Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File:                     HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier:          aJZf1wIvE+1iGDdvOD7mgizR+pBrf+N2JS0g5G3EQ/A=
Subject key identifier:   1E:A3:67:E6:F3:7F:AC:B0:72:41:63:A7:F5:B9:E8:70:DC:E3:15:B8
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer:       /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial:       01962E99AAF2B54A1E718A4DD960C680DC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number:          03C9
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: 1mJM7hHjTJ97oJs6WxX61ff0salGT20HRY610NzWoE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:f2:b5:4a:1e:71:8a:4d:d9:60:c6:80:dc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=1ea367e6f37facb0724163a7f5b9e870dce315b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:ef:4e:eb:91:11:56:54:5d:00:30:42:ff:
                    75:47:1a:03:d9:d2:da:08:33:a3:37:63:8d:b0:2c:
                    48:3c:b1:b9:40:1c:fe:dc:98:ba:70:51:e7:b7:43:
                    6b:f9:6f:b5:71:41:e8:67:09:51:33:ea:4f:43:6a:
                    90:b8:96:0f:09:9c:71:4c:64:bc:ef:0f:d4:37:c6:
                    d8:b9:8e:7c:1c:1e:54:ea:9f:d2:09:94:0d:42:de:
                    3e:13:35:a7:e2:2a:c4:8f:99:23:72:2e:59:2c:fb:
                    97:47:a3:30:a3:08:7f:33:f6:d7:84:94:20:d1:20:
                    04:60:be:74:4f:89:f7:6a:53:3c:45:71:eb:08:3c:
                    52:5b:98:3e:fb:36:de:4d:b3:a0:3b:a6:53:ed:6d:
                    1c:91:1e:92:7c:d9:38:17:27:ab:e2:14:ed:b3:86:
                    93:95:96:03:a2:9a:a5:39:ca:6a:d8:1c:5d:fc:d0:
                    51:52:f6:53:5b:3b:ac:b1:b6:70:ac:a1:87:0b:00:
                    a7:d4:78:0c:dd:fa:ff:bd:ab:e0:ee:66:2b:d8:bc:
                    df:f0:73:5f:3b:72:d8:fc:f9:8f:e8:d6:55:f3:f1:
                    9d:e0:24:ae:93:26:95:93:c3:4b:e9:e5:fd:c1:dd:
                    63:2e:9a:f1:ae:b8:f3:7b:bc:83:02:3d:bc:72:6d:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:67:E6:F3:7F:AC:B0:72:41:63:A7:F5:B9:E8:70:DC:E3:15:B8
            X509v3 Authority Key Identifier:
                keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:96:d3:b2:3f:0b:27:81:2a:86:ed:be:d5:9e:21:dd:81:
         a2:f4:60:8c:5f:18:45:5b:3e:6b:a7:ee:c5:03:10:2c:4a:27:
         73:e9:28:ec:a4:1a:b6:0f:4b:38:96:6a:d3:90:5d:51:14:cd:
         20:55:79:06:f5:04:dd:7d:89:3e:ab:3f:89:44:91:07:60:6c:
         f7:ac:21:56:d4:9e:be:6c:8f:ee:e0:f1:dd:7f:8e:ad:52:62:
         46:1c:84:f1:b0:81:5e:7a:e3:2d:11:39:a1:50:14:e5:a2:ac:
         47:fd:c8:98:aa:20:02:00:fd:ab:ba:7d:6d:df:32:67:83:2d:
         4c:8a:cd:76:21:ac:35:0e:43:f2:ea:0f:a6:10:7d:c7:3f:60:
         3f:2a:4a:31:9a:53:6e:84:b9:45:1b:bc:df:9d:34:91:3c:3a:
         94:aa:a6:43:a6:92:d5:20:2a:f3:c3:fb:6d:eb:69:ab:ce:20:
         c4:39:8f:ec:1a:a7:aa:c3:59:d6:4d:8b:c6:0b:1f:bf:fd:f9:
         f4:2f:45:c2:bc:da:f7:c8:a7:62:0c:f3:20:a2:5f:ab:9a:bc:
         d0:29:b0:82:a9:34:39:0a:4e:8e:66:ef:8b:d8:b9:10:76:96:
         01:e8:81:7c:7d:7c:2c:96:ca:02:55:dc:b4:eb:2b:30:14:fb:
         b4:9d:f8:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumarytUoecYpN2WDGgNw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzI1NTVjNjFkM2QyMjllMmM0YTIzMzdkNzVmYTUzZjZm
MmIyYmMwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EygxZWEzNjdlNmYzN2ZhY2IwNzI0MTYzYTdmNWI5ZTg3MGRjZTMxNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXDvTuuREVZUXQAwQv91RxoD2dLa
CDOjN2ONsCxIPLG5QBz+3Ji6cFHnt0Nr+W+1cUHoZwlRM+pPQ2qQuJYPCZxxTGS8
7w/UN8bYuY58HB5U6p/SCZQNQt4+EzWn4irEj5kjci5ZLPuXR6Mwowh/M/bXhJQg
0SAEYL50T4n3alM8RXHrCDxSW5g++zbeTbOgO6ZT7W0ckR6SfNk4Fyer4hTts4aT
lZYDopqlOcpq2Bxd/NBRUvZTWzussbZwrKGHCwCn1HgM3fr/vavg7mYr2Lzf8HNf
O3LY/PmP6NZV8/Gd4CSukyaVk8NL6eX9wd1jLprxrrjze7yDAj28cm3iNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6jZ+bzf6ywckFjp/W56HDc4xW4MB8GA1UdIwQY
MBaAFB0yVVxh09Ip4sSiM311+lP28rK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAt
YTc5ZjlmZWVmMDBhLzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAtYTc5ZjlmZWVmMDBh
LzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMyW07I/
CyeBKobtvtWeId2BovRgjF8YRVs+a6fuxQMQLEonc+ko7KQatg9LOJZq05BdURTN
IFV5BvUE3X2JPqs/iUSRB2Bs96whVtSevmyP7uDx3X+OrVJiRhyE8bCBXnrjLRE5
oVAU5aKsR/3ImKogAgD9q7p9bd8yZ4MtTIrNdiGsNQ5D8uoPphB9xz9gPypKMZpT
boS5RRu83500kTw6lKqmQ6aS1SAq88P7betpq84gxDmP7BqnqsNZ1k2Lxgsfv/35
9C9Fwrza98inYgzzIKJfq5q80Cmwgqk0OQpOjmbvi9i5EHaWAeiBfH18LJbKAlXc
tOsrMBT7tJ34+w==
-----END CERTIFICATE-----