Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File:                     AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier:          +ye8Uorb8Jq3eJTeqEWUVzeU7N5v2Gdc8M5wbNpecOA=
Subject key identifier:   70:86:8A:FF:1A:F0:61:B0:75:E5:BE:A4:4B:E1:29:46:B0:3A:A2:97
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer:       /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial:       01962DF3BFB68DD1851F4128F6179D717C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number:          0250
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: 3S+Yi0uppMKKot8GY3D8kWLyfhkGH25hyHcDqnotUXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bf:b6:8d:d1:85:1f:41:28:f6:17:9d:71:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010d68a876cf5793fd00876254253d382779027b
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=70868aff1af061b075e5bea44be12946b03aa297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:36:44:b9:da:58:0d:cc:21:fb:96:e4:44:
                    05:11:a0:e8:1f:9f:46:05:59:55:1d:f2:e9:28:3a:
                    86:bf:34:9a:64:1f:a5:af:2d:fb:91:92:08:b2:36:
                    fe:cd:25:5e:cf:7c:b5:dc:67:d4:a5:62:ee:6c:95:
                    46:89:65:73:b3:3d:e5:3d:03:c1:ff:1b:7e:d4:6a:
                    e8:77:3c:46:53:51:c4:ee:dd:0f:ee:e1:bc:88:ca:
                    92:04:62:90:67:0a:1c:23:5b:a2:71:18:bf:de:f7:
                    45:a5:14:68:b2:20:4d:b1:b3:4e:18:2e:6c:6c:3b:
                    03:d6:7d:a8:fb:0a:b3:8b:82:55:ec:a7:72:63:05:
                    60:87:6a:af:46:13:22:fe:28:c0:f3:1d:76:a8:4a:
                    03:51:02:3f:c4:1b:03:0d:49:8a:98:00:25:20:29:
                    74:7d:f8:6c:2d:d8:bb:a7:3c:d3:d3:af:a8:18:92:
                    5a:a3:a0:db:94:23:18:2a:73:aa:43:e2:32:fc:73:
                    1c:0e:5c:bb:2c:8f:03:5d:b9:ac:b8:45:dd:a6:ef:
                    94:b9:b2:90:a0:4b:8b:30:97:25:51:8b:f5:b5:38:
                    5e:31:09:1f:52:cb:3e:1f:7c:d1:75:c5:6c:9a:27:
                    c3:72:07:2a:03:3c:4d:58:de:c9:48:9a:a0:b3:f4:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:8A:FF:1A:F0:61:B0:75:E5:BE:A4:4B:E1:29:46:B0:3A:A2:97
            X509v3 Authority Key Identifier:
                keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:f8:5d:c1:4b:2f:28:f2:16:6b:5d:53:4a:ec:ac:56:9e:
         7a:61:70:97:9e:99:eb:05:a1:4c:db:12:90:c8:63:01:bd:eb:
         2a:6c:b9:cf:d7:f7:79:50:b9:18:29:36:59:9a:0d:9e:2d:7f:
         bb:9e:27:72:aa:14:24:ad:87:3b:19:9f:3a:68:93:8d:cf:ad:
         d0:b9:62:ff:b3:97:2f:ea:b9:54:d8:ec:df:e6:58:cf:32:18:
         0e:03:71:36:36:94:99:6e:ae:d2:99:27:e4:fb:2f:72:96:d7:
         c7:2d:50:92:39:4a:3e:0b:c6:0c:f1:08:6e:9e:80:f5:b9:86:
         35:ae:c7:69:6e:43:4d:06:3e:07:05:af:23:41:1d:ca:d8:68:
         2f:a4:f0:b8:1b:34:c2:89:5e:6c:28:07:bb:66:b6:95:2c:23:
         0b:e7:5f:3a:04:ca:5f:dc:0a:90:25:05:d3:e6:86:f7:71:6e:
         89:3c:a2:f8:ba:c5:52:b9:4e:c8:cd:83:3b:f4:f0:37:ac:43:
         45:6d:35:67:a7:93:ca:60:e4:39:ff:1a:e6:35:a6:27:fe:6f:
         70:b8:a1:43:02:36:7d:57:d7:0f:29:5c:40:13:69:c7:bb:cd:
         65:98:6c:34:e3:4b:80:3d:05:7f:0f:ff:5a:22:73:4f:14:3d:
         75:39:e0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87+2jdGFH0Eo9hedcXxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGQ2OGE4NzZjZjU3OTNmZDAwODc2MjU0MjUzZDM4Mjc3
OTAyN2IwHhcNMjUwNDEzMDcwMTExWhcNMjUwNDE0MDcwMTExWjAzMTEwLwYDVQQD
Eyg3MDg2OGFmZjFhZjA2MWIwNzVlNWJlYTQ0YmUxMjk0NmIwM2FhMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aY2RLnaWA3MIfuW5EQFEaDoH59G
BVlVHfLpKDqGvzSaZB+lry37kZIIsjb+zSVez3y13GfUpWLubJVGiWVzsz3lPQPB
/xt+1GrodzxGU1HE7t0P7uG8iMqSBGKQZwocI1uicRi/3vdFpRRosiBNsbNOGC5s
bDsD1n2o+wqzi4JV7KdyYwVgh2qvRhMi/ijA8x12qEoDUQI/xBsDDUmKmAAlICl0
ffhsLdi7pzzT06+oGJJao6DblCMYKnOqQ+Iy/HMcDly7LI8DXbmsuEXdpu+UubKQ
oEuLMJclUYv1tTheMQkfUss+H3zRdcVsmifDcgcqAzxNWN7JSJqgs/RNqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCGiv8a8GGwdeW+pEvhKUawOqKXMB8GA1UdIwQY
MBaAFAENaKh2z1eT/QCHYlQlPTgneQJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAt
ZDY1NzI5YmIyZGFjLzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jNDlkN2QtMWM1ZC00OGZiLWIwNzAtZDY1NzI5YmIyZGFj
LzEvQVExb3FIYlBWNVA5QUlkaVZDVTlPQ2Q1QW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1z4XcFL
LyjyFmtdU0rsrFaeemFwl56Z6wWhTNsSkMhjAb3rKmy5z9f3eVC5GCk2WZoNni1/
u54ncqoUJK2HOxmfOmiTjc+t0Lli/7OXL+q5VNjs3+ZYzzIYDgNxNjaUmW6u0pkn
5PsvcpbXxy1QkjlKPgvGDPEIbp6A9bmGNa7HaW5DTQY+BwWvI0EdythoL6TwuBs0
wolebCgHu2a2lSwjC+dfOgTKX9wKkCUF0+aG93FuiTyi+LrFUrlOyM2DO/TwN6xD
RW01Z6eTymDkOf8a5jWmJ/5vcLihQwI2fVfXDylcQBNpx7vNZZhsNONLgD0Ffw//
WiJzTxQ9dTngUA==
-----END CERTIFICATE-----