Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
File:                     MKJtC08pGQMd0kUy3hy9aujaCLU.mft (raw, json)
Hash identifier:          4/CFbSaYBxyKvVKLB/zDQNEz5qRfggOichI3ruTqONM=
Subject key identifier:   5E:08:A6:D4:D3:EB:D2:2B:05:C3:14:CB:90:CB:CB:F0:79:58:46:1A
Authority key identifier: 30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
Certificate issuer:       /CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Certificate serial:       01962F3DA0B763774150DD4A5B267744EB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
Manifest number:          09D5
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: MKJtC08pGQMd0kUy3hy9aujaCLU.crl (hash: zaZNVOt5yXfPHN2HANfZDbBByNc7fJqR6hn7raUDiXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a0:b7:63:77:41:50:dd:4a:5b:26:77:44:eb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=5e08a6d4d3ebd22b05c314cb90cbcbf07958461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:53:76:95:06:29:be:6f:7c:86:84:78:df:
                    f9:e3:b0:d5:8b:92:6f:f5:41:87:b2:f2:1b:88:d9:
                    0d:e7:60:32:74:1d:a1:e5:71:0e:65:cf:2f:b2:14:
                    53:e4:43:20:78:b5:f9:51:ad:81:96:c7:df:03:c2:
                    76:b5:3f:1a:b2:71:22:b8:34:55:fa:0f:53:6b:1e:
                    74:17:af:71:62:28:1b:31:8a:da:86:52:18:4a:ec:
                    80:48:0c:d5:a5:68:de:3f:a3:2f:37:9c:bc:6a:7b:
                    c6:69:6b:31:4e:c0:3f:b0:0e:d4:d0:13:ae:9f:16:
                    4b:b6:91:73:bd:5c:e4:ae:5b:8c:65:de:3f:a9:39:
                    5d:5b:75:62:4e:10:8b:13:ba:17:66:10:9b:3f:80:
                    fe:a8:90:76:dc:34:ef:1a:b8:ad:08:bc:36:46:ef:
                    09:49:b9:6c:8d:2b:22:37:13:1b:a5:26:74:ce:9d:
                    c3:0c:6b:2d:c8:02:7d:49:9d:38:06:d2:f9:fb:a4:
                    0a:6b:c2:8a:6f:1e:f0:45:e2:f7:eb:bf:ca:7a:1a:
                    bc:bb:ad:85:21:3e:45:7f:f2:21:69:fb:e3:22:df:
                    29:57:41:9f:f2:8e:7d:33:78:ba:3e:b8:bf:03:84:
                    fd:19:0d:09:7e:b1:3b:48:9a:a9:da:81:88:da:43:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:08:A6:D4:D3:EB:D2:2B:05:C3:14:CB:90:CB:CB:F0:79:58:46:1A
            X509v3 Authority Key Identifier:
                keyid:30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:6a:37:8c:41:7a:c7:14:f9:ff:d5:e5:56:36:1b:05:89:
         cf:58:a1:4a:70:9d:43:c9:d8:2d:ba:f1:86:d1:5c:92:af:c4:
         11:fd:0e:1b:13:6a:77:92:42:44:11:53:70:70:b6:a2:c8:f8:
         56:b5:54:dd:a2:7d:11:e8:bf:02:85:f8:e5:1d:71:f7:29:1c:
         19:5d:4a:4f:dd:35:dd:ad:f0:f0:25:b3:1c:da:bc:6e:41:ff:
         7d:48:a7:aa:86:4b:47:16:72:8d:02:da:dc:40:e7:36:41:b7:
         e0:c8:b5:a7:0c:53:bb:d9:6e:33:9f:5b:bf:4d:7b:f0:40:07:
         d2:9e:fd:4d:fe:4b:2d:c7:01:79:bb:65:70:2e:b2:1e:d6:04:
         6f:51:58:03:5b:29:bf:18:ef:27:7c:c5:13:5f:29:ff:75:f7:
         27:d7:28:e9:54:3a:f7:78:54:af:7c:6c:40:df:c3:73:33:1c:
         a9:fa:ea:a9:a1:05:6d:ea:4f:ad:61:ea:ae:ed:59:f9:32:d5:
         23:1e:f2:36:7b:1b:79:53:12:4a:eb:78:6b:d3:9c:b3:e8:b9:
         d0:d4:5c:15:c8:a2:24:98:88:51:27:7c:60:78:8c:ab:29:2b:
         24:6e:63:47:83:03:1b:6c:d7:51:01:30:70:13:7c:ea:38:0d:
         53:35:0d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaC3Y3dBUN1KWyZ3ROsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI2ZDBiNGYyOTE5MDMxZGQyNDUzMmRlMWNiZDZhZThk
YTA4YjUwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
Eyg1ZTA4YTZkNGQzZWJkMjJiMDVjMzE0Y2I5MGNiY2JmMDc5NTg0NjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDBTdpUGKb5vfIaEeN/547DVi5Jv
9UGHsvIbiNkN52AydB2h5XEOZc8vshRT5EMgeLX5Ua2BlsffA8J2tT8asnEiuDRV
+g9Tax50F69xYigbMYrahlIYSuyASAzVpWjeP6MvN5y8anvGaWsxTsA/sA7U0BOu
nxZLtpFzvVzkrluMZd4/qTldW3ViThCLE7oXZhCbP4D+qJB23DTvGritCLw2Ru8J
SblsjSsiNxMbpSZ0zp3DDGstyAJ9SZ04BtL5+6QKa8KKbx7wReL367/Kehq8u62F
IT5Ff/IhafvjIt8pV0Gf8o59M3i6Pri/A4T9GQ0JfrE7SJqp2oGI2kOU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4IptTT69IrBcMUy5DLy/B5WEYaMB8GA1UdIwQY
MBaAFDCibQtPKRkDHdJFMt4cvWro2gi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKdEMwOHBHUU1kMGtVeTNoeTlhdWphQ0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MWI3ZmMtY2UyNC00ZjUyLTlkNmYt
MGJmNWE1OTY5M2MwLzEvTUtKdEMwOHBHUU1kMGtVeTNoeTlhdWphQ0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MWI3ZmMtY2UyNC00ZjUyLTlkNmYtMGJmNWE1OTY5M2Mw
LzEvTUtKdEMwOHBHUU1kMGtVeTNoeTlhdWphQ0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimhqN4xB
escU+f/V5VY2GwWJz1ihSnCdQ8nYLbrxhtFckq/EEf0OGxNqd5JCRBFTcHC2osj4
VrVU3aJ9Eei/AoX45R1x9ykcGV1KT9013a3w8CWzHNq8bkH/fUinqoZLRxZyjQLa
3EDnNkG34Mi1pwxTu9luM59bv0178EAH0p79Tf5LLccBebtlcC6yHtYEb1FYA1sp
vxjvJ3zFE18p/3X3J9co6VQ693hUr3xsQN/DczMcqfrqqaEFbepPrWHqru1Z+TLV
Ix7yNnsbeVMSSut4a9Ocs+i50NRcFciiJJiIUSd8YHiMqykrJG5jR4MDG2zXUQEw
cBN86jgNUzUNOw==
-----END CERTIFICATE-----