Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File:                     AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier:          h7PBVcQuRQsVQU2X9qAw5jFQ3TDtKAjtDnBHQ/iHhtk=
Subject key identifier:   4D:25:1B:EF:BA:55:40:53:9C:34:37:74:20:40:F9:31:50:1E:B7:93
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer:       /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial:       01962E99B8AA2B8AB3E5FFE9885D721C004A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number:          0E
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: m/rmd/zwa3HxF7C3GBGfq0MluG8+tAe5MOI4zjfxDGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b8:aa:2b:8a:b3:e5:ff:e9:88:5d:72:1c:00:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=4d251befba5540539c3437742040f931501eb793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:4a:7e:d7:47:81:f5:77:a7:82:99:ef:c0:
                    97:6d:3e:7f:7d:ea:2b:ce:1a:4d:55:07:f7:91:b8:
                    35:3d:43:41:26:42:1d:f6:bc:13:e0:f4:28:78:86:
                    77:67:a5:d4:a2:57:3c:81:3b:41:d5:58:14:3b:df:
                    1f:1b:70:64:bf:2e:13:f0:2f:80:18:5c:a6:93:c6:
                    ea:48:99:d1:7a:40:9b:c4:87:cb:a3:ed:f6:95:f7:
                    c9:a4:fe:23:64:c6:1b:13:06:aa:e7:5d:ea:41:01:
                    af:4d:74:31:8b:c5:1b:71:ba:51:0c:71:08:e9:92:
                    b8:a4:7b:ba:38:1e:53:53:5e:65:78:64:5c:5a:e6:
                    ae:e7:43:2c:85:84:f0:50:31:a3:a6:1a:ba:3f:1d:
                    5f:64:04:97:76:f5:ea:24:43:04:18:44:7e:b9:8b:
                    7c:2b:b9:4f:ee:63:4d:89:4b:fb:7d:a8:02:4d:c4:
                    99:cd:f8:b4:c2:22:bf:58:3f:c4:38:5f:b7:6d:e3:
                    59:bb:49:5c:98:1d:82:45:fc:a2:07:9a:f3:85:c3:
                    bf:ae:7b:5c:6c:3f:be:9e:9f:f3:ea:2a:64:d1:a2:
                    ec:2c:39:0f:cc:40:aa:36:b1:0b:49:13:04:de:33:
                    ca:9b:71:12:b5:9a:9e:07:1b:bc:39:18:07:53:32:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:1B:EF:BA:55:40:53:9C:34:37:74:20:40:F9:31:50:1E:B7:93
            X509v3 Authority Key Identifier:
                keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:e5:38:05:be:b8:b5:5d:ed:f0:1d:bf:2d:51:5b:c0:53:
         67:fe:e9:36:17:c5:9b:c8:e2:37:21:40:ea:43:f3:91:68:9c:
         b2:25:04:89:4d:ed:cc:0f:a8:b6:c8:1c:d5:45:55:db:4c:b8:
         e8:80:19:60:5b:61:e5:47:c3:36:3c:1f:c8:39:f7:55:34:b3:
         76:da:5e:68:ca:7c:3b:41:aa:dc:e7:4f:f3:87:a9:16:90:89:
         18:51:7d:2a:71:cf:cd:01:ec:59:d2:08:11:5b:41:59:a3:b8:
         c1:2c:09:c8:f2:23:ba:b3:03:a3:63:ab:c6:14:3a:3d:9b:19:
         b7:92:82:38:98:04:3a:e4:7c:2d:06:d5:12:97:75:17:ad:70:
         bb:30:ed:4d:de:e6:1b:fc:fe:19:fe:15:3b:4a:ca:48:5d:f9:
         dc:95:e2:7c:89:88:97:35:be:82:f4:bd:26:34:3f:9f:3b:91:
         32:43:14:4f:96:90:96:81:d3:ab:b0:d6:a8:dc:02:46:88:10:
         de:b0:ea:82:00:66:a6:cd:d1:5c:29:b5:e9:9a:1f:c0:cd:ad:
         fb:8d:af:65:71:61:84:3c:1a:90:d0:24:70:88:ef:3e:a9:d1:
         45:99:6e:83:2d:d5:b7:3f:08:3e:2b:dc:4a:1f:2c:29:23:bf:
         fc:5a:43:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbiqK4qz5f/piF1yHABKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYTRkNWJmZmE3MzYzNDg0M2U5MDNlMzdiMThmZGVlMGRh
YzU4NWIwHhcNMjUwNDEzMTAwMjI4WhcNMjUwNDE0MTAwMjI4WjAzMTEwLwYDVQQD
Eyg0ZDI1MWJlZmJhNTU0MDUzOWMzNDM3NzQyMDQwZjkzMTUwMWViNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzBKftdHgfV3p4KZ78CXbT5/feor
zhpNVQf3kbg1PUNBJkId9rwT4PQoeIZ3Z6XUolc8gTtB1VgUO98fG3Bkvy4T8C+A
GFymk8bqSJnRekCbxIfLo+32lffJpP4jZMYbEwaq513qQQGvTXQxi8UbcbpRDHEI
6ZK4pHu6OB5TU15leGRcWuau50MshYTwUDGjphq6Px1fZASXdvXqJEMEGER+uYt8
K7lP7mNNiUv7fagCTcSZzfi0wiK/WD/EOF+3beNZu0lcmB2CRfyiB5rzhcO/rntc
bD++np/z6ipk0aLsLDkPzECqNrELSRME3jPKm3EStZqeBxu8ORgHUzILEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0lG++6VUBTnDQ3dCBA+TFQHreTMB8GA1UdIwQY
MBaAFACk1b/6c2NIQ+kD43sY/e4NrFhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmU2NDAtODVhNS00NzViLTk0Y2It
ODRlZTY5ZWQ5M2E0LzEvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85NmU2NDAtODVhNS00NzViLTk0Y2ItODRlZTY5ZWQ5M2E0
LzEvQUtUVnZfcHpZMGhENlFQamV4ajk3ZzJzV0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe83lOAW+
uLVd7fAdvy1RW8BTZ/7pNhfFm8jiNyFA6kPzkWicsiUEiU3tzA+otsgc1UVV20y4
6IAZYFth5UfDNjwfyDn3VTSzdtpeaMp8O0Gq3OdP84epFpCJGFF9KnHPzQHsWdII
EVtBWaO4wSwJyPIjurMDo2OrxhQ6PZsZt5KCOJgEOuR8LQbVEpd1F61wuzDtTd7m
G/z+Gf4VO0rKSF353JXifImIlzW+gvS9JjQ/nzuRMkMUT5aQloHTq7DWqNwCRogQ
3rDqggBmps3RXCm16ZofwM2t+42vZXFhhDwakNAkcIjvPqnRRZlugy3Vtz8IPivc
Sh8sKSO//FpD2A==
-----END CERTIFICATE-----