Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
File:                     tgLHVGpnwMWYp0_yv1w5IyU079U.mft (raw, json)
Hash identifier:          9nZ/JQTLD33Q3LUFLFLp9QqVhDtMhyIBwVl+2AtwItE=
Subject key identifier:   90:47:47:42:95:47:3F:F4:85:C5:35:CA:29:48:D6:58:2B:B6:11:61
Authority key identifier: B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
Certificate issuer:       /CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Certificate serial:       01962F072D0E4D0F77CA4606B939DFC000F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
Manifest number:          1396
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: tgLHVGpnwMWYp0_yv1w5IyU079U.crl (hash: 7m24uxsLy9pnMxxxQGHP+DjYdP/27fsmQonz9eg2dfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:0e:4d:0f:77:ca:46:06:b9:39:df:c0:00:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=9047474295473ff485c535ca2948d6582bb61161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:d4:42:d8:c4:78:ed:03:e8:3d:8b:29:60:
                    0b:56:86:d5:49:9b:9b:4b:78:74:70:21:5c:90:b1:
                    16:db:e9:5f:a9:1c:49:89:2f:40:94:ab:3f:17:a1:
                    23:b6:8f:da:9f:85:28:1b:61:a5:b5:fa:24:d4:b9:
                    b5:b0:45:63:01:38:d8:e3:1a:be:3d:9b:b6:1d:72:
                    5d:ff:e2:91:fe:15:06:d4:61:fb:24:5e:9d:7e:52:
                    5c:5a:67:5d:15:61:04:c0:fb:1d:f8:5e:b6:3c:d9:
                    ea:e9:7e:ba:4c:90:6d:23:f5:d3:f6:68:12:f9:28:
                    2c:f7:ad:c6:3d:65:fc:f9:08:d6:29:b2:bb:58:81:
                    d2:e0:bf:64:0b:55:3b:f5:64:4a:ad:0a:05:71:ca:
                    ed:32:d0:37:97:9c:3a:4b:16:3c:88:99:d1:f6:11:
                    ea:68:60:dc:1b:73:39:5d:15:e1:61:d2:dc:93:19:
                    c1:31:9c:34:28:c2:e6:1e:7d:16:20:10:63:60:64:
                    9e:82:22:78:50:80:ac:a6:29:9e:eb:65:70:5a:09:
                    fd:2c:e3:13:5d:6d:a6:b3:92:dd:02:85:66:25:f4:
                    c5:40:d5:3d:84:de:c6:8d:19:10:37:72:60:a9:ff:
                    db:f0:12:8b:38:06:cb:64:94:62:7f:d2:62:78:ab:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:47:47:42:95:47:3F:F4:85:C5:35:CA:29:48:D6:58:2B:B6:11:61
            X509v3 Authority Key Identifier:
                keyid:B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:45:3f:9c:04:53:db:59:fc:c7:1d:df:d7:ca:40:12:e9:
         00:21:79:f3:42:a5:b6:05:91:62:9b:06:d3:e3:44:f0:c0:3e:
         41:ad:30:fd:5f:2a:b1:65:6a:90:6f:de:cb:64:72:a2:3c:fd:
         b7:63:67:bc:da:1d:9a:95:7d:d2:7f:0d:c9:4d:ed:c1:83:ee:
         b4:a8:f8:a1:ec:bb:23:a3:ed:09:28:f0:fb:02:78:ab:65:44:
         c3:89:22:78:b6:8c:29:db:f8:ce:85:02:36:7d:e3:53:f3:10:
         87:7a:d9:6b:f1:7f:aa:96:6e:66:83:75:9a:de:0c:6d:74:e3:
         89:59:3d:35:98:85:51:8a:17:de:e6:c1:49:67:c1:bd:c7:9c:
         69:88:37:89:dc:0e:d6:90:7e:1e:48:a2:9b:f1:b1:36:1b:60:
         49:f1:9b:9f:1e:eb:da:da:41:5d:b8:27:de:57:5d:1a:14:d5:
         7a:45:e5:ff:69:61:4c:59:16:36:9b:c3:49:79:4d:e8:af:a8:
         b9:33:24:8f:a2:cd:73:ee:0a:ce:08:7e:18:04:ad:83:2c:83:
         00:17:68:c6:20:81:c7:5c:a1:a0:80:04:f3:fb:85:c6:cb:f5:
         c7:fb:f9:0c:88:4e:2d:e9:d3:62:eb:6b:7c:f6:4d:12:22:d8:
         5e:5e:61:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBy0OTQ93ykYGuTnfwADyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDJjNzU0NmE2N2MwYzU5OGE3NGZmMmJmNWMzOTIzMjUz
NGVmZDUwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
Eyg5MDQ3NDc0Mjk1NDczZmY0ODVjNTM1Y2EyOTQ4ZDY1ODJiYjYxMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J3UQtjEeO0D6D2LKWALVobVSZub
S3h0cCFckLEW2+lfqRxJiS9AlKs/F6Ejto/an4UoG2Gltfok1Lm1sEVjATjY4xq+
PZu2HXJd/+KR/hUG1GH7JF6dflJcWmddFWEEwPsd+F62PNnq6X66TJBtI/XT9mgS
+Sgs963GPWX8+QjWKbK7WIHS4L9kC1U79WRKrQoFccrtMtA3l5w6SxY8iJnR9hHq
aGDcG3M5XRXhYdLckxnBMZw0KMLmHn0WIBBjYGSegiJ4UICspime62VwWgn9LOMT
XW2ms5LdAoVmJfTFQNU9hN7GjRkQN3Jgqf/b8BKLOAbLZJRif9JieKvudwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBHR0KVRz/0hcU1yilI1lgrthFhMB8GA1UdIwQY
MBaAFLYCx1RqZ8DFmKdP8r9cOSMlNO/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdMSFZHcG53TVdZcDBfeXYxdzVJeVUwNzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZGQ1MmUtNmQ1ZC00ZDM3LWJmMGUt
NzIwZTg2NTI1ZGQyLzEvdGdMSFZHcG53TVdZcDBfeXYxdzVJeVUwNzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZGQ1MmUtNmQ1ZC00ZDM3LWJmMGUtNzIwZTg2NTI1ZGQy
LzEvdGdMSFZHcG53TVdZcDBfeXYxdzVJeVUwNzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxndFP5wE
U9tZ/Mcd39fKQBLpACF580KltgWRYpsG0+NE8MA+Qa0w/V8qsWVqkG/ey2Ryojz9
t2NnvNodmpV90n8NyU3twYPutKj4oey7I6PtCSjw+wJ4q2VEw4kieLaMKdv4zoUC
Nn3jU/MQh3rZa/F/qpZuZoN1mt4MbXTjiVk9NZiFUYoX3ubBSWfBvcecaYg3idwO
1pB+Hkiim/GxNhtgSfGbnx7r2tpBXbgn3lddGhTVekXl/2lhTFkWNpvDSXlN6K+o
uTMkj6LNc+4Kzgh+GAStgyyDABdoxiCBx1yhoIAE8/uFxsv1x/v5DIhOLenTYutr
fPZNEiLYXl5hTQ==
-----END CERTIFICATE-----