Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File:                     HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier:          GYi96d1fy0eeiJO2A/+D8pVkw29HDYN/6LK58T1hUGc=
Subject key identifier:   04:9B:F5:0C:AB:EB:05:7E:3B:E4:77:06:8C:2F:FA:72:62:2C:65:A7
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer:       /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial:       01962F74CDD124906E6E19C5CBE38BECE1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number:          FC
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: FtpE/2Mzlm0RJOQx1TX6Wq99m3zRpfCui3IwapLb45w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:d1:24:90:6e:6e:19:c5:cb:e3:8b:ec:e1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=049bf50cabeb057e3be477068c2ffa72622c65a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:6e:d5:14:8c:16:4b:42:5b:75:e4:e5:da:
                    e4:09:47:a2:4d:e9:eb:0d:70:58:be:8a:78:18:a1:
                    09:7d:34:ab:a9:72:75:c7:bb:2a:07:68:4d:3a:78:
                    92:25:e8:91:a5:45:73:26:d4:52:f2:cc:1c:a8:4a:
                    2a:f6:c5:0a:5b:a0:b5:d5:3f:cb:34:a0:08:51:89:
                    b4:99:a3:83:72:18:d3:89:e7:0b:67:9a:e0:c6:15:
                    fe:1e:6a:51:29:f3:5e:49:30:71:3e:bf:58:42:2d:
                    d7:52:bc:b1:dd:7b:f2:be:a9:18:48:35:e2:6a:a9:
                    31:ec:45:f9:c8:59:6a:7e:f7:e0:f6:8b:6f:7b:d2:
                    e0:9a:39:ec:d6:20:c2:21:f0:de:be:88:24:ce:a3:
                    50:ae:b4:5f:26:ea:3d:82:ee:02:b4:2a:bc:71:9b:
                    a2:97:25:9e:8c:f8:5b:d5:83:21:55:19:b7:06:b2:
                    50:4d:82:af:82:e1:c9:d0:07:72:fd:2e:ea:32:13:
                    ce:79:c8:5f:0a:84:3d:f9:c7:e1:c6:39:f2:85:e9:
                    54:c9:e9:13:5c:d4:3d:86:1a:d1:7e:18:1d:34:ed:
                    c8:3d:3f:2f:dc:b2:5c:55:22:06:8a:6b:3d:cb:94:
                    98:12:6c:d2:f4:9c:7a:7e:73:a8:20:8f:5f:75:f3:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:F5:0C:AB:EB:05:7E:3B:E4:77:06:8C:2F:FA:72:62:2C:65:A7
            X509v3 Authority Key Identifier:
                keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f3:4b:5c:02:99:55:c2:31:51:6a:1f:51:44:f3:dd:6d:f6:
         61:18:72:6f:78:4a:d2:b7:98:64:b0:fa:97:ec:c4:3e:80:08:
         7a:ad:3f:71:37:1e:81:6a:f2:31:f0:46:ff:3b:0b:41:58:95:
         85:90:9b:a4:7b:7e:e4:a2:4e:e0:cb:4e:cc:1e:74:67:53:bf:
         4b:d1:cf:c7:3c:79:25:3e:85:40:b0:d7:48:c7:51:67:68:43:
         f3:bc:f8:11:8f:3f:cd:76:72:e6:71:40:6d:6e:6a:99:6d:b7:
         8f:31:01:fc:08:7e:1f:c5:e7:fb:8f:ce:82:52:97:2e:fc:f7:
         a3:0d:69:36:98:b2:71:4a:9c:bd:6d:25:4b:9f:52:16:fc:f0:
         eb:ff:a4:b3:4b:80:c1:90:81:f2:52:39:da:25:0a:ff:f4:ab:
         0d:ab:40:8d:97:fb:21:62:05:3c:fd:d1:47:6f:04:a9:59:55:
         fd:63:8c:93:0c:f2:7b:ab:26:eb:c3:65:48:be:c4:07:17:ea:
         7b:01:54:fe:d6:b7:12:75:cc:34:63:1e:5d:bb:0f:07:0d:75:
         12:4d:e6:19:f0:c7:2c:1f:eb:08:ab:2f:d8:93:3a:fb:ed:9a:
         69:d9:5a:75:6e:ff:41:a6:03:9c:94:43:c7:47:be:ef:1e:d8:
         a5:14:d3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdM3RJJBubhnFy+OL7OHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGU4ZGY1YzAzMTEwNzExOGRhNjFmMjlhYjRmNDE5ZDI5
ZDVhOGEwHhcNMjUwNDEzMTQwMTQ2WhcNMjUwNDE0MTQwMTQ2WjAzMTEwLwYDVQQD
EygwNDliZjUwY2FiZWIwNTdlM2JlNDc3MDY4YzJmZmE3MjYyMmM2NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQBu1RSMFktCW3Xk5drkCUeiTenr
DXBYvop4GKEJfTSrqXJ1x7sqB2hNOniSJeiRpUVzJtRS8swcqEoq9sUKW6C11T/L
NKAIUYm0maODchjTiecLZ5rgxhX+HmpRKfNeSTBxPr9YQi3XUryx3XvyvqkYSDXi
aqkx7EX5yFlqfvfg9otve9Lgmjns1iDCIfDevogkzqNQrrRfJuo9gu4CtCq8cZui
lyWejPhb1YMhVRm3BrJQTYKvguHJ0Ady/S7qMhPOechfCoQ9+cfhxjnyhelUyekT
XNQ9hhrRfhgdNO3IPT8v3LJcVSIGims9y5SYEmzS9Jx6fnOoII9fdfOTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASb9Qyr6wV+O+R3Bowv+nJiLGWnMB8GA1UdIwQY
MBaAFB2OjfXAMRBxGNph8pq09BnSnVqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUt
YjFkMzhiMTNmZGE5LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUtYjFkMzhiMTNmZGE5
LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/NLXAKZ
VcIxUWofUUTz3W32YRhyb3hK0reYZLD6l+zEPoAIeq0/cTcegWryMfBG/zsLQViV
hZCbpHt+5KJO4MtOzB50Z1O/S9HPxzx5JT6FQLDXSMdRZ2hD87z4EY8/zXZy5nFA
bW5qmW23jzEB/Ah+H8Xn+4/OglKXLvz3ow1pNpiycUqcvW0lS59SFvzw6/+ks0uA
wZCB8lI52iUK//SrDatAjZf7IWIFPP3RR28EqVlV/WOMkwzye6sm68NlSL7EBxfq
ewFU/ta3EnXMNGMeXbsPBw11Ek3mGfDHLB/rCKsv2JM6++2aadladW7/QaYDnJRD
x0e+7x7YpRTTyw==
-----END CERTIFICATE-----