Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File:                     DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier:          eb1qb8ZdjEbf9b1zizhLeS6TtZCa9I6ODU9TRMfbKLw=
Subject key identifier:   59:84:37:A5:F7:C5:29:4F:7A:A8:C6:1F:C0:5F:DB:5A:5E:DD:85:21
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer:       /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial:       01962DF3CB2A8ED91A0553DA9305571D839E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number:          5B
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: BO+UlIEw6FpNE4Vs0axvRSFrEitFi1tJUKgmmtW+L5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:2a:8e:d9:1a:05:53:da:93:05:57:1d:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=598437a5f7c5294f7aa8c61fc05fdb5a5edd8521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:85:50:17:6c:74:a9:d4:f3:a2:3d:dc:8b:
                    21:26:9b:4e:4f:60:1b:8a:65:c0:10:e4:24:0c:96:
                    f6:8a:a7:9b:1b:bd:6a:98:03:a7:57:76:49:0b:96:
                    8a:09:0b:0b:ea:93:c5:a0:67:11:91:7b:bc:02:77:
                    9a:6c:da:97:87:7a:d8:4c:bc:27:be:69:98:bd:2c:
                    2e:5a:ad:22:e3:2f:50:aa:f5:e0:7d:04:57:0c:eb:
                    3a:73:d1:88:55:2b:d4:80:8d:86:04:2d:2b:a8:36:
                    18:16:09:a6:08:7c:9a:fe:c4:1b:e4:fc:9f:d0:64:
                    eb:12:c3:02:90:15:03:50:84:a4:8e:f3:11:b8:cb:
                    99:34:56:9b:27:33:17:76:c2:67:03:74:46:70:c4:
                    08:01:e8:47:58:b1:62:e6:ee:ad:70:f5:6a:20:6d:
                    36:7b:13:f1:27:8f:dc:24:81:cb:7c:a5:e0:f3:18:
                    c0:21:77:eb:de:98:0c:00:d5:3f:da:f8:75:c5:ac:
                    f9:2d:3b:18:97:f5:b5:1b:09:24:d7:67:0f:b5:be:
                    a7:5d:9f:40:65:87:45:69:45:71:94:e2:b9:7d:8d:
                    e9:fd:dc:85:3d:8b:f9:97:47:26:25:be:e6:59:7e:
                    e4:c8:c1:ba:e8:f5:23:71:95:75:5f:bc:1b:fa:01:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:37:A5:F7:C5:29:4F:7A:A8:C6:1F:C0:5F:DB:5A:5E:DD:85:21
            X509v3 Authority Key Identifier:
                keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:33:a9:86:b0:40:36:04:ed:0d:d6:ad:a4:d9:cd:bf:55:
         ce:aa:0c:a2:fc:d0:29:c9:22:15:13:90:10:91:76:3a:ad:3c:
         3d:c5:3b:c8:c1:2a:a3:0f:74:d8:5c:1e:80:e8:ae:90:3f:c7:
         42:dd:5d:75:e8:46:d5:e5:d9:49:e1:c0:bc:02:28:2d:4b:65:
         67:cd:96:81:62:c8:67:1f:0a:87:09:5a:83:a1:72:5b:74:db:
         61:df:34:be:d5:3e:b3:fd:26:18:b0:84:03:3f:83:b9:12:6e:
         10:10:3e:35:7b:5e:2f:fa:ce:93:f5:e0:7f:7d:04:1d:25:7c:
         c1:42:1b:b7:0e:c4:f1:4b:76:17:f1:cf:19:a6:e9:2b:67:e0:
         66:65:3e:9f:ed:8e:ab:7f:b3:ab:93:13:c0:86:a7:c2:83:1a:
         80:ce:f8:40:b0:72:11:58:81:e2:ab:77:a9:83:59:63:f0:a4:
         9d:c4:e7:e0:c5:8e:67:6c:49:52:d8:46:22:6f:30:14:fd:41:
         43:15:94:c0:0e:3f:74:48:67:88:b9:41:c4:15:2b:3a:c4:23:
         99:e1:dc:d6:c5:1c:93:98:59:1b:91:b9:45:36:4c:17:9f:06:
         f0:49:6d:84:32:0f:33:3e:89:38:53:ae:06:30:8f:a3:3b:a7:
         19:8c:4e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88sqjtkaBVPakwVXHYOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2MzNjAyOGQwMDU4MTBjYWJhMjQ2MTRiZDYwNzMxZGQ0
OTUwMzMwHhcNMjUwNDEzMDcwMTEzWhcNMjUwNDE0MDcwMTEzWjAzMTEwLwYDVQQD
Eyg1OTg0MzdhNWY3YzUyOTRmN2FhOGM2MWZjMDVmZGI1YTVlZGQ4NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwSFUBdsdKnU86I93IshJptOT2Ab
imXAEOQkDJb2iqebG71qmAOnV3ZJC5aKCQsL6pPFoGcRkXu8AneabNqXh3rYTLwn
vmmYvSwuWq0i4y9QqvXgfQRXDOs6c9GIVSvUgI2GBC0rqDYYFgmmCHya/sQb5Pyf
0GTrEsMCkBUDUISkjvMRuMuZNFabJzMXdsJnA3RGcMQIAehHWLFi5u6tcPVqIG02
exPxJ4/cJIHLfKXg8xjAIXfr3pgMANU/2vh1xaz5LTsYl/W1Gwkk12cPtb6nXZ9A
ZYdFaUVxlOK5fY3p/dyFPYv5l0cmJb7mWX7kyMG66PUjcZV1X7wb+gGedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmEN6X3xSlPeqjGH8Bf21pe3YUhMB8GA1UdIwQY
MBaAFAzMNgKNAFgQyrokYUvWBzHdSVAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUt
ZGNmM2ExYzI1Y2YzLzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wZmM5MDAtN2M0OC00YTUxLTgzZmUtZGNmM2ExYzI1Y2Yz
LzEvRE13MkFvMEFXQkRLdWlSaFM5WUhNZDFKVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASagzqYaw
QDYE7Q3WraTZzb9VzqoMovzQKckiFROQEJF2Oq08PcU7yMEqow902FwegOiukD/H
Qt1ddehG1eXZSeHAvAIoLUtlZ82WgWLIZx8Khwlag6FyW3TbYd80vtU+s/0mGLCE
Az+DuRJuEBA+NXteL/rOk/Xgf30EHSV8wUIbtw7E8Ut2F/HPGabpK2fgZmU+n+2O
q3+zq5MTwIanwoMagM74QLByEViB4qt3qYNZY/CkncTn4MWOZ2xJUthGIm8wFP1B
QxWUwA4/dEhniLlBxBUrOsQjmeHc1sUck5hZG5G5RTZMF58G8ElthDIPMz6JOFOu
BjCPozunGYxOSA==
-----END CERTIFICATE-----