Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
File:                     hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json)
Hash identifier:          qDy07JOShJiZhhgegy2aJMxQwQjkCE1YAMJcFgUR0j0=
Subject key identifier:   DE:DD:39:4E:5D:C4:81:6D:8D:B2:8B:10:62:6A:93:3E:74:14:58:66
Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Certificate issuer:       /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Certificate serial:       01962FAB918B8BBC4D0BB9FA9184720932F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
Manifest number:          0619
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: E3IMbCWzoCFIrZcmyQO1QaDBDY9hYmp5NwE8Wyp3710=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:91:8b:8b:bc:4d:0b:b9:fa:91:84:72:09:32:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=dedd394e5dc4816d8db28b10626a933e74145866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:96:58:d1:0d:3e:34:02:a6:bb:ab:16:4d:
                    b0:e6:1b:53:c2:c4:e1:5d:1b:c7:9d:c8:f4:4c:df:
                    b8:fc:3b:56:9e:c8:5a:dd:ba:05:77:cc:f5:a1:0a:
                    26:d3:37:e2:bb:7a:91:86:e0:e3:c4:ed:84:9f:c7:
                    6e:0d:e0:c2:62:63:86:98:8d:11:f7:5d:ee:2b:1a:
                    11:57:fb:2c:bd:01:36:6c:c6:85:b1:03:0f:8f:7a:
                    42:f5:d1:f6:5b:b4:23:29:7b:d3:6b:fe:ea:46:db:
                    21:65:7a:e2:e1:d5:ff:ae:75:e4:2a:7c:38:dd:07:
                    7e:83:a7:6e:af:3a:ae:2c:c5:47:00:07:bf:d9:44:
                    b7:d2:83:7d:56:ac:b2:cf:94:5a:cd:c0:7b:7b:6d:
                    b2:ae:6a:e7:6b:a9:ef:f5:66:84:c3:67:28:c2:e1:
                    b7:4a:83:a0:96:86:d9:e9:28:05:3b:53:3b:da:9c:
                    90:4e:e4:12:19:8f:0a:3b:ba:c2:8f:6a:86:e0:a5:
                    36:39:51:d0:ac:bb:40:8d:ca:a4:bd:fa:5c:7c:24:
                    71:ac:87:d6:87:20:5e:64:c3:f3:d9:74:f1:af:b7:
                    05:be:25:40:ca:26:f1:9d:d5:ab:29:7a:79:78:13:
                    33:93:15:7e:86:07:ca:2e:e1:c6:b9:35:7d:b3:7d:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DD:39:4E:5D:C4:81:6D:8D:B2:8B:10:62:6A:93:3E:74:14:58:66
            X509v3 Authority Key Identifier:
                keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:55:f0:1f:78:59:32:6b:34:35:75:b7:b9:58:bd:63:6d:
         4e:a8:bc:2c:25:37:92:3f:59:6f:36:fb:34:d3:61:7f:a7:e8:
         9d:1f:b9:6f:d5:52:83:13:da:23:37:c9:83:ba:43:be:da:bd:
         fb:ab:d7:ef:62:a6:09:50:6a:8c:9c:31:b2:d5:77:6e:63:c6:
         54:4e:a1:21:06:a9:8e:be:3e:b8:c0:2f:41:3b:6a:7e:bc:2e:
         4c:2f:67:91:5b:83:48:8a:11:e5:c5:20:f4:6a:80:d9:e0:10:
         d2:80:68:65:ea:2d:94:2f:bb:0b:cd:c0:99:17:3c:07:d8:13:
         45:c9:34:a6:29:71:49:38:2b:12:e4:61:fc:bc:d2:4d:7e:e5:
         d8:4b:fd:5f:32:6d:d7:ba:57:82:d6:92:5d:e5:e1:58:56:ec:
         00:f1:78:86:01:ea:0c:85:03:ee:60:07:15:22:0d:e4:25:44:
         0e:f7:3d:c3:72:5c:fa:d4:24:89:d1:a0:c7:97:d4:25:bf:4e:
         80:6b:48:8e:c1:2f:f8:f7:17:61:a7:e9:84:a1:21:39:77:ed:
         77:b4:fc:b6:b1:71:cc:52:54:eb:3f:bb:98:4b:d0:b7:c7:eb:
         5a:7a:e5:2f:02:c1:0d:f2:1c:b1:cc:27:e5:16:23:80:c1:10:
         e2:42:5c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5GLi7xNC7n6kYRyCTL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDYwZDI1MmQ3Y2I2NWM0OTM0Y2VhY2I0NmZhOTZkY2I2
YjU3MGIwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EyhkZWRkMzk0ZTVkYzQ4MTZkOGRiMjhiMTA2MjZhOTMzZTc0MTQ1ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurqWWNENPjQCprurFk2w5htTwsTh
XRvHncj0TN+4/DtWnsha3boFd8z1oQom0zfiu3qRhuDjxO2En8duDeDCYmOGmI0R
913uKxoRV/ssvQE2bMaFsQMPj3pC9dH2W7QjKXvTa/7qRtshZXri4dX/rnXkKnw4
3Qd+g6durzquLMVHAAe/2US30oN9Vqyyz5RazcB7e22yrmrna6nv9WaEw2cowuG3
SoOglobZ6SgFO1M72pyQTuQSGY8KO7rCj2qG4KU2OVHQrLtAjcqkvfpcfCRxrIfW
hyBeZMPz2XTxr7cFviVAyibxndWrKXp5eBMzkxV+hgfKLuHGuTV9s30jHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7dOU5dxIFtjbKLEGJqkz50FFhmMB8GA1UdIwQY
MBaAFIVGDSUtfLZcSTTOrLRvqW3La1cLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2Qt
OTI2YTBiMmQ1N2FkLzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hYzNiNGYtNGZlOS00NDJmLThiY2QtOTI2YTBiMmQ1N2Fk
LzEvaFVZTkpTMTh0bHhKTk02c3RHLXBiY3RyVndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJp1V8B94
WTJrNDV1t7lYvWNtTqi8LCU3kj9Zbzb7NNNhf6fonR+5b9VSgxPaIzfJg7pDvtq9
+6vX72KmCVBqjJwxstV3bmPGVE6hIQapjr4+uMAvQTtqfrwuTC9nkVuDSIoR5cUg
9GqA2eAQ0oBoZeotlC+7C83AmRc8B9gTRck0pilxSTgrEuRh/LzSTX7l2Ev9XzJt
17pXgtaSXeXhWFbsAPF4hgHqDIUD7mAHFSIN5CVEDvc9w3Jc+tQkidGgx5fUJb9O
gGtIjsEv+PcXYafphKEhOXftd7T8trFxzFJU6z+7mEvQt8frWnrlLwLBDfIcscwn
5RYjgMEQ4kJc0Q==
-----END CERTIFICATE-----