Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
File:                     mNtTOItvp7HlovTGhjq3Hxz7VRI.mft (raw, json)
Hash identifier:          6gwO2wJoBd+Xg80yZ5OTPRCCkfsRfNc6sQLgU9MH0vE=
Subject key identifier:   F9:77:7C:7B:46:BC:77:69:92:2C:55:6A:3B:39:87:28:C3:16:6D:9B
Authority key identifier: 98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12
Certificate issuer:       /CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
Certificate serial:       01962E6185C845713B0139BAD1DC61B3F075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: mNtTOItvp7HlovTGhjq3Hxz7VRI.crl (hash: ReiUIN5NsWoMuDpWx7f3JjOqN8tqwxX6vmGBA/CYUeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:c8:45:71:3b:01:39:ba:d1:dc:61:b3:f0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98db53388b6fa7b1e5a2f4c6863ab71f1cfb5512
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=f9777c7b46bc7769922c556a3b398728c3166d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:d7:82:cf:a9:c1:f8:45:8c:bb:4b:47:d3:
                    8d:cd:64:aa:d7:5f:3d:a2:7c:22:ee:fe:96:7f:39:
                    3f:78:c6:ca:7e:73:d4:01:08:68:05:bd:75:e9:3f:
                    a7:ec:20:cc:ee:da:ed:8f:5c:7c:d0:55:d9:fa:46:
                    8b:f0:e8:f6:31:d0:51:72:a7:89:03:43:fc:91:3d:
                    27:19:d0:21:06:9d:50:52:c6:84:36:5e:3c:19:7f:
                    67:3b:78:89:ae:a5:b1:a2:a0:e7:00:17:72:ad:9c:
                    8c:e4:0f:a5:64:d3:af:68:87:97:41:29:73:cb:5e:
                    ca:d4:b1:1f:64:2f:ec:d1:57:24:14:52:c9:87:13:
                    a3:a3:4e:3c:52:39:06:b4:df:0a:34:79:1f:92:2e:
                    31:8e:bc:3b:d1:67:b9:85:fa:51:9f:42:88:22:46:
                    55:a3:58:f0:c6:f6:92:c5:42:eb:f7:a8:ba:34:3f:
                    7f:27:a2:a1:e8:60:75:ab:10:fa:18:9a:08:16:70:
                    f0:97:30:3b:e5:e4:5c:b6:f8:19:70:50:e3:29:31:
                    6f:76:20:e4:b0:cc:38:a0:83:b8:4a:0b:9c:d7:db:
                    60:46:7d:dd:4b:6f:98:bf:41:d7:37:5b:6a:97:2b:
                    64:74:8b:91:76:03:cd:c9:8d:e4:f5:9a:44:97:c1:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:7C:7B:46:BC:77:69:92:2C:55:6A:3B:39:87:28:C3:16:6D:9B
            X509v3 Authority Key Identifier:
                keyid:98:DB:53:38:8B:6F:A7:B1:E5:A2:F4:C6:86:3A:B7:1F:1C:FB:55:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNtTOItvp7HlovTGhjq3Hxz7VRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/996da3-9f8c-475b-8bf6-c7467da2db60/1/mNtTOItvp7HlovTGhjq3Hxz7VRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:fa:cc:eb:27:c0:f9:af:a3:81:9e:13:d9:02:bd:88:1d:
         1d:79:bd:a2:1a:79:82:07:5e:df:f1:30:d7:b2:f7:2f:85:9c:
         04:80:38:38:fe:39:c2:cf:8e:ed:07:0b:64:0e:43:95:e5:9a:
         38:77:37:30:b8:e9:59:f0:25:96:17:8a:f7:47:35:bb:2f:3f:
         22:51:a7:25:2e:8c:79:6f:e9:b0:a5:fc:db:ca:76:b2:46:dd:
         76:ba:28:c7:be:81:7d:46:d2:b6:d9:eb:f9:ee:24:9a:17:04:
         25:5c:32:24:36:2f:d5:97:fd:77:a5:25:70:80:4b:c1:ff:a8:
         46:d1:1d:4d:2a:64:f9:4e:23:a5:6e:d1:82:a1:3c:42:37:96:
         ea:b4:7a:ed:85:b5:55:a5:36:37:53:be:62:6d:f4:0c:43:f7:
         ff:67:6c:c0:af:ce:8d:e5:ce:a9:69:1f:67:4b:1f:74:27:89:
         e5:8b:28:66:69:79:d8:a3:c6:ae:ef:5e:83:6f:95:a4:c0:de:
         af:6d:ba:df:9e:ad:e5:96:9f:5a:7d:bc:34:07:18:9b:ae:4a:
         72:3e:87:2f:2f:dc:a9:db:bd:a0:d8:ea:ee:3e:cd:fe:f4:5e:
         c0:aa:bc:f0:3f:07:43:24:e8:5c:b7:5d:1b:a6:7a:dc:77:da:
         59:71:0b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYXIRXE7ATm60dxhs/B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZGI1MzM4OGI2ZmE3YjFlNWEyZjRjNjg2M2FiNzFmMWNm
YjU1MTIwHhcNMjUwNDEzMDkwMTA1WhcNMjUwNDE0MDkwMTA1WjAzMTEwLwYDVQQD
EyhmOTc3N2M3YjQ2YmM3NzY5OTIyYzU1NmEzYjM5ODcyOGMzMTY2ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NzXgs+pwfhFjLtLR9ONzWSq1189
onwi7v6Wfzk/eMbKfnPUAQhoBb116T+n7CDM7trtj1x80FXZ+kaL8Oj2MdBRcqeJ
A0P8kT0nGdAhBp1QUsaENl48GX9nO3iJrqWxoqDnABdyrZyM5A+lZNOvaIeXQSlz
y17K1LEfZC/s0VckFFLJhxOjo048UjkGtN8KNHkfki4xjrw70We5hfpRn0KIIkZV
o1jwxvaSxULr96i6ND9/J6Kh6GB1qxD6GJoIFnDwlzA75eRctvgZcFDjKTFvdiDk
sMw4oIO4Sguc19tgRn3dS2+Yv0HXN1tqlytkdIuRdgPNyY3k9ZpEl8G7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl3fHtGvHdpkixVajs5hyjDFm2bMB8GA1UdIwQY
MBaAFJjbUziLb6ex5aL0xoY6tx8c+1USMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OTZkYTMtOWY4Yy00NzViLThiZjYt
Yzc0NjdkYTJkYjYwLzEvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85OTZkYTMtOWY4Yy00NzViLThiZjYtYzc0NjdkYTJkYjYw
LzEvbU50VE9JdHZwN0hsb3ZUR2hqcTNIeHo3VlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOX6zOsn
wPmvo4GeE9kCvYgdHXm9ohp5ggde3/Ew17L3L4WcBIA4OP45ws+O7QcLZA5DleWa
OHc3MLjpWfAllheK90c1uy8/IlGnJS6MeW/psKX828p2skbddroox76BfUbSttnr
+e4kmhcEJVwyJDYv1Zf9d6UlcIBLwf+oRtEdTSpk+U4jpW7RgqE8QjeW6rR67YW1
VaU2N1O+Ym30DEP3/2dswK/OjeXOqWkfZ0sfdCeJ5YsoZml52KPGru9eg2+VpMDe
r226356t5ZafWn28NAcYm65Kcj6HLy/cqdu9oNjq7j7N/vRewKq88D8HQyToXLdd
G6Z63HfaWXEL+A==
-----END CERTIFICATE-----