Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File:                     F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier:          eW1+Uwh/hncdJdO/ZKdLDmhNi3iK5oIvNHfyGc3emnY=
Subject key identifier:   9D:70:C6:EB:4E:1B:C7:62:AC:29:10:BC:B2:BB:3C:CB:8D:DF:27:BC
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer:       /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial:       01962E998C1EEC80E3D1C6B0C44F34BC5C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number:          071F
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: F3XdxSn1elmets19uiuSstN190o.crl (hash: 8ypIEjdFwzLPdLbhXc8hyLXUy488laeYJyWqywoaYPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8c:1e:ec:80:e3:d1:c6:b0:c4:4f:34:bc:5c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=9d70c6eb4e1bc762ac2910bcb2bb3ccb8ddf27bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:b3:43:fe:d5:8b:51:bf:5c:99:cc:5f:e0:
                    16:e0:b5:15:98:a9:7d:e3:43:f1:11:4d:b1:a2:de:
                    ee:b3:a6:a9:ea:46:16:85:47:03:59:5d:90:9d:ba:
                    a4:07:e6:ec:1d:bf:10:92:ad:b6:a0:c6:ee:e2:4f:
                    45:d3:33:15:f7:d7:f3:dc:80:0d:c9:bb:3b:30:ea:
                    b6:b4:03:23:49:c0:e9:4b:be:37:a4:16:eb:70:7e:
                    34:7a:c4:84:be:10:22:27:43:63:e9:38:ef:29:99:
                    9b:08:62:ce:80:9c:86:d7:40:34:0c:e7:4a:e9:52:
                    b8:b3:49:a6:cb:7d:56:d8:89:c8:34:cc:04:9c:46:
                    de:65:da:48:65:24:fc:1f:15:a9:45:46:f4:00:de:
                    12:03:e8:9f:4b:d7:4d:a8:93:41:d8:ac:76:37:c3:
                    40:c4:d3:05:f3:fc:8e:6a:1f:86:6e:6f:44:75:58:
                    2f:e1:17:dd:73:f0:fe:0c:99:b0:d7:58:00:86:b8:
                    6e:69:8d:a1:ab:3a:cf:96:7e:d7:50:c5:77:df:a0:
                    57:f0:53:2b:65:c0:41:47:b8:9a:91:dd:9c:6d:04:
                    bc:08:22:e8:e8:fc:51:8b:98:6b:cf:6f:c1:25:52:
                    d1:da:31:a1:eb:aa:d7:b9:dd:8c:e4:5c:3c:80:a6:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:70:C6:EB:4E:1B:C7:62:AC:29:10:BC:B2:BB:3C:CB:8D:DF:27:BC
            X509v3 Authority Key Identifier:
                keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:9b:06:12:01:30:bb:42:d9:de:a3:2a:77:c3:81:a6:81:
         5e:23:54:30:6b:b3:76:98:e6:f2:a1:fb:d5:44:48:00:75:2c:
         da:63:a9:9c:9c:83:7f:8a:e9:d4:ae:e2:88:7a:ae:c0:b1:cd:
         40:cf:a2:05:f8:b4:70:98:88:f6:d6:a4:a7:26:b8:75:a5:02:
         7e:b5:b7:44:9f:26:87:fd:53:59:0e:12:94:d6:df:3e:8c:29:
         66:9b:2b:6f:17:ea:bb:57:e6:68:34:de:34:cd:e6:29:1d:d0:
         e2:c5:d1:e0:d3:10:43:ac:76:4b:36:f7:a7:eb:3c:44:da:1c:
         ff:c4:a0:b2:b9:9d:43:3c:c7:7b:5f:e6:ee:60:9a:ce:40:46:
         82:23:2a:67:8c:62:e1:f7:17:6e:ad:59:ca:21:6c:d1:66:ed:
         1c:0e:e1:85:ee:2b:cb:3a:66:1d:fb:01:c9:0d:4d:3f:7e:bc:
         90:b2:70:f1:28:da:c2:8a:77:26:a2:13:ea:39:64:0e:d2:6b:
         7f:5a:e8:90:8b:b5:20:e5:8d:d9:6a:a2:dd:d4:e2:02:a4:04:
         dd:1c:a1:8b:12:c0:bb:d9:ea:77:6a:f0:d4:40:d6:ae:d8:cb:
         dd:ee:1a:1a:26:c2:b1:f3:67:31:5f:68:b0:6a:6e:13:10:34:
         82:95:27:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYwe7IDj0cawxE80vFxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzVkZGM1MjlmNTdhNTk5ZWI2Y2Q3ZGJhMmI5MmIyZDM3
NWY3NGEwHhcNMjUwNDEzMTAwMjE2WhcNMjUwNDE0MTAwMjE2WjAzMTEwLwYDVQQD
Eyg5ZDcwYzZlYjRlMWJjNzYyYWMyOTEwYmNiMmJiM2NjYjhkZGYyN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB+zQ/7Vi1G/XJnMX+AW4LUVmKl9
40PxEU2xot7us6ap6kYWhUcDWV2QnbqkB+bsHb8Qkq22oMbu4k9F0zMV99fz3IAN
ybs7MOq2tAMjScDpS743pBbrcH40esSEvhAiJ0Nj6TjvKZmbCGLOgJyG10A0DOdK
6VK4s0mmy31W2InINMwEnEbeZdpIZST8HxWpRUb0AN4SA+ifS9dNqJNB2Kx2N8NA
xNMF8/yOah+Gbm9EdVgv4Rfdc/D+DJmw11gAhrhuaY2hqzrPln7XUMV336BX8FMr
ZcBBR7iakd2cbQS8CCLo6PxRi5hrz2/BJVLR2jGh66rXud2M5Fw8gKZBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1wxutOG8dirCkQvLK7PMuN3ye8MB8GA1UdIwQY
MBaAFBd13cUp9XpZnrbNfborkrLTdfdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQt
MjlhMzM5MDJhNzZmLzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQtMjlhMzM5MDJhNzZm
LzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuWbBhIB
MLtC2d6jKnfDgaaBXiNUMGuzdpjm8qH71URIAHUs2mOpnJyDf4rp1K7iiHquwLHN
QM+iBfi0cJiI9takpya4daUCfrW3RJ8mh/1TWQ4SlNbfPowpZpsrbxfqu1fmaDTe
NM3mKR3Q4sXR4NMQQ6x2Szb3p+s8RNoc/8SgsrmdQzzHe1/m7mCazkBGgiMqZ4xi
4fcXbq1ZyiFs0WbtHA7hhe4ryzpmHfsByQ1NP368kLJw8Sjawop3JqIT6jlkDtJr
f1rokIu1IOWN2Wqi3dTiAqQE3RyhixLAu9nqd2rw1EDWrtjL3e4aGibCsfNnMV9o
sGpuExA0gpUnQg==
-----END CERTIFICATE-----