Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          nU12E19h+zP6qLAaAGM7BMZDebOguTufN/acUjfR3m8=
Subject key identifier:   EB:C0:06:72:00:D5:62:79:94:95:67:25:4A:51:2D:7B:A8:65:3A:C0
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       01962E99580D0AFE956B4EF208FE4CB7BEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          06FF
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: x5Gs1E3N6I+5ClIYAqGbw+vZi44CDMmUAmPnklQQEUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:58:0d:0a:fe:95:6b:4e:f2:08:fe:4c:b7:be:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=ebc0067200d56279949567254a512d7ba8653ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:7b:12:b5:4e:c5:2c:82:bf:43:9b:7a:d9:
                    ef:79:47:b6:8c:3b:3f:95:1d:97:09:ba:2d:6b:a0:
                    c6:47:8d:57:69:a8:ca:82:66:e3:75:e8:ed:af:6b:
                    b3:38:f3:94:fd:0b:34:69:68:c0:f7:d8:34:3a:44:
                    ad:15:2a:5c:42:23:cb:22:03:fc:1a:ac:a3:bd:b3:
                    d7:8f:52:55:86:18:ac:b8:d5:ee:f3:b9:64:09:13:
                    2a:fe:7c:fe:56:66:5e:40:76:83:25:0d:e3:2b:89:
                    d4:d9:44:cb:ca:8e:6f:a9:e2:8e:b6:d0:53:32:02:
                    a5:66:f9:a6:10:d2:37:73:3a:41:02:85:14:3b:c9:
                    b2:b0:6e:5d:4e:e2:a6:6f:7a:88:36:c2:2d:62:59:
                    6d:82:82:31:b0:6f:7d:94:37:50:4a:6b:23:55:3c:
                    1f:88:16:ef:cd:24:d8:b3:7f:5f:15:fa:6f:cc:15:
                    2a:48:28:68:7a:44:7e:73:e3:7c:de:5b:4f:d8:26:
                    43:2f:9a:cc:6b:de:6d:6a:7d:30:d0:72:64:8b:10:
                    6d:ed:8c:22:37:33:8a:6b:44:9a:75:c1:ef:5e:28:
                    35:f7:9c:5c:f5:38:88:fc:32:9e:fd:06:69:cc:02:
                    23:ff:cf:37:2c:99:f8:7a:b2:63:ef:53:49:95:58:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:06:72:00:D5:62:79:94:95:67:25:4A:51:2D:7B:A8:65:3A:C0
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:62:ab:4e:62:8e:64:86:5c:c3:b7:6d:38:5b:04:4e:3c:b5:
         a9:76:07:84:6d:f3:2b:bb:5d:d6:ba:ce:07:de:d8:f4:66:c4:
         b3:87:13:86:72:be:cd:32:2c:7b:5e:12:ff:b7:1c:eb:68:3d:
         bb:2a:a4:d2:62:28:49:da:c5:e3:4d:9f:e2:22:e1:1b:11:a2:
         ee:13:5f:a5:f5:06:1c:95:58:3c:9b:0f:11:9e:98:d9:17:1c:
         7d:26:b3:be:cf:35:fe:a2:e9:e4:10:54:fd:c3:aa:16:4d:6d:
         6e:43:e0:3d:3f:51:51:cd:10:ba:b1:fb:46:fc:26:7c:69:ea:
         8b:df:22:c7:a8:1e:b4:a1:86:15:ea:51:1d:b5:14:40:ef:87:
         a0:45:ae:9c:f0:9f:0c:e8:3c:ce:1e:eb:07:91:cc:8a:a7:e7:
         7c:ff:c8:a0:a3:e2:4b:62:dd:cd:72:7c:d0:c3:7a:c1:af:c0:
         8d:42:c1:b6:67:28:41:b9:da:d5:81:56:9a:da:0d:94:0e:9d:
         34:68:02:0f:df:15:cf:7b:16:80:a6:c2:23:c4:69:b9:9a:8b:
         e9:ea:70:16:31:e1:f8:74:b9:d6:8a:33:d3:d6:5d:44:45:6e:
         07:f6:96:1b:20:41:c8:cb:58:f9:ef:b3:aa:26:a6:05:d1:89:
         a6:3a:83:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVgNCv6Va07yCP5Mt775MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz
MjkxMDAwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhlYmMwMDY3MjAwZDU2Mjc5OTQ5NTY3MjU0YTUxMmQ3YmE4NjUzYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yp7ErVOxSyCv0ObetnveUe2jDs/
lR2XCbota6DGR41XaajKgmbjdejtr2uzOPOU/Qs0aWjA99g0OkStFSpcQiPLIgP8
GqyjvbPXj1JVhhisuNXu87lkCRMq/nz+VmZeQHaDJQ3jK4nU2UTLyo5vqeKOttBT
MgKlZvmmENI3czpBAoUUO8mysG5dTuKmb3qINsItYlltgoIxsG99lDdQSmsjVTwf
iBbvzSTYs39fFfpvzBUqSChoekR+c+N83ltP2CZDL5rMa95tan0w0HJkixBt7Ywi
NzOKa0SadcHvXig195xc9TiI/DKe/QZpzAIj/883LJn4erJj71NJlVjgeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvABnIA1WJ5lJVnJUpRLXuoZTrAMB8GA1UdIwQY
MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt
MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3
LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWKrTmKO
ZIZcw7dtOFsETjy1qXYHhG3zK7td1rrOB97Y9GbEs4cThnK+zTIse14S/7cc62g9
uyqk0mIoSdrF402f4iLhGxGi7hNfpfUGHJVYPJsPEZ6Y2RccfSazvs81/qLp5BBU
/cOqFk1tbkPgPT9RUc0QurH7RvwmfGnqi98ix6getKGGFepRHbUUQO+HoEWunPCf
DOg8zh7rB5HMiqfnfP/IoKPiS2LdzXJ80MN6wa/AjULBtmcoQbna1YFWmtoNlA6d
NGgCD98Vz3sWgKbCI8RpuZqL6epwFjHh+HS51ooz09ZdREVuB/aWGyBByMtY+e+z
qiamBdGJpjqDgg==
-----END CERTIFICATE-----