Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          htaCO+5aSyXu2k15jRhGpjwSRooTzhbNZVBhlfyP3MI=
Subject key identifier:   29:9E:BB:B7:04:88:A1:86:D0:78:7F:CD:27:61:4B:E1:A4:FD:02:5C
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       01962E996AC490651D47FFCEDD68DC2C2B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          06BE
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: xd9wch0HZkwN6Em9ZK7F9oZGY3Anfg9QEMi/6ValKAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6a:c4:90:65:1d:47:ff:ce:dd:68:dc:2c:2b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=299ebbb70488a186d0787fcd27614be1a4fd025c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:e3:4b:27:66:10:33:92:9e:d0:62:51:50:
                    24:29:2c:d4:14:a2:dd:97:4c:5c:9e:c7:8d:9c:58:
                    f8:15:f0:25:a5:33:79:2a:a3:ec:a7:fc:e3:49:66:
                    81:15:91:db:92:74:bd:e1:bc:04:64:f6:57:d0:1f:
                    fb:ff:cd:20:48:3d:9a:07:08:d6:0c:11:08:16:87:
                    32:8f:cc:6a:ab:16:c8:b6:b9:9a:a0:c3:0b:eb:c4:
                    f7:9b:e2:06:1b:39:6d:12:87:4c:51:20:4f:6b:ec:
                    6e:e4:1b:aa:63:3e:a9:7b:dc:88:91:3d:7a:30:c2:
                    3a:3a:90:c6:1b:99:6c:9b:75:8a:6d:79:8c:17:a5:
                    e9:ca:57:5c:9f:b1:17:eb:b1:83:bc:07:a3:0c:a4:
                    88:a2:78:9d:f8:92:41:02:3c:9a:2e:81:07:d1:90:
                    6b:1a:bb:3a:20:fb:04:c5:69:d9:70:b6:d5:24:9f:
                    92:84:f4:f8:0b:09:67:d7:a8:ca:be:98:30:2d:ed:
                    44:66:f5:4d:09:0d:fa:14:cd:a5:45:36:c9:da:8a:
                    58:14:f4:20:16:31:00:83:d0:ae:9d:58:dd:67:a2:
                    50:24:c2:6b:f8:d0:aa:8a:fd:87:81:3c:1a:8d:f1:
                    85:04:99:ef:56:0e:57:ad:88:98:fc:ef:d4:e7:b4:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:BB:B7:04:88:A1:86:D0:78:7F:CD:27:61:4B:E1:A4:FD:02:5C
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8a:51:10:ac:da:52:4d:a5:83:b0:11:f2:10:81:ff:37:aa:
         0a:45:4b:82:e5:c2:b2:59:27:85:a0:0e:27:a1:36:5f:71:be:
         18:5e:94:eb:ac:09:1e:53:57:96:63:59:72:ce:b2:34:cf:22:
         01:38:f8:30:f1:de:39:be:c1:a0:13:f5:f5:11:5d:33:6e:a1:
         74:69:38:e5:ef:0b:00:22:3b:3d:e4:f3:af:3b:99:1b:9f:dd:
         0f:78:0c:81:23:eb:81:19:70:a2:8c:fb:59:ee:43:6a:0a:84:
         2d:fd:e6:3a:3e:2b:cf:01:b5:10:fd:80:57:5c:91:8e:47:38:
         d4:dc:35:bb:a5:7f:97:33:f5:74:1f:6c:2a:63:33:90:ff:5c:
         83:cb:d2:f3:72:12:21:12:95:6c:1f:92:a8:6c:9b:0a:bb:35:
         3a:c4:d7:67:2b:9b:69:16:0b:40:1c:1d:b9:df:8e:08:33:a3:
         a0:99:87:b6:01:3e:4a:bc:a2:4a:c3:aa:25:89:73:10:0b:da:
         59:fa:08:c4:d1:06:14:12:13:46:b6:bf:be:22:6a:ed:e9:7e:
         c0:7d:00:bf:bb:d2:1a:ab:7c:a6:bf:c8:86:9e:81:27:9f:cb:
         85:42:3e:44:79:6b:c7:a5:dd:1b:f3:11:73:33:f3:82:50:62:
         09:ee:33:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWrEkGUdR//O3WjcLCttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2E5OGExMmJiNmQ4ZGFiODJmMzc0Y2YwYTI3OGE1YTYx
Yjc4ZTcwHhcNMjUwNDEzMTAwMjA4WhcNMjUwNDE0MTAwMjA4WjAzMTEwLwYDVQQD
EygyOTllYmJiNzA0ODhhMTg2ZDA3ODdmY2QyNzYxNGJlMWE0ZmQwMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHjSydmEDOSntBiUVAkKSzUFKLd
l0xcnseNnFj4FfAlpTN5KqPsp/zjSWaBFZHbknS94bwEZPZX0B/7/80gSD2aBwjW
DBEIFocyj8xqqxbItrmaoMML68T3m+IGGzltEodMUSBPa+xu5BuqYz6pe9yIkT16
MMI6OpDGG5lsm3WKbXmMF6Xpyldcn7EX67GDvAejDKSIonid+JJBAjyaLoEH0ZBr
Grs6IPsExWnZcLbVJJ+ShPT4Cwln16jKvpgwLe1EZvVNCQ36FM2lRTbJ2opYFPQg
FjEAg9CunVjdZ6JQJMJr+NCqiv2HgTwajfGFBJnvVg5XrYiY/O/U57Rq0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmeu7cEiKGG0Hh/zSdhS+Gk/QJcMB8GA1UdIwQY
MBaAFJnKmKErttjauC83TPCieKWmG3jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEt
MjhjM2MxZTJhMzcwLzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jNGU3NWUtZmQ1MS00MGY2LWJjMzEtMjhjM2MxZTJhMzcw
LzEvbWNxWW9TdTIyTnE0THpkTThLSjRwYVliZU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYpREKza
Uk2lg7AR8hCB/zeqCkVLguXCslknhaAOJ6E2X3G+GF6U66wJHlNXlmNZcs6yNM8i
ATj4MPHeOb7BoBP19RFdM26hdGk45e8LACI7PeTzrzuZG5/dD3gMgSPrgRlwooz7
We5DagqELf3mOj4rzwG1EP2AV1yRjkc41Nw1u6V/lzP1dB9sKmMzkP9cg8vS83IS
IRKVbB+SqGybCrs1OsTXZyubaRYLQBwdud+OCDOjoJmHtgE+SryiSsOqJYlzEAva
WfoIxNEGFBITRra/viJq7el+wH0Av7vSGqt8pr/Ihp6BJ5/LhUI+RHlrx6XdG/MR
czPzglBiCe4zig==
-----END CERTIFICATE-----