f:93:43:c6:1d:66:a0:45:48:76:fd:e0:1d:a3:
                    0f:82:4c:a0:70:3a:85:3e:b8:7f:b2:63:5b:d2:96:
                    c1:e0:28:41:0e:eb:52:9c:83:ea:14:56:0d:94:9a:
                    b9:30:33:2c:c5:a2:97:65:13:61:c9:e8:27:f5:0b:
                    ec:66:df:38:c0:df:e2:fa:c9:3f:56:46:61:83:9b:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:71:C5:C7:94:4D:C8:C8:E5:3F:2F:2B:AA:EC:87:83:70:F1:C2:51
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:5a:3e:e2:28:51:c1:fa:5c:fe:58:d8:1e:d3:c7:2f:ac:
         9c:8b:0b:57:1b:67:96:ac:13:9b:71:a2:1c:49:c9:75:f3:e3:
         a9:89:19:f8:2f:6e:8c:5f:82:5b:d0:51:b0:19:26:5f:2b:54:
         23:b1:89:40:28:a6:0a:73:2f:9e:9e:86:be:84:86:c5:ac:22:
         f3:33:2a:88:57:f6:5a:3e:e4:19:18:4d:4d:10:5c:b9:cc:2b:
         a8:61:5e:71:21:82:36:4a:6d:5d:d9:54:90:b8:46:e1:69:ff:
         d3:e5:2a:72:f1:99:8d:f7:74:4a:70:68:60:b2:e9:b3:a5:3d:
         1a:63:c5:1b:dd:35:0f:fe:6d:ff:01:ac:01:f9:dc:5e:1a:b6:
         ee:55:c8:3c:a4:17:da:1c:e0:6b:81:3e:2f:23:69:78:9b:fa:
         34:26:e5:db:9d:fe:3a:1d:55:75:c7:a8:bc:92:4f:c7:a3:00:
         46:3d:60:4f:87:e4:cd:74:c9:79:1d:10:ea:5b:25:31:33:59:
         3c:9c:a2:9a:ec:c7:2a:d7:cd:35:e8:44:7b:5d:19:22:f9:4e:
         3b:bb:f1:b1:89:65:6c:e9:2e:f0:fc:45:e4:48:34:9f:b9:f2:
         20:cc:ff:b2:1d:2b:94:b4:ab:5b:42:cb:4e:63:39:5e:a4:30:
         77:23:c5:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6n4gCKxewDWtQCPWdNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjUwMzI5MDQwMTE3WhcNMjUwMzMwMDQwMTE3WjAzMTEwLwYDVQQD
EyhkMjcxYzVjNzk0NGRjOGM4ZTUzZjJmMmJhYWVjODc4MzcwZjFjMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2hCZfWrPumAEhPd/M/ilDWJ+og
qtPEs6p0c66lH1zxEHREjIDybadxUeBY0xp4g+dsy18yAGoKW0omOoU6qavfDsUH
2yg5WWjW/Ept2QhLexXxI3O6kn4GOCUIbhsjs/nbZZ6bIvVUL3GLwWM8cMl87uLx
nJZr7hCn0D8DhXzL5UDvaV78sOqwnn7ai76oBAnHzE4lsvi42wPrxdP1JVhR6D50
2rfC0Y6RdYXFVQt0KYqjn5NDxh1moEVIdv3gHaMPgkygcDqFPrh/smNb0pbB4ChB
DutSnIPqFFYNlJq5MDMsxaKXZRNhyegn9QvsZt84wN/i+sk/VkZhg5tJawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJxxceUTcjI5T8vK6rsh4Nw8cJRMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeApaPuIo
UcH6XP5Y2B7Txy+snIsLVxtnlqwTm3GiHEnJdfPjqYkZ+C9ujF+CW9BRsBkmXytU
I7GJQCimCnMvnp6GvoSGxawi8zMqiFf2Wj7kGRhNTRBcucwrqGFecSGCNkptXdlU
kLhG4Wn/0+UqcvGZjfd0SnBoYLLps6U9GmPFG901D/5t/wGsAfncXhq27lXIPKQX
2hzga4E+LyNpeJv6NCbl253+Oh1VdceovJJPx6MARj1gT4fkzXTJeR0Q6lslMTNZ
PJyimuzHKtfNNehEe10ZIvlOO7vxsYllbOku8PxF5Eg0n7nyIMz/sh0rlLSrW0LL
TmM5XqQwdyPFnA==
-----END CERTIFICATE-----