Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
File:                     Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft (raw, json)
Hash identifier:          InnvdyL+XjIqfmAU/9eKiQobB6QjYNeII2OGSCJUobc=
Subject key identifier:   07:51:9D:6E:51:12:B7:A3:93:7F:BE:55:63:0E:A9:E5:21:3B:41:A0
Authority key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71
Certificate issuer:       /CN=52eff385d4b48215d805b588a2705829d4621171
Certificate serial:       01962E61ECB98CD69D7438740472D710C729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft
Manifest number:          0893
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl (hash: WOe39NstNRluJ48HOwTSjNzi1h0o7Bfd2UnC0jxDEj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:b9:8c:d6:9d:74:38:74:04:72:d7:10:c7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52eff385d4b48215d805b588a2705829d4621171
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=07519d6e5112b7a3937fbe55630ea9e5213b41a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:39:3d:86:7d:41:a0:f6:14:26:3f:11:c6:
                    26:6b:88:70:f7:65:fc:f7:a4:a1:18:df:88:c2:99:
                    6c:f3:d7:6e:e0:f8:55:75:d6:65:de:e6:6b:d4:3b:
                    88:f4:21:fd:27:24:0e:75:2e:c8:51:91:83:9a:3b:
                    8f:a1:56:de:76:6c:d7:53:16:e0:07:c7:b0:b0:c5:
                    57:20:9f:4a:34:2d:e1:34:3a:e2:56:e7:16:17:0c:
                    1e:8d:e2:05:06:74:69:bb:a6:7e:c5:d2:76:c7:6a:
                    59:6c:34:93:c8:4d:a8:07:f8:39:e7:69:2b:9a:97:
                    ba:f2:38:ea:7b:cd:2e:2b:2d:aa:c6:cf:3d:bb:ef:
                    eb:b2:d0:0b:a5:30:29:90:60:fb:f2:c8:c5:87:15:
                    3e:e9:46:69:fe:89:85:ca:f6:92:cf:eb:cf:60:7b:
                    38:83:80:c8:1e:7d:63:05:86:c5:12:c4:9b:1e:4b:
                    9b:de:ed:bd:2f:99:f0:8f:0b:71:d4:8d:69:93:61:
                    99:75:79:01:33:d8:47:85:20:f4:b4:1e:d6:05:5a:
                    80:71:41:d2:1f:45:c4:a2:e1:0b:4c:43:09:5b:c4:
                    3e:db:be:0b:ba:6e:ae:42:d5:ee:1b:32:4e:04:60:
                    d4:db:58:36:f5:b6:e2:b6:6a:39:3a:fa:70:7d:e6:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:51:9D:6E:51:12:B7:A3:93:7F:BE:55:63:0E:A9:E5:21:3B:41:A0
            X509v3 Authority Key Identifier:
                keyid:52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:94:fd:df:74:6e:f3:45:c0:5b:3a:2a:0d:63:e3:6b:ef:3c:
         f5:1b:c4:65:2e:af:59:5e:ff:58:92:f8:44:6d:a8:20:df:b8:
         64:c0:5c:47:ff:5e:20:3f:10:a4:2d:bf:9e:9c:79:ae:34:02:
         70:a1:42:8c:bc:a6:db:e9:85:6e:29:d0:65:ec:f0:3f:c9:af:
         08:86:3f:45:c9:03:af:33:4b:a5:dc:ca:07:c4:e1:5d:af:9a:
         4d:1e:b7:38:f3:c1:4d:3d:55:3d:a0:9b:3d:c0:4e:55:b5:0e:
         79:99:b3:5a:53:f3:20:b5:ae:7e:d7:65:48:9d:bb:a3:c6:ca:
         71:6b:08:1e:c9:9e:3f:3d:24:88:e9:a6:e7:82:fa:0e:b0:02:
         43:0b:1d:db:55:86:48:4b:da:53:9f:55:e7:51:a4:7d:07:cd:
         43:ad:8a:3b:a2:df:22:3a:6a:80:55:20:a3:31:ea:8a:3a:ca:
         1f:cb:c7:2a:9a:d2:ca:af:a1:85:9a:10:5c:68:b0:05:85:49:
         2d:20:0a:42:58:f7:43:07:3f:c6:8a:83:c3:3b:7f:94:8b:a9:
         89:29:54:a9:50:6c:c0:6e:2a:c3:50:41:b5:e9:d2:58:79:ae:
         83:ea:7c:ac:b5:df:ec:be:0a:0d:e2:3e:b2:ce:af:85:ed:41:
         6e:d2:e7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYey5jNaddDh0BHLXEMcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWZmMzg1ZDRiNDgyMTVkODA1YjU4OGEyNzA1ODI5ZDQ2
MjExNzEwHhcNMjUwNDEzMDkwMTMxWhcNMjUwNDE0MDkwMTMxWjAzMTEwLwYDVQQD
EygwNzUxOWQ2ZTUxMTJiN2EzOTM3ZmJlNTU2MzBlYTllNTIxM2I0MWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTg5PYZ9QaD2FCY/EcYma4hw92X8
96ShGN+Iwpls89du4PhVddZl3uZr1DuI9CH9JyQOdS7IUZGDmjuPoVbedmzXUxbg
B8ewsMVXIJ9KNC3hNDriVucWFwwejeIFBnRpu6Z+xdJ2x2pZbDSTyE2oB/g552kr
mpe68jjqe80uKy2qxs89u+/rstALpTApkGD78sjFhxU+6UZp/omFyvaSz+vPYHs4
g4DIHn1jBYbFEsSbHkub3u29L5nwjwtx1I1pk2GZdXkBM9hHhSD0tB7WBVqAcUHS
H0XEouELTEMJW8Q+274Lum6uQtXuGzJOBGDU21g29bbitmo5OvpwfeYloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdRnW5RErejk3++VWMOqeUhO0GgMB8GA1UdIwQY
MBaAFFLv84XUtIIV2AW1iKJwWCnUYhFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYt
MzBkNDc1YmY0ZjYyLzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iNGNkZjgtZTc5YS00ZjQzLWFlNzYtMzBkNDc1YmY0ZjYy
LzEvVXVfemhkUzBnaFhZQmJXSW9uQllLZFJpRVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5T933Ru
80XAWzoqDWPja+889RvEZS6vWV7/WJL4RG2oIN+4ZMBcR/9eID8QpC2/npx5rjQC
cKFCjLym2+mFbinQZezwP8mvCIY/RckDrzNLpdzKB8ThXa+aTR63OPPBTT1VPaCb
PcBOVbUOeZmzWlPzILWuftdlSJ27o8bKcWsIHsmePz0kiOmm54L6DrACQwsd21WG
SEvaU59V51GkfQfNQ62KO6LfIjpqgFUgozHqijrKH8vHKprSyq+hhZoQXGiwBYVJ
LSAKQlj3Qwc/xoqDwzt/lIupiSlUqVBswG4qw1BBtenSWHmug+p8rLXf7L4KDeI+
ss6vhe1BbtLnlw==
-----END CERTIFICATE-----