Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File:                     aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier:          kzjqzqF3wYDYHnErlbHCraazcK8UZ6gtRb1N4p8T38I=
Subject key identifier:   E4:A6:26:4A:9E:7F:8E:34:60:98:79:9D:6F:72:D4:08:45:A9:C5:54
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer:       /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial:       01962E998201FE8039836AE1B302810E6178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number:          0D7F
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: IKuSo+65q+vkhEsxB0rV2/W0YZzQO1rqaZsQbnJb0j0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:82:01:fe:80:39:83:6a:e1:b3:02:81:0e:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=e4a6264a9e7f8e346098799d6f72d40845a9c554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:73:63:bc:b4:09:c6:26:83:4f:64:c0:eb:
                    94:de:54:fc:62:b8:99:21:74:5e:7f:bf:68:97:f1:
                    0f:63:71:11:79:e3:7b:03:80:fa:76:36:71:eb:89:
                    ba:49:f2:8a:7f:8c:2c:e1:97:ab:c5:cf:66:fd:18:
                    e5:c5:48:35:51:aa:7a:37:87:dd:f2:48:f9:0c:b9:
                    80:50:b6:9c:2e:44:58:76:e4:c0:17:44:c5:42:c7:
                    ca:66:c8:06:80:ce:96:f4:a3:6f:45:cd:2c:49:c1:
                    91:7a:58:e4:d8:2f:cd:18:a2:14:e7:b6:1b:5b:a0:
                    17:e3:53:9a:be:ad:1b:a9:97:e3:0c:75:f0:19:fd:
                    42:73:2f:22:18:e9:0d:a2:a5:aa:57:47:3b:4b:eb:
                    fc:24:06:3e:2f:5a:ec:df:b9:92:a5:e3:c2:c7:88:
                    0c:26:bc:96:dc:90:46:39:a8:af:d2:fe:4f:49:b0:
                    22:61:e2:51:a8:06:05:a1:91:00:fa:9a:02:6e:c3:
                    0e:4c:dc:7d:c8:05:5c:e0:a7:5c:a5:02:31:79:66:
                    2a:02:cd:8d:b2:4d:41:08:41:ee:78:06:8d:77:1e:
                    a7:af:00:f5:fe:22:ef:81:aa:e5:ff:d4:20:01:ac:
                    25:4b:ee:62:24:7f:c4:23:6f:17:23:d9:bb:18:6f:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A6:26:4A:9E:7F:8E:34:60:98:79:9D:6F:72:D4:08:45:A9:C5:54
            X509v3 Authority Key Identifier:
                keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:95:d0:75:36:79:e8:06:c6:a4:64:03:36:01:b2:b1:7b:
         4e:d3:5a:96:b5:c6:2f:04:f8:d4:a6:96:55:2d:17:6e:18:85:
         53:d4:a7:d6:a9:47:42:19:4d:42:e6:f9:9f:59:c6:06:b3:90:
         18:1d:d8:01:d5:46:a6:00:51:13:f8:f6:48:66:d9:d9:d2:b0:
         b6:6e:f6:2f:0f:77:a0:cf:9a:fe:73:24:6b:db:7c:2b:f8:14:
         b8:36:67:5e:9f:ab:84:15:26:8a:32:0c:0f:63:c0:c4:cb:44:
         c0:6e:19:db:da:b8:c1:97:c1:de:0b:e1:f2:1a:be:a5:dd:3c:
         fb:46:ce:09:ad:3a:b0:67:db:f2:75:7b:c0:81:82:e5:5d:f4:
         3f:eb:d4:03:b4:17:ff:c3:c1:85:c8:76:3f:47:13:02:19:21:
         66:46:9d:ce:15:15:15:9d:c3:a6:a5:a9:16:d2:69:7e:6b:ae:
         8d:1b:f1:b1:7c:26:56:15:77:4f:24:a5:ba:70:99:30:55:19:
         ef:63:35:f4:64:43:ae:f2:39:20:c6:37:00:bc:24:2b:ac:94:
         b3:3e:47:6d:9f:40:06:6f:c6:06:d3:aa:7e:10:83:74:29:56:
         79:32:67:89:11:80:34:ef:c8:05:b8:61:e9:74:1f:d5:d1:f2:
         50:7a:4f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYIB/oA5g2rhswKBDmF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjUwNDEzMTAwMjE0WhcNMjUwNDE0MTAwMjE0WjAzMTEwLwYDVQQD
EyhlNGE2MjY0YTllN2Y4ZTM0NjA5ODc5OWQ2ZjcyZDQwODQ1YTljNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJzY7y0CcYmg09kwOuU3lT8YriZ
IXRef79ol/EPY3EReeN7A4D6djZx64m6SfKKf4ws4Zerxc9m/RjlxUg1Uap6N4fd
8kj5DLmAULacLkRYduTAF0TFQsfKZsgGgM6W9KNvRc0sScGReljk2C/NGKIU57Yb
W6AX41Oavq0bqZfjDHXwGf1Ccy8iGOkNoqWqV0c7S+v8JAY+L1rs37mSpePCx4gM
JryW3JBGOaiv0v5PSbAiYeJRqAYFoZEA+poCbsMOTNx9yAVc4KdcpQIxeWYqAs2N
sk1BCEHueAaNdx6nrwD1/iLvgarl/9QgAawlS+5iJH/EI28XI9m7GG8aZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSmJkqef440YJh5nW9y1AhFqcVUMB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgWV0HU2
eegGxqRkAzYBsrF7TtNalrXGLwT41KaWVS0XbhiFU9Sn1qlHQhlNQub5n1nGBrOQ
GB3YAdVGpgBRE/j2SGbZ2dKwtm72Lw93oM+a/nMka9t8K/gUuDZnXp+rhBUmijIM
D2PAxMtEwG4Z29q4wZfB3gvh8hq+pd08+0bOCa06sGfb8nV7wIGC5V30P+vUA7QX
/8PBhch2P0cTAhkhZkadzhUVFZ3DpqWpFtJpfmuujRvxsXwmVhV3TySlunCZMFUZ
72M19GRDrvI5IMY3ALwkK6yUsz5HbZ9ABm/GBtOqfhCDdClWeTJniRGANO/IBbhh
6XQf1dHyUHpP+Q==
-----END CERTIFICATE-----