Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File:                     aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier:          XDAUJhboM61yilIGce95aZ07PFnMWt0R1vOtz/Sx3g0=
Subject key identifier:   9D:5A:46:E3:CE:48:AB:D8:2C:FC:01:2C:17:61:50:D3:81:59:02:2B
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer:       /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial:       01962E98FC86ABE1C23281A7EAA264F17AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: 9ZSKN4WRPRzQlDYVtG8Uomn1OVQQhhHmvGEE1JmXk9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fc:86:ab:e1:c2:32:81:a7:ea:a2:64:f1:7a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=9d5a46e3ce48abd82cfc012c176150d38159022b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:7d:60:ab:4e:f5:40:b1:c3:9d:32:1b:95:
                    7e:bd:66:22:04:48:cd:70:fd:2f:e5:23:12:9e:aa:
                    6c:32:2c:8b:25:02:06:ec:33:c8:a5:73:70:69:6b:
                    af:0f:35:d3:00:af:91:8e:04:84:f2:6f:16:1e:60:
                    df:f4:8d:1e:4c:a4:ea:8f:27:6f:35:b9:93:7a:8b:
                    3e:a9:01:b2:59:cc:8b:68:2c:b0:90:36:e3:13:fd:
                    ec:e1:25:94:60:ee:73:67:a8:0e:2e:f2:43:26:c0:
                    3f:61:61:ec:d7:30:9e:3f:10:44:f3:37:22:a7:5c:
                    f0:77:c2:f4:a6:3d:4c:2f:17:07:6e:62:14:e5:ad:
                    5e:d8:12:10:b6:72:76:1c:01:15:c8:55:da:45:29:
                    91:ee:e0:8f:4f:59:63:13:49:ab:82:40:c4:23:33:
                    dc:e9:37:c7:fd:21:02:52:51:1d:94:5e:16:cc:d3:
                    fb:85:44:42:6b:00:5a:a6:65:1d:84:23:f3:e1:29:
                    68:29:44:13:e7:6a:0d:cb:ab:33:37:ef:fa:8b:96:
                    45:ae:1c:64:30:6b:18:e2:5e:b1:59:ae:23:e4:f1:
                    0b:91:58:59:ba:fc:72:cf:ee:23:c4:d9:29:23:73:
                    79:8b:5c:a9:32:b9:bd:d4:e0:26:b4:b1:ec:91:ac:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:46:E3:CE:48:AB:D8:2C:FC:01:2C:17:61:50:D3:81:59:02:2B
            X509v3 Authority Key Identifier:
                keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:0a:26:cc:e6:99:54:26:52:19:c1:cd:2f:ef:0c:f2:28:
         b3:0a:0e:11:d8:f7:4f:2a:38:95:18:55:b0:4d:5f:13:83:50:
         36:f3:93:9c:12:1e:91:e6:a4:f9:00:76:01:4d:92:ab:51:2f:
         1f:f4:03:74:55:36:88:36:b4:4a:6c:72:ea:f7:b1:e5:45:bd:
         e2:0b:fc:13:7e:14:0b:dd:ce:21:5e:4b:69:79:7d:67:3c:cf:
         aa:12:06:8b:00:14:9c:2f:8c:cc:3d:99:c8:5f:80:36:e3:0a:
         14:94:e7:e5:3b:47:32:00:34:12:cb:87:e2:0e:6a:a5:8b:19:
         fb:7c:b6:e0:3c:39:8a:54:e0:30:08:11:a0:6d:4e:c5:ce:35:
         a1:48:3f:13:a6:f1:7b:44:aa:2b:9c:ca:1e:52:4d:d4:53:34:
         da:b3:33:19:9b:13:87:f8:e7:cc:c6:c4:20:32:dc:29:e0:63:
         4b:1f:93:5c:a6:ee:0b:cb:76:1f:e8:46:80:e8:d8:ff:7d:03:
         50:cb:6d:de:74:6f:60:6f:bb:df:0b:89:b6:34:5c:f4:86:6c:
         85:cd:7b:17:0a:a1:29:a7:8a:90:73:13:07:c5:ac:c3:89:b5:
         7b:ff:c0:2b:cd:e0:65:ca:1a:0b:d8:cd:26:48:89:ed:d4:75:
         fd:bd:15:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPyGq+HCMoGn6qJk8XrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjY3ZTUxYWI4MTU1NjdhZDY3Y2JiNWQxYjg4OTYzODM1
ZmE5ZjcwHhcNMjUwNDEzMTAwMTQwWhcNMjUwNDE0MTAwMTQwWjAzMTEwLwYDVQQD
Eyg5ZDVhNDZlM2NlNDhhYmQ4MmNmYzAxMmMxNzYxNTBkMzgxNTkwMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkN9YKtO9UCxw50yG5V+vWYiBEjN
cP0v5SMSnqpsMiyLJQIG7DPIpXNwaWuvDzXTAK+RjgSE8m8WHmDf9I0eTKTqjydv
NbmTeos+qQGyWcyLaCywkDbjE/3s4SWUYO5zZ6gOLvJDJsA/YWHs1zCePxBE8zci
p1zwd8L0pj1MLxcHbmIU5a1e2BIQtnJ2HAEVyFXaRSmR7uCPT1ljE0mrgkDEIzPc
6TfH/SECUlEdlF4WzNP7hURCawBapmUdhCPz4SloKUQT52oNy6szN+/6i5ZFrhxk
MGsY4l6xWa4j5PELkVhZuvxyz+4jxNkpI3N5i1ypMrm91OAmtLHskaxw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1aRuPOSKvYLPwBLBdhUNOBWQIrMB8GA1UdIwQY
MBaAFGlmflGrgVVnrWfLtdG4iWODX6n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzct
YTdlM2M2YTg5MmVjLzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZWM2OTItYTNlNC00Mzc5LWExYzctYTdlM2M2YTg5MmVj
LzEvYVdaLVVhdUJWV2V0Wjh1MTBiaUpZNE5mcWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOYKJszm
mVQmUhnBzS/vDPIoswoOEdj3Tyo4lRhVsE1fE4NQNvOTnBIekeak+QB2AU2Sq1Ev
H/QDdFU2iDa0Smxy6vex5UW94gv8E34UC93OIV5LaXl9ZzzPqhIGiwAUnC+MzD2Z
yF+ANuMKFJTn5TtHMgA0EsuH4g5qpYsZ+3y24Dw5ilTgMAgRoG1Oxc41oUg/E6bx
e0SqK5zKHlJN1FM02rMzGZsTh/jnzMbEIDLcKeBjSx+TXKbuC8t2H+hGgOjY/30D
UMtt3nRvYG+73wuJtjRc9IZshc17FwqhKaeKkHMTB8Wsw4m1e//AK83gZcoaC9jN
JkiJ7dR1/b0V3A==
-----END CERTIFICATE-----