Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
File:                     UyClURbR4jWcx9PivGStEZ4RdbE.mft (raw, json)
Hash identifier:          Z/ksAzyjp7cEPdPmQAU8MRT7Y/4R6Za/acdMmuqdVME=
Subject key identifier:   51:A0:24:8E:E3:89:15:CC:BC:05:38:02:4E:1D:65:26:7E:B9:16:1D
Authority key identifier: 53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1
Certificate issuer:       /CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
Certificate serial:       01962FAB3FA1BD344FD64A956999774F736D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft
Manifest number:          0434
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: UyClURbR4jWcx9PivGStEZ4RdbE.crl (hash: uMYAwBpuwWJnEy/rHfSs9ot+htLD2CeGognSBHfJcwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:a1:bd:34:4f:d6:4a:95:69:99:77:4f:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5320a55116d1e2359cc7d3e2bc64ad119e1175b1
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=51a0248ee38915ccbc0538024e1d65267eb9161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:e2:99:e0:a5:1f:ab:bd:bd:e1:42:88:ef:
                    05:db:61:91:42:33:93:ee:90:74:ae:70:05:c6:75:
                    69:59:07:c4:c0:e9:1b:b2:6e:65:3b:10:a9:ff:2d:
                    94:12:d9:58:fc:ca:fc:a1:0d:54:ff:76:60:fb:3a:
                    c7:e2:96:09:55:2e:ef:70:6f:4e:91:fb:a3:34:02:
                    2d:6e:53:20:12:ef:e6:71:a5:67:8f:52:b5:bb:e5:
                    ac:97:15:cc:0a:39:6d:bd:5a:6a:6c:9e:d0:07:aa:
                    29:a7:a0:7e:64:f9:6d:a9:7e:73:0e:2a:c3:d3:a7:
                    97:6b:f2:13:25:cf:4d:c5:72:a6:0d:f1:ab:bb:61:
                    00:ef:97:39:73:b9:89:7a:00:86:a8:db:6e:28:03:
                    4f:2c:0c:a5:d7:14:fd:54:8f:b2:49:2b:70:4f:d8:
                    59:2a:6a:d0:85:96:b0:d2:76:d0:a4:78:ce:7c:ee:
                    ff:c7:88:9b:f0:14:e3:41:df:4b:74:1a:70:6b:23:
                    56:d1:c4:12:a2:90:52:6d:55:a9:1f:84:83:28:20:
                    1e:5b:f4:e2:9c:3d:ba:42:7f:1c:20:fc:cc:c9:81:
                    b0:69:4c:c4:a5:c2:43:52:9e:88:2b:a8:2a:89:18:
                    37:9e:fa:e2:42:b5:a2:12:3c:f4:a8:c8:ff:61:50:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A0:24:8E:E3:89:15:CC:BC:05:38:02:4E:1D:65:26:7E:B9:16:1D
            X509v3 Authority Key Identifier:
                keyid:53:20:A5:51:16:D1:E2:35:9C:C7:D3:E2:BC:64:AD:11:9E:11:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyClURbR4jWcx9PivGStEZ4RdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/62578b-610b-4758-bbb5-4c9165c7d5e4/1/UyClURbR4jWcx9PivGStEZ4RdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:84:cb:f1:98:c4:e0:da:5d:96:d8:64:d3:56:ac:43:45:
         b6:fe:f1:54:38:f3:8f:42:f0:4c:03:de:aa:9b:5c:12:43:61:
         ed:59:9b:41:f8:c6:e5:a4:ea:c2:ba:e5:bf:ae:a1:3e:5e:fb:
         b2:55:09:e0:04:00:25:c4:2e:d6:01:bc:c6:a8:6b:0e:77:4a:
         cd:d7:1a:d1:f9:c9:2d:5b:46:37:46:78:19:b4:f1:a2:96:15:
         f2:1b:ec:3e:8e:dc:20:0d:57:96:bf:de:53:65:36:22:36:0e:
         83:64:fd:29:a4:98:2f:58:95:6a:c8:45:33:d7:65:3e:06:56:
         46:55:59:bb:96:d9:9f:24:66:05:90:d5:13:53:68:e4:af:30:
         15:db:ed:db:6b:9e:24:f1:a4:e0:0b:43:57:f3:2e:8b:b8:83:
         7d:29:6e:4b:91:89:0c:e6:b2:73:10:b7:79:3e:cc:d2:a7:09:
         a2:ce:be:6e:6f:a7:50:2c:67:04:98:42:96:0b:f7:9c:3d:68:
         11:38:b9:7a:a1:16:43:07:54:5d:e8:dd:88:fb:a7:f9:c1:49:
         17:98:82:15:45:2a:0d:30:c5:20:13:34:a5:bc:08:ae:45:7c:
         7a:b6:7b:e2:0c:77:2c:08:3e:8c:bf:03:46:60:d2:c8:f7:a6:
         ed:5e:7b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz+hvTRP1kqVaZl3T3NtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjBhNTUxMTZkMWUyMzU5Y2M3ZDNlMmJjNjRhZDExOWUx
MTc1YjEwHhcNMjUwNDEzMTUwMTE0WhcNMjUwNDE0MTUwMTE0WjAzMTEwLwYDVQQD
Eyg1MWEwMjQ4ZWUzODkxNWNjYmMwNTM4MDI0ZTFkNjUyNjdlYjkxNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNXimeClH6u9veFCiO8F22GRQjOT
7pB0rnAFxnVpWQfEwOkbsm5lOxCp/y2UEtlY/Mr8oQ1U/3Zg+zrH4pYJVS7vcG9O
kfujNAItblMgEu/mcaVnj1K1u+WslxXMCjltvVpqbJ7QB6opp6B+ZPltqX5zDirD
06eXa/ITJc9NxXKmDfGru2EA75c5c7mJegCGqNtuKANPLAyl1xT9VI+ySStwT9hZ
KmrQhZaw0nbQpHjOfO7/x4ib8BTjQd9LdBpwayNW0cQSopBSbVWpH4SDKCAeW/Ti
nD26Qn8cIPzMyYGwaUzEpcJDUp6IK6gqiRg3nvriQrWiEjz0qMj/YVASsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGgJI7jiRXMvAU4Ak4dZSZ+uRYdMB8GA1UdIwQY
MBaAFFMgpVEW0eI1nMfT4rxkrRGeEXWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlDbFVSYlI0aldjeDlQaXZHU3RFWjRSZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MjU3OGItNjEwYi00NzU4LWJiYjUt
NGM5MTY1YzdkNWU0LzEvVXlDbFVSYlI0aldjeDlQaXZHU3RFWjRSZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82MjU3OGItNjEwYi00NzU4LWJiYjUtNGM5MTY1YzdkNWU0
LzEvVXlDbFVSYlI0aldjeDlQaXZHU3RFWjRSZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGSEy/GY
xODaXZbYZNNWrENFtv7xVDjzj0LwTAPeqptcEkNh7VmbQfjG5aTqwrrlv66hPl77
slUJ4AQAJcQu1gG8xqhrDndKzdca0fnJLVtGN0Z4GbTxopYV8hvsPo7cIA1Xlr/e
U2U2IjYOg2T9KaSYL1iVashFM9dlPgZWRlVZu5bZnyRmBZDVE1No5K8wFdvt22ue
JPGk4AtDV/Mui7iDfSluS5GJDOaycxC3eT7M0qcJos6+bm+nUCxnBJhClgv3nD1o
ETi5eqEWQwdUXejdiPun+cFJF5iCFUUqDTDFIBM0pbwIrkV8erZ74gx3LAg+jL8D
RmDSyPem7V57Aw==
-----END CERTIFICATE-----