Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File:                     Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier:          2SvAOHRhro3RRpqHvEuJI7AKjfXBy4kHVZopckudjGw=
Subject key identifier:   DA:F6:6A:EB:A4:8D:55:21:DF:01:6B:00:98:AA:1B:4A:A9:13:44:79
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer:       /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial:       01962F3DAA35F095EF8C011CB96A6738CC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number:          1330
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: SGBTY3LGLv6JRDcRXBc8WQhiwIEVGlF1cn8rItD8TkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:35:f0:95:ef:8c:01:1c:b9:6a:67:38:cc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=daf66aeba48d5521df016b0098aa1b4aa9134479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:59:ac:e2:33:e8:c8:d4:c9:84:1a:2e:00:
                    9b:fd:c7:0b:16:bd:3d:18:e0:7f:c0:6b:d5:22:1a:
                    f2:ef:e2:6c:2e:a0:c9:3d:a2:88:c2:df:ee:79:3d:
                    67:32:0a:d4:01:c0:13:03:6d:63:b9:97:94:ea:4e:
                    ae:5e:60:5a:3a:d2:00:af:93:ce:37:12:da:c2:91:
                    cb:24:f9:e8:dd:6e:a6:ae:91:51:62:21:d8:ee:4a:
                    7b:88:1e:f5:67:87:37:8c:c1:be:2f:f2:32:b4:18:
                    7a:78:df:54:cd:bb:1a:1e:f2:38:49:1c:2c:d6:3c:
                    e9:71:be:6d:8a:d2:c8:7f:21:78:f3:79:16:0b:e7:
                    7c:a7:21:c3:ca:cd:56:7a:68:7a:36:5f:15:f5:fb:
                    1e:8f:15:4c:4c:c6:90:74:76:83:1a:00:4e:c0:7e:
                    8b:47:8d:6c:10:01:ed:0b:18:73:fe:19:7e:30:a0:
                    99:4c:a6:71:8f:9f:d1:c5:c7:bf:8b:e9:c6:83:4b:
                    7d:d2:5f:64:0e:23:64:2d:03:09:77:04:2b:ad:ca:
                    34:bb:d6:84:05:bf:10:8d:26:39:35:7c:f6:da:9e:
                    94:6d:92:28:ce:29:e2:11:d4:ac:21:65:f6:90:d3:
                    cc:86:99:ac:6b:09:1a:16:65:8f:77:f3:77:14:6f:
                    e6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:6A:EB:A4:8D:55:21:DF:01:6B:00:98:AA:1B:4A:A9:13:44:79
            X509v3 Authority Key Identifier:
                keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:37:7c:3a:41:ab:68:ae:2a:e5:02:cc:91:66:c0:c0:a7:9a:
         21:fc:e6:57:43:4e:42:17:40:13:96:43:eb:03:7c:2c:d4:32:
         a5:e0:cc:84:6e:85:6f:09:20:d5:3f:bd:e1:5e:dd:05:20:25:
         6a:a3:ab:dc:ea:4f:0d:a9:33:dc:e8:07:2f:83:0e:2e:8a:b2:
         c3:36:e4:8f:e0:53:e9:02:52:3d:9b:ad:fa:a4:74:61:07:a4:
         31:1a:ae:33:fd:10:5e:74:d4:d6:b3:45:6a:a0:83:a9:a6:9f:
         56:41:9c:82:27:94:a0:3b:0d:c4:6b:30:fd:48:f0:b8:25:dd:
         5a:b1:18:7d:28:9a:5e:18:09:3d:f5:dc:74:d5:da:1c:ba:06:
         f0:63:24:3a:46:05:b1:95:77:b3:24:a3:83:59:0d:01:b8:5b:
         a0:7d:b8:39:d0:4a:83:e5:85:49:52:89:52:33:0b:a2:67:38:
         67:4c:2d:8a:e4:47:3c:12:74:35:2d:f4:f1:53:5f:f7:49:76:
         36:ee:a3:ac:32:1e:c2:cb:69:24:99:93:03:d9:75:e5:85:a0:
         bd:c9:45:a5:fe:3b:f4:1d:0c:70:6c:dc:e8:ea:25:f2:dd:60:
         f2:e6:1f:f9:b1:0c:e3:d0:62:d0:91:ea:a6:17:3d:76:bd:61:
         4f:14:1b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPao18JXvjAEcuWpnOMwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjZmOTc3MmE4ZGUyYTAyYWY2MWE0ZWE2MjdkM2U1MWQ4
NGY5YmQwHhcNMjUwNDEzMTMwMTMyWhcNMjUwNDE0MTMwMTMyWjAzMTEwLwYDVQQD
EyhkYWY2NmFlYmE0OGQ1NTIxZGYwMTZiMDA5OGFhMWI0YWE5MTM0NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomNZrOIz6MjUyYQaLgCb/ccLFr09
GOB/wGvVIhry7+JsLqDJPaKIwt/ueT1nMgrUAcATA21juZeU6k6uXmBaOtIAr5PO
NxLawpHLJPno3W6mrpFRYiHY7kp7iB71Z4c3jMG+L/IytBh6eN9UzbsaHvI4SRws
1jzpcb5titLIfyF483kWC+d8pyHDys1Wemh6Nl8V9fsejxVMTMaQdHaDGgBOwH6L
R41sEAHtCxhz/hl+MKCZTKZxj5/Rxce/i+nGg0t90l9kDiNkLQMJdwQrrco0u9aE
Bb8QjSY5NXz22p6UbZIoziniEdSsIWX2kNPMhpmsawkaFmWPd/N3FG/mrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr2auukjVUh3wFrAJiqG0qpE0R5MB8GA1UdIwQY
MBaAFBW2+XcqjeKgKvYaTqYn0+UdhPm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYt
ZTU3OWUyYWFmOWVhLzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NTM0MGItNmFmMC00NDQ0LWI0MjYtZTU3OWUyYWFmOWVh
LzEvRmJiNWR5cU40cUFxOWhwT3BpZlQ1UjJFLWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTd8OkGr
aK4q5QLMkWbAwKeaIfzmV0NOQhdAE5ZD6wN8LNQypeDMhG6Fbwkg1T+94V7dBSAl
aqOr3OpPDakz3OgHL4MOLoqywzbkj+BT6QJSPZut+qR0YQekMRquM/0QXnTU1rNF
aqCDqaafVkGcgieUoDsNxGsw/UjwuCXdWrEYfSiaXhgJPfXcdNXaHLoG8GMkOkYF
sZV3sySjg1kNAbhboH24OdBKg+WFSVKJUjMLomc4Z0wtiuRHPBJ0NS308VNf90l2
Nu6jrDIewstpJJmTA9l15YWgvclFpf479B0McGzc6Ool8t1g8uYf+bEM49Bi0JHq
phc9dr1hTxQbFA==
-----END CERTIFICATE-----