Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
File:                     bP-QsXePU3Q_kng8rxdIouzWaKA.mft (raw, json)
Hash identifier:          e5xmrCHKE9lUsYZRCfZhS/i0YPop6AQ7RRrxrk+L8+c=
Subject key identifier:   5A:AC:D5:4F:DE:36:0C:4E:69:A3:B3:C2:7D:5B:26:59:94:AF:61:9D
Authority key identifier: 6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0
Certificate issuer:       /CN=6cff90b1778f53743f92783caf1748a2ecd668a0
Certificate serial:       01962E2B05FBC798649782C26A07E51DB5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP-QsXePU3Q_kng8rxdIouzWaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft
Manifest number:          01FE
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: bP-QsXePU3Q_kng8rxdIouzWaKA.crl (hash: X5AGJjwBQaLoRyT7+GKoKhODLMgUhS/8tlGt13KwB3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:05:fb:c7:98:64:97:82:c2:6a:07:e5:1d:b5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cff90b1778f53743f92783caf1748a2ecd668a0
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=5aacd54fde360c4e69a3b3c27d5b265994af619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:37:4e:ea:4d:b4:bf:a3:24:4d:99:f9:4d:
                    bc:1b:cb:e5:8f:48:62:f3:a8:c1:0b:fb:92:7b:82:
                    e7:80:42:b8:79:72:5c:31:b6:52:8f:4c:32:c0:57:
                    c1:5d:e3:86:f3:0b:55:d5:27:b5:13:af:1a:59:85:
                    75:23:23:28:de:8e:41:ec:df:85:63:ce:fe:4e:e3:
                    07:fc:22:2d:5c:60:84:28:2d:af:ae:71:6e:98:5f:
                    52:8f:e4:27:df:12:a2:ad:de:0e:68:4e:eb:2d:8f:
                    17:58:60:3b:17:ae:51:99:db:81:c1:9b:5a:9d:f5:
                    dd:65:9d:bf:00:6a:a4:dc:d2:7e:e1:84:54:8f:bf:
                    eb:63:95:f6:b9:3b:46:eb:43:85:0e:4d:5f:1c:5a:
                    e8:a7:93:bf:5d:2b:74:90:7f:da:8e:20:0b:3d:c8:
                    8e:3b:9e:b3:47:27:ba:58:7b:89:33:fd:c2:3c:c8:
                    bb:c3:ff:95:06:d6:9a:13:80:f0:57:c3:b9:ed:d0:
                    81:dc:6a:22:74:5b:60:4e:04:97:40:3f:f8:9e:6b:
                    d8:e0:c0:c4:89:67:2c:fb:58:6d:a6:28:3a:64:8b:
                    27:3d:4f:9b:4d:a0:ba:b4:39:42:30:87:7c:5f:5a:
                    22:0b:63:66:6d:9a:f0:e0:bd:0d:37:29:a0:67:e6:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:D5:4F:DE:36:0C:4E:69:A3:B3:C2:7D:5B:26:59:94:AF:61:9D
            X509v3 Authority Key Identifier:
                keyid:6C:FF:90:B1:77:8F:53:74:3F:92:78:3C:AF:17:48:A2:EC:D6:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP-QsXePU3Q_kng8rxdIouzWaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dbb525-8ba5-40c3-8c12-7ded4d61e8d2/1/bP-QsXePU3Q_kng8rxdIouzWaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:4e:00:8e:61:18:00:6b:71:bb:b8:c4:8b:52:32:6a:51:
         34:5b:20:19:4e:1c:f2:90:c7:a6:46:fd:2f:4b:61:91:37:d1:
         b5:3a:a6:c3:8f:66:51:81:a5:94:3c:49:4b:92:ce:39:7f:1a:
         6c:3a:3e:15:e7:7b:c8:ee:2f:65:d1:98:a7:24:e1:3f:ba:9e:
         b3:31:e2:83:15:50:67:d2:e4:26:0a:e9:2e:85:81:ff:f3:87:
         c1:81:b7:f0:b9:19:bd:29:a4:4d:1b:99:b6:36:f7:fe:8f:1d:
         eb:11:d6:51:16:fb:af:8b:ac:01:61:58:6f:b8:25:01:22:28:
         e3:b9:c4:7a:a8:eb:8e:cd:99:bd:85:9c:27:e3:15:0a:bb:c9:
         3b:1b:76:f1:cc:9b:16:cb:a5:8a:05:0c:90:ed:42:ac:4b:a6:
         a9:28:1a:cd:c2:fe:82:07:49:c3:c3:42:c0:51:d9:5d:d0:69:
         c1:0c:43:b5:24:3d:ba:37:b4:3e:3f:bb:7a:8e:17:c3:a6:6c:
         c4:cc:54:1d:06:2d:76:eb:7f:62:51:17:70:c8:6b:08:7d:fe:
         a3:54:4a:54:3c:24:88:6b:04:aa:4d:f6:3e:f0:28:bf:b5:84:
         63:77:98:d8:1a:50:fb:a5:5e:ce:bf:1c:ae:3d:c6:62:52:66:
         b3:2f:34:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwX7x5hkl4LCagflHbXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmY5MGIxNzc4ZjUzNzQzZjkyNzgzY2FmMTc0OGEyZWNk
NjY4YTAwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
Eyg1YWFjZDU0ZmRlMzYwYzRlNjlhM2IzYzI3ZDViMjY1OTk0YWY2MTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuok3TupNtL+jJE2Z+U28G8vlj0hi
86jBC/uSe4LngEK4eXJcMbZSj0wywFfBXeOG8wtV1Se1E68aWYV1IyMo3o5B7N+F
Y87+TuMH/CItXGCEKC2vrnFumF9Sj+Qn3xKird4OaE7rLY8XWGA7F65RmduBwZta
nfXdZZ2/AGqk3NJ+4YRUj7/rY5X2uTtG60OFDk1fHFrop5O/XSt0kH/ajiALPciO
O56zRye6WHuJM/3CPMi7w/+VBtaaE4DwV8O57dCB3GoidFtgTgSXQD/4nmvY4MDE
iWcs+1htpig6ZIsnPU+bTaC6tDlCMId8X1oiC2NmbZrw4L0NNymgZ+Y/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqs1U/eNgxOaaOzwn1bJlmUr2GdMB8GA1UdIwQY
MBaAFGz/kLF3j1N0P5J4PK8XSKLs1migMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAtUXNYZVBVM1Ffa25nOHJ4ZElvdXpXYUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYmI1MjUtOGJhNS00MGMzLThjMTIt
N2RlZDRkNjFlOGQyLzEvYlAtUXNYZVBVM1Ffa25nOHJ4ZElvdXpXYUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kYmI1MjUtOGJhNS00MGMzLThjMTItN2RlZDRkNjFlOGQy
LzEvYlAtUXNYZVBVM1Ffa25nOHJ4ZElvdXpXYUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtBOAI5h
GABrcbu4xItSMmpRNFsgGU4c8pDHpkb9L0thkTfRtTqmw49mUYGllDxJS5LOOX8a
bDo+Fed7yO4vZdGYpyThP7qeszHigxVQZ9LkJgrpLoWB//OHwYG38LkZvSmkTRuZ
tjb3/o8d6xHWURb7r4usAWFYb7glASIo47nEeqjrjs2ZvYWcJ+MVCrvJOxt28cyb
FsuligUMkO1CrEumqSgazcL+ggdJw8NCwFHZXdBpwQxDtSQ9uje0Pj+7eo4Xw6Zs
xMxUHQYtdut/YlEXcMhrCH3+o1RKVDwkiGsEqk32PvAov7WEY3eY2BpQ+6Vezr8c
rj3GYlJmsy80eg==
-----END CERTIFICATE-----