Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File:                     3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier:          nVm/Sfr4NYWG+TUuDsoocjG26mDMcKSMx1E8MJfXR68=
Subject key identifier:   4B:E3:A9:6A:EA:B7:3F:4A:D2:69:8B:2F:E7:83:4F:39:1D:E8:04:59
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer:       /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial:       01962E9919281FAA0962D2B77CCC51EF3A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number:          057B
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: dxLgWviwrp/r+c7VkJKQXwHJVZKI7W5chNnJb6tS/go=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:19:28:1f:aa:09:62:d2:b7:7c:cc:51:ef:3a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=4be3a96aeab73f4ad2698b2fe7834f391de80459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:dc:13:28:4a:c1:22:12:be:ec:18:55:eb:
                    bb:19:1d:ec:bd:a1:b6:12:cb:06:88:42:74:7d:52:
                    22:0e:4d:99:ae:32:07:30:55:4c:ec:db:59:5f:90:
                    c0:8e:19:0a:23:e7:7b:fa:a5:e9:b0:f1:9f:40:94:
                    03:b5:3b:b2:4f:99:d5:63:d3:b9:43:02:83:46:5f:
                    c3:f0:ea:3d:77:bd:a3:ad:9a:7d:b3:91:10:d1:28:
                    f5:a5:32:09:e4:bb:be:5e:ff:ed:2e:45:22:08:17:
                    d6:3b:2a:3f:31:5f:c9:6d:a5:2e:7f:4c:4a:6e:0a:
                    f3:44:8b:2e:04:d4:92:7d:9e:35:99:5d:6c:bc:47:
                    32:61:a9:58:c9:4c:f2:55:19:f9:78:90:f4:7b:97:
                    9e:94:19:73:ad:da:0c:39:9f:04:6e:b1:90:74:21:
                    f9:5a:bf:7c:2b:94:d9:cb:c8:00:73:46:f1:a0:be:
                    8f:ba:a7:2f:f1:b6:01:01:29:f4:38:14:58:1b:97:
                    8e:e5:ce:53:ae:95:d9:62:78:dd:cd:43:bb:2b:c7:
                    a3:22:68:21:a8:02:cb:2a:de:82:b7:60:4d:b2:1b:
                    21:08:ce:ae:be:45:8f:f9:88:7b:8a:48:ec:fb:2e:
                    f7:82:76:ac:7d:c4:ba:39:c6:a5:3e:c4:9a:63:fa:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:A9:6A:EA:B7:3F:4A:D2:69:8B:2F:E7:83:4F:39:1D:E8:04:59
            X509v3 Authority Key Identifier:
                keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:32:ff:63:57:86:c8:dd:2e:11:4a:4e:11:29:6b:37:69:95:
         58:12:e2:f3:ee:97:47:e9:f1:8e:bb:2c:c6:ff:9d:fb:7f:77:
         8e:ed:39:65:75:7a:72:91:8d:60:3b:89:e2:66:7e:e1:2d:a6:
         b8:87:ed:85:6c:78:e5:8f:b6:51:42:80:dd:6a:7f:4e:1e:af:
         2a:92:06:92:30:fa:ee:0d:86:46:d1:c1:31:5c:65:fa:bd:bf:
         ac:45:37:44:65:d7:fd:7e:25:33:ed:3d:14:e9:12:1b:76:f9:
         a4:eb:ff:c5:42:4f:e5:d3:56:06:97:55:1b:88:93:0e:9f:92:
         93:d5:6b:cb:a3:58:6a:a5:bb:16:b5:5f:19:98:fe:13:58:0f:
         40:6c:8e:e4:57:8f:af:a6:72:43:ee:9e:09:4b:64:2c:0d:cd:
         00:99:53:a9:32:34:b3:c2:3d:12:b1:63:06:d5:cf:2e:e5:89:
         0e:96:e1:0e:86:99:de:cc:23:4a:da:6e:f5:98:02:1b:aa:17:
         d4:22:22:84:99:49:a2:95:98:c4:1a:89:e6:ab:28:e2:6a:88:
         05:5c:e2:40:a6:e3:40:1c:90:51:e7:c3:b5:ce:cf:49:f5:65:
         c3:9d:da:15:c6:14:53:1b:c3:a4:13:f9:e0:19:bc:4d:01:61:
         69:4e:b9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRkoH6oJYtK3fMxR7zqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNjYzg3MzVmNmVlYzAyM2E5ZjIzYTA0YjJlOTBkNTNh
OTIxNTIwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
Eyg0YmUzYTk2YWVhYjczZjRhZDI2OThiMmZlNzgzNGYzOTFkZTgwNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktHcEyhKwSISvuwYVeu7GR3svaG2
EssGiEJ0fVIiDk2ZrjIHMFVM7NtZX5DAjhkKI+d7+qXpsPGfQJQDtTuyT5nVY9O5
QwKDRl/D8Oo9d72jrZp9s5EQ0Sj1pTIJ5Lu+Xv/tLkUiCBfWOyo/MV/JbaUuf0xK
bgrzRIsuBNSSfZ41mV1svEcyYalYyUzyVRn5eJD0e5eelBlzrdoMOZ8EbrGQdCH5
Wr98K5TZy8gAc0bxoL6Puqcv8bYBASn0OBRYG5eO5c5TrpXZYnjdzUO7K8ejImgh
qALLKt6Ct2BNshshCM6uvkWP+Yh7ikjs+y73gnasfcS6OcalPsSaY/rhywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvjqWrqtz9K0mmLL+eDTzkd6ARZMB8GA1UdIwQY
MBaAFNwDzIc19u7AI6nyOgSy6Q1TqSFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2It
YzQ0NTNhZmIyOTMzLzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2ItYzQ0NTNhZmIyOTMz
LzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljL/Y1eG
yN0uEUpOESlrN2mVWBLi8+6XR+nxjrssxv+d+393ju05ZXV6cpGNYDuJ4mZ+4S2m
uIfthWx45Y+2UUKA3Wp/Th6vKpIGkjD67g2GRtHBMVxl+r2/rEU3RGXX/X4lM+09
FOkSG3b5pOv/xUJP5dNWBpdVG4iTDp+Sk9Vry6NYaqW7FrVfGZj+E1gPQGyO5FeP
r6ZyQ+6eCUtkLA3NAJlTqTI0s8I9ErFjBtXPLuWJDpbhDoaZ3swjStpu9ZgCG6oX
1CIihJlJopWYxBqJ5qso4mqIBVziQKbjQByQUefDtc7PSfVlw53aFcYUUxvDpBP5
4Bm8TQFhaU65Wg==
-----END CERTIFICATE-----