Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File:                     maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier:          dQTev9k3ccAYd3U+gwrYQhLSof0KWPlFGL8hdVKkPWc=
Subject key identifier:   45:E4:27:AA:47:65:06:3E:3C:98:E6:F3:EE:0C:18:BC:4A:96:12:C1
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer:       /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial:       01962FAB2EFF49FE8B82D667B153B3675C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number:          0BFF
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: SJU1d2Qy7ioevUPQZXb36wzAwi238+f2Ks9GyOiNOo4=)
                          2: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (hash: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:ff:49:fe:8b:82:d6:67:b1:53:b3:67:5c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=45e427aa4765063e3c98e6f3ee0c18bc4a9612c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:14:5d:a3:81:24:7d:75:8f:0c:56:e2:0b:
                    4c:d8:93:c7:e2:73:1b:a1:d8:b1:30:70:6b:53:2d:
                    38:5b:5c:7b:83:68:3b:6f:35:48:eb:87:45:3e:a6:
                    1c:aa:2d:e5:58:9e:77:bb:fc:1e:aa:c4:98:46:26:
                    91:c4:10:ab:ae:77:97:1c:67:84:33:af:79:50:46:
                    be:1f:21:b2:db:21:66:7c:56:77:6d:3c:bb:35:ba:
                    de:2b:31:c8:56:b8:99:94:08:d3:fc:1d:88:49:62:
                    50:e6:66:8b:88:9e:8e:78:fc:18:dd:dc:ea:80:bc:
                    5e:29:7b:59:68:9c:23:6a:ee:5e:2f:fe:8d:d9:30:
                    71:8c:b3:dd:ee:e1:34:e2:43:38:9c:30:b9:9e:ca:
                    65:ca:f3:c5:68:3d:70:2f:49:0e:1a:14:91:85:c1:
                    a9:23:9e:89:00:e0:e6:b6:0d:f8:02:3b:cc:c2:a7:
                    1d:2a:be:91:f7:be:10:a8:cb:63:2a:05:81:da:bd:
                    77:1a:a3:36:82:e2:0e:18:9e:52:08:20:1d:7e:50:
                    6b:19:ad:c8:20:33:8c:23:29:ab:75:37:aa:0e:da:
                    58:2d:1a:fb:d5:64:c9:67:92:08:47:6c:71:1e:2b:
                    fa:05:fa:9c:da:0c:d7:52:4e:23:2e:4a:a2:cb:26:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E4:27:AA:47:65:06:3E:3C:98:E6:F3:EE:0C:18:BC:4A:96:12:C1
            X509v3 Authority Key Identifier:
                keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:71:c2:9d:ee:09:90:2a:de:6b:d4:f5:1f:a7:9c:58:60:34:
         26:57:da:68:62:f3:b4:ff:df:00:87:d5:d2:7c:7e:61:e6:37:
         60:ce:24:48:0d:dc:26:db:c2:64:d3:46:98:53:fd:ea:99:fe:
         92:61:a5:09:b4:f8:22:87:f3:35:ea:11:90:03:5d:91:f8:4c:
         82:fa:c1:df:8f:0d:d6:20:af:e5:84:cb:3c:2d:56:a3:0b:2b:
         cd:28:18:8b:74:57:9f:17:bb:a9:c4:89:57:c6:fe:7f:bb:f9:
         b5:47:83:b3:84:62:e5:33:91:c1:a1:44:d2:23:2e:9e:b5:3b:
         34:77:90:e9:3b:32:2c:56:9a:be:9f:29:0d:29:64:16:8e:e4:
         07:8e:55:bc:8b:61:64:ee:82:c1:d7:34:6d:f2:b1:e5:fd:1d:
         57:72:81:f7:2d:b7:1b:5b:20:1b:9a:05:0f:af:0b:c3:f2:57:
         54:c5:87:ea:c7:7c:b0:b2:d6:9a:64:8b:34:fe:65:96:3c:ef:
         25:77:e0:12:28:26:dc:59:83:08:71:1a:27:57:36:7e:6b:b1:
         b2:59:51:0f:7d:7d:11:19:1c:55:da:ba:a3:cb:8f:da:8a:35:
         ec:52:30:fc:83:96:da:5f:99:f4:49:36:83:8c:26:ca:0b:2e:
         f8:4e:c8:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy7/Sf6LgtZnsVOzZ1w4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2
YTA1YmIwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg0NWU0MjdhYTQ3NjUwNjNlM2M5OGU2ZjNlZTBjMThiYzRhOTYxMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4cUXaOBJH11jwxW4gtM2JPH4nMb
odixMHBrUy04W1x7g2g7bzVI64dFPqYcqi3lWJ53u/weqsSYRiaRxBCrrneXHGeE
M695UEa+HyGy2yFmfFZ3bTy7NbreKzHIVriZlAjT/B2ISWJQ5maLiJ6OePwY3dzq
gLxeKXtZaJwjau5eL/6N2TBxjLPd7uE04kM4nDC5nsplyvPFaD1wL0kOGhSRhcGp
I56JAODmtg34AjvMwqcdKr6R974QqMtjKgWB2r13GqM2guIOGJ5SCCAdflBrGa3I
IDOMIymrdTeqDtpYLRr71WTJZ5IIR2xxHiv6Bfqc2gzXUk4jLkqiyyZQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXkJ6pHZQY+PJjm8+4MGLxKlhLBMB8GA1UdIwQY
MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt
MmQ5NTM2MDBmZjM3LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3
LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnHCne4J
kCrea9T1H6ecWGA0JlfaaGLztP/fAIfV0nx+YeY3YM4kSA3cJtvCZNNGmFP96pn+
kmGlCbT4IofzNeoRkANdkfhMgvrB348N1iCv5YTLPC1WowsrzSgYi3RXnxe7qcSJ
V8b+f7v5tUeDs4Ri5TORwaFE0iMunrU7NHeQ6TsyLFaavp8pDSlkFo7kB45VvIth
ZO6Cwdc0bfKx5f0dV3KB9y23G1sgG5oFD68Lw/JXVMWH6sd8sLLWmmSLNP5lljzv
JXfgEigm3FmDCHEaJ1c2fmuxsllRD319ERkcVdq6o8uP2oo17FIw/IOW2l+Z9Ek2
g4wmygsu+E7ITw==
-----END CERTIFICATE-----