Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File:                     gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier:          l5/AzcKfjF3CMKwYASWzAS1tOw+SE5fL3++EyDVQOtQ=
Subject key identifier:   13:92:98:52:79:72:52:2F:AA:7C:F2:DA:8E:97:51:C8:57:34:6F:B3
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer:       /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial:       01962F3D9B48966D20101F20B880A8A7A10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number:          0F60
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: MFtJ5dyRrK7VmXTlrxrG9tufsyxf8bT1aV1qnpUDoqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:48:96:6d:20:10:1f:20:b8:80:a8:a7:a1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=139298527972522faa7cf2da8e9751c857346fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:a3:33:ac:58:3d:2f:d7:7e:f2:28:56:50:
                    1f:c8:43:9f:32:37:bb:19:6f:c8:6c:6b:f0:f2:a7:
                    d7:01:04:e5:4c:58:7d:ed:ef:c1:25:1e:b1:86:ec:
                    39:a1:99:74:a1:1c:2f:89:81:82:ef:ce:e2:c5:f4:
                    93:cb:d5:2c:8b:6c:71:b8:4c:77:e7:b9:17:50:a4:
                    0a:b1:a7:38:80:07:92:b3:69:3b:54:32:64:5e:b1:
                    25:7b:3f:2e:e8:b4:8a:bc:a8:68:62:fd:f0:ab:c1:
                    c1:a6:d2:4c:ad:31:c8:3d:00:38:ae:70:d2:03:5f:
                    2d:29:f1:ed:d5:52:ff:8f:6a:43:67:34:d7:67:6e:
                    0f:53:5c:f0:0b:c8:3a:ac:b0:10:22:f9:40:ef:53:
                    6e:7f:2f:f6:f5:b6:17:53:64:6a:09:f2:9f:0f:c0:
                    ef:31:78:dc:75:66:47:74:7a:14:50:bc:bf:cf:56:
                    28:3d:ad:fd:fd:e0:c4:e1:46:4d:2c:45:8b:7b:d5:
                    e8:ea:85:38:ff:60:b8:f7:93:18:48:07:e3:44:b7:
                    f3:a4:79:7c:05:fe:a5:4f:30:a7:c8:63:e4:5c:d8:
                    3a:eb:98:fc:f0:2f:b8:96:df:bc:af:ab:14:f2:7b:
                    1a:77:90:df:ba:31:de:e6:27:df:0c:77:e4:0d:63:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:98:52:79:72:52:2F:AA:7C:F2:DA:8E:97:51:C8:57:34:6F:B3
            X509v3 Authority Key Identifier:
                keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:7f:5c:17:45:c2:e6:56:59:eb:c6:15:8b:0f:78:fd:cc:
         2b:7e:8a:7f:1c:c3:0a:5f:e8:7e:8b:50:7a:5a:10:43:09:b2:
         65:1f:26:15:35:ca:bc:81:d7:16:d8:d6:93:8b:73:e5:b0:65:
         3c:22:96:ae:95:4d:a4:03:3b:35:2b:a7:3c:92:d2:f1:3b:b6:
         13:50:b2:e5:a2:85:41:8f:25:89:33:87:f1:57:59:db:62:2b:
         1f:34:ec:e4:91:13:4c:d0:90:1b:d4:58:81:20:3e:b1:fe:8d:
         85:c0:2c:7b:72:e0:22:26:32:d5:04:0c:24:ca:79:ad:da:f5:
         c0:4d:d5:ac:ed:a7:0c:d4:05:ac:7d:2c:ec:b3:c4:3e:41:41:
         ad:45:9f:28:5b:49:0f:74:2a:f1:97:a3:14:9f:21:7b:58:85:
         fc:da:e9:34:71:61:9e:34:b0:61:c2:73:4f:68:56:bf:51:7f:
         cb:7b:8f:e9:b0:65:3d:6c:56:55:07:b3:99:a5:6e:29:09:be:
         6a:79:86:b0:91:18:78:50:bf:dc:6b:eb:af:ab:3c:ec:83:70:
         fa:1a:25:6f:a4:f1:e0:a7:2d:3e:2e:e5:68:a2:21:ee:cc:1f:
         40:35:e2:26:d6:af:dd:fd:2e:51:c1:ed:ac:68:e6:0c:25:31:
         48:51:b1:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZtIlm0gEB8guICop6EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzkyYmRjYjYyMWNiZjIxYzA0NTYzMzNiODQzY2EzMmMx
MzFhZmMwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
EygxMzkyOTg1Mjc5NzI1MjJmYWE3Y2YyZGE4ZTk3NTFjODU3MzQ2ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UqjM6xYPS/XfvIoVlAfyEOfMje7
GW/IbGvw8qfXAQTlTFh97e/BJR6xhuw5oZl0oRwviYGC787ixfSTy9Usi2xxuEx3
57kXUKQKsac4gAeSs2k7VDJkXrElez8u6LSKvKhoYv3wq8HBptJMrTHIPQA4rnDS
A18tKfHt1VL/j2pDZzTXZ24PU1zwC8g6rLAQIvlA71Nufy/29bYXU2RqCfKfD8Dv
MXjcdWZHdHoUULy/z1YoPa39/eDE4UZNLEWLe9Xo6oU4/2C495MYSAfjRLfzpHl8
Bf6lTzCnyGPkXNg665j88C+4lt+8r6sU8nsad5DfujHe5iffDHfkDWMskwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOSmFJ5clIvqnzy2o6XUchXNG+zMB8GA1UdIwQY
MBaAFIB5K9y2IcvyHARWMzuEPKMsExr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEt
N2RhOWU4OGQ2NWI5LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jNDhlMDItNDk4Mi00NGE1LWExMjEtN2RhOWU4OGQ2NWI5
LzEvZ0hrcjNMWWh5X0ljQkZZek80UThveXdUR3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9R/XBdF
wuZWWevGFYsPeP3MK36KfxzDCl/ofotQeloQQwmyZR8mFTXKvIHXFtjWk4tz5bBl
PCKWrpVNpAM7NSunPJLS8Tu2E1Cy5aKFQY8liTOH8VdZ22IrHzTs5JETTNCQG9RY
gSA+sf6NhcAse3LgIiYy1QQMJMp5rdr1wE3VrO2nDNQFrH0s7LPEPkFBrUWfKFtJ
D3Qq8ZejFJ8he1iF/NrpNHFhnjSwYcJzT2hWv1F/y3uP6bBlPWxWVQezmaVuKQm+
anmGsJEYeFC/3Gvrr6s87INw+holb6Tx4KctPi7laKIh7swfQDXiJtav3f0uUcHt
rGjmDCUxSFGxhw==
-----END CERTIFICATE-----