Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File:                     MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier:          DN9gAuZPsKQnuP8j6yXJh9Zdz00Af+IWB7SFIXAbQYo=
Subject key identifier:   EF:5F:09:F6:67:BF:B8:59:4C:68:16:9C:18:B8:6D:1B:F6:D4:4B:53
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer:       /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial:       01962F3D7A5DCE414C2C2F4AF9C35BD2E5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number:          034C
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: zstnTThwEoXYYnbpQgLT/duVO1/7aVqsTumnhX43670=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:5d:ce:41:4c:2c:2f:4a:f9:c3:5b:d2:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=ef5f09f667bfb8594c68169c18b86d1bf6d44b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:a5:5b:e8:30:67:bb:8a:20:71:e8:64:fc:
                    b5:18:eb:73:09:a7:a4:1f:ab:43:3d:37:61:07:44:
                    28:5b:0c:3c:54:c4:aa:ed:8b:b6:57:a1:64:30:5e:
                    a9:23:8f:18:a5:f4:81:1b:1a:f6:a7:51:15:6a:10:
                    e0:14:17:37:af:72:b6:4c:90:1b:5b:9f:c4:a8:aa:
                    d4:68:1a:50:0f:e4:7a:a9:ef:3a:a2:3d:f5:94:15:
                    68:fa:43:1f:7b:31:b6:16:f6:83:ed:f2:18:31:99:
                    bf:c7:e3:49:69:45:d6:1d:e2:96:eb:2a:35:7d:aa:
                    f3:d6:fb:da:d1:72:59:73:ae:02:4d:1f:ae:7d:6d:
                    fa:49:b4:d9:af:12:f0:8e:2f:d3:ce:de:f3:05:a0:
                    70:ca:49:3d:db:8a:1d:7d:68:3c:04:e7:16:f9:11:
                    cc:13:62:ec:e2:c8:cc:ca:88:65:7a:99:69:5b:e2:
                    f8:86:ed:b5:e3:b2:08:b7:54:aa:28:bb:c8:a9:30:
                    2b:d5:bc:df:80:33:2a:64:31:9d:eb:c0:56:b3:4a:
                    d4:68:ff:1a:e3:89:8b:08:2e:0c:cb:03:3c:c6:37:
                    b8:b4:69:d3:77:1e:ad:5c:e2:41:f2:7c:df:67:fb:
                    af:87:51:2d:78:6b:e8:ae:57:3a:8e:89:06:d1:9a:
                    b4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5F:09:F6:67:BF:B8:59:4C:68:16:9C:18:B8:6D:1B:F6:D4:4B:53
            X509v3 Authority Key Identifier:
                keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:87:0f:cb:74:c9:e9:f8:5c:44:be:b9:3a:71:af:8a:1c:e4:
         4b:9e:bd:8b:85:16:1e:66:b1:5b:7c:91:04:23:c2:93:7b:0b:
         72:a1:18:c5:ef:5a:b7:9c:a4:5a:38:f4:b6:12:d9:f2:aa:bc:
         c3:4e:f2:a0:56:83:24:4d:4f:c8:69:3a:4c:ee:c8:4e:d4:ea:
         4b:fa:fb:f1:0e:0d:7e:3b:24:e1:fd:a0:5d:91:d3:cd:aa:ab:
         1b:37:17:29:65:15:8c:60:e2:52:8f:d4:8c:33:14:13:1f:91:
         b5:74:01:fc:a5:6e:b1:e8:c3:7f:c0:d2:18:b1:90:94:f6:96:
         dc:19:ac:c5:b8:2d:81:d8:b2:14:6c:d2:a0:38:b8:09:7b:84:
         51:3c:ea:26:07:62:76:9a:82:63:66:3d:84:83:0b:7c:bb:9e:
         83:01:f2:52:7b:4f:49:03:75:95:1f:bc:62:7c:db:ff:f6:ec:
         06:9e:04:b0:98:81:e3:46:0e:2e:c0:60:59:5f:13:dc:e1:dc:
         f7:66:63:f6:55:35:79:ef:b1:b7:82:69:9c:60:e2:17:50:09:
         8c:cd:5b:23:bb:19:c1:68:74:cc:47:1c:00:9b:78:a8:c8:83:
         a3:ee:e7:a0:3b:cc:5c:7b:c2:b2:e1:a7:91:6a:c3:29:b9:c9:
         a6:b4:4d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXpdzkFMLC9K+cNb0uXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWFiMDJiNjU0ZTkxNWNhZGNhMzM5MjkyZTI4YzE1YzQ3
ZGY4NTgwHhcNMjUwNDEzMTMwMTIwWhcNMjUwNDE0MTMwMTIwWjAzMTEwLwYDVQQD
EyhlZjVmMDlmNjY3YmZiODU5NGM2ODE2OWMxOGI4NmQxYmY2ZDQ0YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYWlW+gwZ7uKIHHoZPy1GOtzCaek
H6tDPTdhB0QoWww8VMSq7Yu2V6FkMF6pI48YpfSBGxr2p1EVahDgFBc3r3K2TJAb
W5/EqKrUaBpQD+R6qe86oj31lBVo+kMfezG2FvaD7fIYMZm/x+NJaUXWHeKW6yo1
farz1vva0XJZc64CTR+ufW36SbTZrxLwji/Tzt7zBaBwykk924odfWg8BOcW+RHM
E2Ls4sjMyohleplpW+L4hu2147IIt1SqKLvIqTAr1bzfgDMqZDGd68BWs0rUaP8a
44mLCC4MywM8xje4tGnTdx6tXOJB8nzfZ/uvh1EteGvorlc6jokG0Zq0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9fCfZnv7hZTGgWnBi4bRv21EtTMB8GA1UdIwQY
MBaAFDCqsCtlTpFcrcozkpLijBXEffhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjkt
YTQxOTY3MGQxN2UxLzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85YWZmNTQtNTk3MS00MDJmLWFiNjktYTQxOTY3MGQxN2Ux
LzEvTUtxd0syVk9rVnl0eWpPU2t1S01GY1I5LUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkocPy3TJ
6fhcRL65OnGvihzkS569i4UWHmaxW3yRBCPCk3sLcqEYxe9at5ykWjj0thLZ8qq8
w07yoFaDJE1PyGk6TO7ITtTqS/r78Q4Nfjsk4f2gXZHTzaqrGzcXKWUVjGDiUo/U
jDMUEx+RtXQB/KVusejDf8DSGLGQlPaW3BmsxbgtgdiyFGzSoDi4CXuEUTzqJgdi
dpqCY2Y9hIMLfLuegwHyUntPSQN1lR+8Ynzb//bsBp4EsJiB40YOLsBgWV8T3OHc
92Zj9lU1ee+xt4JpnGDiF1AJjM1bI7sZwWh0zEccAJt4qMiDo+7noDvMXHvCsuGn
kWrDKbnJprRNLw==
-----END CERTIFICATE-----