Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File:                     IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier:          6R6lnQMcALsE3GQOftH9zv86XfuU5HQsWesnY0bjpIc=
Subject key identifier:   BD:07:42:E8:AE:66:A0:72:E6:EE:28:24:C5:F4:00:F2:A9:06:C4:59
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer:       /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial:       01962F3DD493A3706C063327CC1E194087E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number:          0299
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: vz7bSWAW/7pyg2KQtbxRrSz78ilDfK4jcAVxP6icmYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d4:93:a3:70:6c:06:33:27:cc:1e:19:40:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=bd0742e8ae66a072e6ee2824c5f400f2a906c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:df:50:24:2c:03:09:9c:7a:ae:97:d1:5d:
                    67:b0:60:d3:16:d8:08:23:70:27:4c:b8:ea:e2:f5:
                    d4:42:f5:1c:bd:4b:cb:ca:ad:8b:8e:63:80:e7:e6:
                    8a:d9:18:30:5d:87:5c:1d:e0:a8:dd:b9:f9:97:26:
                    37:d8:15:8f:8c:cb:fc:80:9c:4d:66:ed:d4:1b:a5:
                    78:71:21:e0:fe:67:fa:0d:76:a1:a0:60:a1:21:fe:
                    ed:3e:15:04:93:88:e7:b6:dd:ed:4c:09:1e:b3:a3:
                    e4:5c:ad:73:19:a2:f8:95:27:6f:5b:34:e5:ab:63:
                    1c:55:43:d5:aa:0a:72:d9:bb:d7:7b:bc:33:e6:d5:
                    4d:65:45:5b:8e:b1:9a:fe:8d:74:41:5b:0f:0c:da:
                    18:f4:79:6e:ad:2b:29:fe:82:70:ba:80:c6:9f:be:
                    61:a2:83:f1:18:d8:2f:bf:6f:1f:b7:16:80:60:eb:
                    98:1b:9d:33:04:ba:96:03:02:e5:bf:b9:ea:8c:22:
                    49:8e:44:26:04:71:d4:d6:58:52:26:a6:1d:e5:11:
                    84:0f:bc:be:60:14:0d:ba:b1:ae:7d:ed:c3:eb:d8:
                    05:49:54:f7:15:66:22:9a:ac:fe:1e:54:b0:21:e7:
                    61:84:e0:b8:fd:a0:39:67:12:c2:fe:6a:33:b7:cc:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:42:E8:AE:66:A0:72:E6:EE:28:24:C5:F4:00:F2:A9:06:C4:59
            X509v3 Authority Key Identifier:
                keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:09:f4:12:cd:d7:0e:55:ee:06:2e:a2:f0:40:e0:b7:7a:
         d1:4c:71:fe:3f:e7:b2:2d:d0:cf:14:51:da:3f:0b:ef:cd:82:
         9d:bd:c1:83:75:9b:e6:5f:99:a5:c5:87:b6:52:7d:77:21:fb:
         82:cc:87:7f:41:fb:a9:94:35:3d:36:1d:01:f6:c2:e7:8e:25:
         36:2c:3e:34:22:72:7e:ae:59:4b:d3:c6:e5:f7:e4:06:6d:69:
         2f:b3:13:24:f9:98:96:b0:d8:f5:0f:19:19:95:24:1d:51:ea:
         35:17:58:e6:42:b9:de:26:6d:35:db:ba:d2:38:a0:d6:ee:5b:
         f4:76:75:2e:4e:94:dd:af:82:bc:db:aa:df:b4:6a:b4:88:d2:
         5f:f2:9b:d7:b3:ca:43:d0:8f:9c:4a:9f:27:57:91:00:5e:d5:
         40:71:05:7f:9e:1c:b1:16:51:fd:80:b0:da:b6:37:8f:d9:39:
         4b:80:19:a1:59:b2:1b:2c:ff:4c:c2:4a:ce:15:9f:46:aa:3a:
         ee:0e:5d:95:c8:1a:54:8b:4b:ec:45:ef:4c:cb:06:7a:67:b1:
         3c:55:20:3f:56:23:32:f1:05:6b:1e:3a:98:d1:1d:d1:59:04:
         1c:ff:a6:51:a3:dc:7f:3f:c1:45:27:fe:ed:e6:69:43:48:0f:
         30:ea:87:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdSTo3BsBjMnzB4ZQIfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjc1MDY5YmQ1NmVmYzUxNzAzODNlZDMxY2FkMjI0NjRm
ZGYwMzAwHhcNMjUwNDEzMTMwMTQzWhcNMjUwNDE0MTMwMTQzWjAzMTEwLwYDVQQD
EyhiZDA3NDJlOGFlNjZhMDcyZTZlZTI4MjRjNWY0MDBmMmE5MDZjNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbrfUCQsAwmceq6X0V1nsGDTFtgI
I3AnTLjq4vXUQvUcvUvLyq2LjmOA5+aK2RgwXYdcHeCo3bn5lyY32BWPjMv8gJxN
Zu3UG6V4cSHg/mf6DXahoGChIf7tPhUEk4jntt3tTAkes6PkXK1zGaL4lSdvWzTl
q2McVUPVqgpy2bvXe7wz5tVNZUVbjrGa/o10QVsPDNoY9HlurSsp/oJwuoDGn75h
ooPxGNgvv28ftxaAYOuYG50zBLqWAwLlv7nqjCJJjkQmBHHU1lhSJqYd5RGED7y+
YBQNurGufe3D69gFSVT3FWYimqz+HlSwIedhhOC4/aA5ZxLC/mozt8wRfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0HQuiuZqBy5u4oJMX0APKpBsRZMB8GA1UdIwQY
MBaAFCD3UGm9Vu/FFwOD7THK0iRk/fAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWNkNzAtNTBjZC00NmJkLThlMDYt
Yjk3MDVkN2QzNTc5LzEvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWNkNzAtNTBjZC00NmJkLThlMDYtYjk3MDVkN2QzNTc5
LzEvSVBkUWFiMVc3OFVYQTRQdE1jclNKR1Q5OERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI0J9BLN
1w5V7gYuovBA4Ld60Uxx/j/nsi3QzxRR2j8L782Cnb3Bg3Wb5l+ZpcWHtlJ9dyH7
gsyHf0H7qZQ1PTYdAfbC544lNiw+NCJyfq5ZS9PG5ffkBm1pL7MTJPmYlrDY9Q8Z
GZUkHVHqNRdY5kK53iZtNdu60jig1u5b9HZ1Lk6U3a+CvNuq37RqtIjSX/Kb17PK
Q9CPnEqfJ1eRAF7VQHEFf54csRZR/YCw2rY3j9k5S4AZoVmyGyz/TMJKzhWfRqo6
7g5dlcgaVItL7EXvTMsGemexPFUgP1YjMvEFax46mNEd0VkEHP+mUaPcfz/BRSf+
7eZpQ0gPMOqHAQ==
-----END CERTIFICATE-----