Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File:                     mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier:          6tt7kp1Xn46rAWSMIgBSfH7qNcCSnqXIEqdrMFMohsk=
Subject key identifier:   B0:4A:67:63:C9:48:4E:6E:4E:BC:28:62:CB:49:10:80:18:3A:75:30
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer:       /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial:       01962E61B7CF3E38AE48A62F772B6DC1DDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number:          0229
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: 0kNmCyBLagbd+1biSIELPiBPMRA/eIN+4/+V4NUsp1c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b7:cf:3e:38:ae:48:a6:2f:77:2b:6d:c1:dd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=b04a6763c9484e6e4ebc2862cb491080183a7530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:b1:01:a9:b6:f3:44:ce:b4:c8:1f:9e:24:
                    b8:30:d8:33:14:03:09:5e:4e:27:42:af:d1:14:00:
                    9a:7a:51:10:02:af:be:4a:b2:5e:29:6f:82:b5:0f:
                    d8:23:96:c4:0f:00:d0:8b:4a:ee:93:12:d0:73:a1:
                    b0:7d:f3:cb:d4:85:f0:25:d9:5f:e0:37:fc:fd:81:
                    bd:59:3a:84:7d:05:ac:9c:5c:e4:66:2c:f8:fe:58:
                    54:cc:b3:3d:b8:ab:08:d9:1c:ec:e5:fb:5d:26:33:
                    82:cb:18:8d:fa:c7:2c:63:6c:1c:86:af:48:10:3c:
                    c8:64:bb:4c:3e:14:c7:fb:63:7b:53:93:09:2e:ef:
                    48:e7:37:03:b4:71:b8:55:77:81:3d:b8:d3:09:cc:
                    8b:10:7c:d6:5c:25:de:0b:5f:68:f3:86:38:0f:d3:
                    b0:19:25:8b:4f:aa:9c:33:94:89:a5:f2:29:f8:89:
                    ec:f7:2c:17:97:8c:49:0d:35:bd:12:96:0e:f6:b2:
                    70:a0:83:e4:36:98:ed:f6:66:62:bb:cc:68:82:b9:
                    53:67:ab:2d:db:e2:24:91:07:96:ec:21:9b:70:fa:
                    1c:15:3a:3f:aa:5e:92:98:24:e3:a8:f4:2f:72:4c:
                    98:11:de:e2:27:ee:10:51:f6:c1:3d:1d:52:4c:0d:
                    77:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4A:67:63:C9:48:4E:6E:4E:BC:28:62:CB:49:10:80:18:3A:75:30
            X509v3 Authority Key Identifier:
                keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:a1:93:26:37:4a:75:ab:f2:b3:a7:3f:a8:0b:95:21:3c:
         14:5a:ea:4d:65:97:49:c1:cf:1c:ae:0a:d6:23:ac:db:8f:96:
         94:b3:37:2b:75:13:64:45:00:2c:43:5e:0e:2c:6d:98:d0:25:
         8b:76:37:e7:c5:1d:bd:8f:5f:34:5d:a0:b0:67:90:db:9d:52:
         28:3d:d1:ab:02:24:ff:6b:ac:c4:98:f8:f8:c3:23:cb:50:a5:
         73:e4:36:1c:88:98:4f:b8:9c:dd:18:de:de:bf:3b:93:e3:31:
         39:37:f2:ce:37:1d:53:61:3e:0c:2c:c6:e1:e3:38:f5:00:f3:
         2e:a2:0a:22:6e:f3:0d:6a:2c:81:45:77:26:f9:27:27:15:e4:
         9c:35:28:80:da:97:80:b6:56:7f:02:f1:02:ec:dd:3b:31:fd:
         bc:22:f9:fa:d5:17:4b:fd:e0:05:a9:25:7c:ad:1e:8c:70:52:
         98:25:d4:c0:c4:78:9d:b1:84:de:26:8f:f8:5f:78:00:dc:96:
         83:a5:cd:11:71:c7:f5:1e:66:0c:36:de:08:62:11:ee:1e:79:
         20:56:01:59:0a:58:c4:7d:a3:d9:9b:7c:e5:7e:68:5c:68:05:
         04:7c:b2:ab:46:b3:d6:ab:88:0f:f3:f9:f2:40:30:a2:9d:51:
         2d:d7:d8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbfPPjiuSKYvdyttwd2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Mjk0Y2ZmZDYxMmI1ZWM3YjQ4Yjg0MjMyYTQ1ZDZhYjZk
ZGZmOTUwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
EyhiMDRhNjc2M2M5NDg0ZTZlNGViYzI4NjJjYjQ5MTA4MDE4M2E3NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvKxAam280TOtMgfniS4MNgzFAMJ
Xk4nQq/RFACaelEQAq++SrJeKW+CtQ/YI5bEDwDQi0rukxLQc6GwffPL1IXwJdlf
4Df8/YG9WTqEfQWsnFzkZiz4/lhUzLM9uKsI2Rzs5ftdJjOCyxiN+scsY2wchq9I
EDzIZLtMPhTH+2N7U5MJLu9I5zcDtHG4VXeBPbjTCcyLEHzWXCXeC19o84Y4D9Ow
GSWLT6qcM5SJpfIp+Ins9ywXl4xJDTW9EpYO9rJwoIPkNpjt9mZiu8xogrlTZ6st
2+IkkQeW7CGbcPocFTo/ql6SmCTjqPQvckyYEd7iJ+4QUfbBPR1STA13eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBKZ2PJSE5uTrwoYstJEIAYOnUwMB8GA1UdIwQY
MBaAFJkpTP/WErXse0i4QjKkXWq23f+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83Y2FjNGEtNmI5OS00NTFkLWE2NDkt
NWQ5MjcyZTQ4YTdjLzEvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83Y2FjNGEtNmI5OS00NTFkLWE2NDktNWQ5MjcyZTQ4YTdj
LzEvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuChkyY3
SnWr8rOnP6gLlSE8FFrqTWWXScHPHK4K1iOs24+WlLM3K3UTZEUALENeDixtmNAl
i3Y358UdvY9fNF2gsGeQ251SKD3RqwIk/2usxJj4+MMjy1Clc+Q2HIiYT7ic3Rje
3r87k+MxOTfyzjcdU2E+DCzG4eM49QDzLqIKIm7zDWosgUV3JvknJxXknDUogNqX
gLZWfwLxAuzdOzH9vCL5+tUXS/3gBaklfK0ejHBSmCXUwMR4nbGE3iaP+F94ANyW
g6XNEXHH9R5mDDbeCGIR7h55IFYBWQpYxH2j2Zt85X5oXGgFBHyyq0az1quID/P5
8kAwop1RLdfYDw==
-----END CERTIFICATE-----