Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
File:                     09XiCPMtcw1DHUpNTtgJWx59lDE.mft (raw, json)
Hash identifier:          m3PFyc2nSdILemwV5S7vCEaKxjZHRcdQ+ZRUH/PnBNU=
Subject key identifier:   5A:6B:05:D8:C2:90:CD:CB:96:2D:EF:9F:89:AB:D4:2B:98:87:8F:13
Authority key identifier: D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31
Certificate issuer:       /CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
Certificate serial:       01962E98D5BE0FCD211253EEC9302F77F678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft
Manifest number:          17
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 09XiCPMtcw1DHUpNTtgJWx59lDE.crl (hash: 1vNZ6VOBY6stzKzuIuZg9pXaIRdQ44kya8fk8BNQZBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:be:0f:cd:21:12:53:ee:c9:30:2f:77:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d5e208f32d730d431d4a4d4ed8095b1e7d9431
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=5a6b05d8c290cdcb962def9f89abd42b98878f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:8c:9f:5c:13:78:82:a3:fd:f8:79:ba:00:
                    36:17:6e:b8:5e:94:b1:85:cd:86:ed:1e:2a:a6:2e:
                    85:a8:75:23:1c:47:a5:38:6b:bf:cb:88:c8:4c:aa:
                    0f:a8:27:f3:10:f0:8f:8d:68:1d:77:46:dc:c5:a8:
                    c1:46:4d:bf:ad:12:e6:78:1f:b3:27:44:97:d4:aa:
                    94:15:b0:5f:b2:f7:5c:01:e6:e2:0d:02:46:9f:89:
                    e3:01:9a:6c:30:c7:05:33:e6:0c:6e:cf:8c:87:16:
                    71:57:ab:5c:ff:51:b2:5f:10:c2:be:a6:2a:c5:07:
                    9d:ae:ad:e2:32:23:88:b2:ff:dc:67:70:ea:47:d5:
                    81:49:df:42:14:fc:c2:a1:52:c0:91:ec:f5:44:91:
                    48:c6:9b:b6:b6:de:e7:1b:c1:c6:0e:a4:fc:80:85:
                    25:e6:b5:2d:d5:ec:cb:36:8b:af:e2:a6:c5:7f:dc:
                    65:3c:ab:a6:41:b9:b7:13:88:12:66:48:10:5e:13:
                    1f:f6:69:3f:e6:9c:34:00:2f:a0:b1:ee:58:41:38:
                    b1:4c:f5:8a:8c:a4:cb:ab:b9:2c:da:13:51:d2:6d:
                    29:83:36:9b:3b:d7:76:a2:5d:73:e9:e1:7c:f1:bd:
                    df:d6:0b:51:0e:e6:94:0b:d3:9a:16:94:24:30:a1:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:05:D8:C2:90:CD:CB:96:2D:EF:9F:89:AB:D4:2B:98:87:8F:13
            X509v3 Authority Key Identifier:
                keyid:D3:D5:E2:08:F3:2D:73:0D:43:1D:4A:4D:4E:D8:09:5B:1E:7D:94:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09XiCPMtcw1DHUpNTtgJWx59lDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/fa396e-0dd4-4226-ae61-6e89a88dae93/1/09XiCPMtcw1DHUpNTtgJWx59lDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:46:b5:f3:f4:a1:21:cc:b6:05:cd:52:7d:99:b9:0e:ca:
         63:14:1e:95:15:17:4b:5d:08:f8:3e:50:cb:3d:53:05:c8:6c:
         9e:3c:09:1d:10:56:c1:c8:c7:4d:92:a2:a5:bc:ab:c2:38:13:
         cd:1f:03:95:c7:f0:c3:7c:c6:f5:e2:2f:6e:26:b7:bc:b3:37:
         63:3a:f9:3d:27:5a:32:8c:aa:3f:f8:e1:11:43:ed:d9:fa:38:
         77:e7:e7:95:b5:f9:bd:25:18:f5:02:c9:3b:db:4c:d4:2d:e7:
         f5:94:f3:c6:25:61:bc:f3:4e:fd:a1:47:60:23:91:e4:81:84:
         c4:e2:cd:27:30:94:07:2d:3c:b6:17:75:5e:b3:3c:27:5d:6e:
         88:94:0f:9d:cc:44:91:d6:bb:21:9d:44:a4:51:d9:6c:ab:64:
         27:36:96:41:93:91:c8:c2:12:82:85:04:d1:1a:b6:63:f5:a1:
         c8:e4:dc:68:36:03:6a:e6:ed:1d:fb:4e:67:e3:d4:a2:a3:a8:
         2b:0f:f5:f5:8b:2b:ca:af:69:59:d2:cf:d8:d9:80:e4:9e:19:
         cb:0a:9e:d7:8c:5e:08:a7:41:a3:6c:46:59:75:52:94:dc:4d:
         ea:bf:f7:2f:62:01:e6:03:7e:82:0b:14:09:d1:cf:2a:2a:08:
         fe:83:c3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNW+D80hElPuyTAvd/Z4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDVlMjA4ZjMyZDczMGQ0MzFkNGE0ZDRlZDgwOTViMWU3
ZDk0MzEwHhcNMjUwNDEzMTAwMTMwWhcNMjUwNDE0MTAwMTMwWjAzMTEwLwYDVQQD
Eyg1YTZiMDVkOGMyOTBjZGNiOTYyZGVmOWY4OWFiZDQyYjk4ODc4ZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoSMn1wTeIKj/fh5ugA2F264XpSx
hc2G7R4qpi6FqHUjHEelOGu/y4jITKoPqCfzEPCPjWgdd0bcxajBRk2/rRLmeB+z
J0SX1KqUFbBfsvdcAebiDQJGn4njAZpsMMcFM+YMbs+MhxZxV6tc/1GyXxDCvqYq
xQedrq3iMiOIsv/cZ3DqR9WBSd9CFPzCoVLAkez1RJFIxpu2tt7nG8HGDqT8gIUl
5rUt1ezLNouv4qbFf9xlPKumQbm3E4gSZkgQXhMf9mk/5pw0AC+gse5YQTixTPWK
jKTLq7ks2hNR0m0pgzabO9d2ol1z6eF88b3f1gtRDuaUC9OaFpQkMKFBdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFprBdjCkM3Lli3vn4mr1CuYh48TMB8GA1UdIwQY
MBaAFNPV4gjzLXMNQx1KTU7YCVsefZQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mYTM5NmUtMGRkNC00MjI2LWFlNjEt
NmU4OWE4OGRhZTkzLzEvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mYTM5NmUtMGRkNC00MjI2LWFlNjEtNmU4OWE4OGRhZTkz
LzEvMDlYaUNQTXRjdzFESFVwTlR0Z0pXeDU5bERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjtGtfP0
oSHMtgXNUn2ZuQ7KYxQelRUXS10I+D5Qyz1TBchsnjwJHRBWwcjHTZKipbyrwjgT
zR8Dlcfww3zG9eIvbia3vLM3Yzr5PSdaMoyqP/jhEUPt2fo4d+fnlbX5vSUY9QLJ
O9tM1C3n9ZTzxiVhvPNO/aFHYCOR5IGExOLNJzCUBy08thd1XrM8J11uiJQPncxE
kda7IZ1EpFHZbKtkJzaWQZORyMISgoUE0Rq2Y/WhyOTcaDYDaubtHftOZ+PUoqOo
Kw/19Ysryq9pWdLP2NmA5J4Zywqe14xeCKdBo2xGWXVSlNxN6r/3L2IB5gN+ggsU
CdHPKioI/oPD9w==
-----END CERTIFICATE-----