Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File:                     ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier:          sFMFgMVeiZNW3N6h2w/5ZPvPaIo4OJq0Ixp8BO53Zj4=
Subject key identifier:   F9:D4:40:FC:B8:C3:8C:65:6D:23:1C:D9:74:80:77:92:7B:88:54:7E
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer:       /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial:       01962E98FB2B60CDD08448F9C3B1C1FE6E49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: gpl85cy+ASngezPszCosUIe0uZ6vjD5aJBV9Dwp9G1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:2b:60:cd:d0:84:48:f9:c3:b1:c1:fe:6e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=f9d440fcb8c38c656d231cd9748077927b88547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:3f:91:7c:a8:fa:24:7f:14:30:8c:e7:f6:
                    01:a5:e1:73:f8:2f:49:f4:52:6a:7b:56:14:fe:93:
                    2a:4e:6e:46:12:9d:fe:48:68:a1:29:00:5b:e2:64:
                    51:de:d7:39:c6:69:c3:0f:f6:5f:7a:26:e7:4b:ff:
                    2e:9e:11:5b:4d:fb:b4:ac:2f:f3:ab:9b:d4:e9:93:
                    13:26:18:05:cc:b1:f0:54:19:cc:4a:9c:fc:b9:bb:
                    07:b4:82:46:c9:40:58:5b:b3:eb:11:25:54:04:17:
                    43:8a:8b:0f:dc:97:17:09:bf:d6:62:3d:bc:bf:26:
                    88:b9:22:62:e2:43:63:9c:70:a9:ac:46:1b:61:fd:
                    ff:aa:ea:b1:3e:85:7d:70:a4:2b:ec:1c:dd:e6:39:
                    6a:01:1e:10:83:99:ce:c6:ad:60:95:b8:d3:6c:01:
                    a9:50:d7:ee:b6:9a:e7:8a:03:c9:3a:b7:36:83:c3:
                    32:1c:57:a8:6e:26:1b:f6:7f:6c:1f:94:1a:6e:9c:
                    e4:3e:b5:14:47:9e:ee:71:63:90:4e:41:34:44:86:
                    55:80:9b:b3:94:c2:fb:4f:b5:9a:86:27:ef:c5:c2:
                    7d:1a:6e:aa:47:26:f8:df:c2:c1:4f:a0:38:d1:f3:
                    ac:bc:87:2c:1a:f2:17:02:1e:f6:7a:83:25:62:27:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:40:FC:B8:C3:8C:65:6D:23:1C:D9:74:80:77:92:7B:88:54:7E
            X509v3 Authority Key Identifier:
                keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:08:e3:04:d2:c6:2b:c2:e7:4d:57:99:3c:ba:19:80:f6:
         96:49:f4:d3:a3:36:8e:96:12:e5:ff:d9:f7:4b:d7:48:1e:ee:
         94:bd:80:f0:94:46:3c:4f:46:22:76:9b:fe:1c:b1:b7:90:41:
         f8:88:c2:a4:a0:c4:d2:d7:f7:99:e6:9f:8c:6b:4b:ba:7e:8d:
         5c:46:80:a4:74:8d:f0:a8:e0:2f:f2:42:be:41:98:68:6a:b9:
         c6:25:33:c9:7b:60:47:4b:dd:3e:8c:9c:d5:47:89:8f:59:fe:
         84:38:82:fa:51:19:5f:ae:7d:ab:cd:a3:6a:5d:1a:c3:0e:ce:
         da:4a:56:5c:70:ac:1d:81:9f:68:18:b6:d5:f6:12:50:1b:89:
         2c:ac:e4:e2:a4:6b:83:62:55:fa:c0:c1:57:a1:b7:80:67:0b:
         1e:1a:3a:cf:18:86:a4:78:dd:0d:74:b5:a5:2a:e6:9d:d0:e8:
         9e:f9:c8:cd:10:51:9c:cd:d0:f2:22:78:d3:02:83:68:e1:81:
         ed:80:3d:dd:25:77:f3:07:3b:7c:04:7b:29:76:ea:6d:74:53:
         db:8f:07:73:4b:43:36:70:27:14:6c:37:41:f4:6d:af:84:00:
         4d:37:07:6a:5e:06:eb:59:20:3e:50:49:1a:2b:db:c7:e3:40:
         8e:89:e7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPsrYM3QhEj5w7HB/m5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMzRlMWQ3ZDdmOTU5MDZjM2E4M2U5MzBkOTc0ODcxY2M3
NDRjYmUwHhcNMjUwNDEzMTAwMTM5WhcNMjUwNDE0MTAwMTM5WjAzMTEwLwYDVQQD
EyhmOWQ0NDBmY2I4YzM4YzY1NmQyMzFjZDk3NDgwNzc5MjdiODg1NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw0/kXyo+iR/FDCM5/YBpeFz+C9J
9FJqe1YU/pMqTm5GEp3+SGihKQBb4mRR3tc5xmnDD/ZfeibnS/8unhFbTfu0rC/z
q5vU6ZMTJhgFzLHwVBnMSpz8ubsHtIJGyUBYW7PrESVUBBdDiosP3JcXCb/WYj28
vyaIuSJi4kNjnHCprEYbYf3/quqxPoV9cKQr7Bzd5jlqAR4Qg5nOxq1glbjTbAGp
UNfutprnigPJOrc2g8MyHFeobiYb9n9sH5QabpzkPrUUR57ucWOQTkE0RIZVgJuz
lML7T7WahifvxcJ9Gm6qRyb438LBT6A40fOsvIcsGvIXAh72eoMlYieuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnUQPy4w4xlbSMc2XSAd5J7iFR+MB8GA1UdIwQY
MBaAFBE04dfX+VkGw6g+kw2XSHHMdEy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMt
OWI1Zjg2Y2YzNTNmLzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMtOWI1Zjg2Y2YzNTNm
LzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIoI4wTS
xivC501XmTy6GYD2lkn006M2jpYS5f/Z90vXSB7ulL2A8JRGPE9GInab/hyxt5BB
+IjCpKDE0tf3meafjGtLun6NXEaApHSN8KjgL/JCvkGYaGq5xiUzyXtgR0vdPoyc
1UeJj1n+hDiC+lEZX659q82jal0aww7O2kpWXHCsHYGfaBi21fYSUBuJLKzk4qRr
g2JV+sDBV6G3gGcLHho6zxiGpHjdDXS1pSrmndDonvnIzRBRnM3Q8iJ40wKDaOGB
7YA93SV38wc7fAR7KXbqbXRT248Hc0tDNnAnFGw3QfRtr4QATTcHal4G61kgPlBJ
Givbx+NAjonncQ==
-----END CERTIFICATE-----