Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File:                     PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier:          n4iGtZsay5pnz7EBXXKnVdlsLHX39mYsCL7h1l3LB8Y=
Subject key identifier:   CE:16:FF:9F:44:6E:64:3F:47:9A:39:A2:EC:EE:D5:03:6A:DB:69:44
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer:       /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial:       01962E98823566F26362DB17A5ADA1156A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number:          12D8
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: 9tTcGqxGyaSfeRUmKTGTtNmqPSric4K6h7I2wV0nMh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:82:35:66:f2:63:62:db:17:a5:ad:a1:15:6a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=ce16ff9f446e643f479a39a2eceed5036adb6944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:e0:6e:e9:45:1f:80:18:32:2a:96:47:00:
                    0b:41:4f:87:3d:47:af:9e:df:da:80:ea:ee:a2:d6:
                    83:1b:cf:99:ac:38:45:7f:a8:12:9d:fe:b0:62:7e:
                    52:f5:d8:63:2b:ed:a6:c8:23:14:1d:d5:55:5b:bf:
                    c9:bd:5b:f9:f6:91:ed:2e:2e:85:a8:76:1a:29:70:
                    19:58:ef:66:f0:fe:59:b3:1c:6e:c2:d4:ee:3a:67:
                    e5:fe:7b:76:f8:f7:73:fd:e8:a7:56:bf:5d:da:ca:
                    a7:6a:aa:a6:0d:36:0c:dd:1a:9c:63:db:41:fa:e7:
                    0e:c1:cf:b5:95:61:91:d6:c1:61:9e:09:df:11:bd:
                    d1:59:fd:4e:58:11:b5:53:c4:06:de:65:ee:11:9a:
                    ca:b5:ac:f3:8b:ca:5e:63:b8:05:62:0d:a5:72:7b:
                    af:c6:19:36:9f:65:76:cc:6c:58:29:29:c2:b3:06:
                    70:22:e5:10:f7:aa:2c:cc:c5:1a:ce:31:12:68:69:
                    a5:44:43:8b:c4:de:0f:9e:5e:bb:bb:3b:b7:8c:0c:
                    62:b4:14:0a:cc:a9:af:74:be:14:f3:5a:a6:79:d9:
                    40:43:d2:80:39:d6:60:c5:03:08:d4:f4:f0:b8:1a:
                    01:87:ca:83:47:be:f3:2f:26:84:5f:99:8b:eb:28:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:FF:9F:44:6E:64:3F:47:9A:39:A2:EC:EE:D5:03:6A:DB:69:44
            X509v3 Authority Key Identifier:
                keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:5a:33:3c:be:d6:d8:b9:bd:a6:4b:28:f6:91:e2:67:06:
         8b:68:34:e5:b2:11:cf:78:fe:51:47:cc:84:16:e3:e8:a8:af:
         b1:df:8e:3e:4a:89:1d:73:40:7f:d3:68:41:3c:0a:28:96:5e:
         54:e5:9b:f2:cd:a5:e2:ce:2f:da:22:77:91:f1:c1:b7:d9:f1:
         b6:8e:27:ae:cf:d5:fe:1a:3a:94:fa:01:a9:b1:0d:e8:a8:d5:
         89:11:07:71:bc:ae:33:9c:16:30:4c:05:54:db:7b:bd:43:f1:
         e1:59:f2:13:5b:0c:19:41:a3:b0:50:0f:45:2d:05:36:ba:d0:
         7e:b7:d7:6b:73:15:de:f3:f6:15:59:78:8a:61:d0:73:55:70:
         9c:2b:44:33:90:1c:43:be:a7:6e:7e:21:9c:de:b0:40:db:fe:
         75:1c:1a:33:cd:de:01:51:2c:60:4e:74:6a:3a:1f:68:b8:6f:
         b7:37:ad:c4:85:f5:1a:bb:15:09:d3:8d:69:5e:08:57:42:97:
         dd:0c:69:90:b7:3f:45:76:d3:48:25:6d:21:97:46:18:2e:5c:
         66:21:43:e5:15:6d:36:67:71:b4:ea:38:f5:19:fa:35:60:b5:
         6b:cd:e5:e5:3d:15:df:d5:ea:a5:d5:a9:25:68:32:2c:bc:30:
         3c:56:54:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumII1ZvJjYtsXpa2hFWpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Q2OWFiNjJjOGQ4ODI1ZjJiYTRiNDgzZDBlMzkzZTI1
MzRlZWYwHhcNMjUwNDEzMTAwMTA4WhcNMjUwNDE0MTAwMTA4WjAzMTEwLwYDVQQD
EyhjZTE2ZmY5ZjQ0NmU2NDNmNDc5YTM5YTJlY2VlZDUwMzZhZGI2OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygTgbulFH4AYMiqWRwALQU+HPUev
nt/agOruotaDG8+ZrDhFf6gSnf6wYn5S9dhjK+2myCMUHdVVW7/JvVv59pHtLi6F
qHYaKXAZWO9m8P5ZsxxuwtTuOmfl/nt2+Pdz/einVr9d2sqnaqqmDTYM3RqcY9tB
+ucOwc+1lWGR1sFhngnfEb3RWf1OWBG1U8QG3mXuEZrKtazzi8peY7gFYg2lcnuv
xhk2n2V2zGxYKSnCswZwIuUQ96oszMUazjESaGmlREOLxN4Pnl67uzu3jAxitBQK
zKmvdL4U81qmedlAQ9KAOdZgxQMI1PTwuBoBh8qDR77zLyaEX5mL6ygl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4W/59EbmQ/R5o5ouzu1QNq22lEMB8GA1UdIwQY
MBaAFD09aatiyNiCXyuktIPQ45PiU07vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMTIwNWItMDcyZi00NmMxLTgxNzAt
MDcwNWJjY2QxZjJhLzEvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kMTIwNWItMDcyZi00NmMxLTgxNzAtMDcwNWJjY2QxZjJh
LzEvUFQxcHEyTEkySUpmSzZTMGc5RGprLUpUVHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs1aMzy+
1ti5vaZLKPaR4mcGi2g05bIRz3j+UUfMhBbj6Kivsd+OPkqJHXNAf9NoQTwKKJZe
VOWb8s2l4s4v2iJ3kfHBt9nxto4nrs/V/ho6lPoBqbEN6KjViREHcbyuM5wWMEwF
VNt7vUPx4VnyE1sMGUGjsFAPRS0FNrrQfrfXa3MV3vP2FVl4imHQc1VwnCtEM5Ac
Q76nbn4hnN6wQNv+dRwaM83eAVEsYE50ajofaLhvtzetxIX1GrsVCdONaV4IV0KX
3QxpkLc/RXbTSCVtIZdGGC5cZiFD5RVtNmdxtOo49Rn6NWC1a83l5T0V39XqpdWp
JWgyLLwwPFZUJw==
-----END CERTIFICATE-----