Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File:                     F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier:          s1+/hCUDRW3wr4Ga+Q1ETBDt/di4D/7voiSxAb+io5I=
Subject key identifier:   01:78:F3:2B:02:A9:B1:47:14:C9:7E:1E:4C:B2:38:D2:18:E0:44:FF
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer:       /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial:       01962F06EC67F1A433FB36D87FD78D26C3B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: 8Cb/3LtWm2yFrJ3YsrGNWjMjj0/mo8IaQUi+7238yRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:67:f1:a4:33:fb:36:d8:7f:d7:8d:26:c3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=0178f32b02a9b14714c97e1e4cb238d218e044ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:06:56:0a:f2:5b:9b:24:b2:af:55:5b:88:
                    81:cf:ac:3a:05:aa:dd:f5:b5:c2:61:3c:d3:16:07:
                    cb:49:16:7d:7b:2f:f9:e7:58:b3:ab:73:d5:26:be:
                    41:2e:de:d5:69:bc:b5:2c:eb:fa:cd:ab:f0:39:85:
                    28:57:4e:b1:27:b6:95:3d:c4:6b:4c:cb:45:ff:a2:
                    9f:a8:c7:16:e9:50:01:7d:69:f5:a1:71:84:00:ce:
                    4f:60:7f:fd:06:27:c8:28:7b:8a:05:8c:46:04:10:
                    ec:f8:fc:bf:6a:06:c0:19:5d:38:18:5f:b2:44:b5:
                    c4:33:e4:33:8a:89:20:93:89:51:48:73:74:3a:36:
                    fc:1c:92:23:6c:f6:7d:c3:47:cf:86:cd:2e:24:d3:
                    c8:63:33:4f:6f:8a:e3:c0:15:33:1e:8e:ff:63:64:
                    fe:02:0a:9d:cc:0f:b8:70:c5:d2:25:cb:72:54:b9:
                    40:91:06:0a:04:12:ee:77:a3:09:cb:cb:e6:50:bf:
                    f0:8f:f2:df:95:45:6c:59:75:8b:3b:23:e0:d0:26:
                    57:4c:8d:73:6e:f0:c2:9a:03:17:f3:ed:65:a6:da:
                    cf:86:4b:4c:77:a6:2e:bd:88:7e:f4:d1:32:0b:97:
                    0c:10:6b:8e:c1:92:29:85:cd:a5:5c:65:23:7c:c5:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:78:F3:2B:02:A9:B1:47:14:C9:7E:1E:4C:B2:38:D2:18:E0:44:FF
            X509v3 Authority Key Identifier:
                keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:af:b6:dc:dd:5b:26:ef:e5:b7:93:17:0b:5f:52:03:8b:cc:
         d3:54:05:6c:9c:ad:a3:bc:60:20:37:62:be:cb:da:c1:91:38:
         ca:46:75:6a:9c:3d:b9:6d:18:9a:fc:cd:2a:24:f2:83:3e:36:
         da:a6:66:79:eb:50:f3:02:bd:73:cc:4f:71:07:aa:3b:d5:b3:
         86:ab:d7:a1:04:55:24:20:5a:87:d6:b8:ab:59:a3:f7:8c:ae:
         49:fa:c2:6f:4c:09:0f:65:c3:e1:c2:b8:32:c0:f4:08:d1:4b:
         1b:24:8b:04:5b:5e:b5:9c:d7:8d:31:59:94:7d:a0:56:ec:02:
         05:ef:6d:42:a3:03:12:11:c9:ad:c4:94:93:80:32:8d:13:46:
         45:f8:e4:a6:53:64:c8:7a:0d:44:9e:bb:e5:19:c9:07:f4:fb:
         b4:cb:f3:99:5f:b8:00:e5:95:e9:ca:73:1f:41:9b:be:52:86:
         9e:43:60:3d:ea:5d:58:12:10:23:26:2b:4f:53:e8:0a:3e:44:
         a5:75:01:98:26:da:99:19:a9:73:a1:36:a9:19:6c:cc:40:4b:
         be:40:8b:8d:66:8f:86:0f:43:41:22:31:ec:c1:55:3f:78:c2:
         70:c1:e6:c6:5c:2c:3e:57:ce:72:1c:05:03:9e:57:a4:0c:a7:
         2d:d7:88:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuxn8aQz+zbYf9eNJsOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NGQ1NDViMjkzYzE2ZGNlZmRjNDFkMTU2ZjQ5MTliYjE1
NGMwZDkwHhcNMjUwNDEzMTIwMTQ0WhcNMjUwNDE0MTIwMTQ0WjAzMTEwLwYDVQQD
EygwMTc4ZjMyYjAyYTliMTQ3MTRjOTdlMWU0Y2IyMzhkMjE4ZTA0NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzEGVgryW5sksq9VW4iBz6w6Bard
9bXCYTzTFgfLSRZ9ey/551izq3PVJr5BLt7Vaby1LOv6zavwOYUoV06xJ7aVPcRr
TMtF/6KfqMcW6VABfWn1oXGEAM5PYH/9BifIKHuKBYxGBBDs+Py/agbAGV04GF+y
RLXEM+Qziokgk4lRSHN0Ojb8HJIjbPZ9w0fPhs0uJNPIYzNPb4rjwBUzHo7/Y2T+
AgqdzA+4cMXSJctyVLlAkQYKBBLud6MJy8vmUL/wj/LflUVsWXWLOyPg0CZXTI1z
bvDCmgMX8+1lptrPhktMd6YuvYh+9NEyC5cMEGuOwZIphc2lXGUjfMVmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF48ysCqbFHFMl+HkyyONIY4ET/MB8GA1UdIwQY
MBaAFBdNVFspPBbc79xB0Vb0kZuxVMDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYt
ODQ3ZTExNmJjNmViLzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYtODQ3ZTExNmJjNmVi
LzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK+23N1b
Ju/lt5MXC19SA4vM01QFbJyto7xgIDdivsvawZE4ykZ1apw9uW0YmvzNKiTygz42
2qZmeetQ8wK9c8xPcQeqO9WzhqvXoQRVJCBah9a4q1mj94yuSfrCb0wJD2XD4cK4
MsD0CNFLGySLBFtetZzXjTFZlH2gVuwCBe9tQqMDEhHJrcSUk4AyjRNGRfjkplNk
yHoNRJ675RnJB/T7tMvzmV+4AOWV6cpzH0GbvlKGnkNgPepdWBIQIyYrT1PoCj5E
pXUBmCbamRmpc6E2qRlszEBLvkCLjWaPhg9DQSIx7MFVP3jCcMHmxlwsPlfOchwF
A55XpAynLdeI4g==
-----END CERTIFICATE-----