Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File:                     4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier:          lGssM+wkPvRHNsjjmbKTx2/Wnc3zto98Fus2+7bQMQo=
Subject key identifier:   14:19:B3:73:FA:FB:E6:C3:A7:8C:B0:C4:83:7A:12:31:53:CD:9E:6C
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer:       /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial:       01962E61B8FD8B6DEEC8DCEC0B3637D32C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number:          121A
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: /DKMon9FouxJJ+DCitAPlJXLz16KcguLt5y660cvkaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b8:fd:8b:6d:ee:c8:dc:ec:0b:36:37:d3:2c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=1419b373fafbe6c3a78cb0c4837a123153cd9e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:d2:92:1e:2f:0c:bd:f7:13:83:03:54:0a:
                    29:0b:9c:b3:d8:b1:4f:38:12:24:71:26:87:2e:9a:
                    92:da:1f:a0:13:a6:95:1d:2c:46:58:8e:d3:b7:31:
                    3e:7f:f4:d0:c3:e0:c3:c3:ad:32:4b:e7:da:46:4c:
                    e7:aa:29:c3:97:38:fa:6e:c3:02:fc:49:72:bc:78:
                    bb:c4:e7:09:69:02:2b:c7:14:00:b2:dc:14:d5:7f:
                    e7:78:48:8e:a3:40:46:b2:3e:99:50:47:c6:91:a7:
                    49:3b:90:fa:aa:3d:67:b6:57:46:da:26:8e:a7:d4:
                    30:dc:9c:10:b8:3d:9a:c4:27:ef:23:d5:5a:ee:73:
                    c1:b5:33:6e:19:0d:53:f5:14:35:da:6d:96:61:86:
                    f7:78:04:02:c3:bd:fa:58:e2:c6:df:9b:f0:fa:64:
                    c4:ab:82:6b:44:a4:e8:3b:c6:23:aa:7a:54:23:8e:
                    ec:59:d6:d1:03:c9:02:73:89:92:e4:df:0b:6b:6e:
                    63:36:b3:84:bf:42:60:95:ee:ac:ea:f5:10:ee:2a:
                    87:90:67:12:c7:43:dc:58:69:35:bc:84:26:ec:57:
                    b3:6e:18:50:93:c5:72:de:64:48:c5:f4:39:74:5d:
                    72:88:2b:11:c1:62:ad:50:f5:5c:db:41:ba:e4:b1:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:19:B3:73:FA:FB:E6:C3:A7:8C:B0:C4:83:7A:12:31:53:CD:9E:6C
            X509v3 Authority Key Identifier:
                keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:60:77:89:06:04:96:56:86:10:6b:62:04:2a:e1:b3:05:
         3d:2e:64:e4:95:33:22:e8:29:20:fb:a1:ec:28:47:20:30:c8:
         d5:f0:33:de:bb:28:77:84:ed:29:3d:e9:d6:56:8e:93:da:d8:
         20:9c:36:ce:99:50:5a:a3:be:2e:10:eb:20:70:c2:7a:c6:12:
         38:58:b4:f5:45:b7:0a:91:74:5a:3c:6e:d8:52:d6:87:dd:ba:
         71:5c:ad:1f:fb:99:77:99:97:a5:10:0e:ff:90:02:e1:f7:7f:
         cb:c4:dc:0b:a7:10:23:11:a6:42:2e:b5:06:5f:b1:13:bf:c2:
         73:ac:7a:30:84:2a:f2:d8:04:ba:e5:8e:e2:0a:6d:f4:b5:aa:
         67:23:26:91:5e:da:b2:a3:ea:4f:5a:b8:e1:cc:0b:0e:3d:98:
         22:2b:b6:a7:aa:86:23:0a:2b:00:1d:cf:67:dc:3e:d6:ed:62:
         cf:46:fe:92:5d:03:4a:bd:64:9a:e7:97:b9:5b:8e:0a:a1:e7:
         7c:60:82:81:94:1e:09:6b:15:8e:d0:49:36:e7:8b:a1:a3:ea:
         ac:c2:d3:10:af:0d:7b:bd:5c:86:38:25:42:a3:25:f7:27:8c:
         b7:68:c0:22:8c:55:98:37:15:94:70:f8:1b:cd:a9:de:fc:5b:
         fa:d5:98:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbj9i23uyNzsCzY30ywEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk
NzI0ZjcwHhcNMjUwNDEzMDkwMTE4WhcNMjUwNDE0MDkwMTE4WjAzMTEwLwYDVQQD
EygxNDE5YjM3M2ZhZmJlNmMzYTc4Y2IwYzQ4MzdhMTIzMTUzY2Q5ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS3Skh4vDL33E4MDVAopC5yz2LFP
OBIkcSaHLpqS2h+gE6aVHSxGWI7TtzE+f/TQw+DDw60yS+faRkznqinDlzj6bsMC
/ElyvHi7xOcJaQIrxxQAstwU1X/neEiOo0BGsj6ZUEfGkadJO5D6qj1ntldG2iaO
p9Qw3JwQuD2axCfvI9Va7nPBtTNuGQ1T9RQ12m2WYYb3eAQCw736WOLG35vw+mTE
q4JrRKToO8YjqnpUI47sWdbRA8kCc4mS5N8La25jNrOEv0Jgle6s6vUQ7iqHkGcS
x0PcWGk1vIQm7FezbhhQk8Vy3mRIxfQ5dF1yiCsRwWKtUPVc20G65LFmdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQZs3P6++bDp4ywxIN6EjFTzZ5sMB8GA1UdIwQY
MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt
NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5
LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUupgd4kG
BJZWhhBrYgQq4bMFPS5k5JUzIugpIPuh7ChHIDDI1fAz3rsod4TtKT3p1laOk9rY
IJw2zplQWqO+LhDrIHDCesYSOFi09UW3CpF0Wjxu2FLWh926cVytH/uZd5mXpRAO
/5AC4fd/y8TcC6cQIxGmQi61Bl+xE7/Cc6x6MIQq8tgEuuWO4gpt9LWqZyMmkV7a
sqPqT1q44cwLDj2YIiu2p6qGIworAB3PZ9w+1u1iz0b+kl0DSr1kmueXuVuOCqHn
fGCCgZQeCWsVjtBJNueLoaPqrMLTEK8Ne71chjglQqMl9yeMt2jAIoxVmDcVlHD4
G82p3vxb+tWYSg==
-----END CERTIFICATE-----