Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft
File:                     a5HhwatXAlaAjt-5y3VZxV3PrWE.mft (raw, json)
Hash identifier:          Q/mpkDIRuki5xDJ1mABgM4Usb+STjhKQvqmAYdBsHPM=
Subject key identifier:   FA:23:89:B9:7C:B7:22:84:E6:80:D5:8B:46:36:8C:53:A7:28:8E:2D
Authority key identifier: 6B:91:E1:C1:AB:57:02:56:80:8E:DF:B9:CB:75:59:C5:5D:CF:AD:61
Certificate issuer:       /CN=6b91e1c1ab570256808edfb9cb7559c55dcfad61
Certificate serial:       01962DF4559F36DA0C6A0DC5E1999E4D61D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5HhwatXAlaAjt-5y3VZxV3PrWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft
Manifest number:          08A9
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: a5HhwatXAlaAjt-5y3VZxV3PrWE.crl (hash: 0izkUwyMijAIyIGlIuOL/b94joL7F4fbGnOIrBxBmi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:9f:36:da:0c:6a:0d:c5:e1:99:9e:4d:61:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b91e1c1ab570256808edfb9cb7559c55dcfad61
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=fa2389b97cb72284e680d58b46368c53a7288e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:39:6e:95:72:4c:66:61:14:62:fe:88:4c:
                    22:69:46:f5:7e:0e:95:fe:b6:e3:b7:f6:1e:4a:37:
                    1b:1f:a5:a6:0c:38:d4:0c:ab:44:81:a1:d0:27:2a:
                    af:45:e3:57:af:16:7b:66:08:b8:35:82:52:71:2f:
                    0e:5e:c5:65:a0:6f:d7:eb:74:9f:1b:65:9a:e7:ec:
                    27:75:23:e1:3d:ac:7a:d9:37:9b:e5:9c:b7:7a:31:
                    ec:bc:b3:ae:1c:80:4f:66:03:60:67:03:f1:ea:5f:
                    a0:eb:7f:03:e5:61:3b:d3:70:eb:d0:48:f8:9d:da:
                    2b:0e:59:7e:94:1d:66:7f:7b:3a:f0:03:a8:54:db:
                    9a:a2:8e:3b:72:68:cf:04:f4:45:73:a1:6b:3f:d6:
                    2e:57:17:a8:59:83:36:80:f1:a3:fc:c8:86:43:ce:
                    09:a3:5e:41:9e:bd:5f:3e:22:50:ca:04:3d:be:98:
                    bc:c3:08:81:47:b7:a7:0d:a2:ca:83:ee:7d:37:40:
                    a5:6e:f5:a4:ff:f1:51:02:1d:2b:6e:4d:0b:3f:84:
                    23:7d:b3:79:36:01:3d:66:b6:14:5f:0f:6e:a2:0c:
                    7a:da:9b:0c:da:b1:d5:1f:f1:95:1e:0f:91:c0:51:
                    db:40:1e:52:21:65:ad:24:00:4e:c8:f2:86:ed:ef:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:89:B9:7C:B7:22:84:E6:80:D5:8B:46:36:8C:53:A7:28:8E:2D
            X509v3 Authority Key Identifier:
                keyid:6B:91:E1:C1:AB:57:02:56:80:8E:DF:B9:CB:75:59:C5:5D:CF:AD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5HhwatXAlaAjt-5y3VZxV3PrWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a5d3c1-bd5e-4356-971c-098a02929089/1/a5HhwatXAlaAjt-5y3VZxV3PrWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:ae:47:09:e1:10:04:b6:b3:ad:5c:43:15:11:85:cc:db:
         a9:de:83:57:9f:99:f7:93:be:bd:de:00:0c:e8:23:8d:09:c4:
         7b:a5:a4:ad:e7:b4:41:07:19:60:b2:7d:cd:6f:ea:70:d4:7e:
         55:e9:03:f6:27:92:a9:f8:a2:97:6c:2b:c0:4f:cd:68:15:99:
         8c:25:d8:3c:f7:7b:dc:51:ac:a1:b2:11:34:a1:d5:b1:d1:46:
         21:ec:5d:14:e9:77:d7:ad:2a:1e:a3:61:13:c1:5b:05:13:8e:
         2f:7f:ed:7a:00:14:dd:02:54:0b:ec:0b:bc:90:64:cc:ad:ad:
         34:86:0a:b1:20:4f:1e:53:74:62:e0:35:f3:9e:ac:18:55:c2:
         52:7c:c5:0f:3a:5b:37:b2:33:8c:c8:cd:b0:5e:a1:eb:c4:97:
         e5:8c:8c:ad:4d:d7:b3:84:a6:e2:bf:4b:c7:35:d7:e8:df:29:
         a3:40:79:c7:d5:bc:7d:b8:84:a3:1b:a6:e3:a0:49:a4:f0:62:
         02:c7:a9:e1:b2:e3:64:5d:6d:38:20:37:5b:85:a2:58:c4:79:
         ec:67:e2:90:15:3d:99:d0:d5:9c:f0:86:a5:ab:30:9a:c7:f2:
         30:e8:54:24:dd:a7:eb:88:4a:99:83:28:39:f3:bb:fa:b7:b6:
         76:5a:f3:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FWfNtoMag3F4ZmeTWHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiOTFlMWMxYWI1NzAyNTY4MDhlZGZiOWNiNzU1OWM1NWRj
ZmFkNjEwHhcNMjUwNDEzMDcwMTQ5WhcNMjUwNDE0MDcwMTQ5WjAzMTEwLwYDVQQD
EyhmYTIzODliOTdjYjcyMjg0ZTY4MGQ1OGI0NjM2OGM1M2E3Mjg4ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySM5bpVyTGZhFGL+iEwiaUb1fg6V
/rbjt/YeSjcbH6WmDDjUDKtEgaHQJyqvReNXrxZ7Zgi4NYJScS8OXsVloG/X63Sf
G2Wa5+wndSPhPax62Teb5Zy3ejHsvLOuHIBPZgNgZwPx6l+g638D5WE703Dr0Ej4
ndorDll+lB1mf3s68AOoVNuaoo47cmjPBPRFc6FrP9YuVxeoWYM2gPGj/MiGQ84J
o15Bnr1fPiJQygQ9vpi8wwiBR7enDaLKg+59N0ClbvWk//FRAh0rbk0LP4QjfbN5
NgE9ZrYUXw9uogx62psM2rHVH/GVHg+RwFHbQB5SIWWtJABOyPKG7e/g4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPojibl8tyKE5oDVi0Y2jFOnKI4tMB8GA1UdIwQY
MBaAFGuR4cGrVwJWgI7fuct1WcVdz61hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTVIaHdhdFhBbGFBanQtNXkzVlp4VjNQcldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hNWQzYzEtYmQ1ZS00MzU2LTk3MWMt
MDk4YTAyOTI5MDg5LzEvYTVIaHdhdFhBbGFBanQtNXkzVlp4VjNQcldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hNWQzYzEtYmQ1ZS00MzU2LTk3MWMtMDk4YTAyOTI5MDg5
LzEvYTVIaHdhdFhBbGFBanQtNXkzVlp4VjNQcldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc46uRwnh
EAS2s61cQxURhczbqd6DV5+Z95O+vd4ADOgjjQnEe6Wkree0QQcZYLJ9zW/qcNR+
VekD9ieSqfiil2wrwE/NaBWZjCXYPPd73FGsobIRNKHVsdFGIexdFOl3160qHqNh
E8FbBROOL3/tegAU3QJUC+wLvJBkzK2tNIYKsSBPHlN0YuA1856sGFXCUnzFDzpb
N7IzjMjNsF6h68SX5YyMrU3Xs4Sm4r9LxzXX6N8po0B5x9W8fbiEoxum46BJpPBi
Asep4bLjZF1tOCA3W4WiWMR57GfikBU9mdDVnPCGpaswmsfyMOhUJN2n64hKmYMo
OfO7+re2dlrzAw==
-----END CERTIFICATE-----