Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
File:                     uVZnsVy6fKp0FSdIRHOE--A7iTo.mft (raw, json)
Hash identifier:          DIEl22ntZGkH3xaOyeo6wqGMB+o4hLrGZaMdGebwv68=
Subject key identifier:   3B:EC:E5:F4:7F:3F:B6:9C:5E:7C:33:3A:FC:3A:A5:7B:A6:36:AE:D1
Authority key identifier: B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
Certificate issuer:       /CN=b95667b15cba7caa74152748447384fbe03b893a
Certificate serial:       01962E99115CCCD5C70FA3A1AE71674DFAE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
Manifest number:          079B
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: uVZnsVy6fKp0FSdIRHOE--A7iTo.crl (hash: koDEL/ZDJ1KP2+h54Lymg06JucaOhTEQsMbabPALgbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:5c:cc:d5:c7:0f:a3:a1:ae:71:67:4d:fa:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b95667b15cba7caa74152748447384fbe03b893a
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=3bece5f47f3fb69c5e7c333afc3aa57ba636aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a5:09:a4:bb:6f:f4:f0:00:9c:d5:8f:d6:d2:
                    86:dc:29:47:f4:f3:13:63:22:f3:14:d8:54:9a:9a:
                    46:26:b6:e5:87:33:8a:6d:02:14:49:69:4d:f7:c4:
                    45:9c:29:31:c6:cd:06:a5:51:0b:6e:45:5b:e1:97:
                    0e:7d:12:30:88:a0:8a:eb:a3:61:4c:16:b4:40:31:
                    78:76:90:3d:f9:a9:17:6d:00:22:d6:d6:7a:b5:d4:
                    fd:82:0e:ab:ab:80:fb:a5:f4:c1:4f:47:72:9f:b4:
                    65:6a:f6:8a:11:21:9f:17:b3:37:ab:bf:26:99:ba:
                    f4:61:67:1e:bd:af:37:c5:57:ee:2a:45:73:c2:01:
                    81:f7:d2:3d:2a:15:d4:a7:95:e7:dd:56:88:d5:47:
                    a6:a4:1c:d6:89:b0:3b:d6:03:78:24:4f:ae:6b:01:
                    cd:09:13:1a:b5:06:24:13:80:53:b9:68:22:78:78:
                    bb:0b:4c:fd:a6:84:7e:04:10:ff:c6:07:44:84:4e:
                    a5:f0:48:34:88:8d:42:15:5c:69:a1:d6:79:10:6a:
                    98:3b:64:6b:2a:27:07:de:ec:59:94:e6:94:e1:f2:
                    b2:40:b0:35:eb:69:82:bf:8d:30:1e:cb:98:43:5b:
                    07:2b:41:5c:86:e4:c1:7a:21:19:8f:3b:aa:aa:19:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:E5:F4:7F:3F:B6:9C:5E:7C:33:3A:FC:3A:A5:7B:A6:36:AE:D1
            X509v3 Authority Key Identifier:
                keyid:B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:9d:bf:f1:fb:4e:29:1d:44:f0:f7:24:d0:39:b3:35:76:
         73:a7:bf:52:d3:33:8c:01:c0:37:e8:d8:d8:6a:89:43:ae:8b:
         4e:99:fe:8e:e9:c4:29:dd:83:c2:66:8a:65:ae:e1:2c:02:65:
         99:4a:47:26:48:f3:b0:23:ad:fa:5a:b8:50:a5:7a:46:57:4c:
         63:1b:19:d3:22:d3:f1:b4:ac:62:c6:2a:5b:15:71:87:c9:7d:
         94:e9:7a:82:a4:84:18:05:50:cb:de:0c:64:d1:5c:da:00:06:
         0c:b0:ce:dd:38:68:53:98:cb:ff:12:01:db:19:2a:f4:6d:ae:
         aa:25:48:a1:f2:f6:2f:5a:bd:e2:06:ab:b3:e5:b5:2b:51:9d:
         e0:1c:24:17:48:d4:99:a2:6c:1c:57:83:2e:4e:fa:51:a6:65:
         39:0e:fa:20:c7:5f:6c:f5:99:fd:ab:2d:6f:ae:c5:af:70:4a:
         f8:d1:c6:10:62:68:0e:2b:07:2c:2a:34:d4:87:31:14:91:da:
         cb:30:ec:5f:5c:bc:f1:31:57:0e:9c:ac:1e:bd:5c:70:ae:10:
         4a:de:de:cc:2c:12:0b:dd:4c:fa:7d:bd:a3:48:7e:fc:da:8e:
         11:9d:f7:6b:24:ec:a6:f7:85:6f:d7:38:de:45:5a:ee:b2:70:
         76:c6:2e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRFczNXHD6OhrnFnTfrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NTY2N2IxNWNiYTdjYWE3NDE1Mjc0ODQ0NzM4NGZiZTAz
Yjg5M2EwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
EygzYmVjZTVmNDdmM2ZiNjljNWU3YzMzM2FmYzNhYTU3YmE2MzZhZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36UJpLtv9PAAnNWP1tKG3ClH9PMT
YyLzFNhUmppGJrblhzOKbQIUSWlN98RFnCkxxs0GpVELbkVb4ZcOfRIwiKCK66Nh
TBa0QDF4dpA9+akXbQAi1tZ6tdT9gg6rq4D7pfTBT0dyn7RlavaKESGfF7M3q78m
mbr0YWceva83xVfuKkVzwgGB99I9KhXUp5Xn3VaI1UempBzWibA71gN4JE+uawHN
CRMatQYkE4BTuWgieHi7C0z9poR+BBD/xgdEhE6l8Eg0iI1CFVxpodZ5EGqYO2Rr
KicH3uxZlOaU4fKyQLA162mCv40wHsuYQ1sHK0FchuTBeiEZjzuqqhl5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvs5fR/P7acXnwzOvw6pXumNq7RMB8GA1UdIwQY
MBaAFLlWZ7FcunyqdBUnSERzhPvgO4k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NDBjMDMtYmE4My00OTcxLTg5ODEt
NzQ0ZGNkMDE0ZmE0LzEvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81NDBjMDMtYmE4My00OTcxLTg5ODEtNzQ0ZGNkMDE0ZmE0
LzEvdVZabnNWeTZmS3AwRlNkSVJIT0UtLUE3aVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuydv/H7
TikdRPD3JNA5szV2c6e/UtMzjAHAN+jY2GqJQ66LTpn+junEKd2DwmaKZa7hLAJl
mUpHJkjzsCOt+lq4UKV6RldMYxsZ0yLT8bSsYsYqWxVxh8l9lOl6gqSEGAVQy94M
ZNFc2gAGDLDO3ThoU5jL/xIB2xkq9G2uqiVIofL2L1q94gars+W1K1Gd4BwkF0jU
maJsHFeDLk76UaZlOQ76IMdfbPWZ/astb67Fr3BK+NHGEGJoDisHLCo01IcxFJHa
yzDsX1y88TFXDpysHr1ccK4QSt7ezCwSC91M+n29o0h+/NqOEZ33ayTspveFb9c4
3kVa7rJwdsYuAg==
-----END CERTIFICATE-----