Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File:                     A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier:          rQWPtoCza3ItvHeY6E5OjacK1WvyQspQWt+tpE41kSQ=
Subject key identifier:   58:D7:72:D4:09:92:29:A3:A4:4C:F3:74:E7:99:2A:92:3B:D6:11:A3
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer:       /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial:       01962F0661F2222F3825FC1DF6B337950987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number:          0341
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: nzxaml0Ou4u7sZW8T8yND+vbfnw8R70GbAlbaI4ssfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:61:f2:22:2f:38:25:fc:1d:f6:b3:37:95:09:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=58d772d4099229a3a44cf374e7992a923bd611a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:29:f0:df:b6:3c:cf:4e:94:1b:8d:18:92:
                    a6:b8:22:b7:06:fe:40:b7:c2:1b:0e:a3:9d:a1:fd:
                    17:72:0d:35:6f:dc:d0:d8:57:b6:48:cc:26:cb:b9:
                    72:e2:da:80:7d:ff:6a:16:11:1e:8d:04:58:a5:97:
                    6c:7c:5f:8c:13:77:90:b4:9a:a9:e4:fb:0c:01:c4:
                    b9:45:8a:ca:8c:27:12:0e:13:2d:ea:3a:93:ee:0a:
                    63:cd:9f:6f:10:af:35:14:62:26:a7:ec:0f:20:af:
                    c6:64:6a:55:2d:1e:fc:6a:3f:9c:9b:54:9d:84:3e:
                    cf:31:18:9e:f3:c9:ca:e3:3c:cd:cb:23:a6:ab:3e:
                    bb:81:6b:90:b5:56:52:5b:ca:36:a4:27:7c:30:23:
                    a6:63:cf:7f:60:38:d9:27:92:82:03:78:f9:5f:53:
                    4d:9a:ab:10:a2:a8:92:a8:16:02:4c:1d:fd:3e:a7:
                    df:d9:e4:38:71:7d:9c:d1:52:62:86:29:68:c0:28:
                    cb:25:82:fb:a6:44:2a:e7:b1:e2:26:a5:4b:f4:14:
                    bf:cf:ea:ec:47:2b:8a:eb:20:6d:96:07:b3:8f:97:
                    bf:3b:01:87:c6:74:c2:f6:4d:bb:0a:ab:87:36:fe:
                    0f:e4:aa:8d:89:30:50:82:78:d4:a3:ce:e1:bd:54:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:72:D4:09:92:29:A3:A4:4C:F3:74:E7:99:2A:92:3B:D6:11:A3
            X509v3 Authority Key Identifier:
                keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:d5:6b:16:cf:18:32:32:73:10:e2:3c:75:a1:c2:69:c0:
         66:5c:ed:43:9a:da:af:7e:c4:e4:00:63:40:4a:97:14:3d:06:
         cf:e0:96:60:f5:97:69:77:4b:92:89:5e:1a:4f:73:7c:27:8b:
         34:0f:a5:a6:8d:9e:d9:01:f7:02:45:ea:95:20:83:26:7d:22:
         11:69:99:3b:26:c0:6a:ea:6c:c8:87:5d:e0:62:c6:f7:21:29:
         00:1e:c2:ab:a4:88:61:30:f2:66:01:c6:e7:05:b8:96:8e:5a:
         65:20:bf:c5:de:5d:61:ad:c8:b5:f8:2c:0f:c4:c0:0e:9a:aa:
         bf:77:48:29:f6:32:1c:b8:e6:10:c2:9c:c5:9c:82:e0:db:08:
         b9:47:6f:c5:01:ba:93:98:66:10:57:85:dd:21:a9:a6:fa:8e:
         3b:22:82:ce:69:3b:4d:ee:81:cd:eb:ee:1c:20:15:51:12:7f:
         9d:d7:15:d8:e4:2f:e8:78:11:6a:11:6b:37:09:5e:c2:a1:95:
         2b:6c:67:19:0a:d3:ab:b9:81:71:1b:f1:2f:b4:67:e4:09:4b:
         86:b8:b7:0a:89:b0:96:cc:54:45:21:46:d7:d1:93:0a:69:ab:
         df:87:df:9b:f4:1e:c8:4f:80:be:93:c5:16:86:c2:02:7e:43:
         42:f8:42:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmHyIi84Jfwd9rM3lQmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTk5MzljZTFjNmFhOWJlYmJiNjU4MGUxNTZlZWJkODcx
ZGYzYjIwHhcNMjUwNDEzMTIwMTA5WhcNMjUwNDE0MTIwMTA5WjAzMTEwLwYDVQQD
Eyg1OGQ3NzJkNDA5OTIyOWEzYTQ0Y2YzNzRlNzk5MmE5MjNiZDYxMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOQp8N+2PM9OlBuNGJKmuCK3Bv5A
t8IbDqOdof0Xcg01b9zQ2Fe2SMwmy7ly4tqAff9qFhEejQRYpZdsfF+ME3eQtJqp
5PsMAcS5RYrKjCcSDhMt6jqT7gpjzZ9vEK81FGImp+wPIK/GZGpVLR78aj+cm1Sd
hD7PMRie88nK4zzNyyOmqz67gWuQtVZSW8o2pCd8MCOmY89/YDjZJ5KCA3j5X1NN
mqsQoqiSqBYCTB39Pqff2eQ4cX2c0VJihilowCjLJYL7pkQq57HiJqVL9BS/z+rs
RyuK6yBtlgezj5e/OwGHxnTC9k27CquHNv4P5KqNiTBQgnjUo87hvVQKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjXctQJkimjpEzzdOeZKpI71hGjMB8GA1UdIwQY
MBaAFANZk5zhxqqb67tlgOFW7r2HHfOyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAt
YTk2MmMyYjdiMTUzLzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAtYTk2MmMyYjdiMTUz
LzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXvVaxbP
GDIycxDiPHWhwmnAZlztQ5rar37E5ABjQEqXFD0Gz+CWYPWXaXdLkoleGk9zfCeL
NA+lpo2e2QH3AkXqlSCDJn0iEWmZOybAaupsyIdd4GLG9yEpAB7Cq6SIYTDyZgHG
5wW4lo5aZSC/xd5dYa3ItfgsD8TADpqqv3dIKfYyHLjmEMKcxZyC4NsIuUdvxQG6
k5hmEFeF3SGppvqOOyKCzmk7Te6BzevuHCAVURJ/ndcV2OQv6HgRahFrNwlewqGV
K2xnGQrTq7mBcRvxL7Rn5AlLhri3ComwlsxURSFG19GTCmmr34ffm/QeyE+AvpPF
FobCAn5DQvhCEg==
-----END CERTIFICATE-----