Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
File:                     Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft (raw, json)
Hash identifier:          gQguJ5QJi4FbRDlvDVaSy4eTj64jkMbQX+99qTUcqjc=
Subject key identifier:   FA:07:0D:C2:CA:9B:02:49:B9:48:8B:CE:1B:A1:BF:6A:04:E3:57:EE
Authority key identifier: 16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E
Certificate issuer:       /CN=164c2ad7d60ecbf89300e3e7d4ec85f14931466e
Certificate serial:       01962E98FA255BEA78816300C6AD254B35E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft
Manifest number:          05A0
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: Fkwq19YOy_iTAOPn1OyF8UkxRm4.crl (hash: uvYPtzL4ILUBv8dUbKZKLsLbpRzvDu+FOum92PBpkoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fa:25:5b:ea:78:81:63:00:c6:ad:25:4b:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164c2ad7d60ecbf89300e3e7d4ec85f14931466e
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=fa070dc2ca9b0249b9488bce1ba1bf6a04e357ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:dc:64:b4:30:76:d1:83:b6:fe:7f:52:2f:
                    35:1d:40:2e:49:56:07:58:6e:94:ed:7f:45:45:ac:
                    82:ae:d1:a0:6c:9a:a7:03:8f:cc:80:72:d0:76:dc:
                    98:4d:94:59:86:6f:88:11:56:0d:14:6c:29:11:b4:
                    f2:2c:84:96:02:9f:2e:7f:0b:d1:be:b6:e6:3d:20:
                    01:66:e1:3d:83:2d:46:e9:b1:1a:4a:e4:4c:f4:9d:
                    06:e1:ed:d0:03:56:f4:d8:32:2e:0d:8f:e6:1e:23:
                    0b:f8:ad:89:81:6d:73:53:78:6e:d7:50:c0:fc:c2:
                    2b:68:0a:6a:8e:a1:4d:47:c2:d0:d2:a9:1e:ef:b2:
                    dd:1d:80:b9:dc:86:00:d0:00:20:5f:6f:10:0e:50:
                    06:fc:ec:3f:cf:99:13:7f:45:d3:68:70:f6:f4:94:
                    78:78:dd:0c:d1:76:60:42:c2:51:91:43:8d:8a:dc:
                    e2:27:54:81:63:d2:9b:5f:5c:3c:fe:88:fc:1b:9e:
                    83:fc:50:33:52:14:37:cd:e6:8e:3d:8e:f1:18:cf:
                    08:64:41:07:0a:0d:15:1b:87:e0:b2:f9:a4:d6:4c:
                    81:bb:3a:a7:6b:eb:43:f2:d4:3f:3f:84:2b:d6:c2:
                    64:fb:51:1b:f4:53:57:81:32:80:c2:41:b8:ff:c0:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:07:0D:C2:CA:9B:02:49:B9:48:8B:CE:1B:A1:BF:6A:04:E3:57:EE
            X509v3 Authority Key Identifier:
                keyid:16:4C:2A:D7:D6:0E:CB:F8:93:00:E3:E7:D4:EC:85:F1:49:31:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkwq19YOy_iTAOPn1OyF8UkxRm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dad127-0378-44eb-b66d-77405ce5a728/1/Fkwq19YOy_iTAOPn1OyF8UkxRm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:ec:5e:df:30:b1:1f:6e:90:07:eb:ab:83:e9:25:c4:46:
         b2:42:05:db:74:74:d6:4d:bc:da:ee:a4:9f:14:66:60:7b:a3:
         e5:48:2a:1e:44:8f:1b:da:96:fb:c8:b8:fd:23:7e:8c:6f:eb:
         6d:3b:06:6e:9f:cc:2f:a2:96:65:c5:7b:6e:3e:a7:ea:fa:24:
         6f:78:14:50:c5:c9:55:85:1d:46:36:1a:60:2e:85:9d:c9:72:
         7f:42:95:ff:01:7b:27:85:c5:06:5f:49:3d:57:e9:eb:bb:a7:
         e6:8b:52:79:25:e1:ba:30:21:5e:ac:86:80:b1:5d:0a:94:15:
         d9:4d:59:9a:f8:13:fc:f0:53:06:50:4b:a8:f2:9a:59:b3:12:
         5f:8a:bf:65:0d:e3:5a:82:7a:ad:f5:6f:97:39:94:04:6a:16:
         b6:3e:19:f6:07:99:8e:61:fb:c3:c2:29:d4:8a:bd:b4:b6:2f:
         fc:cb:45:fe:3e:50:af:15:09:49:da:4e:1a:86:d0:ef:76:e3:
         f3:66:58:90:df:45:e2:86:8c:94:5e:76:1a:86:d6:dc:b9:c3:
         e8:53:95:03:da:bc:67:d7:05:16:6b:31:3e:03:79:75:2d:23:
         e0:ad:a4:64:8c:bf:ce:bf:01:2c:1a:74:d2:16:65:d2:26:09:
         b9:65:b5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPolW+p4gWMAxq0lSzXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NGMyYWQ3ZDYwZWNiZjg5MzAwZTNlN2Q0ZWM4NWYxNDkz
MTQ2NmUwHhcNMjUwNDEzMTAwMTM5WhcNMjUwNDE0MTAwMTM5WjAzMTEwLwYDVQQD
EyhmYTA3MGRjMmNhOWIwMjQ5Yjk0ODhiY2UxYmExYmY2YTA0ZTM1N2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV3cZLQwdtGDtv5/Ui81HUAuSVYH
WG6U7X9FRayCrtGgbJqnA4/MgHLQdtyYTZRZhm+IEVYNFGwpEbTyLISWAp8ufwvR
vrbmPSABZuE9gy1G6bEaSuRM9J0G4e3QA1b02DIuDY/mHiML+K2JgW1zU3hu11DA
/MIraApqjqFNR8LQ0qke77LdHYC53IYA0AAgX28QDlAG/Ow/z5kTf0XTaHD29JR4
eN0M0XZgQsJRkUONitziJ1SBY9KbX1w8/oj8G56D/FAzUhQ3zeaOPY7xGM8IZEEH
Cg0VG4fgsvmk1kyBuzqna+tD8tQ/P4Qr1sJk+1Eb9FNXgTKAwkG4/8CtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoHDcLKmwJJuUiLzhuhv2oE41fuMB8GA1UdIwQY
MBaAFBZMKtfWDsv4kwDj59TshfFJMUZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmt3cTE5WU95X2lUQU9QbjFPeUY4VWt4Um00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYWQxMjctMDM3OC00NGViLWI2NmQt
Nzc0MDVjZTVhNzI4LzEvRmt3cTE5WU95X2lUQU9QbjFPeUY4VWt4Um00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kYWQxMjctMDM3OC00NGViLWI2NmQtNzc0MDVjZTVhNzI4
LzEvRmt3cTE5WU95X2lUQU9QbjFPeUY4VWt4Um00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ7sXt8w
sR9ukAfrq4PpJcRGskIF23R01k282u6knxRmYHuj5UgqHkSPG9qW+8i4/SN+jG/r
bTsGbp/ML6KWZcV7bj6n6vokb3gUUMXJVYUdRjYaYC6Fnclyf0KV/wF7J4XFBl9J
PVfp67un5otSeSXhujAhXqyGgLFdCpQV2U1ZmvgT/PBTBlBLqPKaWbMSX4q/ZQ3j
WoJ6rfVvlzmUBGoWtj4Z9geZjmH7w8Ip1Iq9tLYv/MtF/j5QrxUJSdpOGobQ73bj
82ZYkN9F4oaMlF52GobW3LnD6FOVA9q8Z9cFFmsxPgN5dS0j4K2kZIy/zr8BLBp0
0hZl0iYJuWW1Mg==
-----END CERTIFICATE-----