Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File:                     pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier:          4sbSnIJArgD+21ca9n+bHj0YqcavgugHFmOMngjvk8M=
Subject key identifier:   05:94:B0:9C:94:0C:5B:25:11:90:A6:AF:48:66:6F:2C:93:73:6A:04
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer:       /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial:       01962F74D70686BC3BA8556A851A65672259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number:          02BC
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: vNl4E5CpWK7cKSFYIzmE005gBsBhU/2IdbEC1p01sLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d7:06:86:bc:3b:a8:55:6a:85:1a:65:67:22:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=0594b09c940c5b251190a6af48666f2c93736a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:9e:cd:e2:bd:ed:15:6b:6b:10:63:58:e8:
                    16:2e:04:25:46:dd:f4:35:e4:46:b0:73:1a:29:90:
                    29:ad:1a:bb:8e:a7:e1:2a:01:8b:a9:11:f9:4f:cc:
                    f4:08:ef:80:b7:fe:3a:ff:a3:98:97:c3:4c:2f:22:
                    c0:7a:74:94:53:05:e4:a3:de:0e:36:d6:30:f9:a6:
                    12:34:1a:76:4e:aa:cc:20:7c:89:cd:57:86:b0:35:
                    ea:27:12:44:bb:de:db:6b:8c:d9:d1:7a:56:9b:ce:
                    4c:74:04:41:7e:ca:83:5d:bc:28:5e:9f:22:7c:3b:
                    68:c2:09:59:fe:fd:69:11:b6:ef:00:c6:28:e4:12:
                    fd:68:72:d6:26:72:4f:38:1b:3f:27:9b:7f:50:d0:
                    71:cd:a8:0b:19:d1:eb:72:6d:ee:03:41:5f:7d:9f:
                    27:2e:48:eb:bd:32:a3:4a:c5:35:e9:08:92:db:b7:
                    b5:d0:5c:97:8a:81:ec:48:9f:b5:4d:ff:f2:58:fd:
                    b7:b1:fa:44:fa:75:46:30:19:5d:28:5e:e2:12:6c:
                    57:8c:10:21:35:9e:83:ac:02:d8:42:ba:ca:45:b3:
                    22:f0:a4:1b:6b:18:06:fe:17:64:c2:0e:d7:e3:94:
                    cd:a2:66:e9:50:a2:07:3f:87:f8:35:b4:fa:0e:f9:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:B0:9C:94:0C:5B:25:11:90:A6:AF:48:66:6F:2C:93:73:6A:04
            X509v3 Authority Key Identifier:
                keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:01:cd:46:4d:1f:13:18:57:99:cd:bd:58:22:95:b7:41:
         8f:72:de:7b:7c:d8:2a:78:d9:e1:5a:db:3d:35:23:b6:f8:60:
         df:2b:34:8b:87:66:3d:bd:62:ee:df:4e:ed:e3:57:71:ff:10:
         56:a2:58:bf:8a:3f:8d:5b:a3:1e:69:bb:c4:88:2f:91:90:ed:
         3a:d9:8d:b1:1a:9d:f2:c1:7b:0b:f6:1e:7c:9f:59:1a:ac:87:
         4b:92:51:fd:dd:84:84:84:b0:f2:3b:d4:f4:c4:35:03:20:ab:
         d0:44:7b:e4:4a:a4:c5:74:35:15:61:cb:c8:ea:ff:5e:b2:c6:
         44:17:5b:01:16:6e:a2:d0:8c:c9:70:0d:10:6e:2f:30:5a:f9:
         05:66:f9:89:e9:0e:05:e2:d3:1c:5c:d2:bd:d8:fc:28:ec:75:
         b5:6c:d7:49:1e:cd:8b:d5:9b:27:75:b0:23:8b:e0:95:62:44:
         e9:46:ce:c6:bb:30:62:f2:70:24:cd:3f:8f:b6:61:d2:7f:1e:
         9d:6a:47:5c:da:87:89:88:dd:c2:08:f7:6a:4f:f6:64:6d:73:
         6a:c0:e5:fe:bf:07:e4:84:dc:05:b9:4c:a4:2b:e2:25:ae:72:
         46:72:41:0c:c6:4e:61:d9:e8:0c:4e:8e:b4:0d:0f:20:85:4e:
         c8:45:8b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNcGhrw7qFVqhRplZyJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2E4YWNmODgzODRlYzUzZGUxOWUyODliNWQyNjQyYTEx
ZmY3ZmQwHhcNMjUwNDEzMTQwMTQ4WhcNMjUwNDE0MTQwMTQ4WjAzMTEwLwYDVQQD
EygwNTk0YjA5Yzk0MGM1YjI1MTE5MGE2YWY0ODY2NmYyYzkzNzM2YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWCezeK97RVraxBjWOgWLgQlRt30
NeRGsHMaKZAprRq7jqfhKgGLqRH5T8z0CO+At/46/6OYl8NMLyLAenSUUwXko94O
NtYw+aYSNBp2TqrMIHyJzVeGsDXqJxJEu97ba4zZ0XpWm85MdARBfsqDXbwoXp8i
fDtowglZ/v1pEbbvAMYo5BL9aHLWJnJPOBs/J5t/UNBxzagLGdHrcm3uA0FffZ8n
LkjrvTKjSsU16QiS27e10FyXioHsSJ+1Tf/yWP23sfpE+nVGMBldKF7iEmxXjBAh
NZ6DrALYQrrKRbMi8KQbaxgG/hdkwg7X45TNombpUKIHP4f4NbT6Dvl5+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWUsJyUDFslEZCmr0hmbyyTc2oEMB8GA1UdIwQY
MBaAFKTKis+IOE7FPeGeKJtdJkKhH/f9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNGM4NzItZjQ2ZS00MzNkLTk3ODUt
ZWNkN2ZiYzg3NTgwLzEvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jNGM4NzItZjQ2ZS00MzNkLTk3ODUtZWNkN2ZiYzg3NTgw
LzEvcE1xS3o0ZzRUc1U5NFo0b20xMG1RcUVmOV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+QBzUZN
HxMYV5nNvVgilbdBj3Lee3zYKnjZ4VrbPTUjtvhg3ys0i4dmPb1i7t9O7eNXcf8Q
VqJYv4o/jVujHmm7xIgvkZDtOtmNsRqd8sF7C/YefJ9ZGqyHS5JR/d2EhISw8jvU
9MQ1AyCr0ER75EqkxXQ1FWHLyOr/XrLGRBdbARZuotCMyXANEG4vMFr5BWb5iekO
BeLTHFzSvdj8KOx1tWzXSR7Ni9WbJ3WwI4vglWJE6UbOxrswYvJwJM0/j7Zh0n8e
nWpHXNqHiYjdwgj3ak/2ZG1zasDl/r8H5ITcBblMpCviJa5yRnJBDMZOYdnoDE6O
tA0PIIVOyEWL5g==
-----END CERTIFICATE-----