Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File:                     u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier:          ltIbjVi9HuS3b9i2J9vV3njcpuKuriCZxgtwShovrdc=
Subject key identifier:   CC:7C:DA:10:1D:F3:EB:C5:A6:05:CB:5E:4C:25:3E:6B:EE:CE:5B:D1
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer:       /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial:       01962E9871A3B58E7E1523961A673CE5A40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number:          0444
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: Nd6B7I/FzQRQ8O72onmOFYqsnyGbrwHvYqlcYr36QoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:a3:b5:8e:7e:15:23:96:1a:67:3c:e5:a4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=cc7cda101df3ebc5a605cb5e4c253e6beece5bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:ae:f2:ab:1a:bf:86:67:f3:cb:4a:44:cf:
                    69:10:27:86:66:c7:86:59:02:69:51:bf:7c:47:bd:
                    19:b6:69:27:e4:cc:0c:45:d1:b6:53:b7:72:fb:c4:
                    ea:b5:6b:74:0b:8a:a6:3a:93:09:0a:75:05:63:c6:
                    be:61:89:39:e9:45:f5:9c:90:0c:32:38:52:93:f0:
                    de:42:2d:90:77:c2:8e:6a:5a:b0:69:f8:a6:6d:ed:
                    78:93:7b:07:ec:fe:64:9b:9b:91:9b:5a:51:61:29:
                    94:1e:68:b5:87:ea:14:ea:ed:7b:f3:12:f2:1c:74:
                    98:ea:30:f3:38:f8:24:71:72:bb:da:3c:18:23:35:
                    cb:6b:1a:86:a6:b7:1d:eb:f3:99:73:02:23:8b:3f:
                    af:e7:10:56:7a:af:7b:e6:ac:e2:18:74:9d:d0:a1:
                    c4:e7:3d:39:8b:6c:32:96:c7:6d:30:18:b2:8c:30:
                    ed:66:ca:0c:07:2a:09:2e:21:cb:b5:93:c5:cc:2c:
                    ac:12:03:62:c4:d3:a9:dc:f1:a3:cc:4e:14:91:30:
                    0d:69:a0:29:e7:cb:33:83:55:86:09:e9:6f:f0:3e:
                    70:b8:08:4b:fd:db:ee:bf:50:76:ad:43:b2:c7:5b:
                    04:eb:79:6c:9e:d0:74:f3:f5:ae:e4:f7:31:d4:c6:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:DA:10:1D:F3:EB:C5:A6:05:CB:5E:4C:25:3E:6B:EE:CE:5B:D1
            X509v3 Authority Key Identifier:
                keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:cf:5f:ef:46:2b:18:41:4d:9a:35:70:23:87:e9:63:44:
         38:26:08:00:c8:dd:d3:91:c9:96:11:61:e9:6b:c9:37:b8:45:
         28:e0:c1:a1:54:69:86:f9:13:ad:0e:4d:b0:e5:e2:f1:e7:76:
         35:b1:aa:49:5d:9f:26:ab:2d:be:9a:c0:5c:46:41:61:f5:f6:
         27:80:0f:c6:62:34:17:a5:dc:65:9c:68:bd:f7:74:c3:74:07:
         f1:aa:59:aa:88:14:c3:ca:43:5c:8d:8f:79:13:9b:3f:e9:3f:
         9b:8e:44:4f:7c:9c:cc:70:ae:98:82:cd:3f:4e:dc:21:ad:11:
         e2:b9:7f:3a:80:86:80:ec:51:18:0e:a6:43:57:2c:9b:05:59:
         b7:fe:ac:3a:fd:8b:7f:d1:be:a5:c4:40:c4:13:83:4a:a3:86:
         33:d2:86:57:d6:01:65:13:ff:d3:1c:a4:ce:78:f8:b8:23:cb:
         2c:64:b1:2b:33:a4:4a:db:ca:61:6c:66:dc:df:a0:2f:20:42:
         26:f1:9a:11:3f:a5:62:48:c3:1e:20:23:1a:f8:ca:0d:32:f8:
         7c:26:50:27:6b:89:ce:db:c1:b0:73:50:cf:32:67:11:c9:d3:
         ef:a8:cb:bb:38:3d:4b:eb:a8:07:46:db:bd:06:4a:e3:1f:38:
         37:21:5f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHGjtY5+FSOWGmc85aQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTRhYWM3N2Q2Mzg4MmY3NDM2MjA3MDRjMjRkYmVkYjE4
ODBkN2EwHhcNMjUwNDEzMTAwMTA0WhcNMjUwNDE0MTAwMTA0WjAzMTEwLwYDVQQD
EyhjYzdjZGExMDFkZjNlYmM1YTYwNWNiNWU0YzI1M2U2YmVlY2U1YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT2u8qsav4Zn88tKRM9pECeGZseG
WQJpUb98R70Ztmkn5MwMRdG2U7dy+8TqtWt0C4qmOpMJCnUFY8a+YYk56UX1nJAM
MjhSk/DeQi2Qd8KOalqwafimbe14k3sH7P5km5uRm1pRYSmUHmi1h+oU6u178xLy
HHSY6jDzOPgkcXK72jwYIzXLaxqGprcd6/OZcwIjiz+v5xBWeq975qziGHSd0KHE
5z05i2wylsdtMBiyjDDtZsoMByoJLiHLtZPFzCysEgNixNOp3PGjzE4UkTANaaAp
58szg1WGCelv8D5wuAhL/dvuv1B2rUOyx1sE63lsntB08/Wu5Pcx1MY0OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx82hAd8+vFpgXLXkwlPmvuzlvRMB8GA1UdIwQY
MBaAFLvkqsd9Y4gvdDYgcEwk2+2xiA16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUt
MWJhMjFiMGUyOTEzLzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUtMWJhMjFiMGUyOTEz
LzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrDPX+9G
KxhBTZo1cCOH6WNEOCYIAMjd05HJlhFh6WvJN7hFKODBoVRphvkTrQ5NsOXi8ed2
NbGqSV2fJqstvprAXEZBYfX2J4APxmI0F6XcZZxovfd0w3QH8apZqogUw8pDXI2P
eRObP+k/m45ET3yczHCumILNP07cIa0R4rl/OoCGgOxRGA6mQ1csmwVZt/6sOv2L
f9G+pcRAxBODSqOGM9KGV9YBZRP/0xykznj4uCPLLGSxKzOkStvKYWxm3N+gLyBC
JvGaET+lYkjDHiAjGvjKDTL4fCZQJ2uJztvBsHNQzzJnEcnT76jLuzg9S+uoB0bb
vQZK4x84NyFfIw==
-----END CERTIFICATE-----