Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
File:                     n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft (raw, json)
Hash identifier:          NQK9UTtcd40mTW9gjjhp/xEVCxRWzvTC60+DpHc/TbA=
Subject key identifier:   64:99:0A:13:AD:2E:7C:78:A8:58:5D:FA:46:FA:31:84:47:54:E5:B9
Authority key identifier: 9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A
Certificate issuer:       /CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
Certificate serial:       01962F06BA608E631D725E69F66D39134C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft
Manifest number:          083C
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl (hash: CnBbtBwHUtQj6ukNJh5duGxI5fq6khhwerpvL7xHuH8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ba:60:8e:63:1d:72:5e:69:f6:6d:39:13:4c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f74eedc10b2a1028a6d4bd01c74ef031b21719a
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=64990a13ad2e7c78a8585dfa46fa31844754e5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:42:3e:4f:e9:db:05:65:c5:5f:97:00:ff:
                    8f:4a:91:7b:f9:1e:c3:ce:84:d0:db:e3:c4:4f:37:
                    df:c0:83:60:d6:9b:e4:d6:42:64:a4:23:6a:e8:1e:
                    f9:d6:b6:fa:5f:c9:75:9e:c5:45:a5:6e:28:8f:00:
                    3e:07:ec:53:cd:05:dd:6c:0b:b6:4b:1e:5d:b5:7b:
                    b0:0e:10:bc:b3:10:2e:e4:b9:6a:71:85:ee:36:71:
                    74:1a:c3:2b:6b:96:29:83:bd:3d:b7:6b:ab:1b:80:
                    c0:bb:57:27:e2:5f:0d:df:ba:d1:68:ee:c1:52:e1:
                    18:23:31:80:42:11:70:b0:e5:d6:68:ac:21:db:73:
                    66:d2:28:5b:b7:42:bd:ee:8e:d3:e8:e9:a9:20:c6:
                    7a:fb:bd:32:aa:94:2d:f5:40:af:00:45:17:34:cf:
                    81:29:76:c9:b2:8c:8e:c0:a7:47:76:d9:f0:ce:08:
                    d4:a8:2f:01:4a:e4:ee:0a:d2:92:ef:0d:0c:72:18:
                    ba:c4:5b:ea:d6:a8:69:a2:f2:7c:17:6b:1f:07:1e:
                    9e:89:f8:6c:68:a4:42:af:cd:a5:ce:fe:7c:97:2f:
                    cc:32:91:f5:7c:2c:2f:d3:33:b5:44:77:4d:f4:67:
                    3c:5c:23:29:a5:60:51:4d:72:23:12:93:0e:15:17:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:0A:13:AD:2E:7C:78:A8:58:5D:FA:46:FA:31:84:47:54:E5:B9
            X509v3 Authority Key Identifier:
                keyid:9F:74:EE:DC:10:B2:A1:02:8A:6D:4B:D0:1C:74:EF:03:1B:21:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Tu3BCyoQKKbUvQHHTvAxshcZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/163122-73eb-4d62-a9c8-2549b5d33384/1/n3Tu3BCyoQKKbUvQHHTvAxshcZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ea:f3:30:74:d5:67:df:f8:1c:8a:a9:80:de:bb:7f:a8:f9:
         7e:25:59:9f:6f:4b:9e:ee:33:6e:ab:02:3a:a1:91:3c:de:62:
         8a:f7:a9:e6:78:ef:46:27:67:21:c2:22:ce:79:1a:4f:82:d4:
         84:76:fc:f6:4f:9d:64:ae:d8:25:93:de:d3:59:90:db:05:4d:
         ae:f5:0a:b8:ab:ab:5b:43:fb:22:97:18:f5:0b:1d:8d:3f:ed:
         6c:08:76:11:ea:2e:2d:f9:1b:16:db:74:40:b5:08:13:f9:df:
         de:de:d9:20:b7:1e:6a:c3:2d:3f:ab:4a:c5:65:1f:c7:2a:5f:
         9a:6a:68:cc:32:88:9d:76:9a:10:e6:99:2b:15:2a:a1:a3:5a:
         9a:a5:53:b2:0a:d5:e4:82:61:f0:69:97:fc:33:67:73:78:51:
         53:45:52:a3:83:ae:d8:23:83:33:42:e4:c7:cb:5b:0a:f3:9d:
         07:ee:98:92:ce:60:07:5a:7e:a4:64:17:12:13:c3:78:e2:3a:
         6d:f9:ba:55:6a:b9:f9:82:86:b1:43:8d:25:4f:98:14:be:44:
         d2:fa:57:09:a3:1f:0c:cf:bb:de:cd:f2:3c:21:3b:1f:36:ea:
         b8:2f:fd:74:f0:27:7b:7d:1f:be:df:0d:a1:6d:c1:b8:df:a4:
         ca:4f:6a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrpgjmMdcl5p9m05E0yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzRlZWRjMTBiMmExMDI4YTZkNGJkMDFjNzRlZjAzMWIy
MTcxOWEwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
Eyg2NDk5MGExM2FkMmU3Yzc4YTg1ODVkZmE0NmZhMzE4NDQ3NTRlNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFlCPk/p2wVlxV+XAP+PSpF7+R7D
zoTQ2+PETzffwINg1pvk1kJkpCNq6B751rb6X8l1nsVFpW4ojwA+B+xTzQXdbAu2
Sx5dtXuwDhC8sxAu5LlqcYXuNnF0GsMra5Ypg709t2urG4DAu1cn4l8N37rRaO7B
UuEYIzGAQhFwsOXWaKwh23Nm0ihbt0K97o7T6OmpIMZ6+70yqpQt9UCvAEUXNM+B
KXbJsoyOwKdHdtnwzgjUqC8BSuTuCtKS7w0Mchi6xFvq1qhpovJ8F2sfBx6eifhs
aKRCr82lzv58ly/MMpH1fCwv0zO1RHdN9Gc8XCMppWBRTXIjEpMOFRdq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSZChOtLnx4qFhd+kb6MYRHVOW5MB8GA1UdIwQY
MBaAFJ907twQsqECim1L0Bx07wMbIXGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xNjMxMjItNzNlYi00ZDYyLWE5Yzgt
MjU0OWI1ZDMzMzg0LzEvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xNjMxMjItNzNlYi00ZDYyLWE5YzgtMjU0OWI1ZDMzMzg0
LzEvbjNUdTNCQ3lvUUtLYlV2UUhIVHZBeHNoY1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAderzMHTV
Z9/4HIqpgN67f6j5fiVZn29Lnu4zbqsCOqGRPN5iivep5njvRidnIcIiznkaT4LU
hHb89k+dZK7YJZPe01mQ2wVNrvUKuKurW0P7IpcY9QsdjT/tbAh2EeouLfkbFtt0
QLUIE/nf3t7ZILceasMtP6tKxWUfxypfmmpozDKInXaaEOaZKxUqoaNamqVTsgrV
5IJh8GmX/DNnc3hRU0VSo4Ou2CODM0Lkx8tbCvOdB+6Yks5gB1p+pGQXEhPDeOI6
bfm6VWq5+YKGsUONJU+YFL5E0vpXCaMfDM+73s3yPCE7HzbquC/9dPAne30fvt8N
oW3BuN+kyk9qow==
-----END CERTIFICATE-----