Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File:                     gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier:          j7PT2fAIYBkYRvicAVB/lZWy1q4g7dlvM6dd8sdljaM=
Subject key identifier:   D9:2E:E9:C2:EA:17:21:4D:B4:1D:78:3A:A7:A9:64:AD:31:93:CA:1D
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer:       /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial:       01962F3D43CFB8083F699DFCB1F260996A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number:          0331
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: ALNzrADa83aBIpmVSJx2KvXCKsnydhOOILR/9Il17bI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:cf:b8:08:3f:69:9d:fc:b1:f2:60:99:6a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=d92ee9c2ea17214db41d783aa7a964ad3193ca1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:b8:da:65:f2:f2:4e:67:a7:81:5b:7d:28:
                    0b:ec:36:42:96:a3:f1:93:0b:8c:94:14:59:e2:ac:
                    32:0b:97:fa:be:49:4e:49:bc:6e:8d:cc:cd:dc:ae:
                    7a:67:a5:23:83:d0:86:dc:9f:4d:62:63:10:9d:09:
                    1d:ce:85:9b:42:f4:2f:c2:7a:10:25:d9:9c:84:41:
                    c5:ee:38:ab:4d:c5:8b:d5:f5:bc:31:ab:8e:e5:ab:
                    87:a5:8d:ee:44:b2:fd:ef:c9:1a:d0:09:10:c4:7c:
                    a4:34:ed:0e:ae:c5:3c:f7:41:ef:d1:8a:81:f7:41:
                    44:9f:9a:68:57:3f:54:0a:14:75:39:d7:3a:7d:2e:
                    44:bb:89:df:29:24:1f:63:e7:b4:8b:6d:35:ec:91:
                    77:d0:58:cc:b1:b2:db:85:54:57:dc:4c:51:fb:f7:
                    74:fa:d7:51:ed:d5:80:9b:69:c4:7f:da:5e:ac:fa:
                    ce:2f:5d:b6:ac:62:35:26:b9:7f:40:ef:6a:76:01:
                    13:f3:23:b8:2d:d0:2b:c2:d4:05:a0:2a:7f:05:89:
                    bf:f6:55:72:fe:5b:cd:4f:d2:fd:e0:70:de:9d:2b:
                    77:4e:16:d3:10:ae:76:02:86:f5:fc:f5:dd:cf:4f:
                    6f:63:73:a1:90:fd:93:59:d9:27:68:8c:07:c7:df:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2E:E9:C2:EA:17:21:4D:B4:1D:78:3A:A7:A9:64:AD:31:93:CA:1D
            X509v3 Authority Key Identifier:
                keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:8b:42:3b:66:d6:45:27:68:f9:53:76:74:93:e4:cc:6b:
         62:ca:f3:ed:00:fe:d0:c5:41:d2:7b:de:36:85:96:3d:d9:12:
         9e:dd:ac:5e:fe:6b:5d:0f:1e:7f:d5:98:c8:d8:0f:2c:27:73:
         db:14:d8:0a:a2:1a:4e:ed:43:95:bf:80:1b:8b:f5:5f:79:2e:
         c6:91:98:26:7c:21:b7:7b:18:b3:33:07:72:75:e2:c5:b9:8a:
         db:5b:c2:01:9a:b1:e8:4e:6e:81:7f:82:5c:0a:4a:d5:97:b0:
         56:c4:68:3e:65:e8:e5:de:ae:39:44:80:82:34:1a:b3:fd:09:
         3e:7e:9e:ff:37:02:39:6a:4c:bf:20:85:64:8c:6b:1a:dc:c1:
         ce:42:cb:00:81:c4:55:fe:85:20:f1:69:5a:2f:d2:45:2e:a9:
         c9:6e:12:a6:45:8d:44:e0:c9:77:7d:92:d2:19:d5:4c:55:f4:
         1c:09:84:8b:a2:c6:be:c5:c2:44:91:a3:ae:68:d3:38:50:e3:
         e9:a4:19:78:38:45:76:b7:b4:16:8e:37:17:17:53:25:2a:80:
         27:e7:a6:72:0e:ac:92:0f:a3:89:d4:1e:0b:34:1c:ad:d9:80:
         05:04:cb:db:ce:68:28:03:bb:ea:e7:16:73:7b:cf:6f:39:be:
         e2:6c:0f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUPPuAg/aZ38sfJgmWo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTM2YzY3ZTlhMjM1MzljODE1M2E5ODM0ZWY4M2U1YzE4
ZTZiNzIwHhcNMjUwNDEzMTMwMTA2WhcNMjUwNDE0MTMwMTA2WjAzMTEwLwYDVQQD
EyhkOTJlZTljMmVhMTcyMTRkYjQxZDc4M2FhN2E5NjRhZDMxOTNjYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoS42mXy8k5np4FbfSgL7DZClqPx
kwuMlBRZ4qwyC5f6vklOSbxujczN3K56Z6Ujg9CG3J9NYmMQnQkdzoWbQvQvwnoQ
JdmchEHF7jirTcWL1fW8MauO5auHpY3uRLL978ka0AkQxHykNO0OrsU890Hv0YqB
90FEn5poVz9UChR1Odc6fS5Eu4nfKSQfY+e0i2017JF30FjMsbLbhVRX3ExR+/d0
+tdR7dWAm2nEf9perPrOL122rGI1Jrl/QO9qdgET8yO4LdArwtQFoCp/BYm/9lVy
/lvNT9L94HDenSt3ThbTEK52Aob1/PXdz09vY3OhkP2TWdknaIwHx9/PCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNku6cLqFyFNtB14OqepZK0xk8odMB8GA1UdIwQY
MBaAFIGjbGfpojU5yBU6mDTvg+XBjmtyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FOc1otbWlOVG5JRlRxWU5PLUQ1Y0dPYTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yNWNiYWQtNjEzNC00NWIxLThiM2Qt
ZWI1NjlhOGEyMTBmLzEvZ2FOc1otbWlOVG5JRlRxWU5PLUQ1Y0dPYTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8yNWNiYWQtNjEzNC00NWIxLThiM2QtZWI1NjlhOGEyMTBm
LzEvZ2FOc1otbWlOVG5JRlRxWU5PLUQ1Y0dPYTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsWLQjtm
1kUnaPlTdnST5MxrYsrz7QD+0MVB0nveNoWWPdkSnt2sXv5rXQ8ef9WYyNgPLCdz
2xTYCqIaTu1Dlb+AG4v1X3kuxpGYJnwht3sYszMHcnXixbmK21vCAZqx6E5ugX+C
XApK1ZewVsRoPmXo5d6uOUSAgjQas/0JPn6e/zcCOWpMvyCFZIxrGtzBzkLLAIHE
Vf6FIPFpWi/SRS6pyW4SpkWNRODJd32S0hnVTFX0HAmEi6LGvsXCRJGjrmjTOFDj
6aQZeDhFdre0Fo43FxdTJSqAJ+emcg6skg+jidQeCzQcrdmABQTL285oKAO76ucW
c3vPbzm+4mwPqg==
-----END CERTIFICATE-----