Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File:                     mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier:          UBS2yeei0edP1lxY/R+nsvQlXp7TquKi5e0wBjJlyTs=
Subject key identifier:   54:51:84:AD:0D:1D:1A:C2:B7:EB:4A:68:4C:9F:0D:EF:C9:C1:23:A6
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer:       /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial:       01962DF4380BBA3D95378A3595345D92D33A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number:          0C1E
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: qCcLHtx5yYhSjW7DNs4SMiQf2Lqb8nLVrkgOASeTkFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:38:0b:ba:3d:95:37:8a:35:95:34:5d:92:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=545184ad0d1d1ac2b7eb4a684c9f0defc9c123a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:37:be:2d:0c:d5:18:66:c6:8a:1a:da:27:
                    a6:6d:55:d4:48:f0:70:55:9e:a9:22:b1:0f:fa:0f:
                    76:dc:dc:1d:c3:89:48:bc:59:d8:36:69:2b:41:e9:
                    cd:2c:10:64:1f:b4:61:82:75:23:13:43:4c:1f:bf:
                    77:9f:fb:6f:f3:32:72:e1:87:ac:1c:eb:ea:d7:94:
                    32:72:7a:25:77:4f:b8:18:93:68:07:cb:3c:8a:01:
                    71:e7:70:ec:4a:d4:79:36:5c:66:b0:e2:0d:d8:99:
                    a7:fc:d7:14:b7:dd:71:a3:f8:46:ae:17:8c:ca:4b:
                    30:76:ea:d7:44:89:3d:53:3b:f8:2a:01:1b:62:3a:
                    95:01:3c:ca:90:d8:70:6e:48:3f:5a:a7:5d:2e:3c:
                    0e:6f:a9:02:9f:da:c6:98:e5:e8:82:12:02:52:68:
                    b0:04:0b:4d:ac:d4:0f:90:fb:4f:56:bf:04:9c:7c:
                    df:2e:2c:5e:91:62:53:ec:19:d6:76:2a:86:43:56:
                    00:2e:d1:49:09:ae:80:84:94:59:65:5e:74:c4:67:
                    e4:8d:84:e6:79:f8:1a:d2:a3:af:91:c3:0b:ef:47:
                    3f:2d:3a:e5:6b:c2:00:46:a9:f3:98:61:6f:ac:72:
                    6c:1b:a1:f9:30:ff:9f:cb:cf:5f:29:45:9b:ae:ca:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:51:84:AD:0D:1D:1A:C2:B7:EB:4A:68:4C:9F:0D:EF:C9:C1:23:A6
            X509v3 Authority Key Identifier:
                keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:0c:ed:2e:86:86:a1:60:97:73:37:e5:92:d0:cb:1a:44:
         15:fa:bb:07:45:b8:41:fd:ba:1c:a3:e4:62:f1:f7:a5:b3:70:
         38:77:6e:74:74:30:b9:23:e0:44:56:6f:0a:86:32:f6:f8:03:
         fc:bc:f3:4c:1c:a4:a6:1a:47:f3:87:4a:9c:6e:87:1a:d2:d0:
         71:af:20:77:41:09:47:d9:fc:63:8f:b1:8b:a8:18:4b:fc:35:
         12:8d:fd:79:cc:e6:d7:a5:a5:55:d8:9d:7b:39:eb:3d:e2:cf:
         4f:da:2e:3a:34:9b:61:5f:1d:e0:7e:a5:3b:d5:7b:8c:3a:6b:
         ab:78:29:f3:72:2b:fd:87:ec:34:06:26:16:f2:dc:14:50:2d:
         c4:0b:3b:21:2b:c6:8e:62:eb:28:ce:5b:38:2c:eb:6d:f2:48:
         da:6b:4c:6a:23:98:43:0a:35:3e:3f:66:51:f9:6e:db:6a:77:
         56:cc:a4:2a:bc:5c:7c:19:e7:2e:de:f0:58:8e:7c:b2:60:1f:
         2a:a1:ef:64:ed:84:fe:ce:a5:6c:ca:19:26:f6:c2:95:3c:10:
         e0:39:7e:65:df:e1:94:53:0a:2b:89:d2:df:6d:d2:1d:cf:42:
         89:44:b2:54:8e:f6:f4:1e:67:b8:57:2d:76:9e:89:df:f1:38:
         01:44:22:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DgLuj2VN4o1lTRdktM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjQxYWFjOWVkYTdiZWY2OTA4OWY2NDdiNWQ4Zjc3NGZm
NDNhMjYwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg1NDUxODRhZDBkMWQxYWMyYjdlYjRhNjg0YzlmMGRlZmM5YzEyM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvo3vi0M1Rhmxooa2iembVXUSPBw
VZ6pIrEP+g923Nwdw4lIvFnYNmkrQenNLBBkH7RhgnUjE0NMH793n/tv8zJy4Yes
HOvq15Qycnold0+4GJNoB8s8igFx53DsStR5NlxmsOIN2Jmn/NcUt91xo/hGrheM
ykswdurXRIk9Uzv4KgEbYjqVATzKkNhwbkg/WqddLjwOb6kCn9rGmOXoghICUmiw
BAtNrNQPkPtPVr8EnHzfLixekWJT7BnWdiqGQ1YALtFJCa6AhJRZZV50xGfkjYTm
efga0qOvkcML70c/LTrla8IARqnzmGFvrHJsG6H5MP+fy89fKUWbrsovFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRRhK0NHRrCt+tKaEyfDe/JwSOmMB8GA1UdIwQY
MBaAFJgkGqye2nvvaQifZHtdj3dP9DomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMt
MzVkZTM4NGMwOTgyLzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMtMzVkZTM4NGMwOTgy
LzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZsM7S6G
hqFgl3M35ZLQyxpEFfq7B0W4Qf26HKPkYvH3pbNwOHdudHQwuSPgRFZvCoYy9vgD
/LzzTBykphpH84dKnG6HGtLQca8gd0EJR9n8Y4+xi6gYS/w1Eo39eczm16WlVdid
eznrPeLPT9ouOjSbYV8d4H6lO9V7jDprq3gp83Ir/YfsNAYmFvLcFFAtxAs7ISvG
jmLrKM5bOCzrbfJI2mtMaiOYQwo1Pj9mUflu22p3VsykKrxcfBnnLt7wWI58smAf
KqHvZO2E/s6lbMoZJvbClTwQ4Dl+Zd/hlFMKK4nS323SHc9CiUSyVI729B5nuFct
dp6J3/E4AUQi7A==
-----END CERTIFICATE-----