Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File:                     JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier:          ++cOJMcYYK9ilxfYwHpllVB5lL4bnYQp5Py6qYeN4to=
Subject key identifier:   5C:3A:3D:18:51:C9:F6:68:C0:8A:BE:BD:54:35:9B:3F:56:2F:81:6C
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer:       /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial:       01962F74C51CB6951FA6E7107018DEC5F44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number:          1316
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: /PpDx9vdLZN1xo4+3IihU4G1LXHmyOoELouCFsqkZpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:1c:b6:95:1f:a6:e7:10:70:18:de:c5:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2546049998791fe85770313ba660c4125192980b
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=5c3a3d1851c9f668c08abebd54359b3f562f816c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4b:40:88:34:d9:83:b5:07:9d:07:ee:32:c2:
                    e8:b9:c7:f7:b2:43:e5:c6:aa:83:cc:d4:d7:27:cb:
                    1a:32:5b:d4:4f:e0:ce:63:5a:20:9d:a3:f1:11:6b:
                    ce:72:8e:7e:5a:a9:0b:01:79:0a:fc:c1:b8:21:92:
                    00:95:8e:b6:ba:32:9a:85:2d:59:12:df:91:1c:06:
                    e9:ea:10:06:03:5f:0a:39:5d:05:2c:12:58:83:e3:
                    1f:00:f6:61:a9:b4:6e:17:fe:5c:7a:95:e4:be:b9:
                    83:f5:b6:03:f2:54:db:9f:ae:b2:b3:1e:db:8b:35:
                    44:ac:fd:c7:e3:9d:0b:e7:e3:68:16:6b:f1:6b:13:
                    d9:a0:69:75:7b:90:5b:1d:9d:3e:e2:fe:2a:de:2a:
                    63:88:da:0a:24:de:24:12:66:55:1e:c3:34:e9:7a:
                    6b:7b:2b:14:d1:3f:75:74:89:08:14:97:ec:9a:30:
                    13:a0:2a:67:e5:54:ff:90:25:68:cf:63:6b:b9:e7:
                    d6:08:a1:a4:6b:57:5a:cd:61:aa:11:b6:8c:08:fd:
                    52:c1:80:02:e0:12:c5:52:5f:99:90:3d:53:b4:6c:
                    22:dd:f4:8a:73:03:ca:39:72:ec:2a:67:c1:4d:ec:
                    f5:b0:b3:9b:87:f6:a9:94:4b:fe:51:de:3c:30:49:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:3D:18:51:C9:F6:68:C0:8A:BE:BD:54:35:9B:3F:56:2F:81:6C
            X509v3 Authority Key Identifier:
                keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:90:62:c8:b1:59:16:c5:ae:a8:ab:0d:5f:72:b9:04:00:
         99:ba:02:22:cf:8c:13:13:d5:b8:7e:b6:07:99:69:5e:05:96:
         05:c8:5c:2e:76:1e:b9:4b:0c:f2:e7:e2:b0:83:7c:54:66:0f:
         8b:97:3e:ee:cc:c2:f5:a1:68:dd:84:50:bf:fa:89:f5:ec:05:
         65:c1:80:42:3f:e8:bd:94:0c:34:61:de:ce:79:06:c9:c4:c1:
         79:6f:f0:32:3c:71:07:52:9f:e7:96:e1:ef:97:d9:8a:7a:a7:
         46:bd:d6:2c:f7:9e:e1:af:17:fa:5a:f5:fd:f6:e5:ae:05:c7:
         d0:f2:1a:d7:4d:d6:42:80:e5:34:f4:cc:cd:e3:af:0c:f8:e5:
         9a:24:48:70:e3:a9:66:5d:f5:fd:8f:1c:17:c6:6e:e6:44:0e:
         1b:44:42:2a:f2:f8:b0:0f:99:30:a7:db:22:21:5c:e5:dd:a3:
         ed:3e:bf:4c:85:c2:3f:78:61:e1:a1:72:6f:6a:d4:ba:78:6f:
         f1:fe:84:8e:cc:91:ec:fc:51:c4:63:c3:c0:ee:09:4e:24:34:
         e6:69:dc:8b:ed:20:6a:ba:af:37:b7:d3:e3:9e:e1:1b:59:fc:
         a2:0c:36:3b:89:ed:c7:2e:c0:74:fe:47:84:4d:b3:97:3b:64:
         a8:57:fb:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMUctpUfpucQcBjexfRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDYwNDk5OTg3OTFmZTg1NzcwMzEzYmE2NjBjNDEyNTE5
Mjk4MGIwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
Eyg1YzNhM2QxODUxYzlmNjY4YzA4YWJlYmQ1NDM1OWIzZjU2MmY4MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UtAiDTZg7UHnQfuMsLoucf3skPl
xqqDzNTXJ8saMlvUT+DOY1ognaPxEWvOco5+WqkLAXkK/MG4IZIAlY62ujKahS1Z
Et+RHAbp6hAGA18KOV0FLBJYg+MfAPZhqbRuF/5cepXkvrmD9bYD8lTbn66ysx7b
izVErP3H450L5+NoFmvxaxPZoGl1e5BbHZ0+4v4q3ipjiNoKJN4kEmZVHsM06Xpr
eysU0T91dIkIFJfsmjAToCpn5VT/kCVoz2NruefWCKGka1dazWGqEbaMCP1SwYAC
4BLFUl+ZkD1TtGwi3fSKcwPKOXLsKmfBTez1sLObh/aplEv+Ud48MEnqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw6PRhRyfZowIq+vVQ1mz9WL4FsMB8GA1UdIwQY
MBaAFCVGBJmYeR/oV3AxO6ZgxBJRkpgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2Et
MWM1MWIzMzNkZmZiLzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2EtMWM1MWIzMzNkZmZi
LzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE2QYsix
WRbFrqirDV9yuQQAmboCIs+MExPVuH62B5lpXgWWBchcLnYeuUsM8ufisIN8VGYP
i5c+7szC9aFo3YRQv/qJ9ewFZcGAQj/ovZQMNGHeznkGycTBeW/wMjxxB1Kf55bh
75fZinqnRr3WLPee4a8X+lr1/fblrgXH0PIa103WQoDlNPTMzeOvDPjlmiRIcOOp
Zl31/Y8cF8Zu5kQOG0RCKvL4sA+ZMKfbIiFc5d2j7T6/TIXCP3hh4aFyb2rUunhv
8f6EjsyR7PxRxGPDwO4JTiQ05mnci+0garqvN7fT457hG1n8ogw2O4ntxy7AdP5H
hE2zlztkqFf7pA==
-----END CERTIFICATE-----