Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File:                     NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier:          WDNtKgA6MiA6Hkp/DTA60tJWUd2TTPXNzTdg3/3B+YY=
Subject key identifier:   C4:A7:98:73:A6:EF:D8:01:53:37:F6:63:EA:AE:0A:C2:5F:B6:1D:38
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer:       /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial:       01962F3DC357B6C2E3691744CEA64566D0C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number:          1122
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: eeR14UCMyaimkbC5cjvTFbiZzEs7+WedapXse7ijWco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c3:57:b6:c2:e3:69:17:44:ce:a6:45:66:d0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=c4a79873a6efd8015337f663eaae0ac25fb61d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:1e:2d:48:13:75:6e:d4:c8:8f:8b:c0:08:
                    f4:2d:ea:14:92:61:d4:ff:03:e8:6d:fb:4b:ac:0a:
                    0a:74:30:c2:55:d3:f5:93:7c:3f:c9:46:c7:93:74:
                    14:ae:49:ac:8e:28:ac:5f:26:fa:dc:59:81:b0:92:
                    66:20:c0:69:a3:45:df:a7:d4:48:71:3a:e6:d5:ce:
                    64:44:78:22:1f:7b:3f:a4:00:4a:6e:97:c7:b7:34:
                    b0:ab:11:5a:06:d0:1f:e7:a6:69:26:bd:4b:27:69:
                    c6:1e:75:07:59:b3:ab:7b:1e:1f:30:61:2a:cb:d2:
                    ff:db:73:85:f1:b9:b2:7b:82:e4:0d:5e:96:97:de:
                    d4:4f:a7:99:e5:72:cb:41:fa:14:d3:f5:5c:19:c1:
                    de:35:76:0b:ea:42:4d:26:80:d7:cf:85:4d:49:53:
                    5f:0d:9f:0a:ae:be:da:9c:99:23:82:87:57:43:c6:
                    f1:29:28:56:36:98:16:c0:d7:5a:33:98:34:c2:cf:
                    aa:ee:f4:2f:65:c5:b0:0b:2b:ba:31:fe:18:53:a1:
                    b6:5b:8f:e7:c4:67:97:85:a1:2a:4f:69:76:2c:ec:
                    a8:cd:eb:1f:ec:da:8b:69:aa:78:4b:98:e0:f9:97:
                    c3:6f:bb:01:b0:cb:be:3f:01:ea:5d:88:22:02:dc:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:98:73:A6:EF:D8:01:53:37:F6:63:EA:AE:0A:C2:5F:B6:1D:38
            X509v3 Authority Key Identifier:
                keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:cb:4e:06:a6:7d:b0:ae:43:a6:8b:e4:48:6b:6b:10:12:
         cb:88:10:2c:72:10:15:8f:88:da:af:3d:41:81:9d:f6:90:8a:
         ca:7d:4d:88:e5:7d:72:8d:d8:37:1a:ba:dd:c6:6a:df:da:02:
         c5:2b:9a:79:91:89:e7:3d:56:b3:bd:9c:d2:58:80:93:46:7d:
         48:43:1c:15:01:97:ab:c0:17:3b:69:04:a1:c6:52:93:6a:5f:
         e9:9d:75:64:24:ca:37:5b:65:af:a8:2d:0b:39:3c:53:6b:7e:
         81:a1:71:a3:20:98:09:9d:f0:e7:7b:b2:4c:9b:61:0b:da:4e:
         77:db:48:91:bd:a9:43:ec:06:15:8e:98:70:8f:7c:36:54:27:
         37:3b:8d:b5:8b:4e:c2:13:8f:85:6f:b4:8e:fd:25:c3:29:89:
         05:dc:7a:2f:cc:ec:21:a1:f4:1c:d7:42:c7:3f:58:51:0c:4c:
         79:37:cd:74:80:db:01:12:8a:72:5f:fe:d8:f2:6f:e4:8e:a1:
         45:9f:d2:b4:48:6b:c1:04:d7:5b:df:d1:10:e7:04:2d:e6:94:
         a1:e3:11:ca:23:f7:ba:1d:7e:d2:3d:bf:4b:5f:86:54:85:ee:
         b0:3c:8e:cb:cc:6a:54:27:60:14:66:94:44:fd:4e:6a:54:05:
         3b:4f:62:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcNXtsLjaRdEzqZFZtDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4
MzlhYWEwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
EyhjNGE3OTg3M2E2ZWZkODAxNTMzN2Y2NjNlYWFlMGFjMjVmYjYxZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IQeLUgTdW7UyI+LwAj0LeoUkmHU
/wPobftLrAoKdDDCVdP1k3w/yUbHk3QUrkmsjiisXyb63FmBsJJmIMBpo0Xfp9RI
cTrm1c5kRHgiH3s/pABKbpfHtzSwqxFaBtAf56ZpJr1LJ2nGHnUHWbOrex4fMGEq
y9L/23OF8bmye4LkDV6Wl97UT6eZ5XLLQfoU0/VcGcHeNXYL6kJNJoDXz4VNSVNf
DZ8Krr7anJkjgodXQ8bxKShWNpgWwNdaM5g0ws+q7vQvZcWwCyu6Mf4YU6G2W4/n
xGeXhaEqT2l2LOyozesf7NqLaap4S5jg+ZfDb7sBsMu+PwHqXYgiAtz8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSnmHOm79gBUzf2Y+quCsJfth04MB8GA1UdIwQY
MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct
NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz
LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv3LTgam
fbCuQ6aL5EhraxASy4gQLHIQFY+I2q89QYGd9pCKyn1NiOV9co3YNxq63cZq39oC
xSuaeZGJ5z1Ws72c0liAk0Z9SEMcFQGXq8AXO2kEocZSk2pf6Z11ZCTKN1tlr6gt
Czk8U2t+gaFxoyCYCZ3w53uyTJthC9pOd9tIkb2pQ+wGFY6YcI98NlQnNzuNtYtO
whOPhW+0jv0lwymJBdx6L8zsIaH0HNdCxz9YUQxMeTfNdIDbARKKcl/+2PJv5I6h
RZ/StEhrwQTXW9/REOcELeaUoeMRyiP3uh1+0j2/S1+GVIXusDyOy8xqVCdgFGaU
RP1OalQFO09i/Q==
-----END CERTIFICATE-----