Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
File:                     U_8iLUoiYwLL8QBoyqb0xB97scs.mft (raw, json)
Hash identifier:          jp3kFjfb3erAUM2ORvhCLzIGj3P2pNcECunJ/L0238w=
Subject key identifier:   9C:88:CC:5B:8A:1B:2E:7C:7D:78:59:93:DC:25:41:0B:9D:FF:60:08
Authority key identifier: 53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB
Certificate issuer:       /CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb
Certificate serial:       01962E98F43154720B6468038ECB24198B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
Manifest number:          90
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: U_8iLUoiYwLL8QBoyqb0xB97scs.crl (hash: KYgwxPlbkPsANdTP9PVeSUsev7oMOvtuqmVZlu9ZMUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f4:31:54:72:0b:64:68:03:8e:cb:24:19:8b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=9c88cc5b8a1b2e7c7d785993dc25410b9dff6008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:6a:a8:a8:77:a3:c3:c1:5e:ca:e2:16:ef:
                    71:71:9f:d0:0b:fb:20:6e:07:05:31:b4:a9:c6:3a:
                    09:be:dd:b1:2a:75:d1:1d:2d:75:1d:65:31:17:b4:
                    e7:0d:a3:31:05:63:b8:16:32:ad:98:77:2c:00:e9:
                    d6:15:21:10:31:58:f1:d6:21:0e:d2:39:ba:30:99:
                    47:6b:c1:03:ec:91:c0:ab:13:1e:cf:06:19:b9:dd:
                    77:ee:e5:55:f3:36:fe:b1:ce:8c:1a:66:4d:ee:80:
                    b6:93:17:58:3d:56:c5:82:9d:ae:41:69:a5:a2:c3:
                    5c:91:cc:55:d1:e3:48:68:f1:14:0b:0d:29:a8:db:
                    7e:6c:e7:eb:e9:d8:31:8a:8d:2c:d7:18:35:25:99:
                    67:9d:cd:cb:7f:60:c8:d9:9b:94:a7:39:94:8d:1c:
                    01:ef:f8:b3:74:38:65:b8:92:9d:44:1e:3f:63:93:
                    dc:77:e2:fd:e9:93:50:f2:5b:57:e3:21:51:9a:1e:
                    96:d3:0c:24:99:a1:d4:e4:90:80:3e:e8:72:f1:29:
                    9e:ba:33:ed:f5:3d:59:27:2b:61:4a:28:8f:c7:30:
                    c6:d9:da:dc:ec:e7:82:61:ca:09:36:bc:70:95:70:
                    bc:a7:c6:54:6a:d0:2e:8a:a3:a7:cd:a2:82:3b:cb:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:88:CC:5B:8A:1B:2E:7C:7D:78:59:93:DC:25:41:0B:9D:FF:60:08
            X509v3 Authority Key Identifier:
                keyid:53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:69:a0:7e:fe:9b:6d:16:3a:56:02:5e:f3:78:6a:04:85:
         ad:09:93:fc:df:d4:3a:24:07:9d:2f:a2:d7:d6:0c:89:e4:80:
         0f:2a:6b:18:7b:47:07:cf:7c:5a:e3:15:e9:d2:a8:47:90:86:
         b1:ac:27:17:97:43:4f:5f:ff:2c:18:09:01:b1:16:f8:19:79:
         65:6e:ab:34:d5:b7:be:5d:60:21:09:38:2f:a1:a3:ac:cf:22:
         76:a4:8c:7a:a8:39:cf:83:d1:71:72:5b:c3:30:3d:4e:32:12:
         16:2d:36:82:35:48:83:d8:3f:53:8d:8d:63:be:3c:02:a9:27:
         82:86:68:5e:0c:0f:23:fb:fc:e2:a4:c9:10:9f:c7:c4:0e:3e:
         4a:35:8b:5d:f8:98:ce:da:ff:df:e2:ff:51:a7:ff:86:a1:d4:
         ae:f9:e9:a3:84:fd:9e:6c:04:6c:ea:13:e7:32:a4:31:7a:11:
         a6:13:fd:91:f1:83:9a:1c:d3:0d:b4:c2:0c:5f:b8:f9:03:9c:
         e4:58:c5:21:4f:2a:b1:32:56:7e:29:e4:8c:e8:dc:36:25:3b:
         d2:9c:56:6c:3c:64:49:23:b1:67:96:2d:24:21:2c:93:85:d9:
         ab:06:63:7b:45:7a:6e:81:d3:b1:71:41:65:78:d7:9a:fa:c2:
         1c:f3:da:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPQxVHILZGgDjsskGYtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZmYyMjJkNGEyMjYzMDJjYmYxMDA2OGNhYTZmNGM0MWY3
YmIxY2IwHhcNMjUwNDEzMTAwMTM3WhcNMjUwNDE0MTAwMTM3WjAzMTEwLwYDVQQD
Eyg5Yzg4Y2M1YjhhMWIyZTdjN2Q3ODU5OTNkYzI1NDEwYjlkZmY2MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3hqqKh3o8PBXsriFu9xcZ/QC/sg
bgcFMbSpxjoJvt2xKnXRHS11HWUxF7TnDaMxBWO4FjKtmHcsAOnWFSEQMVjx1iEO
0jm6MJlHa8ED7JHAqxMezwYZud137uVV8zb+sc6MGmZN7oC2kxdYPVbFgp2uQWml
osNckcxV0eNIaPEUCw0pqNt+bOfr6dgxio0s1xg1JZlnnc3Lf2DI2ZuUpzmUjRwB
7/izdDhluJKdRB4/Y5Pcd+L96ZNQ8ltX4yFRmh6W0wwkmaHU5JCAPuhy8SmeujPt
9T1ZJythSiiPxzDG2drc7OeCYcoJNrxwlXC8p8ZUatAuiqOnzaKCO8tb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyIzFuKGy58fXhZk9wlQQud/2AIMB8GA1UdIwQY
MBaAFFP/Ii1KImMCy/EAaMqm9MQfe7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQt
Y2EzNmQ5OGIzYzRkLzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQtY2EzNmQ5OGIzYzRk
LzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAppoH7+
m20WOlYCXvN4agSFrQmT/N/UOiQHnS+i19YMieSADyprGHtHB898WuMV6dKoR5CG
sawnF5dDT1//LBgJAbEW+Bl5ZW6rNNW3vl1gIQk4L6GjrM8idqSMeqg5z4PRcXJb
wzA9TjISFi02gjVIg9g/U42NY748AqkngoZoXgwPI/v84qTJEJ/HxA4+SjWLXfiY
ztr/3+L/Uaf/hqHUrvnpo4T9nmwEbOoT5zKkMXoRphP9kfGDmhzTDbTCDF+4+QOc
5FjFIU8qsTJWfinkjOjcNiU70pxWbDxkSSOxZ5YtJCEsk4XZqwZje0V6boHTsXFB
ZXjXmvrCHPPaow==
-----END CERTIFICATE-----