Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File:                     aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier:          +WNNbY63jm0evBFyEHOLOo0jlf4cfZsHuzob3pQamH8=
Subject key identifier:   A3:4F:59:CD:46:ED:82:E1:90:4D:8A:DA:B1:AA:35:89:2D:C5:6D:CF
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer:       /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial:       01962DF42959CF6EBEA75EEACBDE3625B555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number:          10AD
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: /wnK765qljguW7IcVnu5F+m/v59P3v8WtIKkW5+RZQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:29:59:cf:6e:be:a7:5e:ea:cb:de:36:25:b5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=a34f59cd46ed82e1904d8adab1aa35892dc56dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:c4:4c:a6:92:c4:20:d1:98:87:b9:ea:8d:
                    3b:81:7c:f6:67:d2:e3:b1:51:33:e1:60:68:b6:f0:
                    22:d2:78:76:6f:36:96:64:c0:f5:1e:ce:b4:c4:92:
                    6d:da:cb:04:e4:b9:8b:01:c6:f5:2b:4c:04:fe:63:
                    87:5c:46:41:d5:b0:8b:1f:1c:6d:60:b7:44:0f:1d:
                    78:72:a5:90:a0:b9:32:65:3f:4e:fc:21:e7:d1:bd:
                    11:12:ae:3b:37:2e:05:32:33:b6:c2:28:de:ff:4b:
                    18:b4:d7:c4:a6:08:f9:09:56:a9:7b:f1:a0:cf:86:
                    0d:9a:11:08:9b:c2:64:18:d4:c4:2e:b8:3b:42:b7:
                    6a:e5:e9:db:5f:36:a0:19:e0:a8:44:46:16:17:33:
                    5a:2d:d3:73:2c:4f:d5:7b:a0:b6:62:01:8a:a0:19:
                    db:fe:0a:b0:6b:99:61:80:4d:c8:37:98:53:82:99:
                    fa:58:f0:fb:33:9e:b2:ff:68:f8:9a:44:f4:e2:70:
                    04:20:76:87:ad:af:03:bb:55:58:f4:ba:aa:20:85:
                    92:7f:7d:e1:67:98:92:0a:7b:a0:05:81:f7:9c:b4:
                    83:ba:7a:81:08:72:44:9e:16:99:2c:4e:27:5f:a1:
                    15:98:5f:bc:f6:40:ff:0c:70:07:e9:71:9a:e2:07:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4F:59:CD:46:ED:82:E1:90:4D:8A:DA:B1:AA:35:89:2D:C5:6D:CF
            X509v3 Authority Key Identifier:
                keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5e:6e:b3:45:87:0a:ee:e0:be:38:b5:d9:30:a1:5b:25:98:
         9d:67:0f:b3:16:ec:2f:50:48:c9:3b:f2:f4:6d:fd:d6:06:da:
         00:0b:7c:82:41:ca:9e:ef:dd:81:b8:e2:8c:99:e6:b6:e4:1e:
         42:c6:5a:9a:ef:ef:cf:26:7e:84:ad:66:46:14:c9:85:5f:7a:
         06:e8:2f:5b:87:0c:9b:0b:7b:25:2b:2e:d0:0f:1f:4b:f9:e2:
         70:92:5e:17:c4:a4:b6:7d:8f:35:31:fe:bf:87:57:6e:d2:56:
         0f:fc:e3:76:0f:ae:0e:9e:d8:12:25:39:c6:56:f0:e2:5c:fd:
         dc:c5:09:0f:01:d1:5f:88:f7:29:c3:0a:81:c7:48:52:4f:9e:
         3d:50:aa:6a:c4:41:78:ee:f0:be:2a:66:0c:32:ee:6f:e0:43:
         09:31:39:de:5a:92:c8:86:2c:90:28:58:eb:f5:fe:fe:b7:14:
         4d:13:7a:50:fc:d1:46:08:7e:be:59:72:b8:05:d6:25:db:86:
         f1:c1:50:81:81:ef:c5:0e:64:83:ac:b1:c8:ed:29:f6:3f:eb:
         a8:0b:b3:bb:3b:16:60:37:b9:39:87:06:7e:f4:2a:34:64:74:
         c2:e1:56:05:d8:53:01:a0:ec:89:fa:7c:20:90:70:73:6f:04:
         19:f9:87:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ClZz26+p17qy942JbVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDkyOGE5MWY4ZjdlNjM5N2U2YzY1ZDBlMGI2NjI5MTc5
NmQzNTIwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhhMzRmNTljZDQ2ZWQ4MmUxOTA0ZDhhZGFiMWFhMzU4OTJkYzU2ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3rETKaSxCDRmIe56o07gXz2Z9Lj
sVEz4WBotvAi0nh2bzaWZMD1Hs60xJJt2ssE5LmLAcb1K0wE/mOHXEZB1bCLHxxt
YLdEDx14cqWQoLkyZT9O/CHn0b0REq47Ny4FMjO2wije/0sYtNfEpgj5CVape/Gg
z4YNmhEIm8JkGNTELrg7Qrdq5enbXzagGeCoREYWFzNaLdNzLE/Ve6C2YgGKoBnb
/gqwa5lhgE3IN5hTgpn6WPD7M56y/2j4mkT04nAEIHaHra8Du1VY9LqqIIWSf33h
Z5iSCnugBYH3nLSDunqBCHJEnhaZLE4nX6EVmF+89kD/DHAH6XGa4geKBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNPWc1G7YLhkE2K2rGqNYktxW3PMB8GA1UdIwQY
MBaAFGgJKKkfj35jl+bGXQ4LZikXltNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYjE5Y2ItYWM4My00NTFlLTliNTQt
OGJlM2RmODlmMzU5LzEvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYjE5Y2ItYWM4My00NTFlLTliNTQtOGJlM2RmODlmMzU5
LzEvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVV5us0WH
Cu7gvji12TChWyWYnWcPsxbsL1BIyTvy9G391gbaAAt8gkHKnu/dgbjijJnmtuQe
QsZamu/vzyZ+hK1mRhTJhV96BugvW4cMmwt7JSsu0A8fS/nicJJeF8Sktn2PNTH+
v4dXbtJWD/zjdg+uDp7YEiU5xlbw4lz93MUJDwHRX4j3KcMKgcdIUk+ePVCqasRB
eO7wvipmDDLub+BDCTE53lqSyIYskChY6/X+/rcUTRN6UPzRRgh+vllyuAXWJduG
8cFQgYHvxQ5kg6yxyO0p9j/rqAuzuzsWYDe5OYcGfvQqNGR0wuFWBdhTAaDsifp8
IJBwc28EGfmHBw==
-----END CERTIFICATE-----