Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft
File:                     d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft (raw, json)
Hash identifier:          5KJBlQMBrHf+MScAOs9jl+rR3AYcAnglIg2Oj1pq5M0=
Subject key identifier:   AB:16:10:F9:E7:C2:CE:F7:69:93:B7:50:D4:A1:B4:63:E3:AF:A1:72
Authority key identifier: 77:DC:30:1B:3C:41:33:1B:8B:48:F8:26:F5:87:1B:1D:85:EC:35:98
Certificate issuer:       /CN=77dc301b3c41331b8b48f826f5871b1d85ec3598
Certificate serial:       01962DF3EAD4A70039D4563B571874ECADA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9wwGzxBMxuLSPgm9YcbHYXsNZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: d9wwGzxBMxuLSPgm9YcbHYXsNZg.crl (hash: mSficrpsFf3Lo0bIv+NUWoyw1jDHR7PNHDUyGXchp6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:d4:a7:00:39:d4:56:3b:57:18:74:ec:ad:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dc301b3c41331b8b48f826f5871b1d85ec3598
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=ab1610f9e7c2cef76993b750d4a1b463e3afa172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:2d:9a:ef:a8:fd:e1:0b:80:7e:6e:7b:55:
                    55:1b:f8:76:df:ec:86:4f:2b:86:b8:89:68:a0:8c:
                    6f:7a:f2:dc:d6:40:f0:e3:1a:03:63:13:6c:f3:80:
                    a9:9c:78:07:29:69:18:45:d4:ac:0c:d1:a2:0c:b4:
                    db:bd:9c:a9:e2:57:ab:3a:43:03:bb:cb:95:61:40:
                    b2:5c:fe:b9:24:b6:bf:71:59:b9:35:7f:5c:ed:8b:
                    03:ae:04:f9:7c:a6:69:dc:6a:78:a1:d3:4b:c1:63:
                    72:de:66:11:5b:01:41:ef:53:fd:2e:29:06:3c:f1:
                    2d:f8:57:85:ba:b1:23:4b:14:22:73:a6:fd:ae:dc:
                    f0:10:59:10:51:96:34:a6:6d:4f:27:a8:db:b4:60:
                    2f:fa:f1:23:83:ab:c6:21:28:bd:9d:4d:db:94:69:
                    bb:05:83:a2:fe:d2:7a:43:fd:db:c0:43:34:42:75:
                    d3:64:49:c4:83:00:a3:c2:e1:e1:ec:91:91:e3:3f:
                    78:63:05:f8:7d:38:06:44:9f:1a:05:b0:fc:55:79:
                    df:2c:98:ba:ed:48:2e:98:6b:50:b9:0b:c5:66:5c:
                    3a:3f:a0:37:b1:4a:16:d0:4b:6b:d3:60:85:ee:12:
                    45:fb:11:f1:c1:48:67:ef:7c:80:04:c7:25:36:f6:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:16:10:F9:E7:C2:CE:F7:69:93:B7:50:D4:A1:B4:63:E3:AF:A1:72
            X509v3 Authority Key Identifier:
                keyid:77:DC:30:1B:3C:41:33:1B:8B:48:F8:26:F5:87:1B:1D:85:EC:35:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9wwGzxBMxuLSPgm9YcbHYXsNZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e792b0-76c2-4ce5-a45f-2cd5fac2c44e/1/d9wwGzxBMxuLSPgm9YcbHYXsNZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b3:bc:e2:d4:a7:87:ef:8b:8d:8b:57:89:64:9a:01:ce:cf:
         63:11:78:4b:7d:6e:a6:a8:15:ac:e1:24:58:f7:d9:0f:ed:d5:
         4a:65:b2:2f:82:e5:62:69:de:86:bf:bd:2d:83:58:ba:a2:1d:
         fd:27:63:18:64:24:3a:73:6b:86:1d:98:65:8a:d9:60:c1:ec:
         4a:3f:67:69:de:04:dc:2b:3e:6a:e6:2e:f1:08:ae:a3:0f:8e:
         ed:c1:92:79:b3:c2:04:6e:93:c1:25:d3:f9:e8:e3:b5:a7:2c:
         20:88:40:07:9a:7c:07:dd:94:ab:e0:f5:2d:f3:cc:84:7e:d5:
         73:87:b0:03:4b:e1:d0:eb:54:c6:f9:2a:86:c2:15:f4:37:a0:
         41:9e:f6:eb:6a:19:05:db:6d:63:ba:5e:49:d1:ca:36:d7:ae:
         da:62:5e:e3:e2:24:7c:32:7c:74:91:35:20:02:e6:cc:ac:59:
         0c:48:ae:4c:48:3a:ad:e0:44:93:48:cc:71:a4:ec:2b:8a:74:
         31:f5:a9:ee:39:45:2c:a9:11:3b:20:b6:7a:94:a8:c9:fe:f4:
         f4:42:60:a6:6e:1f:f6:d3:58:ff:21:01:42:86:7f:67:7a:87:
         ee:b8:c2:89:87:ed:87:83:1c:d8:1f:4f:26:2f:a4:63:d7:ad:
         b6:20:ae:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+rUpwA51FY7Vxh07K2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGMzMDFiM2M0MTMzMWI4YjQ4ZjgyNmY1ODcxYjFkODVl
YzM1OTgwHhcNMjUwNDEzMDcwMTIyWhcNMjUwNDE0MDcwMTIyWjAzMTEwLwYDVQQD
EyhhYjE2MTBmOWU3YzJjZWY3Njk5M2I3NTBkNGExYjQ2M2UzYWZhMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIEtmu+o/eELgH5ue1VVG/h23+yG
TyuGuIlooIxvevLc1kDw4xoDYxNs84CpnHgHKWkYRdSsDNGiDLTbvZyp4lerOkMD
u8uVYUCyXP65JLa/cVm5NX9c7YsDrgT5fKZp3Gp4odNLwWNy3mYRWwFB71P9LikG
PPEt+FeFurEjSxQic6b9rtzwEFkQUZY0pm1PJ6jbtGAv+vEjg6vGISi9nU3blGm7
BYOi/tJ6Q/3bwEM0QnXTZEnEgwCjwuHh7JGR4z94YwX4fTgGRJ8aBbD8VXnfLJi6
7UgumGtQuQvFZlw6P6A3sUoW0Etr02CF7hJF+xHxwUhn73yABMclNvaq0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsWEPnnws73aZO3UNShtGPjr6FyMB8GA1UdIwQY
MBaAFHfcMBs8QTMbi0j4JvWHGx2F7DWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDl3d0d6eEJNeHVMU1BnbTlZY2JIWVhzTlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lNzkyYjAtNzZjMi00Y2U1LWE0NWYt
MmNkNWZhYzJjNDRlLzEvZDl3d0d6eEJNeHVMU1BnbTlZY2JIWVhzTlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lNzkyYjAtNzZjMi00Y2U1LWE0NWYtMmNkNWZhYzJjNDRl
LzEvZDl3d0d6eEJNeHVMU1BnbTlZY2JIWVhzTlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLO84tSn
h++LjYtXiWSaAc7PYxF4S31upqgVrOEkWPfZD+3VSmWyL4LlYmnehr+9LYNYuqId
/SdjGGQkOnNrhh2YZYrZYMHsSj9nad4E3Cs+auYu8Qiuow+O7cGSebPCBG6TwSXT
+ejjtacsIIhAB5p8B92Uq+D1LfPMhH7Vc4ewA0vh0OtUxvkqhsIV9DegQZ7262oZ
BdttY7peSdHKNteu2mJe4+IkfDJ8dJE1IALmzKxZDEiuTEg6reBEk0jMcaTsK4p0
MfWp7jlFLKkROyC2epSoyf709EJgpm4f9tNY/yEBQoZ/Z3qH7rjCiYfth4Mc2B9P
Ji+kY9ettiCu4g==
-----END CERTIFICATE-----