Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File:                     N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier:          6axYOceY3Jtow5JL/54pR/YMeabvhWD14wUvw9e/imw=
Subject key identifier:   60:98:9A:A5:24:61:BA:EB:6D:5A:7B:3E:87:64:C0:C9:15:15:11:14
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer:       /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial:       01962E985FC51FFC3BF33244E2A0C3B0DC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 10:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:00:59 +0000
Files and hashes:         1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: VR2+GYtsEBIgBP2/nuBlNTv1t6DUyTY9KmrPDbWQXww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:5f:c5:1f:fc:3b:f3:32:44:e2:a0:c3:b0:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
        Validity
            Not Before: Apr 13 10:00:59 2025 GMT
            Not After : Apr 14 10:00:59 2025 GMT
        Subject: CN=60989aa52461baeb6d5a7b3e8764c0c915151114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:cf:0f:e3:50:5b:12:ea:41:29:f4:4c:6f:
                    26:bc:da:2e:9e:26:d7:bb:16:60:7f:98:15:28:8c:
                    26:51:c4:e3:fe:63:6a:50:11:c7:8e:fb:93:54:40:
                    05:c5:bf:27:ad:c6:4f:d0:75:79:37:ac:53:80:06:
                    35:43:63:4d:cc:6a:24:3c:1a:17:4b:93:e5:c3:8a:
                    15:91:ab:cf:bd:10:f7:18:08:af:b7:8c:6a:38:8c:
                    ab:73:02:9f:82:4d:3c:d9:45:00:d6:46:1f:1f:dc:
                    74:e4:83:ae:7b:5f:dc:de:e2:c0:07:a3:4a:ee:3a:
                    88:bd:19:90:f7:bf:52:7a:d2:ff:00:4e:1e:33:22:
                    9a:e0:57:4b:17:d2:8d:83:22:59:03:8e:4d:5f:55:
                    27:58:82:a7:58:4a:ae:1d:32:62:55:f5:e2:d7:ae:
                    34:e9:f6:6c:54:a7:22:71:91:b8:d7:f1:cd:e6:eb:
                    40:b4:61:03:29:c1:f7:6d:18:a2:1e:43:ec:71:ca:
                    57:54:44:e9:28:70:7f:4d:16:5e:7a:fc:23:e8:70:
                    f9:2d:57:ae:0e:2b:64:2b:fd:77:be:03:36:f1:35:
                    22:5e:24:92:39:80:d6:0d:5a:5d:4d:25:db:d5:4e:
                    5f:87:66:59:84:2e:1b:7c:77:fc:e6:21:63:03:08:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:9A:A5:24:61:BA:EB:6D:5A:7B:3E:87:64:C0:C9:15:15:11:14
            X509v3 Authority Key Identifier:
                keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:69:b3:9f:b5:3e:08:e7:02:90:9b:54:85:59:7c:25:93:
         19:c4:fe:8f:9b:a9:a2:4a:db:c7:e2:59:5d:94:04:be:bc:88:
         9f:4f:b9:93:c3:0e:05:c7:d3:a8:cd:53:9d:ee:9f:11:36:df:
         b0:cd:ad:36:b5:38:aa:a1:4e:4d:86:09:8e:79:8c:4b:6a:a8:
         e8:e1:f4:25:59:e3:a0:f0:da:9c:7c:d9:39:86:bf:44:16:d8:
         8d:43:fb:d7:0a:a9:af:d0:c8:f7:33:6c:7f:90:08:cd:1d:46:
         de:6f:ca:3b:0b:96:1a:66:18:b8:49:e4:89:e1:ce:6f:e5:28:
         bc:67:a4:b8:76:9e:c5:08:66:28:fe:b6:b6:89:45:6f:f2:f1:
         f4:32:84:3f:bd:f5:c7:6b:62:3b:63:4b:87:a4:e0:c7:17:17:
         59:9d:18:24:b3:30:99:39:df:34:29:26:cb:d9:b0:08:d2:f7:
         29:e0:7d:dc:94:65:71:d9:64:5d:fb:ed:e7:fc:79:76:b8:da:
         28:a0:59:77:cd:36:31:41:c8:94:55:2a:ba:37:08:55:46:2c:
         6c:c4:42:8d:51:e1:28:9a:b1:71:e2:89:55:e3:a4:ac:ac:b9:
         28:71:59:30:96:99:85:ed:e3:37:9b:d0:e6:37:35:6f:36:8f:
         54:e4:17:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumF/FH/w78zJE4qDDsNwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWZkOTk1NGU3ZDVkMzU5ZjkzZjUyMTgyMWQ4NTE2OTUz
YzlkMzYwHhcNMjUwNDEzMTAwMDU5WhcNMjUwNDE0MTAwMDU5WjAzMTEwLwYDVQQD
Eyg2MDk4OWFhNTI0NjFiYWViNmQ1YTdiM2U4NzY0YzBjOTE1MTUxMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3rPD+NQWxLqQSn0TG8mvNounibX
uxZgf5gVKIwmUcTj/mNqUBHHjvuTVEAFxb8nrcZP0HV5N6xTgAY1Q2NNzGokPBoX
S5Plw4oVkavPvRD3GAivt4xqOIyrcwKfgk082UUA1kYfH9x05IOue1/c3uLAB6NK
7jqIvRmQ979SetL/AE4eMyKa4FdLF9KNgyJZA45NX1UnWIKnWEquHTJiVfXi1640
6fZsVKcicZG41/HN5utAtGEDKcH3bRiiHkPsccpXVETpKHB/TRZeevwj6HD5LVeu
DitkK/13vgM28TUiXiSSOYDWDVpdTSXb1U5fh2ZZhC4bfHf85iFjAwgACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCYmqUkYbrrbVp7PodkwMkVFREUMB8GA1UdIwQY
MBaAFDdf2ZVOfV01n5P1IYIdhRaVPJ02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODct
ODUxZDU3N2QxNmFiLzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODctODUxZDU3N2QxNmFi
LzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrlps5+1
PgjnApCbVIVZfCWTGcT+j5upokrbx+JZXZQEvryIn0+5k8MOBcfTqM1Tne6fETbf
sM2tNrU4qqFOTYYJjnmMS2qo6OH0JVnjoPDanHzZOYa/RBbYjUP71wqpr9DI9zNs
f5AIzR1G3m/KOwuWGmYYuEnkieHOb+UovGekuHaexQhmKP62tolFb/Lx9DKEP731
x2tiO2NLh6TgxxcXWZ0YJLMwmTnfNCkmy9mwCNL3KeB93JRlcdlkXfvt5/x5drja
KKBZd802MUHIlFUqujcIVUYsbMRCjVHhKJqxceKJVeOkrKy5KHFZMJaZhe3jN5vQ
5jc1bzaPVOQX5w==
-----END CERTIFICATE-----