Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier:          349Sb2g1yPApkAncKd7Lzef8+D266pAOte1lgD21Whs=
Subject key identifier:   F2:D5:D7:8E:F9:98:41:AA:BD:45:C1:30:4D:C0:53:B8:70:D8:4C:1B
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer:       /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial:       01962E996DC2EC16E7D04B18EB526FE4461F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: glHf43FP8B/Qq7xqSVAWu0WqOyT3DMd7oEP1lJ1halI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6d:c2:ec:16:e7:d0:4b:18:eb:52:6f:e4:46:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=f2d5d78ef99841aabd45c1304dc053b870d84c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:f7:fa:e3:c9:a0:66:dd:c3:39:be:4d:74:
                    17:de:f9:63:44:90:37:cd:0f:4b:19:80:b4:8a:d0:
                    2f:69:d7:35:ba:b8:20:e5:07:82:87:c0:2d:c2:56:
                    9c:cf:22:83:83:68:5d:01:21:dc:d0:c6:f9:93:60:
                    75:d4:45:77:f7:07:ee:20:4e:fb:af:cc:e6:61:ee:
                    7f:1d:e2:b3:50:9b:c6:98:4d:e9:99:5d:4e:84:c2:
                    bb:56:d9:24:91:bc:cb:cd:8d:46:87:f3:57:2b:c8:
                    7a:82:bf:45:ce:8d:f3:2b:0f:c8:e2:de:36:26:40:
                    ae:0d:34:03:9a:26:7e:9b:fd:47:83:b7:64:c1:5f:
                    20:dc:1c:b1:cf:66:3b:10:1e:31:8a:c3:b2:af:06:
                    7b:f4:6c:61:0c:0b:72:da:9c:d6:41:09:46:4c:44:
                    dd:70:05:50:e8:bd:26:fa:fe:4b:a9:1d:b8:e0:e7:
                    ac:d1:3c:61:24:6c:e6:13:2b:04:e1:eb:1c:16:72:
                    95:c3:e1:98:e1:8f:31:bb:d7:9a:a2:7c:51:17:96:
                    69:bf:1e:02:13:a0:03:b1:52:2d:e8:bb:22:88:b2:
                    c9:3b:96:fa:7a:dc:89:2f:b0:69:b3:e6:d9:b1:98:
                    ba:26:d3:b0:cc:08:6f:66:47:96:a8:2d:89:9d:67:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:D7:8E:F9:98:41:AA:BD:45:C1:30:4D:C0:53:B8:70:D8:4C:1B
            X509v3 Authority Key Identifier:
                keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:35:30:6b:e8:48:95:6c:4d:ce:fe:dc:5b:11:23:aa:e8:
         78:3d:fb:72:76:27:e2:c7:94:9c:26:ae:16:98:bb:19:a2:fe:
         93:9d:1f:f6:ac:a2:3d:f4:28:0c:e0:cc:34:a1:cd:ee:2f:43:
         8d:ed:75:7b:ad:5b:17:6e:6c:fd:44:79:38:99:7b:87:15:58:
         d2:d7:18:37:31:99:08:68:4f:46:9d:80:7a:71:98:fd:12:73:
         92:8f:8f:38:0e:fd:e6:cd:b9:b4:da:3e:aa:0c:c6:40:b9:f5:
         34:fe:96:62:88:0b:42:3e:15:79:64:7e:2b:d7:3b:c5:a3:8d:
         e6:13:7b:b5:6d:39:65:04:bf:23:ef:61:d1:9e:db:5d:17:bc:
         06:82:95:0f:7a:24:b7:41:bb:dd:f3:0c:73:0c:6a:19:a8:fe:
         c4:9c:4e:8f:f2:09:fe:ba:af:11:4c:c6:a2:90:64:3b:89:8f:
         33:fe:34:00:db:83:14:e0:74:b6:da:af:6f:4c:3c:4f:f1:21:
         18:aa:70:d1:16:e2:58:93:e9:69:0e:d9:f7:1e:50:99:6d:31:
         44:02:0f:bc:ab:1c:b0:15:c5:26:c9:da:dc:7a:07:b1:18:16:
         6c:52:55:50:29:27:66:63:28:c7:fc:45:e7:be:3a:f2:a5:68:
         9b:fc:75:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumW3C7Bbn0EsY61Jv5EYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj
MWUwNzMwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
EyhmMmQ1ZDc4ZWY5OTg0MWFhYmQ0NWMxMzA0ZGMwNTNiODcwZDg0YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6n3+uPJoGbdwzm+TXQX3vljRJA3
zQ9LGYC0itAvadc1urgg5QeCh8AtwlaczyKDg2hdASHc0Mb5k2B11EV39wfuIE77
r8zmYe5/HeKzUJvGmE3pmV1OhMK7VtkkkbzLzY1Gh/NXK8h6gr9Fzo3zKw/I4t42
JkCuDTQDmiZ+m/1Hg7dkwV8g3Byxz2Y7EB4xisOyrwZ79GxhDAty2pzWQQlGTETd
cAVQ6L0m+v5LqR244Oes0TxhJGzmEysE4escFnKVw+GY4Y8xu9eaonxRF5Zpvx4C
E6ADsVIt6LsiiLLJO5b6etyJL7Bps+bZsZi6JtOwzAhvZkeWqC2JnWdfyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLV1475mEGqvUXBME3AU7hw2EwbMB8GA1UdIwQY
MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt
OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh
LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZA1MGvo
SJVsTc7+3FsRI6roeD37cnYn4seUnCauFpi7GaL+k50f9qyiPfQoDODMNKHN7i9D
je11e61bF25s/UR5OJl7hxVY0tcYNzGZCGhPRp2AenGY/RJzko+POA795s25tNo+
qgzGQLn1NP6WYogLQj4VeWR+K9c7xaON5hN7tW05ZQS/I+9h0Z7bXRe8BoKVD3ok
t0G73fMMcwxqGaj+xJxOj/IJ/rqvEUzGopBkO4mPM/40ANuDFOB0ttqvb0w8T/Eh
GKpw0RbiWJPpaQ7Z9x5QmW0xRAIPvKscsBXFJsna3HoHsRgWbFJVUCknZmMox/xF
57468qVom/x16Q==
-----END CERTIFICATE-----