Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File:                     uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier:          IkuKetqld6nDiYD/1mcDwMe/AhFWhl48XMrhOsKkKVE=
Subject key identifier:   0A:25:AA:6F:11:25:19:77:5D:6F:47:21:BE:24:8A:58:05:15:B5:EF
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer:       /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial:       01962FAB6A36B53D6E5EECD861F24090F3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: HfP2yqswvUrXY7gSMxB6fakqaotjzAeNNX52+QhUuac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:36:b5:3d:6e:5e:ec:d8:61:f2:40:90:f3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=0a25aa6f112519775d6f4721be248a580515b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:42:68:e3:cd:de:d8:5f:1e:4e:12:8f:82:
                    9c:6a:82:ab:65:96:d7:a1:4f:57:17:8f:ce:a2:3c:
                    4a:d2:ac:e2:f3:d0:f4:26:77:68:38:56:9b:f3:4d:
                    a4:69:64:73:10:da:46:41:23:c9:dd:3b:b9:4a:ec:
                    2f:7b:db:ac:cc:b0:54:94:c0:28:99:e8:4d:df:0e:
                    a6:65:d5:66:49:1b:1e:3e:08:74:03:af:cf:18:3b:
                    39:ef:ab:e2:01:29:de:69:65:a2:bd:eb:fb:f1:ce:
                    27:dc:6d:01:e5:1f:53:90:16:6d:ec:a2:76:d4:25:
                    03:29:2e:95:ea:ce:7e:2d:4e:5d:27:91:cd:9d:0d:
                    29:14:95:4a:9a:37:2b:e2:67:89:9a:e4:bb:62:4f:
                    4d:b4:21:ab:7d:d5:46:28:fb:1c:12:47:00:d2:1b:
                    9d:55:b5:96:a9:3b:ad:cc:a6:fc:60:3c:38:a3:57:
                    a7:4c:c0:13:73:41:16:d3:dc:46:0b:7d:14:31:2c:
                    53:df:72:30:e5:d3:1e:bc:96:c5:8c:ea:ec:16:1a:
                    64:ef:12:0b:2b:c7:55:ed:68:55:31:c7:15:28:c6:
                    69:20:67:0a:49:8f:6f:5c:11:11:9f:65:47:2c:4f:
                    a0:0b:25:6a:dc:5c:d6:0e:5f:2d:d6:c7:e4:7b:ac:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:25:AA:6F:11:25:19:77:5D:6F:47:21:BE:24:8A:58:05:15:B5:EF
            X509v3 Authority Key Identifier:
                keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:18:b4:b4:5c:64:14:c7:02:5a:61:d0:00:ae:ac:a1:02:
         94:67:ed:2a:5c:90:86:fc:a3:af:59:fb:d7:58:b8:6c:97:20:
         99:86:44:f4:65:b9:d9:b4:b8:d4:5c:49:6b:a1:31:fb:45:e1:
         62:d1:75:6e:02:41:91:1e:fc:bb:36:95:f7:a6:8d:1e:7a:c4:
         8d:a0:3e:f9:54:9b:ed:6a:a9:fa:05:ec:5a:d2:86:99:fc:2c:
         7a:02:c1:67:14:2c:dd:85:6a:f4:af:f3:fb:69:99:90:95:93:
         78:a4:31:4f:84:13:cb:8f:dc:a7:3a:fa:16:95:20:9c:5c:c9:
         0e:ba:67:cd:d4:cf:ab:f9:e1:1e:27:e8:47:77:e4:fc:ff:39:
         3c:7d:a2:3e:7f:86:5f:33:a2:82:9b:c3:e7:ac:c2:09:95:8e:
         9c:41:c0:45:a1:0e:9f:44:d3:e4:f0:d8:62:9c:74:85:40:8e:
         fa:6d:3f:58:48:64:dc:4c:6f:a7:9d:c3:8e:b1:83:e5:92:d7:
         5f:a7:17:e1:a5:87:d0:74:40:de:a6:e0:ad:59:77:af:5d:db:
         90:98:e7:7b:38:bc:c5:2d:e1:26:52:27:46:88:a4:9f:e0:78:
         16:64:d3:e3:67:4b:12:5a:a1:b8:d4:99:8a:34:83:a5:dc:09:
         19:66:d8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2o2tT1uXuzYYfJAkPPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWY2YzA4YmNhMzA4YzFjNzhiMGVlZDhlZjMwYjRhMDQ2
ODExOGUwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
EygwYTI1YWE2ZjExMjUxOTc3NWQ2ZjQ3MjFiZTI0OGE1ODA1MTViNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhtCaOPN3thfHk4Sj4KcaoKrZZbX
oU9XF4/OojxK0qzi89D0JndoOFab802kaWRzENpGQSPJ3Tu5Suwve9uszLBUlMAo
mehN3w6mZdVmSRsePgh0A6/PGDs576viASneaWWivev78c4n3G0B5R9TkBZt7KJ2
1CUDKS6V6s5+LU5dJ5HNnQ0pFJVKmjcr4meJmuS7Yk9NtCGrfdVGKPscEkcA0hud
VbWWqTutzKb8YDw4o1enTMATc0EW09xGC30UMSxT33Iw5dMevJbFjOrsFhpk7xIL
K8dV7WhVMccVKMZpIGcKSY9vXBERn2VHLE+gCyVq3FzWDl8t1sfke6yXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAolqm8RJRl3XW9HIb4kilgFFbXvMB8GA1UdIwQY
MBaAFLqvbAi8owjBx4sO7Y7zC0oEaBGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTkt
YjQ5OTNiMjMyZTZjLzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTktYjQ5OTNiMjMyZTZj
LzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQIYtLRc
ZBTHAlph0ACurKEClGftKlyQhvyjr1n711i4bJcgmYZE9GW52bS41FxJa6Ex+0Xh
YtF1bgJBkR78uzaV96aNHnrEjaA++VSb7Wqp+gXsWtKGmfwsegLBZxQs3YVq9K/z
+2mZkJWTeKQxT4QTy4/cpzr6FpUgnFzJDrpnzdTPq/nhHifoR3fk/P85PH2iPn+G
XzOigpvD56zCCZWOnEHARaEOn0TT5PDYYpx0hUCO+m0/WEhk3Exvp53DjrGD5ZLX
X6cX4aWH0HRA3qbgrVl3r13bkJjnezi8xS3hJlInRoikn+B4FmTT42dLElqhuNSZ
ijSDpdwJGWbYGA==
-----END CERTIFICATE-----