Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File:                     Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier:          ASUmlkNJl1MNUPZXPcDSkkXnb3RLb8jEuJOL3GZDGas=
Subject key identifier:   61:39:98:89:FC:E6:F7:19:46:A2:08:59:D0:3A:32:1D:5E:F0:FC:28
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer:       /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial:       01962E994042587BB8BAA4DE37F39A1856DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number:          1117
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: ZARX0tOIEPgWYo1zcyMziFpUtmCgsH6wsOBa3QBTtmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:42:58:7b:b8:ba:a4:de:37:f3:9a:18:56:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=61399889fce6f71946a20859d03a321d5ef0fc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:5f:d9:ef:cc:cd:74:58:18:72:8c:5d:bf:
                    7c:97:ec:d0:e2:9c:16:85:33:9b:21:85:71:ab:0c:
                    26:fa:19:5b:1f:16:65:52:ce:5b:d9:8c:65:e5:14:
                    55:cd:ec:e9:b7:ea:ba:7c:a0:77:57:fd:ae:e7:59:
                    f1:b5:ff:f2:dc:35:c8:c1:4a:02:28:7f:3a:23:65:
                    8a:ae:09:ef:c6:2e:ce:c9:24:76:05:ed:e7:c9:f5:
                    91:db:d8:a0:95:07:90:05:a5:d3:1f:01:d4:66:a9:
                    df:12:a5:68:72:cc:98:20:2c:42:6d:a3:c6:00:e4:
                    a3:66:c5:d9:7c:26:e7:ba:2c:5c:03:5c:8d:59:53:
                    cd:49:ca:4d:52:00:13:93:5d:45:cd:c7:63:12:fd:
                    96:3f:56:94:c0:01:c5:80:11:34:70:e0:43:07:7f:
                    fe:37:a1:df:0f:ba:37:d6:b1:ba:06:47:6e:9a:9d:
                    f8:a6:b8:91:9f:3c:0a:87:96:d6:89:c5:20:f7:25:
                    b4:a5:76:ff:79:c1:6a:da:18:a5:f8:c5:de:e8:e4:
                    af:51:7c:03:63:3e:bd:9b:70:e9:a1:32:35:e2:47:
                    9d:b8:4f:e9:e8:51:d1:04:c5:e5:fa:67:a8:7d:b1:
                    a7:5b:ea:93:d2:f4:37:82:96:08:e7:eb:48:a4:a3:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:39:98:89:FC:E6:F7:19:46:A2:08:59:D0:3A:32:1D:5E:F0:FC:28
            X509v3 Authority Key Identifier:
                keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:71:ad:42:ec:3f:83:4c:de:45:55:62:84:2f:6b:2f:f6:
         64:ed:47:a9:a2:ed:44:f2:44:5d:fd:27:89:79:6a:0c:31:9d:
         be:82:64:85:bb:38:bc:f2:6f:13:4e:80:ad:2b:96:0d:a6:90:
         0d:5e:2c:a0:06:ec:a0:00:7f:f1:f8:a0:f6:1b:c2:19:13:d0:
         1b:35:04:09:95:bc:45:cc:48:89:d7:4b:56:f7:0d:1c:1f:3b:
         b2:d7:54:68:a7:ba:b6:9c:5e:94:01:74:e2:1d:6e:d0:01:ba:
         07:36:e7:45:66:80:0a:ac:ba:f3:18:a4:72:3c:41:ee:c0:18:
         ff:a9:de:84:dd:c6:0d:da:68:19:a2:67:e4:7e:ab:4b:26:10:
         be:62:01:1c:14:6e:87:ae:82:1a:34:e9:62:a5:d3:20:5a:4b:
         01:06:c3:ec:21:7a:79:95:a8:fc:7a:23:63:aa:59:35:dd:86:
         b7:87:a7:80:46:d8:e7:f3:99:79:2e:f9:10:81:af:f2:8c:d4:
         f1:0e:41:9d:7b:4d:79:3d:7b:74:05:33:c5:c0:23:e9:69:cc:
         c8:4e:8e:4c:b8:60:38:cf:b0:c1:b4:12:57:5c:c5:ee:a3:01:
         12:e0:41:97:3e:f4:80:ad:84:1e:4e:d1:21:aa:d8:7f:49:bc:
         0f:57:1a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUBCWHu4uqTeN/OaGFbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5
MDFkNTcwHhcNMjUwNDEzMTAwMTU3WhcNMjUwNDE0MTAwMTU3WjAzMTEwLwYDVQQD
Eyg2MTM5OTg4OWZjZTZmNzE5NDZhMjA4NTlkMDNhMzIxZDVlZjBmYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4xf2e/MzXRYGHKMXb98l+zQ4pwW
hTObIYVxqwwm+hlbHxZlUs5b2Yxl5RRVzezpt+q6fKB3V/2u51nxtf/y3DXIwUoC
KH86I2WKrgnvxi7OySR2Be3nyfWR29iglQeQBaXTHwHUZqnfEqVocsyYICxCbaPG
AOSjZsXZfCbnuixcA1yNWVPNScpNUgATk11FzcdjEv2WP1aUwAHFgBE0cOBDB3/+
N6HfD7o31rG6Bkdump34priRnzwKh5bWicUg9yW0pXb/ecFq2hil+MXe6OSvUXwD
Yz69m3DpoTI14keduE/p6FHRBMXl+meofbGnW+qT0vQ3gpYI5+tIpKNgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE5mIn85vcZRqIIWdA6Mh1e8PwoMB8GA1UdIwQY
MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt
NjAzMWQ1ZGUzZjM5LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5
LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWpxrULs
P4NM3kVVYoQvay/2ZO1HqaLtRPJEXf0niXlqDDGdvoJkhbs4vPJvE06ArSuWDaaQ
DV4soAbsoAB/8fig9hvCGRPQGzUECZW8RcxIiddLVvcNHB87stdUaKe6tpxelAF0
4h1u0AG6BzbnRWaACqy68xikcjxB7sAY/6nehN3GDdpoGaJn5H6rSyYQvmIBHBRu
h66CGjTpYqXTIFpLAQbD7CF6eZWo/HojY6pZNd2Gt4engEbY5/OZeS75EIGv8ozU
8Q5BnXtNeT17dAUzxcAj6WnMyE6OTLhgOM+wwbQSV1zF7qMBEuBBlz70gK2EHk7R
IarYf0m8D1caVw==
-----END CERTIFICATE-----