Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
File:                     UuZ47pYouTW-JXzsw_siiYOdnlw.mft (raw, json)
Hash identifier:          2Cm8Nkcs8uvyC8CVHdGDNnggUxSW7MOM7ufvtmLQdo8=
Subject key identifier:   3D:D5:D1:1E:9D:AD:D5:EB:2A:CD:F0:49:3D:C5:8B:A6:A3:3F:2E:A0
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Certificate issuer:       /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial:       01962E2B1029C541C03A84A323722D1C604B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
Manifest number:          0F80
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: UuZ47pYouTW-JXzsw_siiYOdnlw.crl (hash: /7q0QDRiEJb+2yc4QVrSAl90Gu+dreHR40kODpb/TVc=)
                          2: o4wNCL530KMA0YJs8iAz7IeQteo.roa (hash: CcyAmjc7Z+KPkDgKW61aNMPKh1esJ1MkO0axJUX/3rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:29:c5:41:c0:3a:84:a3:23:72:2d:1c:60:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=3dd5d11e9dadd5eb2acdf0493dc58ba6a33f2ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:3b:a8:e0:e7:10:15:be:6a:35:e4:07:73:
                    b2:a2:0f:54:15:e3:9d:b8:78:8e:40:e6:60:5e:e1:
                    76:9a:a2:81:cf:c2:b5:5c:b9:12:26:b8:6f:f8:42:
                    7e:09:b0:5e:3d:20:2b:40:86:30:d1:29:07:f3:af:
                    8e:ba:fa:3e:1c:f6:62:f1:c7:0e:b8:b3:8e:51:e1:
                    51:47:00:e7:3c:0b:53:81:7a:6c:aa:ff:56:6e:56:
                    e0:16:97:17:13:2f:88:10:8d:39:07:dc:1c:dc:d3:
                    b6:1b:a9:a2:78:c6:8d:6d:57:df:6c:51:2b:ba:99:
                    5e:76:b2:97:1d:32:82:03:ea:fc:04:6a:76:7f:db:
                    84:c9:9c:20:d6:92:db:7f:08:6a:91:e7:7f:c3:79:
                    b2:88:55:b9:2e:0b:7f:3a:a8:dc:1c:36:8e:a1:86:
                    21:18:48:d9:5b:8a:79:ed:91:36:60:c5:39:66:68:
                    fb:db:4e:0a:c3:ca:3f:47:2b:31:1c:52:35:14:70:
                    eb:96:3e:fd:fa:90:2d:9c:4e:d8:fb:7a:76:29:3c:
                    77:ed:0a:ab:96:ef:64:25:ea:3e:6e:31:9a:d6:87:
                    13:cb:ee:5e:76:a2:64:21:c8:00:50:d5:a1:7a:ed:
                    aa:d5:93:dd:21:ca:ab:e8:db:b6:fe:93:bc:cf:f1:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:D1:1E:9D:AD:D5:EB:2A:CD:F0:49:3D:C5:8B:A6:A3:3F:2E:A0
            X509v3 Authority Key Identifier:
                keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:c9:7a:39:08:ef:18:3a:20:1a:f5:53:ee:bd:30:e5:d0:db:
         a3:66:66:da:31:da:84:df:ca:cd:5d:42:45:bb:4b:12:0a:f0:
         e2:bb:9f:cf:c3:a5:95:d8:04:0c:32:6c:5c:65:b7:6f:85:a5:
         2f:dc:1a:16:24:65:c5:a6:3c:49:38:3c:26:9a:d0:d4:7f:67:
         0e:fe:9a:77:5b:d4:aa:20:f8:a2:fc:64:4f:a9:92:9c:ff:48:
         29:0d:68:ab:7d:1c:e0:81:13:a2:93:a1:dc:fd:05:fa:fa:3e:
         eb:de:96:e7:90:7f:07:22:0e:5e:dd:ca:88:07:c6:d8:de:83:
         11:7a:d7:2f:8a:4d:29:37:e9:cc:57:05:d5:ef:0a:83:e0:91:
         4d:d1:0a:71:c2:be:c4:f1:13:54:3f:01:4d:d2:dd:fe:33:b5:
         b9:70:80:0b:80:0f:0b:ec:97:70:84:6f:73:c6:9e:b6:2c:9a:
         dd:31:d5:63:0a:be:d8:d8:98:c9:21:ee:10:01:0c:fb:82:c1:
         27:f8:0a:f5:83:fb:fa:cb:04:0c:da:2b:33:a8:7e:cb:23:82:
         da:f0:1a:73:7d:53:db:2c:5f:53:8a:2d:71:6f:1f:10:ec:06:
         70:2d:c3:18:6c:d9:2e:10:da:a7:4a:9e:dd:81:d0:2a:43:9d:
         7e:5e:80:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxApxUHAOoSjI3ItHGBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZTY3OGVlOTYyOGI5MzViZTI1N2NlY2MzZmIyMjg5ODM5
ZDllNWMwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
EygzZGQ1ZDExZTlkYWRkNWViMmFjZGYwNDkzZGM1OGJhNmEzM2YyZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArss7qODnEBW+ajXkB3Oyog9UFeOd
uHiOQOZgXuF2mqKBz8K1XLkSJrhv+EJ+CbBePSArQIYw0SkH86+Ouvo+HPZi8ccO
uLOOUeFRRwDnPAtTgXpsqv9WblbgFpcXEy+IEI05B9wc3NO2G6mieMaNbVffbFEr
upledrKXHTKCA+r8BGp2f9uEyZwg1pLbfwhqked/w3myiFW5Lgt/OqjcHDaOoYYh
GEjZW4p57ZE2YMU5Zmj7204Kw8o/RysxHFI1FHDrlj79+pAtnE7Y+3p2KTx37Qqr
lu9kJeo+bjGa1ocTy+5edqJkIcgAUNWheu2q1ZPdIcqr6Nu2/pO8z/GjXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3V0R6drdXrKs3wST3Fi6ajPy6gMB8GA1UdIwQY
MBaAFFLmeO6WKLk1viV87MP7IomDnZ5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEt
NGU5N2VkNGU0ZWQ2LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82Y2IzOGMtZGQwNS00YWU4LWE4YjEtNGU5N2VkNGU0ZWQ2
LzEvVXVaNDdwWW91VFctSlh6c3dfc2lpWU9kbmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Ml6OQjv
GDogGvVT7r0w5dDbo2Zm2jHahN/KzV1CRbtLEgrw4rufz8OlldgEDDJsXGW3b4Wl
L9waFiRlxaY8STg8JprQ1H9nDv6ad1vUqiD4ovxkT6mSnP9IKQ1oq30c4IETopOh
3P0F+vo+696W55B/ByIOXt3KiAfG2N6DEXrXL4pNKTfpzFcF1e8Kg+CRTdEKccK+
xPETVD8BTdLd/jO1uXCAC4APC+yXcIRvc8aetiya3THVYwq+2NiYySHuEAEM+4LB
J/gK9YP7+ssEDNorM6h+yyOC2vAac31T2yxfU4otcW8fEOwGcC3DGGzZLhDap0qe
3YHQKkOdfl6Asg==
-----END CERTIFICATE-----