Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          8qMtMzUba5nHZq0Nclc6u2YwkE4ksvhJlCnlCdC4DPs=
Subject key identifier:   BD:6A:99:2F:73:C2:BD:65:F3:8E:DE:A8:54:C1:16:90:C0:1E:2C:E2
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       01962F0649559A5209073441D729BC296FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: VBnTyIe2IHBGK5EtL3+JkiOg3QEi4MB5XAouv6sJX/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:49:55:9a:52:09:07:34:41:d7:29:bc:29:6f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=bd6a992f73c2bd65f38edea854c11690c01e2ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:0d:8b:64:f2:85:04:02:24:8c:99:11:ac:
                    30:fa:19:81:b9:8b:92:28:d4:7f:f7:94:02:ba:21:
                    34:ae:41:85:21:39:46:70:df:c8:ff:b3:4c:0d:a5:
                    d6:99:03:35:20:53:be:52:d4:92:9a:5c:77:0b:94:
                    31:7b:43:dc:86:cc:8a:3b:db:bf:47:49:5b:58:4b:
                    ac:5f:56:da:8a:62:67:16:b5:98:a4:4c:3f:17:6f:
                    2c:46:ae:47:40:34:aa:6c:24:39:3c:6d:10:40:d8:
                    6e:11:4e:c1:39:38:90:4a:e8:29:f8:01:27:a0:08:
                    4d:a4:a5:e9:50:0f:b5:1b:b3:7a:63:c1:9d:e7:09:
                    47:e7:2d:51:5e:cf:5e:be:4b:70:b0:97:ca:44:8f:
                    11:cc:eb:9c:8e:35:2d:eb:ab:ab:60:18:8b:ba:2c:
                    68:8b:f5:18:27:8d:1f:55:4e:d6:41:b9:9a:db:15:
                    21:ca:5f:05:55:0b:e1:42:06:15:83:e4:01:36:07:
                    75:30:68:8b:b1:4d:f7:8a:32:4a:01:f6:f0:07:27:
                    ca:ff:4e:d1:4c:ec:bc:d6:d3:b8:06:55:85:1f:62:
                    0e:3f:9d:df:4a:6e:2f:00:80:ac:df:d9:02:4a:1d:
                    a6:c5:e1:e8:08:16:e9:13:ae:35:19:09:f8:db:c7:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:99:2F:73:C2:BD:65:F3:8E:DE:A8:54:C1:16:90:C0:1E:2C:E2
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:4a:cf:5d:8c:f1:91:50:ad:59:e3:d5:f4:d6:bd:15:0a:
         7a:f2:6d:24:00:5c:55:eb:b9:ab:27:d7:5d:28:e4:ef:65:05:
         54:6f:14:a1:3f:c2:27:5e:8e:06:e8:b8:54:13:0b:08:01:cb:
         db:8d:92:60:d7:93:92:48:56:97:50:c5:bf:d9:57:e2:83:05:
         df:39:37:8c:12:2c:58:c8:b5:64:44:9f:e0:5a:16:bc:44:85:
         c7:33:8f:cc:42:2e:39:43:27:2d:e2:f0:c0:29:39:cb:ec:cb:
         42:3a:39:47:18:5f:e3:87:d4:5c:b4:e4:27:0f:db:b6:99:cb:
         3d:3c:4c:df:9d:36:55:39:08:60:ed:ed:f7:8d:27:23:f1:52:
         81:7c:36:6b:5a:4b:9f:6f:55:74:55:90:ff:c7:bd:b2:87:81:
         fe:2b:fc:01:7a:c5:b6:b1:03:a3:77:fb:2f:30:40:ea:85:47:
         6e:1c:7c:59:52:09:01:c1:e4:0c:ca:07:bc:eb:80:e6:40:62:
         69:08:da:e6:f9:c0:76:a0:4e:b9:3f:a9:dc:31:46:8c:37:69:
         01:91:74:1e:a5:2d:82:e3:82:36:59:bd:b9:d9:a0:ae:f1:e4:
         f9:46:19:cc:72:5e:31:a7:dc:0c:ea:6c:0b:76:9a:df:79:fc:
         51:f3:41:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBklVmlIJBzRB1ym8KW/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmY2RkNDEwZTEyNTAyMmRlMDdjYTU5NjNmOTJmNzhlOGY4
OTQ4NmUwHhcNMjUwNDEzMTIwMTAzWhcNMjUwNDE0MTIwMTAzWjAzMTEwLwYDVQQD
EyhiZDZhOTkyZjczYzJiZDY1ZjM4ZWRlYTg1NGMxMTY5MGMwMWUyY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vUNi2TyhQQCJIyZEaww+hmBuYuS
KNR/95QCuiE0rkGFITlGcN/I/7NMDaXWmQM1IFO+UtSSmlx3C5Qxe0PchsyKO9u/
R0lbWEusX1baimJnFrWYpEw/F28sRq5HQDSqbCQ5PG0QQNhuEU7BOTiQSugp+AEn
oAhNpKXpUA+1G7N6Y8Gd5wlH5y1RXs9evktwsJfKRI8RzOucjjUt66urYBiLuixo
i/UYJ40fVU7WQbma2xUhyl8FVQvhQgYVg+QBNgd1MGiLsU33ijJKAfbwByfK/07R
TOy81tO4BlWFH2IOP53fSm4vAICs39kCSh2mxeHoCBbpE641GQn428eq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1qmS9zwr1l847eqFTBFpDAHiziMB8GA1UdIwQY
MBaAFB/N1BDhJQIt4Hyllj+S946PiUhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUt
YWI2OWRhOGYzN2VjLzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZmE4MWItMWYzZi00ODJkLTk1MjUtYWI2OWRhOGYzN2Vj
LzEvSDgzVUVPRWxBaTNnZktXV1A1TDNqby1KU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltVKz12M
8ZFQrVnj1fTWvRUKevJtJABcVeu5qyfXXSjk72UFVG8UoT/CJ16OBui4VBMLCAHL
242SYNeTkkhWl1DFv9lX4oMF3zk3jBIsWMi1ZESf4FoWvESFxzOPzEIuOUMnLeLw
wCk5y+zLQjo5Rxhf44fUXLTkJw/btpnLPTxM3502VTkIYO3t940nI/FSgXw2a1pL
n29VdFWQ/8e9soeB/iv8AXrFtrEDo3f7LzBA6oVHbhx8WVIJAcHkDMoHvOuA5kBi
aQja5vnAdqBOuT+p3DFGjDdpAZF0HqUtguOCNlm9udmgrvHk+UYZzHJeMafcDOps
C3aa33n8UfNBWA==
-----END CERTIFICATE-----