Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          ROu1CmIXg5jN2QxojKuC8PJwWg5hZnSQ52oN4For1bA=
Subject key identifier:   19:F4:01:9C:1C:86:A5:D9:46:A7:0D:75:ED:DB:85:1F:3A:BC:BB:AD
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       01962FAB56007D01F71C272832D0FDF06FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          0389
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: 2OxjJFtOgr+K1yEQVv2HmxcEbss/9O7AGV738vuJiCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:56:00:7d:01:f7:1c:27:28:32:d0:fd:f0:6f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=19f4019c1c86a5d946a70d75eddb851f3abcbbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:12:c6:bf:5c:cd:a0:f2:b9:26:ec:39:3e:
                    74:c3:02:ca:ff:4f:a7:b6:64:97:72:95:e5:57:c5:
                    10:88:4c:dc:e6:9b:05:75:f7:8a:1e:57:62:f3:72:
                    1a:90:14:61:2b:d9:1a:a8:9d:c7:ae:8b:e0:83:47:
                    46:a1:ea:b0:77:24:bd:74:89:6e:39:f6:7d:a8:ee:
                    6f:c0:8c:25:40:e4:f0:57:98:20:a3:29:92:bf:aa:
                    cc:7e:56:60:24:a4:6f:e8:e7:1b:bb:f9:48:e9:a0:
                    c0:80:6a:98:88:48:6a:ab:56:8b:93:80:82:f7:1c:
                    e1:50:e2:96:8e:a2:1d:fa:0b:74:17:83:50:8f:e1:
                    74:6b:62:1f:14:58:39:80:a3:e5:e2:8a:06:54:d2:
                    ce:ac:b6:6b:00:db:9a:bd:c6:ee:06:f4:79:18:ae:
                    ca:1e:8a:34:11:f4:33:d0:c1:0b:8d:68:db:41:24:
                    8d:59:86:a3:f7:bf:4b:c8:1c:b0:b8:cb:44:44:1d:
                    a1:cd:c8:20:b9:c8:88:8c:cc:d0:29:58:e1:d0:ac:
                    d6:b5:eb:d3:9a:db:5e:fd:cd:cb:fc:77:2c:f6:ff:
                    c4:0f:6b:cc:29:ef:81:a8:ee:76:4a:64:e3:10:28:
                    ff:4a:e4:07:74:fc:e9:b9:de:78:6b:57:28:57:ae:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:01:9C:1C:86:A5:D9:46:A7:0D:75:ED:DB:85:1F:3A:BC:BB:AD
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:45:44:9a:0c:55:a7:e3:d9:2b:56:02:a7:aa:51:92:f3:75:
         74:94:bb:79:31:23:55:9e:43:7d:2d:39:ec:79:14:5b:b3:5a:
         50:00:1d:b9:04:e8:ba:cd:59:45:c0:59:2a:e6:bf:65:a9:ea:
         f2:23:98:ed:bb:99:b6:72:98:f6:59:7e:ce:ca:57:7b:24:5a:
         52:e4:77:c9:0a:73:58:a5:76:95:5a:20:f8:f1:ac:23:b3:d1:
         6c:3d:24:3b:14:77:86:e7:e8:f7:de:a5:c1:9a:af:6f:a2:42:
         8e:c2:85:ef:10:a7:b1:5a:70:06:95:b9:14:ec:85:48:bb:d2:
         8b:21:9e:6b:ef:a2:46:ec:64:e1:3d:1e:20:96:79:7d:3b:44:
         d5:f6:a2:c8:56:e5:1e:8c:06:9d:ea:8c:3c:25:cb:00:0c:0f:
         b4:d1:b8:d0:80:e4:dc:f0:81:a2:c9:e4:20:b2:e4:80:31:95:
         b8:d5:8a:c1:b9:11:d2:88:94:65:3f:33:aa:0a:17:0d:18:95:
         97:1e:bc:62:b5:7e:51:43:28:e7:be:61:fc:8d:8f:84:ff:80:
         80:e1:d2:8c:c0:80:0f:e8:79:c6:9e:56:1c:cf:4d:af:c6:dd:
         fa:db:f8:ad:b4:7a:c4:30:99:5f:73:ca:e0:a5:34:f4:f6:89:
         91:be:7d:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1YAfQH3HCcoMtD98G+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTQxNWQxNmU3MmUzMzNmMjkzNmMxYzVlMTdkZjI0Mzc4
MTA4YzIwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EygxOWY0MDE5YzFjODZhNWQ5NDZhNzBkNzVlZGRiODUxZjNhYmNiYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEUSxr9czaDyuSbsOT50wwLK/0+n
tmSXcpXlV8UQiEzc5psFdfeKHldi83IakBRhK9kaqJ3Hrovgg0dGoeqwdyS9dIlu
OfZ9qO5vwIwlQOTwV5ggoymSv6rMflZgJKRv6Ocbu/lI6aDAgGqYiEhqq1aLk4CC
9xzhUOKWjqId+gt0F4NQj+F0a2IfFFg5gKPl4ooGVNLOrLZrANuavcbuBvR5GK7K
Hoo0EfQz0MELjWjbQSSNWYaj979LyBywuMtERB2hzcgguciIjMzQKVjh0KzWtevT
mtte/c3L/Hcs9v/ED2vMKe+BqO52SmTjECj/SuQHdPzpud54a1coV67tgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBn0AZwchqXZRqcNde3bhR86vLutMB8GA1UdIwQY
MBaAFBukFdFucuMz8pNsHF4X3yQ3gQjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDct
NmEwYjI1YzU2MzJkLzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDctNmEwYjI1YzU2MzJk
LzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEVEmgxV
p+PZK1YCp6pRkvN1dJS7eTEjVZ5DfS057HkUW7NaUAAduQTous1ZRcBZKua/Zanq
8iOY7buZtnKY9ll+zspXeyRaUuR3yQpzWKV2lVog+PGsI7PRbD0kOxR3hufo996l
wZqvb6JCjsKF7xCnsVpwBpW5FOyFSLvSiyGea++iRuxk4T0eIJZ5fTtE1faiyFbl
HowGneqMPCXLAAwPtNG40IDk3PCBosnkILLkgDGVuNWKwbkR0oiUZT8zqgoXDRiV
lx68YrV+UUMo575h/I2PhP+AgOHSjMCAD+h5xp5WHM9Nr8bd+tv4rbR6xDCZX3PK
4KU09PaJkb59YQ==
-----END CERTIFICATE-----