Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
File:                     2-DL9NZpKl5OHgHSsRL-pru_90w.mft (raw, json)
Hash identifier:          ms0iaHPFkQSvM647BPk/9r7vITZ+9RGfYEiqSmz34V8=
Subject key identifier:   6A:67:D1:FC:50:71:39:B0:03:36:FF:65:53:ED:39:2E:BB:9E:5D:8C
Authority key identifier: DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C
Certificate issuer:       /CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c
Certificate serial:       01962E2AD2999AAF143BEF7DE6AA3750CF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft
Manifest number:          0170
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 2-DL9NZpKl5OHgHSsRL-pru_90w.crl (hash: Y8ijnV1sVRaBWgUg0Ku90NOqvHdrQM5uQqBW0CbT2Ck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:99:9a:af:14:3b:ef:7d:e6:aa:37:50:cf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe0cbf4d6692a5e4e1e01d2b112fea6bbbff74c
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=6a67d1fc507139b00336ff6553ed392ebb9e5d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:a3:ed:6a:98:e9:b3:c2:cb:46:cb:ed:dc:
                    dc:0a:74:1e:7b:07:b3:6f:bf:6b:14:a3:3f:51:a8:
                    80:8b:2a:e2:57:39:4e:54:8f:1a:43:77:fc:ac:81:
                    1c:fc:2c:cb:46:ba:f1:2b:26:f4:7c:be:e1:42:db:
                    1a:aa:e6:41:35:7b:d3:30:00:9f:91:d5:c9:a7:aa:
                    eb:85:d0:e9:b3:0e:62:a2:91:8c:df:a5:00:84:bf:
                    4c:ab:95:0c:75:37:e2:d8:94:7f:04:58:33:b3:d9:
                    be:11:79:00:b9:60:de:36:6a:bd:f8:36:16:cb:1f:
                    55:ee:1c:b9:b8:70:80:4d:4c:bd:df:30:29:9f:82:
                    30:26:75:6f:b5:e0:70:45:cb:65:68:47:5b:18:92:
                    07:34:a1:b8:23:ee:6e:17:cd:7c:52:85:2f:ff:b0:
                    af:dd:ae:98:ad:9b:44:16:0d:02:a3:7d:ac:24:2b:
                    13:96:a1:03:cb:e2:ed:9d:8d:d1:6b:ef:c3:6e:f5:
                    71:5a:d3:20:5b:9f:b0:e3:f2:5f:40:2b:2f:3c:2f:
                    0b:39:54:b0:aa:f7:f3:c8:f2:27:9b:13:a9:5e:c4:
                    df:20:2f:47:63:70:71:3f:fd:0b:f0:1d:5d:88:2a:
                    00:1f:b9:58:6f:0b:ff:eb:98:80:16:50:58:1e:4c:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:67:D1:FC:50:71:39:B0:03:36:FF:65:53:ED:39:2E:BB:9E:5D:8C
            X509v3 Authority Key Identifier:
                keyid:DB:E0:CB:F4:D6:69:2A:5E:4E:1E:01:D2:B1:12:FE:A6:BB:BF:F7:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DL9NZpKl5OHgHSsRL-pru_90w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ae519c-1690-40bc-b671-927e9cf7b025/1/2-DL9NZpKl5OHgHSsRL-pru_90w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:17:c7:ca:f0:3f:c9:a3:2e:8f:c8:d4:d6:d4:f1:bc:0b:
         6a:81:be:17:8d:00:fd:fb:23:8f:71:c9:ce:18:33:cb:55:61:
         76:ec:01:41:05:08:2a:a1:b7:f2:c6:b5:77:da:f4:72:da:ec:
         cf:0b:41:9d:ef:02:45:ea:6e:de:1b:20:c4:a5:f3:db:91:99:
         37:0c:8b:e8:3b:9d:53:0e:84:b9:26:7f:dd:c9:4e:54:46:3f:
         65:e6:99:e1:9d:4f:51:0f:f7:1f:1e:70:10:c6:7a:44:8f:29:
         24:1c:d1:d4:4a:7f:e7:11:7f:62:0c:ba:e4:fc:c5:a8:8d:25:
         27:18:e1:93:62:5a:64:48:b3:17:5c:ed:63:80:bf:83:d2:1c:
         1c:b0:17:cd:60:d4:94:06:3f:b6:71:af:8e:4a:d0:d2:a0:e2:
         6e:29:1d:6e:eb:d6:d2:7c:83:1e:3d:70:c6:5a:e1:50:b9:e2:
         f8:31:59:b2:e9:03:12:d2:00:49:4b:34:07:21:05:ec:81:e6:
         ef:12:6a:ca:fd:45:68:7d:b5:ab:9d:3f:36:29:c0:cb:6b:f0:
         5c:35:16:92:38:53:98:df:71:22:f9:b8:5d:16:61:95:de:ba:
         3b:6f:e6:76:94:89:20:1c:0b:f4:65:ec:fc:2c:09:43:b7:04:
         65:b6:a0:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtKZmq8UO+995qo3UM9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYmY0ZDY2OTJhNWU0ZTFlMDFkMmIxMTJmZWE2YmJi
ZmY3NGMwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
Eyg2YTY3ZDFmYzUwNzEzOWIwMDMzNmZmNjU1M2VkMzkyZWJiOWU1ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYyj7WqY6bPCy0bL7dzcCnQeewez
b79rFKM/UaiAiyriVzlOVI8aQ3f8rIEc/CzLRrrxKyb0fL7hQtsaquZBNXvTMACf
kdXJp6rrhdDpsw5iopGM36UAhL9Mq5UMdTfi2JR/BFgzs9m+EXkAuWDeNmq9+DYW
yx9V7hy5uHCATUy93zApn4IwJnVvteBwRctlaEdbGJIHNKG4I+5uF818UoUv/7Cv
3a6YrZtEFg0Co32sJCsTlqEDy+LtnY3Ra+/DbvVxWtMgW5+w4/JfQCsvPC8LOVSw
qvfzyPInmxOpXsTfIC9HY3BxP/0L8B1diCoAH7lYbwv/65iAFlBYHkwQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpn0fxQcTmwAzb/ZVPtOS67nl2MMB8GA1UdIwQY
MBaAFNvgy/TWaSpeTh4B0rES/qa7v/dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ETDlOWnBLbDVPSGdIU3NSTC1wcnVfOTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZTUxOWMtMTY5MC00MGJjLWI2NzEt
OTI3ZTljZjdiMDI1LzEvMi1ETDlOWnBLbDVPSGdIU3NSTC1wcnVfOTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZTUxOWMtMTY5MC00MGJjLWI2NzEtOTI3ZTljZjdiMDI1
LzEvMi1ETDlOWnBLbDVPSGdIU3NSTC1wcnVfOTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCMXx8rw
P8mjLo/I1NbU8bwLaoG+F40A/fsjj3HJzhgzy1VhduwBQQUIKqG38sa1d9r0ctrs
zwtBne8CRepu3hsgxKXz25GZNwyL6DudUw6EuSZ/3clOVEY/ZeaZ4Z1PUQ/3Hx5w
EMZ6RI8pJBzR1Ep/5xF/Ygy65PzFqI0lJxjhk2JaZEizF1ztY4C/g9IcHLAXzWDU
lAY/tnGvjkrQ0qDibikdbuvW0nyDHj1wxlrhULni+DFZsukDEtIASUs0ByEF7IHm
7xJqyv1FaH21q50/NinAy2vwXDUWkjhTmN9xIvm4XRZhld66O2/mdpSJIBwL9GXs
/CwJQ7cEZbag4w==
-----END CERTIFICATE-----