Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File:                     DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier:          ayiuBRkDCrrAQjR05jAG5OuE6cFVlrG8BGH9ppvGxKI=
Subject key identifier:   74:7B:BB:D7:0E:2B:DA:C4:55:E1:E9:0C:00:8C:B4:FE:D5:68:E0:B6
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer:       /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial:       01962E61967D8C7D20FECC8E522320FE9DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number:          02CB
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: IOJiAbPc+xdIG66h8VbCrtQuVo1va/NPsRawFi5M+Yo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:7d:8c:7d:20:fe:cc:8e:52:23:20:fe:9d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=747bbbd70e2bdac455e1e90c008cb4fed568e0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:d9:68:22:32:39:1b:e7:f5:5b:ba:06:84:
                    82:e9:63:26:d1:22:48:e6:7e:53:00:7a:cc:21:44:
                    f2:4f:13:52:eb:dd:83:c3:2c:44:d7:e0:dc:eb:33:
                    f0:99:39:28:f8:5f:cd:a7:98:ac:80:b8:b1:aa:19:
                    21:31:b2:09:ef:90:b7:d8:75:c6:05:e1:bd:49:77:
                    b6:d7:e0:74:79:72:1d:c6:f7:21:94:e4:54:52:8b:
                    9a:97:a4:a1:28:45:93:a4:44:80:41:10:7c:a8:b0:
                    84:07:23:f0:b4:77:96:c3:f4:7d:0b:b0:51:17:29:
                    6b:01:cc:c1:b8:9d:07:a3:4e:9e:77:df:69:45:47:
                    94:44:84:09:e3:82:a8:72:c2:92:07:fb:f0:e2:77:
                    26:98:77:cd:16:d7:eb:5f:73:f8:b9:bb:da:0a:e6:
                    93:d6:23:4c:75:6b:7f:ea:66:26:f5:d3:e5:bf:d5:
                    ce:53:3e:61:7b:23:8a:3f:c3:13:71:81:ed:fd:71:
                    51:c6:ed:bf:f5:7a:a4:ba:4b:77:ba:2c:4e:c0:11:
                    35:a8:18:a1:58:bb:42:1d:53:c1:ab:58:c5:1b:2f:
                    af:60:14:2d:8f:e8:6c:a7:6e:48:b7:c7:b8:82:ac:
                    19:fb:66:16:ab:60:5a:d0:32:fb:08:cb:04:91:de:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7B:BB:D7:0E:2B:DA:C4:55:E1:E9:0C:00:8C:B4:FE:D5:68:E0:B6
            X509v3 Authority Key Identifier:
                keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:ff:c7:10:91:85:27:e0:6d:7f:5b:80:ec:9c:1d:f2:28:
         61:82:f6:23:7d:0d:b5:f7:82:6d:58:75:ed:4f:72:81:3a:98:
         71:d4:54:c1:71:d5:77:ee:2d:79:42:a5:df:52:ec:89:20:4c:
         9e:79:4e:e2:56:81:8b:7f:ac:34:3d:e1:cb:ab:2e:4f:c7:67:
         93:fb:97:a2:ca:e7:07:2f:64:72:f4:d0:5d:b0:49:d3:42:4e:
         4b:82:e5:76:f6:6f:cf:f7:8c:8b:37:44:76:b4:d0:63:f9:4b:
         d4:cd:fa:02:d9:a0:da:b9:4f:6f:5e:5a:67:57:77:56:3b:3c:
         63:66:19:74:3e:c0:12:b3:93:a5:a3:91:82:a8:ed:62:a8:24:
         dd:5f:e5:05:97:9b:7f:c2:19:c2:2e:79:b3:33:f6:88:a4:80:
         58:c3:49:43:f1:93:f7:d8:2a:cd:42:5e:47:55:a5:67:c2:65:
         fd:00:c0:da:b6:25:5f:aa:97:41:78:60:9e:4e:50:94:28:17:
         67:5b:de:fa:0f:06:bc:8e:93:f9:db:c4:8e:7f:eb:90:51:4e:
         16:e1:d6:65:3f:b6:4a:1b:c7:4b:72:23:fc:3d:89:9e:f9:9a:
         8a:65:e3:84:7f:8b:d4:60:7d:01:39:b8:ce:87:d9:f9:43:a7:
         b9:d1:77:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZZ9jH0g/syOUiMg/p36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx
M2M3NTIwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
Eyg3NDdiYmJkNzBlMmJkYWM0NTVlMWU5MGMwMDhjYjRmZWQ1NjhlMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8rZaCIyORvn9Vu6BoSC6WMm0SJI
5n5TAHrMIUTyTxNS692DwyxE1+Dc6zPwmTko+F/Np5isgLixqhkhMbIJ75C32HXG
BeG9SXe21+B0eXIdxvchlORUUoual6ShKEWTpESAQRB8qLCEByPwtHeWw/R9C7BR
FylrAczBuJ0Ho06ed99pRUeURIQJ44KocsKSB/vw4ncmmHfNFtfrX3P4ubvaCuaT
1iNMdWt/6mYm9dPlv9XOUz5heyOKP8MTcYHt/XFRxu2/9Xqkukt3uixOwBE1qBih
WLtCHVPBq1jFGy+vYBQtj+hsp25It8e4gqwZ+2YWq2Ba0DL7CMsEkd5PfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR7u9cOK9rEVeHpDACMtP7VaOC2MB8GA1UdIwQY
MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt
ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw
LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuen/xxCR
hSfgbX9bgOycHfIoYYL2I30NtfeCbVh17U9ygTqYcdRUwXHVd+4teUKl31LsiSBM
nnlO4laBi3+sND3hy6suT8dnk/uXosrnBy9kcvTQXbBJ00JOS4LldvZvz/eMizdE
drTQY/lL1M36Atmg2rlPb15aZ1d3Vjs8Y2YZdD7AErOTpaORgqjtYqgk3V/lBZeb
f8IZwi55szP2iKSAWMNJQ/GT99gqzUJeR1WlZ8Jl/QDA2rYlX6qXQXhgnk5QlCgX
Z1ve+g8GvI6T+dvEjn/rkFFOFuHWZT+2ShvHS3Ij/D2JnvmaimXjhH+L1GB9ATm4
zofZ+UOnudF3nw==
-----END CERTIFICATE-----