Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File:                     1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier:          TDmHWZSFUoRnOqfTVg5Wm6SN/W4yjkZza7nSKINC8W0=
Subject key identifier:   FE:F9:9F:86:AE:BC:B0:A0:ED:7C:D8:A8:B0:73:1C:4D:BE:AE:6C:22
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer:       /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial:       01962DF3E273516543CDBD310B11E54F846B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number:          0C35
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: y4AjeL6oD6/iPobecS6OqTLyf/PPIT3bkrprUV2EwFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:73:51:65:43:cd:bd:31:0b:11:e5:4f:84:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=fef99f86aebcb0a0ed7cd8a8b0731c4dbeae6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:bb:9c:76:2f:f8:95:b3:d4:a3:78:eb:5c:
                    ce:91:53:cd:0f:b9:bd:54:f3:49:ed:99:60:27:fa:
                    30:36:b1:9c:32:32:d8:de:62:02:f9:91:4a:ce:f4:
                    60:48:1f:32:79:43:a4:1f:cf:51:75:0d:83:77:bf:
                    11:de:3b:21:7f:bb:2a:d1:ff:d8:39:c8:aa:3c:99:
                    06:29:e5:3b:2d:6d:fb:70:9f:9f:6f:7a:22:02:0c:
                    0b:5d:bb:42:bb:e5:07:c8:56:1d:02:63:db:06:a6:
                    d5:26:81:23:58:e7:05:81:ac:1a:22:0d:05:88:e1:
                    5f:8f:b7:37:a5:2d:06:a5:ed:18:9b:d5:74:fb:6d:
                    24:e7:f5:38:7a:1a:04:17:83:06:e0:7d:a6:8a:21:
                    bd:56:c5:ce:c9:2e:6b:0b:68:1e:a1:8a:b3:3f:de:
                    fc:cc:3b:26:7b:fe:01:80:76:62:83:26:1e:a1:8b:
                    0b:b0:bb:28:64:0f:1d:ca:bc:00:4e:f9:bb:39:6b:
                    a5:a8:32:7b:05:ec:c7:e6:5a:29:c2:4b:42:15:92:
                    67:8b:d9:ef:ad:9b:48:1e:8a:88:4b:7e:a8:de:49:
                    72:a7:9d:6b:29:81:4b:84:dd:77:b2:06:be:5c:d3:
                    d2:6e:4c:66:f6:d7:14:1b:04:bc:f1:2f:73:9c:16:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:9F:86:AE:BC:B0:A0:ED:7C:D8:A8:B0:73:1C:4D:BE:AE:6C:22
            X509v3 Authority Key Identifier:
                keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:dc:41:e0:f8:18:a9:b9:10:5d:32:d4:54:b1:29:75:ac:
         c4:f8:47:ee:6e:64:2a:5e:9b:b2:36:20:dc:b9:67:da:ff:fa:
         62:0d:eb:5b:23:ef:8a:26:2f:58:d8:c1:9a:bf:87:f2:be:4d:
         4d:ce:ca:b3:fa:e7:b4:26:9d:89:66:88:87:cb:c8:3b:f7:53:
         0e:11:0e:5c:4d:6d:b4:16:93:8b:ab:b4:99:bd:73:8e:23:e4:
         fa:f5:96:05:26:05:d2:a5:03:64:ca:28:c6:bf:f9:e1:e3:c1:
         de:31:18:ef:d8:74:bf:11:69:11:2d:1b:ec:91:c5:78:71:2f:
         a4:b4:b2:ff:33:d9:80:11:d8:f8:5a:f4:ff:a4:84:7c:46:f1:
         8b:de:40:c8:ec:31:e4:52:77:a5:07:5b:a4:c6:47:70:07:5a:
         13:60:2f:75:8f:10:4a:06:c9:6f:e0:07:74:97:10:57:b2:e9:
         8e:70:73:64:d5:cf:8f:92:42:69:9b:13:d0:11:53:73:68:12:
         0a:82:ad:de:84:38:f6:31:92:1d:ad:a4:56:2c:c6:7b:18:b3:
         3b:ba:78:26:b2:5a:c7:41:9e:c4:c3:65:1b:63:bf:96:ac:4d:
         b0:f0:7c:83:bb:40:a9:ea:f0:f7:56:8b:fa:38:07:62:89:e8:
         5d:8c:6e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+JzUWVDzb0xCxHlT4RrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjUwNDEzMDcwMTE5WhcNMjUwNDE0MDcwMTE5WjAzMTEwLwYDVQQD
EyhmZWY5OWY4NmFlYmNiMGEwZWQ3Y2Q4YThiMDczMWM0ZGJlYWU2YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJa7nHYv+JWz1KN461zOkVPND7m9
VPNJ7ZlgJ/owNrGcMjLY3mIC+ZFKzvRgSB8yeUOkH89RdQ2Dd78R3jshf7sq0f/Y
OciqPJkGKeU7LW37cJ+fb3oiAgwLXbtCu+UHyFYdAmPbBqbVJoEjWOcFgawaIg0F
iOFfj7c3pS0Gpe0Ym9V0+20k5/U4ehoEF4MG4H2miiG9VsXOyS5rC2geoYqzP978
zDsme/4BgHZigyYeoYsLsLsoZA8dyrwATvm7OWulqDJ7BezH5lopwktCFZJni9nv
rZtIHoqIS36o3klyp51rKYFLhN13sga+XNPSbkxm9tcUGwS88S9znBZIQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP75n4auvLCg7XzYqLBzHE2+rmwiMB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqD7cQeD4
GKm5EF0y1FSxKXWsxPhH7m5kKl6bsjYg3Lln2v/6Yg3rWyPviiYvWNjBmr+H8r5N
Tc7Ks/rntCadiWaIh8vIO/dTDhEOXE1ttBaTi6u0mb1zjiPk+vWWBSYF0qUDZMoo
xr/54ePB3jEY79h0vxFpES0b7JHFeHEvpLSy/zPZgBHY+Fr0/6SEfEbxi95AyOwx
5FJ3pQdbpMZHcAdaE2AvdY8QSgbJb+AHdJcQV7LpjnBzZNXPj5JCaZsT0BFTc2gS
CoKt3oQ49jGSHa2kVizGexizO7p4JrJax0GexMNlG2O/lqxNsPB8g7tAqerw91aL
+jgHYonoXYxu1g==
-----END CERTIFICATE-----