Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          Ef5sTYbgbTW07NsyEXwsuoMFKMmbKYHxoXZh6+JUY7s=
Subject key identifier:   26:4A:3E:4E:AA:56:97:87:34:1E:C5:F9:14:8C:98:24:5E:4E:96:32
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       01962ECF5ED82F947A542C9F9C03520A8F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          0921
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 0bWQKA9zOtioaMzmn9TsZ_m-_Ak.roa (hash: XVs6Vl4wE42XJXEmtUVk+/HVBTJz/D0t8xUAsepjFh4=)
                          2: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: QO9iDouAaEDIAGk20XUIuys/fSIfP+6Cb8O7AQRP8l4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:5e:d8:2f:94:7a:54:2c:9f:9c:03:52:0a:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=264a3e4eaa569787341ec5f9148c98245e4e9632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:c8:ea:fc:da:40:b3:da:3d:36:87:6a:1e:
                    c4:2d:84:04:eb:a5:88:91:78:fa:76:f9:94:95:92:
                    88:a6:71:26:34:2d:e9:ae:91:99:f9:68:61:aa:ad:
                    01:e5:4d:90:27:5e:81:b3:ea:45:53:ce:1a:aa:6b:
                    bc:eb:23:d4:f7:2c:17:90:3e:ad:cd:d8:22:5d:bd:
                    a4:d6:1e:3f:37:01:49:c4:69:91:cc:02:6e:56:8d:
                    88:cd:40:5d:94:a8:63:15:41:8a:ef:7e:44:d2:4a:
                    8f:1a:65:e1:77:35:8f:b3:57:63:1d:c9:ac:d9:5b:
                    fa:ab:7c:4a:3f:98:69:2e:ac:f5:33:cc:f6:c5:5d:
                    59:0e:47:49:72:04:ed:d2:dc:12:e0:a7:a4:94:57:
                    d8:ee:94:62:9e:e6:06:9f:d9:fd:aa:49:50:96:e6:
                    cd:6f:3f:d8:8f:44:92:b0:58:de:b7:85:1b:84:6b:
                    cc:59:b1:84:d9:9e:21:33:76:9f:dd:ca:0f:b4:e2:
                    84:d8:e8:7f:41:0e:8e:ce:7c:4f:03:4c:5e:0f:c2:
                    4e:f8:46:3a:71:fa:d3:c0:3a:cc:0b:b7:4a:d7:bd:
                    81:a6:3c:a6:7d:12:44:46:4c:22:d8:fc:35:73:6a:
                    dd:d3:9c:46:2d:7c:2a:cf:98:12:d8:e2:fd:b5:8d:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4A:3E:4E:AA:56:97:87:34:1E:C5:F9:14:8C:98:24:5E:4E:96:32
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:8e:e3:f2:28:af:c2:0f:28:cf:3a:8b:fd:c0:37:2b:18:
         23:5f:1e:aa:93:d5:35:c6:c4:17:e2:fb:dc:22:8d:2c:79:15:
         f2:cd:ce:24:62:a9:f0:e2:f0:70:25:7b:e3:76:3e:43:73:ec:
         fb:00:7c:39:63:c5:da:75:a6:de:3e:fc:61:2c:7c:c4:64:23:
         56:f1:87:f5:5c:38:c3:e5:06:d8:3f:2d:07:e4:33:a9:17:f7:
         ab:f8:19:91:d9:f5:3b:78:89:53:ea:6b:c4:45:e7:1a:df:fe:
         53:bf:70:17:b4:37:fb:41:63:5f:5a:15:7f:83:e0:50:af:c5:
         b2:50:25:16:2a:1b:5a:7c:60:bb:12:fb:05:7e:61:c9:ae:bb:
         1e:4f:77:92:ee:7b:6a:d6:73:08:1c:50:c0:58:40:83:c0:83:
         55:33:62:be:6d:2d:73:49:e8:32:c0:13:88:d6:23:7d:0e:c4:
         58:e8:88:e9:ad:f3:d9:3a:58:85:8c:1c:48:74:77:f8:76:ac:
         91:fb:a0:6e:e3:0d:55:dc:00:0d:75:b5:1b:ad:6d:4c:4e:29:
         0b:c1:17:92:fd:dd:c6:ea:b5:bc:ae:4a:b0:e6:fe:71:bb:5d:
         20:61:8d:55:77:90:7e:56:b0:be:1f:fb:b3:a9:35:6a:2f:38:
         35:20:e5:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz17YL5R6VCyfnANSCo+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
EygyNjRhM2U0ZWFhNTY5Nzg3MzQxZWM1ZjkxNDhjOTgyNDVlNGU5NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/I6vzaQLPaPTaHah7ELYQE66WI
kXj6dvmUlZKIpnEmNC3prpGZ+Whhqq0B5U2QJ16Bs+pFU84aqmu86yPU9ywXkD6t
zdgiXb2k1h4/NwFJxGmRzAJuVo2IzUBdlKhjFUGK735E0kqPGmXhdzWPs1djHcms
2Vv6q3xKP5hpLqz1M8z2xV1ZDkdJcgTt0twS4KeklFfY7pRinuYGn9n9qklQlubN
bz/Yj0SSsFjet4UbhGvMWbGE2Z4hM3af3coPtOKE2Oh/QQ6OznxPA0xeD8JO+EY6
cfrTwDrMC7dK172BpjymfRJERkwi2Pw1c2rd05xGLXwqz5gS2OL9tY1KtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZKPk6qVpeHNB7F+RSMmCReTpYyMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/qO4/Io
r8IPKM86i/3ANysYI18eqpPVNcbEF+L73CKNLHkV8s3OJGKp8OLwcCV743Y+Q3Ps
+wB8OWPF2nWm3j78YSx8xGQjVvGH9Vw4w+UG2D8tB+QzqRf3q/gZkdn1O3iJU+pr
xEXnGt/+U79wF7Q3+0FjX1oVf4PgUK/FslAlFiobWnxguxL7BX5hya67Hk93ku57
atZzCBxQwFhAg8CDVTNivm0tc0noMsATiNYjfQ7EWOiI6a3z2TpYhYwcSHR3+Has
kfugbuMNVdwADXW1G61tTE4pC8EXkv3dxuq1vK5KsOb+cbtdIGGNVXeQflawvh/7
s6k1ai84NSDlQA==
-----END CERTIFICATE-----