Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File:                     UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier:          qOAt/B6NMYQexmLr71iHEGCARuZVQJQSGPWkLts71VI=
Subject key identifier:   3E:9A:2B:5D:3A:D8:66:A6:2A:1F:41:1C:E8:38:EB:AB:2F:3A:6C:24
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer:       /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial:       01962E9895382DD7A55CBA4D5E3A36C1C491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number:          0B28
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: wBpz6hg4IE+SwfOZt4HTQTrqc9W51Ny9AHcSzwJhFZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:38:2d:d7:a5:5c:ba:4d:5e:3a:36:c1:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=3e9a2b5d3ad866a62a1f411ce838ebab2f3a6c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:70:eb:a1:ef:05:5e:d5:ee:f8:2f:4a:7a:
                    14:dc:4a:3f:11:80:3a:c8:6b:e3:bd:cb:dc:53:f7:
                    8a:39:e6:8f:b1:ff:ba:45:ba:d5:91:16:f1:bd:a2:
                    fa:a7:b3:01:00:1d:58:2c:4f:4a:9c:8c:c5:c6:44:
                    d8:b4:14:7b:95:4b:f2:2b:39:fc:96:88:45:4e:f7:
                    10:43:66:0a:6e:95:d3:4d:ca:b6:a6:b5:2e:19:2d:
                    b6:63:5c:8c:69:aa:a2:7d:bf:64:4c:9b:1b:d6:16:
                    9b:a5:60:af:15:31:cc:5f:89:00:33:f5:05:25:82:
                    6f:f7:c0:60:db:07:75:80:a1:2b:18:03:2f:47:b4:
                    38:43:6d:2a:66:a4:cc:98:22:e0:ba:1a:b5:1f:4d:
                    b5:f1:29:63:ae:40:81:d4:d0:9c:32:f8:8b:4f:8f:
                    a3:78:00:8e:01:e6:f2:83:19:60:2b:a9:f9:d6:d2:
                    14:7d:66:cf:ed:d4:0a:e6:5f:15:16:8e:1b:75:af:
                    5e:60:29:ea:e8:93:6a:5f:b4:26:c2:cd:e9:d6:07:
                    73:f9:dd:dc:aa:0e:b5:5f:4b:4a:de:1a:4f:54:7e:
                    9d:23:4f:00:b3:f5:c4:e6:1e:90:a3:c3:b2:8b:9b:
                    11:7f:fa:e9:b2:08:12:65:33:91:b4:49:fc:7f:57:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:2B:5D:3A:D8:66:A6:2A:1F:41:1C:E8:38:EB:AB:2F:3A:6C:24
            X509v3 Authority Key Identifier:
                keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:86:4e:a4:10:c6:69:d3:09:0b:8d:4c:56:99:a1:b1:26:c2:
         26:ef:ba:61:48:d6:eb:7e:76:64:ac:c9:be:50:53:97:39:1f:
         be:dd:6d:03:d8:1b:09:c8:a6:d0:4d:29:0f:78:3e:82:a7:00:
         51:f1:44:c9:a7:16:5b:2a:29:38:5f:0b:c5:6a:50:bb:5f:7c:
         51:f3:a5:bf:b4:e7:3d:aa:ee:73:62:e3:a3:ee:36:bf:7a:79:
         b0:cb:7d:d5:78:a6:6d:9a:9a:66:98:80:65:a9:8f:ba:90:61:
         d0:29:9a:b4:77:fa:ab:da:b3:dc:b3:c3:b3:ee:25:8e:16:97:
         4f:52:b7:2f:59:50:d4:12:f6:94:6d:22:ff:ac:64:f1:00:dc:
         7e:5f:7e:95:4c:83:12:e9:91:a1:59:d5:ef:b0:76:8b:f3:43:
         e4:46:ac:48:ed:85:8a:1e:39:f3:b6:a3:2a:72:3a:aa:69:7f:
         11:54:42:57:6a:98:71:b6:96:2e:f1:65:a9:be:3f:f0:00:f8:
         6a:38:55:d8:dc:0b:fd:65:cd:6d:4a:c5:08:7c:7a:11:e9:83:
         11:e9:9c:e0:4b:05:59:ed:29:cd:a5:79:7e:a7:b6:4e:a2:ff:
         12:fe:14:07:16:9d:a5:a2:69:c7:12:6a:ab:da:9f:37:e1:89:
         86:56:e0:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJU4LdelXLpNXjo2wcSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDVmNTg2ZDgyNjNiYjA2ZDY0MDUwZjhmNDg0YzE0ZTgw
M2M0YjIwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EygzZTlhMmI1ZDNhZDg2NmE2MmExZjQxMWNlODM4ZWJhYjJmM2E2YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms9w66HvBV7V7vgvSnoU3Eo/EYA6
yGvjvcvcU/eKOeaPsf+6RbrVkRbxvaL6p7MBAB1YLE9KnIzFxkTYtBR7lUvyKzn8
lohFTvcQQ2YKbpXTTcq2prUuGS22Y1yMaaqifb9kTJsb1habpWCvFTHMX4kAM/UF
JYJv98Bg2wd1gKErGAMvR7Q4Q20qZqTMmCLguhq1H0218SljrkCB1NCcMviLT4+j
eACOAebygxlgK6n51tIUfWbP7dQK5l8VFo4bda9eYCnq6JNqX7Qmws3p1gdz+d3c
qg61X0tK3hpPVH6dI08As/XE5h6Qo8Oyi5sRf/rpsggSZTORtEn8f1c1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6aK1062GamKh9BHOg466svOmwkMB8GA1UdIwQY
MBaAFFIF9YbYJjuwbWQFD49ITBToA8SyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMt
MGYyNTczZWNhMmU0LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMtMGYyNTczZWNhMmU0
LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIZOpBDG
adMJC41MVpmhsSbCJu+6YUjW6352ZKzJvlBTlzkfvt1tA9gbCcim0E0pD3g+gqcA
UfFEyacWWyopOF8LxWpQu198UfOlv7TnParuc2Ljo+42v3p5sMt91XimbZqaZpiA
ZamPupBh0CmatHf6q9qz3LPDs+4ljhaXT1K3L1lQ1BL2lG0i/6xk8QDcfl9+lUyD
EumRoVnV77B2i/ND5EasSO2Fih4587ajKnI6qml/EVRCV2qYcbaWLvFlqb4/8AD4
ajhV2NwL/WXNbUrFCHx6EemDEemc4EsFWe0pzaV5fqe2TqL/Ev4UBxadpaJpxxJq
q9qfN+GJhlbgpw==
-----END CERTIFICATE-----