Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
File:                     pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json)
Hash identifier:          0GvmNthMQgxLhGtg5Y+khGj9TN9/sMiS0oYj1PjceLk=
Subject key identifier:   55:C3:7E:DC:AB:87:44:45:66:FA:48:E7:9B:DD:69:6F:1B:66:81:7C
Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B
Certificate issuer:       /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
Certificate serial:       01962E99960D95DBEC9E4EAC451CCAA83F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft
Manifest number:          06FC
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: To0kpO24tD9yeckw8R1OSahXYOb147CW77W1AmWdxDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:0d:95:db:ec:9e:4e:ac:45:1c:ca:a8:3f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=55c37edcab87444566fa48e79bdd696f1b66817c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:58:d8:f8:06:90:72:7f:68:72:99:3d:17:
                    79:e3:31:10:36:20:6f:d8:c3:cf:56:d2:46:5e:33:
                    ea:72:1c:56:a0:83:3e:11:e6:90:90:10:32:9c:ee:
                    a4:e1:f0:38:04:4d:44:c4:3a:5b:57:9f:6f:20:ae:
                    55:08:46:9e:66:e9:f5:16:2b:9d:fa:54:51:74:2b:
                    8a:34:63:e8:54:56:be:db:e0:2e:57:ad:44:3c:4a:
                    0c:0b:03:1b:1c:06:47:49:19:33:a7:79:8e:66:a1:
                    63:d4:d5:33:65:77:bc:a5:91:6a:33:bd:70:6b:a2:
                    a9:c4:50:47:77:09:a7:ae:c2:96:43:49:ab:72:73:
                    91:2a:9a:7a:5e:f1:84:01:c5:52:fa:7b:47:c8:61:
                    7d:92:5f:5f:be:0a:99:5d:28:07:9f:2b:40:45:38:
                    63:aa:c7:a9:05:30:eb:91:12:33:99:b0:a2:0f:68:
                    66:97:a9:3d:26:dd:2b:1f:6b:da:ad:67:84:b8:8c:
                    69:ab:22:98:89:ee:56:91:fd:1f:96:b9:c2:2a:fb:
                    31:d8:7a:04:e7:fe:75:3a:6d:67:4e:5d:e4:dd:16:
                    7e:22:7b:e9:de:48:4e:45:a9:c4:ad:ab:80:5c:fc:
                    05:cd:25:26:6f:ea:fa:84:8c:b9:88:74:03:39:29:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:7E:DC:AB:87:44:45:66:FA:48:E7:9B:DD:69:6F:1B:66:81:7C
            X509v3 Authority Key Identifier:
                keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:66:37:8f:63:f0:d0:ca:86:04:eb:89:8d:fe:58:e4:1f:
         6e:21:fc:cf:f2:ca:bf:b9:51:86:54:89:96:08:c3:69:8a:57:
         d2:cb:d5:3e:51:d0:8d:10:ec:a2:79:23:78:f7:b4:c2:6e:de:
         9e:ee:6b:c5:1e:ce:ab:cb:ce:a5:f8:f5:9e:37:37:f1:4e:bd:
         6d:9e:fe:67:93:07:ae:0c:8a:95:60:bc:6b:c6:fc:ff:16:92:
         ed:ac:ec:cd:ef:94:a3:5e:99:9d:3b:b1:db:7a:7d:cf:fd:26:
         01:b2:2b:92:bb:69:cb:01:c7:99:5d:7e:c6:69:2c:df:bb:44:
         54:54:99:92:e6:77:9d:73:7f:5c:92:db:a4:e8:ea:bb:6d:86:
         be:ee:3a:c0:44:e2:f5:c3:9b:a3:ce:4e:4d:e2:3b:74:c4:58:
         6d:52:f2:1a:51:78:e6:da:b9:f3:2c:b3:9d:f9:56:a0:85:b5:
         c4:2f:3d:81:a6:3d:50:8c:f1:3b:42:f3:72:6a:ce:ea:be:aa:
         3a:65:d3:97:1e:c5:cb:c0:2e:f5:49:47:19:ba:19:bc:a8:bd:
         e8:80:7d:25:97:df:5d:f3:a4:bd:2f:00:f3:85:0c:e6:a0:3d:
         f6:d6:5b:ce:39:ce:8e:2f:2c:0c:9f:d5:b7:eb:27:f2:dd:f8:
         bb:5d:b8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZYNldvsnk6sRRzKqD+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk
ZTA5NWIwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
Eyg1NWMzN2VkY2FiODc0NDQ1NjZmYTQ4ZTc5YmRkNjk2ZjFiNjY4MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r9Y2PgGkHJ/aHKZPRd54zEQNiBv
2MPPVtJGXjPqchxWoIM+EeaQkBAynO6k4fA4BE1ExDpbV59vIK5VCEaeZun1Fiud
+lRRdCuKNGPoVFa+2+AuV61EPEoMCwMbHAZHSRkzp3mOZqFj1NUzZXe8pZFqM71w
a6KpxFBHdwmnrsKWQ0mrcnORKpp6XvGEAcVS+ntHyGF9kl9fvgqZXSgHnytARThj
qsepBTDrkRIzmbCiD2hml6k9Jt0rH2varWeEuIxpqyKYie5Wkf0flrnCKvsx2HoE
5/51Om1nTl3k3RZ+Invp3khORanErauAXPwFzSUmb+r6hIy5iHQDOSlyawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXDftyrh0RFZvpI55vdaW8bZoF8MB8GA1UdIwQY
MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt
YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw
LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKJmN49j
8NDKhgTriY3+WOQfbiH8z/LKv7lRhlSJlgjDaYpX0svVPlHQjRDsonkjePe0wm7e
nu5rxR7Oq8vOpfj1njc38U69bZ7+Z5MHrgyKlWC8a8b8/xaS7azsze+Uo16ZnTux
23p9z/0mAbIrkrtpywHHmV1+xmks37tEVFSZkuZ3nXN/XJLbpOjqu22Gvu46wETi
9cObo85OTeI7dMRYbVLyGlF45tq58yyznflWoIW1xC89gaY9UIzxO0LzcmrO6r6q
OmXTlx7Fy8Au9UlHGboZvKi96IB9JZffXfOkvS8A84UM5qA99tZbzjnOji8sDJ/V
t+sn8t34u1247w==
-----END CERTIFICATE-----