Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File:                     AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier:          GFWK2aeOEf1e5cXhQfT6Dx9A+za3GJoYfwYdX33EJ4M=
Subject key identifier:   79:0B:71:C9:BC:2B:DB:44:B5:A7:6E:18:0C:CD:06:BF:FA:75:8A:87
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer:       /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial:       01962F07098BB33D20121BD95AACF0ACE0E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number:          0CC9
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: JBWyeH/Nx4JdU3TtUlIP2IIikVksP/ge9pwMC7wjOeg=)
                          2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:8b:b3:3d:20:12:1b:d9:5a:ac:f0:ac:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=017c90654653ac150028562b32431491b52147d1
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=790b71c9bc2bdb44b5a76e180ccd06bffa758a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:15:30:be:8c:ea:cc:52:7e:fd:6e:49:07:
                    5d:4b:ab:28:45:cc:e9:c5:49:f1:03:ec:31:11:68:
                    23:f4:d3:ba:7d:ad:d5:fb:46:67:fc:02:4c:4f:49:
                    2d:f2:40:41:1a:31:26:89:b0:c7:2b:22:42:b7:a8:
                    1c:10:0d:12:bb:3a:ba:16:3d:fd:a7:b0:c5:4b:8b:
                    ab:5f:63:af:ce:19:f0:96:cd:93:ea:f5:b2:aa:2d:
                    30:8b:07:91:15:4c:5a:cc:c4:73:53:c8:7a:5e:f8:
                    c6:64:2e:c1:e8:8f:fb:2d:1d:a1:88:2f:e3:96:33:
                    d0:cb:0c:ae:b1:93:0e:5e:85:a7:46:69:d9:0d:05:
                    ed:e4:eb:46:d8:91:61:d8:e7:0c:8f:4d:18:64:ec:
                    e5:b1:91:96:05:7e:67:73:4a:50:97:e9:70:2c:26:
                    01:f9:e6:f9:c3:0d:69:aa:ab:ca:45:3a:fb:b2:a4:
                    40:71:29:3c:06:9c:a4:b3:d3:6a:f4:63:a6:cb:6a:
                    51:57:8f:a2:94:b1:ae:f3:6b:78:aa:cf:ed:ae:25:
                    36:2b:9e:49:a7:08:e8:b4:57:c0:8a:42:8d:3f:64:
                    7e:86:f6:0a:9b:ca:74:94:f0:8a:50:15:ea:ac:5a:
                    da:81:48:72:66:55:5c:b7:e0:cc:06:e9:92:a2:f1:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:71:C9:BC:2B:DB:44:B5:A7:6E:18:0C:CD:06:BF:FA:75:8A:87
            X509v3 Authority Key Identifier:
                keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:83:fa:7d:5f:da:af:0a:84:88:f3:12:8f:0b:9f:a0:1f:
         9e:82:38:1c:ba:78:58:e1:94:f9:a4:db:c8:3a:3a:b9:ec:63:
         f8:a9:84:ce:6b:e2:33:84:1c:05:ef:83:51:c2:36:fc:ed:84:
         a9:1c:47:39:46:59:98:6d:5b:30:5f:e1:db:08:33:8b:c6:b0:
         f8:b2:31:b1:93:88:3f:4b:4a:02:7f:91:89:7d:56:c6:ed:61:
         7c:d8:25:26:6b:39:15:ad:21:bf:77:eb:8c:42:66:53:aa:92:
         f0:51:c3:27:a5:7e:28:97:87:fe:f2:14:d3:ad:5a:0c:a7:ba:
         07:b4:23:02:d9:bb:4b:74:e8:5c:5a:31:ac:8d:53:ee:10:c2:
         d2:d1:a3:10:10:1a:02:25:ac:57:1b:10:8b:99:dc:36:c4:56:
         1c:c7:a9:0c:d2:05:c8:9e:c8:e3:cf:d0:93:1f:81:f0:bb:ef:
         cd:cd:2b:90:36:3e:a4:0a:22:a2:a1:2e:7d:17:c3:af:3e:a2:
         eb:fb:9d:51:3a:ad:96:26:94:14:e2:05:36:0a:a1:be:f6:eb:
         5e:04:3e:59:fc:58:60:02:b3:78:7c:e1:1e:0e:37:46:b5:0d:
         bb:13:42:0e:28:d5:4e:2e:ca:46:95:f1:ec:b0:be:f7:70:8c:
         9b:e0:10:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwmLsz0gEhvZWqzwrODgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxN2M5MDY1NDY1M2FjMTUwMDI4NTYyYjMyNDMxNDkxYjUy
MTQ3ZDEwHhcNMjUwNDEzMTIwMTUyWhcNMjUwNDE0MTIwMTUyWjAzMTEwLwYDVQQD
Eyg3OTBiNzFjOWJjMmJkYjQ0YjVhNzZlMTgwY2NkMDZiZmZhNzU4YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlIVML6M6sxSfv1uSQddS6soRczp
xUnxA+wxEWgj9NO6fa3V+0Zn/AJMT0kt8kBBGjEmibDHKyJCt6gcEA0Suzq6Fj39
p7DFS4urX2Ovzhnwls2T6vWyqi0wiweRFUxazMRzU8h6XvjGZC7B6I/7LR2hiC/j
ljPQywyusZMOXoWnRmnZDQXt5OtG2JFh2OcMj00YZOzlsZGWBX5nc0pQl+lwLCYB
+eb5ww1pqqvKRTr7sqRAcSk8Bpyks9Nq9GOmy2pRV4+ilLGu82t4qs/triU2K55J
pwjotFfAikKNP2R+hvYKm8p0lPCKUBXqrFragUhyZlVct+DMBumSovHKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkLccm8K9tEtaduGAzNBr/6dYqHMB8GA1UdIwQY
MBaAFAF8kGVGU6wVAChWKzJDFJG1IUfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYt
NzAxM2E2YzQzOTg1LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYtNzAxM2E2YzQzOTg1
LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLOD+n1f
2q8KhIjzEo8Ln6AfnoI4HLp4WOGU+aTbyDo6uexj+KmEzmviM4QcBe+DUcI2/O2E
qRxHOUZZmG1bMF/h2wgzi8aw+LIxsZOIP0tKAn+RiX1Wxu1hfNglJms5Fa0hv3fr
jEJmU6qS8FHDJ6V+KJeH/vIU061aDKe6B7QjAtm7S3ToXFoxrI1T7hDC0tGjEBAa
AiWsVxsQi5ncNsRWHMepDNIFyJ7I48/Qkx+B8Lvvzc0rkDY+pAoioqEufRfDrz6i
6/udUTqtliaUFOIFNgqhvvbrXgQ+WfxYYAKzeHzhHg43RrUNuxNCDijVTi7KRpXx
7LC+93CMm+AQNw==
-----END CERTIFICATE-----