Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File:                     r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier:          YuWWsvKtCF9rHLW3TqZQIPYOPyZ6SvEuthCY4JY0gMc=
Subject key identifier:   13:F5:51:F9:29:CD:2B:7B:C2:58:E2:86:23:B9:E5:F0:9B:CD:51:4C
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer:       /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial:       01962E9897CC7EBA6E51C3326EED38C93DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number:          059E
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: 3rYzBqTEAuFcNuMVoCC0T0WNB9Cx/wutuV0qghnZNkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:cc:7e:ba:6e:51:c3:32:6e:ed:38:c9:3d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5509d77622d30868f23613c5a816e724840165
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=13f551f929cd2b7bc258e28623b9e5f09bcd514c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:cd:29:64:21:8c:97:59:06:63:68:94:7a:
                    00:b1:5e:c8:7c:24:26:4c:c5:22:24:ce:ec:cc:5f:
                    83:cc:fc:ac:36:37:d6:8e:b5:03:fb:30:8c:fe:52:
                    00:b0:ce:84:aa:f9:5c:d1:6f:fe:52:0c:1c:97:76:
                    fc:19:27:eb:6b:73:84:25:b5:88:29:aa:f9:59:d6:
                    f0:da:2b:72:ba:ed:67:fb:30:68:3f:0c:76:4c:fe:
                    52:89:28:d0:48:93:2a:34:9e:ea:84:35:e0:32:37:
                    42:2e:71:af:ec:52:0d:2c:a5:59:97:3c:9c:9b:73:
                    5e:f5:eb:3f:62:c5:7b:7f:c2:0e:80:ea:04:8f:05:
                    66:f1:d4:29:2b:4c:3c:49:fc:8a:0a:73:4c:f6:e5:
                    d6:63:e3:82:61:01:5c:fb:dc:11:d7:04:97:e2:88:
                    f2:e5:d5:36:1f:96:74:13:00:39:4d:c5:2f:b5:d7:
                    04:44:6d:f5:8e:89:72:81:4a:2f:d9:b1:36:b3:18:
                    31:07:93:ee:93:9b:06:38:72:2e:41:20:9e:d4:d2:
                    af:83:b7:a7:2e:f9:cc:24:f1:cc:94:c0:45:96:f9:
                    02:7d:54:f5:23:0e:c4:2d:a7:8d:09:ad:64:2b:3d:
                    25:bb:bc:58:9a:5e:3d:d7:5a:97:31:65:71:c5:13:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:51:F9:29:CD:2B:7B:C2:58:E2:86:23:B9:E5:F0:9B:CD:51:4C
            X509v3 Authority Key Identifier:
                keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:79:c4:49:86:6a:bc:ad:a1:4f:58:98:69:5e:e8:5a:17:
         27:34:12:e0:b1:4a:02:f6:13:b0:5d:0d:a9:1e:92:f4:44:81:
         d9:5d:e6:a1:d4:b2:b8:af:91:e9:1e:9e:46:46:bb:20:88:cd:
         f1:06:f9:50:c0:4c:e8:49:eb:da:26:0d:32:5c:82:51:37:28:
         bb:82:67:95:36:22:7d:5e:85:f2:e0:bb:88:7c:ac:a3:e7:00:
         62:a7:7b:7b:35:e3:9a:da:01:0e:d2:a5:8b:21:6c:d1:5a:96:
         fc:8f:b1:27:47:36:a5:f2:29:03:8f:1a:28:03:02:79:8b:d1:
         b1:d9:0f:41:40:7d:03:73:5e:de:00:d1:10:59:d0:f5:b5:b4:
         4f:d2:bd:bc:86:ea:c6:c8:c0:40:c5:92:3a:a3:fd:5b:bc:d9:
         fa:71:33:ac:e7:b5:55:6f:e0:ba:48:0b:97:96:90:05:25:5d:
         7e:fc:70:c8:3a:36:32:5f:fc:03:4d:8c:f1:56:ef:f6:aa:fc:
         f0:76:aa:da:58:a9:e3:3f:b5:58:32:e7:e4:5f:ce:91:de:3d:
         1b:59:d7:a0:a6:73:6e:c3:05:01:99:46:af:5b:a2:a4:32:ab:
         6c:27:99:ce:77:e7:83:cd:77:e4:4c:a1:f2:93:46:98:0d:a9:
         d2:66:d2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJfMfrpuUcMybu04yT23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTUwOWQ3NzYyMmQzMDg2OGYyMzYxM2M1YTgxNmU3MjQ4
NDAxNjUwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
EygxM2Y1NTFmOTI5Y2QyYjdiYzI1OGUyODYyM2I5ZTVmMDliY2Q1MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+nNKWQhjJdZBmNolHoAsV7IfCQm
TMUiJM7szF+DzPysNjfWjrUD+zCM/lIAsM6Eqvlc0W/+Ugwcl3b8GSfra3OEJbWI
Kar5Wdbw2ityuu1n+zBoPwx2TP5SiSjQSJMqNJ7qhDXgMjdCLnGv7FINLKVZlzyc
m3Ne9es/YsV7f8IOgOoEjwVm8dQpK0w8SfyKCnNM9uXWY+OCYQFc+9wR1wSX4ojy
5dU2H5Z0EwA5TcUvtdcERG31jolygUov2bE2sxgxB5Puk5sGOHIuQSCe1NKvg7en
LvnMJPHMlMBFlvkCfVT1Iw7ELaeNCa1kKz0lu7xYml4911qXMWVxxRNDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBP1UfkpzSt7wljihiO55fCbzVFMMB8GA1UdIwQY
MBaAFK9VCdd2ItMIaPI2E8WoFuckhAFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMt
MGFlZTZlMjM3MjQzLzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85OTcxZTEtNTdmYy00ZjhjLTlmMDMtMGFlZTZlMjM3MjQz
LzEvcjFVSjEzWWkwd2hvOGpZVHhhZ1c1eVNFQVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScF5xEmG
arytoU9YmGle6FoXJzQS4LFKAvYTsF0NqR6S9ESB2V3modSyuK+R6R6eRka7IIjN
8Qb5UMBM6Enr2iYNMlyCUTcou4JnlTYifV6F8uC7iHyso+cAYqd7ezXjmtoBDtKl
iyFs0VqW/I+xJ0c2pfIpA48aKAMCeYvRsdkPQUB9A3Ne3gDREFnQ9bW0T9K9vIbq
xsjAQMWSOqP9W7zZ+nEzrOe1VW/gukgLl5aQBSVdfvxwyDo2Ml/8A02M8Vbv9qr8
8Haq2lip4z+1WDLn5F/Okd49G1nXoKZzbsMFAZlGr1uipDKrbCeZznfng8135Eyh
8pNGmA2p0mbStg==
-----END CERTIFICATE-----