Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File:                     MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier:          pXhaC2cyF9KK6oclDuoUb2qUohSF//ZqOB10oRlgrtk=
Subject key identifier:   9A:11:CE:48:F6:70:65:16:B0:D7:16:E3:54:B6:40:54:60:90:1D:89
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer:       /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial:       01962E98F330A379842E82E579AE17909806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number:          05AB
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: I7Ytdp3CKJnwuugN+cvXmm50nOG8prtnxIL4CA75dz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f3:30:a3:79:84:2e:82:e5:79:ae:17:90:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=9a11ce48f6706516b0d716e354b6405460901d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:ed:80:cf:c5:db:aa:11:c9:2e:f9:4d:13:
                    9f:a9:9c:ba:3a:85:5d:8a:6f:9b:d7:6c:07:1d:d4:
                    80:a4:d5:13:f1:96:07:8e:3f:6d:5f:43:67:cb:80:
                    f7:37:08:f6:dc:ae:fb:fa:16:5c:f3:5e:7d:0c:d4:
                    eb:b3:ab:c4:99:68:dd:d1:6c:6d:27:06:ce:cb:37:
                    4f:f4:f1:e5:aa:98:91:1c:05:ff:cf:73:12:07:43:
                    87:56:60:53:09:61:f3:d9:a5:c4:bc:9c:3b:6a:cf:
                    08:11:7f:ba:c8:cb:ba:8a:17:d6:da:5d:55:ca:3f:
                    b2:95:b0:ca:5d:79:ed:6c:f8:dd:e6:34:35:f3:2c:
                    d5:d3:2d:10:54:e1:ec:f7:61:0d:7c:f8:44:3e:3d:
                    34:b2:6b:0c:a5:ea:0d:16:b2:7d:9b:59:d9:a4:ec:
                    29:b9:2a:36:fc:cb:70:3d:07:67:c7:7f:ce:a0:4f:
                    7b:e5:02:ea:7a:8b:b1:7d:3c:fc:8d:72:23:75:59:
                    d4:b7:5e:c8:c5:66:39:10:45:7c:7f:7e:1d:18:d3:
                    77:4e:0e:d3:df:91:6f:b1:f2:4a:f1:2a:a0:f2:36:
                    8b:5f:e1:6b:36:63:69:72:3e:91:e4:ce:bb:53:16:
                    29:f7:83:63:9e:1f:dd:41:2f:c7:c7:e8:3f:52:b8:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:11:CE:48:F6:70:65:16:B0:D7:16:E3:54:B6:40:54:60:90:1D:89
            X509v3 Authority Key Identifier:
                keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:14:43:12:04:c5:8a:69:34:18:92:9e:99:d4:7a:8f:ac:
         72:ab:b1:19:3d:19:22:88:27:81:2e:e2:2e:fe:85:6f:6b:d3:
         88:98:cc:b1:38:aa:20:49:4d:81:b4:84:53:af:1f:e8:62:91:
         ea:7f:ed:e4:aa:b7:80:cb:cf:7c:62:fc:48:cc:76:6d:a3:96:
         75:42:97:10:c9:18:9f:e2:dc:19:51:25:08:b6:aa:80:9b:97:
         0b:ef:2c:fa:4f:bf:01:46:9f:50:63:6b:9a:61:ad:0c:ed:f2:
         38:06:87:6d:d9:6e:1c:32:2a:2b:10:59:06:eb:c7:e8:6c:ca:
         5f:b3:b4:20:10:e0:ac:0e:8d:07:be:ea:41:87:18:51:ad:e7:
         49:d5:77:86:af:e9:a2:b5:10:12:9e:e2:80:53:0b:88:9d:87:
         4f:2b:1a:52:ed:8d:a2:f6:35:8d:fd:10:d5:f8:68:26:8b:ba:
         0e:26:6f:78:0a:ba:0f:87:3f:f7:e0:bc:75:a8:ed:34:75:e8:
         87:d8:79:d7:3d:55:07:a1:2f:d8:29:20:2c:a0:e8:35:5e:a4:
         78:bd:dc:42:49:32:38:49:67:5d:7d:d8:7e:ba:b4:94:81:82:
         b3:01:19:a8:8c:d0:41:69:b8:8e:83:aa:10:0b:ec:0f:4e:ce:
         02:0f:44:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPMwo3mELoLlea4XkJgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzRmNGIxZGU0YzMxZTU2MTViZmQwYjNjY2IyZDgxN2U4
M2I5MzMwHhcNMjUwNDEzMTAwMTM3WhcNMjUwNDE0MTAwMTM3WjAzMTEwLwYDVQQD
Eyg5YTExY2U0OGY2NzA2NTE2YjBkNzE2ZTM1NGI2NDA1NDYwOTAxZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63ftgM/F26oRyS75TROfqZy6OoVd
im+b12wHHdSApNUT8ZYHjj9tX0Nny4D3Nwj23K77+hZc8159DNTrs6vEmWjd0Wxt
JwbOyzdP9PHlqpiRHAX/z3MSB0OHVmBTCWHz2aXEvJw7as8IEX+6yMu6ihfW2l1V
yj+ylbDKXXntbPjd5jQ18yzV0y0QVOHs92ENfPhEPj00smsMpeoNFrJ9m1nZpOwp
uSo2/MtwPQdnx3/OoE975QLqeouxfTz8jXIjdVnUt17IxWY5EEV8f34dGNN3Tg7T
35FvsfJK8Sqg8jaLX+FrNmNpcj6R5M67UxYp94Njnh/dQS/Hx+g/Urg9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoRzkj2cGUWsNcW41S2QFRgkB2JMB8GA1UdIwQY
MBaAFDDE9LHeTDHlYVv9CzzLLYF+g7kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUt
Y2Y5NzFkMmMyYTY1LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUtY2Y5NzFkMmMyYTY1
LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe4UQxIE
xYppNBiSnpnUeo+scquxGT0ZIogngS7iLv6Fb2vTiJjMsTiqIElNgbSEU68f6GKR
6n/t5Kq3gMvPfGL8SMx2baOWdUKXEMkYn+LcGVElCLaqgJuXC+8s+k+/AUafUGNr
mmGtDO3yOAaHbdluHDIqKxBZBuvH6GzKX7O0IBDgrA6NB77qQYcYUa3nSdV3hq/p
orUQEp7igFMLiJ2HTysaUu2NovY1jf0Q1fhoJou6DiZveAq6D4c/9+C8dajtNHXo
h9h51z1VB6Ev2CkgLKDoNV6keL3cQkkyOElnXX3Yfrq0lIGCswEZqIzQQWm4joOq
EAvsD07OAg9E8Q==
-----END CERTIFICATE-----