Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File:                     Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier:          FtJx66vuWrQZFCsKneDbkDf8GBto0vMsg3aHVIe1CgE=
Subject key identifier:   99:BF:09:69:D6:7C:4D:F5:2A:2B:56:20:36:83:F8:21:38:82:C2:BD
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer:       /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial:       01962E2B1D4CB5066D12403EA6AD8A7CB8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number:          13A2
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: F4nJkVkVVZx/Xx0RA+tl/Qfcvz2qawQK/kHY29atF+0=)
                          2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:4c:b5:06:6d:12:40:3e:a6:ad:8a:7c:b8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=99bf0969d67c4df52a2b56203683f8213882c2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:f7:8b:60:ea:b3:49:a4:7b:11:cf:16:d5:
                    59:92:18:7b:f9:0a:7b:1c:d4:bb:c2:c8:2d:79:1d:
                    ef:d2:40:24:0b:50:a3:2c:a2:59:16:6f:c3:b1:e4:
                    39:4c:a7:43:b6:36:6a:15:67:2f:eb:30:ba:7a:81:
                    95:55:a2:37:fd:d6:92:52:67:9d:a2:f4:01:74:f5:
                    9d:c6:c1:97:3b:15:1e:0e:1b:72:e1:78:7d:9d:58:
                    0d:1d:08:27:fc:99:2d:07:9f:c7:e5:71:be:52:11:
                    8f:16:2d:41:41:8f:f0:36:25:2a:a5:bd:7f:d6:43:
                    b1:fe:89:2b:16:25:b0:55:85:f0:bc:47:e2:fc:57:
                    98:87:71:40:9a:c9:ec:87:a4:02:af:7a:7b:85:bd:
                    76:40:47:07:5d:61:71:85:6a:ec:23:d4:59:78:b3:
                    7b:01:b2:02:08:b3:c1:b2:c8:86:23:b3:50:e8:46:
                    77:04:d8:36:e0:f2:89:ce:49:39:00:09:05:2b:22:
                    67:3e:e4:94:d6:95:0f:c8:03:e2:72:e3:fd:fb:fc:
                    96:cf:38:7f:e4:a3:18:3e:7e:bf:a7:62:f0:cb:1e:
                    12:ae:7c:b9:98:25:9b:c1:a1:93:b5:f4:9d:1f:b7:
                    2e:fd:62:4c:0a:f6:e9:fd:af:f8:15:41:97:f5:6f:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:09:69:D6:7C:4D:F5:2A:2B:56:20:36:83:F8:21:38:82:C2:BD
            X509v3 Authority Key Identifier:
                keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:2c:68:50:1c:23:88:37:c0:4e:e1:ac:e9:e4:12:08:7e:
         88:82:bd:6d:3c:ec:c3:87:aa:af:21:c9:1d:9a:61:b5:01:eb:
         43:79:a8:7a:23:34:73:e9:5e:c4:c5:80:1f:15:e2:a5:50:f2:
         8c:73:e1:bb:97:a9:12:17:7d:9f:d6:b3:67:ab:ac:60:03:36:
         72:42:da:e6:71:9c:6e:ce:0b:a8:7d:e9:f7:6b:da:7f:90:cf:
         33:d9:83:4a:2a:5c:e4:10:8b:f4:78:e1:f2:23:6c:49:2f:6e:
         71:c5:03:e1:32:8d:c8:0f:b8:11:93:25:bd:13:f4:54:fc:4a:
         98:72:c4:17:be:b5:30:40:4e:61:78:e4:d6:06:26:f2:47:27:
         97:94:9f:41:b6:f7:12:dc:e5:cc:4a:6c:e0:fc:6c:e3:a6:25:
         93:2b:ea:2b:db:ca:06:c9:25:14:b8:fd:36:ec:28:d8:8e:0d:
         05:80:97:11:4c:5e:bd:a7:37:9c:b3:90:ef:95:4a:10:5b:d7:
         3f:c3:f0:c3:44:c7:6f:86:66:2d:fb:10:b2:f0:b2:7f:34:6e:
         9d:fc:16:c8:b6:63:38:04:3e:b1:b1:81:59:0b:ca:ac:8c:18:
         60:4c:d9:a6:6b:5d:44:42:92:4a:3d:12:1a:40:16:a6:15:7e:
         fb:26:e5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKx1MtQZtEkA+pq2KfLi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0
ZWYyNTYwHhcNMjUwNDEzMDgwMTM5WhcNMjUwNDE0MDgwMTM5WjAzMTEwLwYDVQQD
Eyg5OWJmMDk2OWQ2N2M0ZGY1MmEyYjU2MjAzNjgzZjgyMTM4ODJjMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIL3i2Dqs0mkexHPFtVZkhh7+Qp7
HNS7wsgteR3v0kAkC1CjLKJZFm/DseQ5TKdDtjZqFWcv6zC6eoGVVaI3/daSUmed
ovQBdPWdxsGXOxUeDhty4Xh9nVgNHQgn/JktB5/H5XG+UhGPFi1BQY/wNiUqpb1/
1kOx/okrFiWwVYXwvEfi/FeYh3FAmsnsh6QCr3p7hb12QEcHXWFxhWrsI9RZeLN7
AbICCLPBssiGI7NQ6EZ3BNg24PKJzkk5AAkFKyJnPuSU1pUPyAPicuP9+/yWzzh/
5KMYPn6/p2Lwyx4Srny5mCWbwaGTtfSdH7cu/WJMCvbp/a/4FUGX9W8ZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJm/CWnWfE31KitWIDaD+CE4gsK9MB8GA1UdIwQY
MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt
ZTJkM2Q5NGNjMjM4LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4
LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATycsaFAc
I4g3wE7hrOnkEgh+iIK9bTzsw4eqryHJHZphtQHrQ3moeiM0c+lexMWAHxXipVDy
jHPhu5epEhd9n9azZ6usYAM2ckLa5nGcbs4LqH3p92vaf5DPM9mDSipc5BCL9Hjh
8iNsSS9uccUD4TKNyA+4EZMlvRP0VPxKmHLEF761MEBOYXjk1gYm8kcnl5SfQbb3
EtzlzEps4Pxs46YlkyvqK9vKBsklFLj9Nuwo2I4NBYCXEUxevac3nLOQ75VKEFvX
P8Pww0THb4ZmLfsQsvCyfzRunfwWyLZjOAQ+sbGBWQvKrIwYYEzZpmtdREKSSj0S
GkAWphV++yblAA==
-----END CERTIFICATE-----