Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          IeXfEyy8SoKBfcotUyJJORFosPtVLRueH1hNglop6bw=
Subject key identifier:   21:77:27:85:38:67:A0:E3:2A:77:6D:44:A7:16:E9:DD:A2:3A:5C:D0
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       01962E995E1C4D9572D2BA44C45C0E032F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0AD6
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: goZmoCG4WlTPzgJn8YGwSYR8m2vF0RaquBGBHTXqsmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5e:1c:4d:95:72:d2:ba:44:c4:5c:0e:03:2f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=217727853867a0e32a776d44a716e9dda23a5cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:a5:0b:f8:10:8c:73:6c:49:69:eb:ef:0b:
                    09:a2:28:62:7d:e2:36:77:30:27:31:c4:fe:3e:0a:
                    66:69:84:ce:28:2e:f1:83:90:4c:e7:b2:f5:08:f2:
                    92:8c:51:68:79:39:db:28:eb:b9:1d:2d:54:53:5c:
                    85:6c:a6:72:d9:f2:0d:4f:fc:89:cf:90:2c:2f:af:
                    d0:4b:7e:d0:84:ad:88:53:35:e4:2c:9b:cd:fa:10:
                    96:91:50:dd:03:9b:13:af:52:93:17:c9:a3:83:09:
                    0c:32:f3:83:82:7d:07:48:b7:ba:36:d9:8b:82:69:
                    f5:90:d6:bf:6c:73:91:8e:b5:d4:85:72:15:fa:05:
                    2c:b5:98:53:26:95:ae:88:78:12:18:3c:1f:bc:65:
                    74:b1:14:a3:5b:a3:54:e1:47:ea:90:e7:27:81:a4:
                    e0:f5:ad:2b:b4:50:9f:54:ad:88:08:50:5e:06:13:
                    d0:24:7d:31:5a:89:5f:e2:c0:da:6c:1d:f3:df:52:
                    ce:d1:95:39:c9:50:4c:d6:23:36:87:84:92:63:e3:
                    78:b4:47:4d:91:e9:94:22:f4:35:25:fe:b6:49:de:
                    a5:33:4a:24:d8:0e:85:4e:9b:73:49:20:7f:c3:81:
                    29:bb:5c:d8:74:98:7e:50:c6:9a:49:37:6f:13:25:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:27:85:38:67:A0:E3:2A:77:6D:44:A7:16:E9:DD:A2:3A:5C:D0
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:af:16:92:1f:8a:07:7b:11:82:c1:5e:8d:08:37:86:a0:47:
         1c:dc:05:9d:66:d1:cb:6d:8b:b2:55:20:95:35:e3:e5:f3:91:
         09:29:53:b1:ee:1a:01:9b:21:f9:73:f2:04:ec:d2:05:3e:c1:
         70:66:3d:4b:5d:ef:d1:bc:20:13:19:a3:25:97:b9:54:e7:cd:
         9b:18:ac:85:aa:29:b8:bc:cb:6f:7e:28:b1:a2:78:18:9f:a3:
         2c:1c:e1:1e:5f:00:bf:76:df:c2:e6:ec:07:83:27:9d:57:63:
         55:8a:7e:98:f8:b7:da:be:5b:ed:a9:b5:f8:5c:f4:08:b0:30:
         e2:18:d6:59:24:61:8d:02:f0:36:b3:08:e7:50:24:57:ee:f7:
         cb:f8:73:8f:4c:03:54:86:d9:95:f1:e6:7a:df:4f:32:8c:ec:
         3f:a9:a3:98:53:81:76:36:12:5f:89:98:4e:e2:ed:64:6c:96:
         03:6f:83:f7:cd:99:af:0c:44:6f:f7:60:cc:d1:28:2b:ee:04:
         aa:8f:98:e4:93:8b:4f:60:b4:23:3b:74:bd:87:0b:68:6c:08:
         e6:80:92:91:98:41:aa:a2:c9:02:fa:c0:c5:cc:c5:ba:f0:a7:
         5f:fd:e6:fd:ee:9e:f3:98:2e:2a:7f:f7:52:ec:79:a9:aa:ba:
         d8:8e:95:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumV4cTZVy0rpExFwOAy9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2
ZTZjYTkwHhcNMjUwNDEzMTAwMjA1WhcNMjUwNDE0MTAwMjA1WjAzMTEwLwYDVQQD
EygyMTc3Mjc4NTM4NjdhMGUzMmE3NzZkNDRhNzE2ZTlkZGEyM2E1Y2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDKlC/gQjHNsSWnr7wsJoihifeI2
dzAnMcT+PgpmaYTOKC7xg5BM57L1CPKSjFFoeTnbKOu5HS1UU1yFbKZy2fINT/yJ
z5AsL6/QS37QhK2IUzXkLJvN+hCWkVDdA5sTr1KTF8mjgwkMMvODgn0HSLe6NtmL
gmn1kNa/bHORjrXUhXIV+gUstZhTJpWuiHgSGDwfvGV0sRSjW6NU4UfqkOcngaTg
9a0rtFCfVK2ICFBeBhPQJH0xWolf4sDabB3z31LO0ZU5yVBM1iM2h4SSY+N4tEdN
kemUIvQ1Jf62Sd6lM0ok2A6FTptzSSB/w4Epu1zYdJh+UMaaSTdvEyXWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF3J4U4Z6DjKndtRKcW6d2iOlzQMB8GA1UdIwQY
MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt
MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh
LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh68Wkh+K
B3sRgsFejQg3hqBHHNwFnWbRy22LslUglTXj5fORCSlTse4aAZsh+XPyBOzSBT7B
cGY9S13v0bwgExmjJZe5VOfNmxishaopuLzLb34osaJ4GJ+jLBzhHl8Av3bfwubs
B4MnnVdjVYp+mPi32r5b7am1+Fz0CLAw4hjWWSRhjQLwNrMI51AkV+73y/hzj0wD
VIbZlfHmet9PMozsP6mjmFOBdjYSX4mYTuLtZGyWA2+D982ZrwxEb/dgzNEoK+4E
qo+Y5JOLT2C0Izt0vYcLaGwI5oCSkZhBqqLJAvrAxczFuvCnX/3m/e6e85guKn/3
Uux5qaq62I6Vkg==
-----END CERTIFICATE-----