Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
File:                     uW476Z3sY7ErK4J3nfz142PTIcE.mft (raw, json)
Hash identifier:          W882uUHLRIqMobLvi6OjMfDdq39WyYwzVAAFhsDe05M=
Subject key identifier:   CC:61:96:55:62:1B:2A:AA:67:A1:75:06:92:A5:3D:C8:7A:20:B7:10
Authority key identifier: B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1
Certificate issuer:       /CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
Certificate serial:       01962F7493E421F52023AB9D10B5CD32D19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft
Manifest number:          0307
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: uW476Z3sY7ErK4J3nfz142PTIcE.crl (hash: t0SGeVXk05NUC7iAs12F8Egg/sL86eu0YAaCcmnLHV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:93:e4:21:f5:20:23:ab:9d:10:b5:cd:32:d1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96e3be99dec63b12b2b82779dfcf5e363d321c1
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=cc619655621b2aaa67a1750692a53dc87a20b710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:7e:5a:03:63:9b:53:6a:8b:13:f5:ff:00:
                    5e:ea:a4:65:85:a1:71:9b:74:06:11:42:a8:97:f5:
                    96:a8:91:14:18:3e:18:21:72:2d:57:49:65:9c:cc:
                    a1:7a:ac:b7:80:1e:45:fe:0b:e7:f0:43:26:da:19:
                    3a:57:6d:dc:8f:31:ed:c6:cf:db:b1:f7:99:ae:fc:
                    1a:9e:4a:ca:12:00:e7:b8:58:c2:00:c1:d9:11:31:
                    ed:48:d0:91:4a:d8:1b:d2:fb:0e:dd:1e:87:25:ea:
                    c6:22:7e:a5:49:ac:27:c6:cf:f1:c0:b7:8a:49:65:
                    7f:b0:0c:76:32:d4:25:f8:d6:42:fa:a2:f4:9b:d7:
                    64:39:f4:9b:da:21:2d:c3:bb:a0:63:c1:de:d3:36:
                    7c:6b:a9:5d:4b:2b:10:a0:19:9d:e5:b0:1c:d4:47:
                    06:a3:35:e0:0f:7f:fa:f8:97:de:48:29:ad:20:92:
                    9d:7b:bf:6a:fc:84:d4:f6:fb:b8:7f:fd:99:44:70:
                    f5:0f:fe:3a:56:67:12:06:5a:ed:67:ca:8a:e2:f2:
                    b8:f2:14:16:cc:f9:09:e8:66:0b:cc:f5:6d:8f:77:
                    b0:2f:5e:8a:ce:3f:32:c1:ae:ef:67:af:95:3e:12:
                    65:53:dc:6a:b1:e1:ad:c6:99:de:1b:0e:02:47:14:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:96:55:62:1B:2A:AA:67:A1:75:06:92:A5:3D:C8:7A:20:B7:10
            X509v3 Authority Key Identifier:
                keyid:B9:6E:3B:E9:9D:EC:63:B1:2B:2B:82:77:9D:FC:F5:E3:63:D3:21:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW476Z3sY7ErK4J3nfz142PTIcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1aaf3f-9d3f-4933-99ee-25b360cf8a21/1/uW476Z3sY7ErK4J3nfz142PTIcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:37:14:08:3c:7e:1f:50:d4:a2:7c:78:d9:f7:82:52:14:
         b3:c7:33:38:53:6f:7c:19:3e:d8:d9:6c:0e:57:43:b0:65:ff:
         89:e4:d1:c9:36:2a:25:1a:22:f7:01:cb:4c:1d:8e:6c:d5:44:
         ec:b3:89:e9:18:8a:39:d9:50:c6:35:80:7f:c2:fb:0b:f9:ec:
         4c:61:36:29:3d:71:33:5c:24:9c:f1:8c:65:90:88:62:32:20:
         ad:5b:99:1b:e0:73:7f:2f:b1:b4:70:43:67:db:83:98:e5:94:
         a5:1b:a6:16:36:14:dd:b1:76:3a:ba:4c:a4:d5:22:f7:bb:7a:
         02:0b:86:95:a7:b7:8c:cb:b8:39:19:e6:06:63:e1:fa:ee:74:
         bb:82:8f:97:2d:0a:5c:31:c6:e8:4d:76:f4:ab:cd:d4:23:9f:
         a3:56:80:b6:3e:94:cf:95:25:80:71:92:98:90:d9:ee:a9:b0:
         fb:ef:52:a4:f8:12:f4:ce:a3:07:af:d9:23:8a:b0:eb:ae:63:
         7a:a0:a8:54:39:26:ca:e9:5b:a8:da:b3:e5:09:10:f3:73:5b:
         cd:fd:bb:f0:35:16:91:4f:56:53:be:53:d9:f6:5c:e9:7a:96:
         6d:7e:ee:f5:12:7b:b7:8a:29:41:2b:11:82:c5:68:28:b6:58:
         2a:ef:c1:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJPkIfUgI6udELXNMtGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NmUzYmU5OWRlYzYzYjEyYjJiODI3NzlkZmNmNWUzNjNk
MzIxYzEwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
EyhjYzYxOTY1NTYyMWIyYWFhNjdhMTc1MDY5MmE1M2RjODdhMjBiNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEd+WgNjm1NqixP1/wBe6qRlhaFx
m3QGEUKol/WWqJEUGD4YIXItV0llnMyheqy3gB5F/gvn8EMm2hk6V23cjzHtxs/b
sfeZrvwankrKEgDnuFjCAMHZETHtSNCRStgb0vsO3R6HJerGIn6lSawnxs/xwLeK
SWV/sAx2MtQl+NZC+qL0m9dkOfSb2iEtw7ugY8He0zZ8a6ldSysQoBmd5bAc1EcG
ozXgD3/6+JfeSCmtIJKde79q/ITU9vu4f/2ZRHD1D/46VmcSBlrtZ8qK4vK48hQW
zPkJ6GYLzPVtj3ewL16Kzj8ywa7vZ6+VPhJlU9xqseGtxpneGw4CRxS09QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxhllViGyqqZ6F1BpKlPch6ILcQMB8GA1UdIwQY
MBaAFLluO+md7GOxKyuCd5389eNj0yHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUt
MjViMzYwY2Y4YTIxLzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYWFmM2YtOWQzZi00OTMzLTk5ZWUtMjViMzYwY2Y4YTIx
LzEvdVc0NzZaM3NZN0VySzRKM25mejE0MlBUSWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnA3FAg8
fh9Q1KJ8eNn3glIUs8czOFNvfBk+2NlsDldDsGX/ieTRyTYqJRoi9wHLTB2ObNVE
7LOJ6RiKOdlQxjWAf8L7C/nsTGE2KT1xM1wknPGMZZCIYjIgrVuZG+Bzfy+xtHBD
Z9uDmOWUpRumFjYU3bF2OrpMpNUi97t6AguGlae3jMu4ORnmBmPh+u50u4KPly0K
XDHG6E129KvN1COfo1aAtj6Uz5UlgHGSmJDZ7qmw++9SpPgS9M6jB6/ZI4qw665j
eqCoVDkmyulbqNqz5QkQ83Nbzf278DUWkU9WU75T2fZc6XqWbX7u9RJ7t4opQSsR
gsVoKLZYKu/B9A==
-----END CERTIFICATE-----