Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          mxbeoEc5CAw1S+haWc8VRSoENindhnkYcJV0FAnrEZo=
Subject key identifier:   21:19:50:06:06:F6:EC:72:D7:F7:D4:5E:30:D7:80:58:00:4B:5D:48
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       01962E61B0A8894B85645C2F9B95EBB32CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          08AA
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: O/dt51RqhKkakCcwy1ree2w3aIkhr++VgsUIPwe8tgE=)
                          2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
                          3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
                          4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:a8:89:4b:85:64:5c:2f:9b:95:eb:b3:2c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=2119500606f6ec72d7f7d45e30d78058004b5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:3d:79:20:72:26:12:2a:15:7f:87:64:0a:
                    38:53:df:18:3c:7b:a5:b9:48:4e:79:3c:9e:1d:5d:
                    7b:4e:55:48:3c:ba:f7:ef:96:e0:9f:8a:80:91:03:
                    37:b3:47:3d:30:5a:4a:af:69:fd:ce:aa:67:9d:e5:
                    a6:83:e3:d2:07:6c:92:e0:c6:e5:19:70:c8:a9:a4:
                    20:5f:b1:19:21:cc:5a:6b:81:c1:06:28:fb:ec:96:
                    e2:d6:b9:68:25:93:4c:48:7d:f0:df:3b:6a:8f:f7:
                    56:31:2f:9f:92:d7:d4:d7:2e:a8:44:7b:e2:7d:91:
                    64:99:63:08:77:82:24:cf:a7:0c:bf:c6:83:c5:b9:
                    23:0c:e4:d9:b4:74:ac:af:ae:87:5d:2d:9c:c0:da:
                    93:b8:00:8b:05:97:ea:21:b7:fb:7f:23:91:cb:73:
                    32:8f:9a:f7:cf:a8:4e:0a:32:0f:55:6a:29:89:40:
                    33:17:24:f1:4e:cd:26:b5:4c:61:86:c6:29:a4:04:
                    97:ca:17:2b:b9:7c:1c:ad:1c:63:75:18:76:d9:d2:
                    48:5c:a2:ba:b9:fe:3d:83:aa:cd:c0:de:c0:7f:05:
                    7e:3b:3b:43:2e:2c:26:0a:68:a1:b0:44:6e:ec:93:
                    9a:ef:ed:c9:00:0f:55:d5:7a:a3:83:e8:e6:0f:0c:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:19:50:06:06:F6:EC:72:D7:F7:D4:5E:30:D7:80:58:00:4B:5D:48
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:68:b6:8b:a7:8f:8c:2a:da:80:cc:0d:7f:68:67:44:42:
         59:3f:b2:2d:5b:fa:b6:0a:0d:40:a1:99:7c:9e:aa:32:0b:41:
         7f:ca:b5:4d:8f:fc:de:a0:1b:b9:0a:12:3b:5a:64:a1:a1:c2:
         80:be:a9:c5:6e:84:a1:17:be:51:6d:11:94:e2:6a:2c:fb:44:
         b3:b8:63:48:4b:ed:cc:f8:e5:b5:c7:5d:80:89:64:52:c0:4d:
         6a:d7:13:78:19:e6:38:5c:8f:cc:18:90:ed:5c:0e:df:d6:3b:
         a1:5d:f7:02:3f:de:14:b4:96:1a:70:1d:68:95:2e:5b:f9:87:
         4c:8f:64:30:3b:31:fa:af:9d:d2:39:91:27:5e:4a:86:02:1b:
         7a:1e:57:5c:e2:41:c7:e2:aa:98:73:f0:a3:36:53:fc:56:53:
         b9:76:b3:ec:21:20:aa:f2:e9:c5:e6:b5:4f:c8:44:fc:e6:04:
         d6:46:e0:29:8f:7b:b5:4c:78:d7:98:a3:db:ef:b0:50:97:78:
         3e:34:cb:fe:44:86:d8:0e:f3:7c:94:29:ce:07:53:42:12:2e:
         5f:a1:2b:db:c3:c7:04:9f:64:ab:f9:03:cd:1a:85:c9:29:54:
         ab:ed:6b:26:f4:a4:cd:fd:85:d5:1e:40:93:65:25:b4:6a:17:
         20:49:1f:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbCoiUuFZFwvm5XrsyzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk
ODcwOTUwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
EygyMTE5NTAwNjA2ZjZlYzcyZDdmN2Q0NWUzMGQ3ODA1ODAwNGI1ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bs9eSByJhIqFX+HZAo4U98YPHul
uUhOeTyeHV17TlVIPLr375bgn4qAkQM3s0c9MFpKr2n9zqpnneWmg+PSB2yS4Mbl
GXDIqaQgX7EZIcxaa4HBBij77Jbi1rloJZNMSH3w3ztqj/dWMS+fktfU1y6oRHvi
fZFkmWMId4Ikz6cMv8aDxbkjDOTZtHSsr66HXS2cwNqTuACLBZfqIbf7fyORy3My
j5r3z6hOCjIPVWopiUAzFyTxTs0mtUxhhsYppASXyhcruXwcrRxjdRh22dJIXKK6
uf49g6rNwN7AfwV+OztDLiwmCmihsERu7JOa7+3JAA9V1Xqjg+jmDwwpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEZUAYG9uxy1/fUXjDXgFgAS11IMB8GA1UdIwQY
MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt
YTc0ZTRhODg3ODA0LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0
LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSxotoun
j4wq2oDMDX9oZ0RCWT+yLVv6tgoNQKGZfJ6qMgtBf8q1TY/83qAbuQoSO1pkoaHC
gL6pxW6EoRe+UW0RlOJqLPtEs7hjSEvtzPjltcddgIlkUsBNatcTeBnmOFyPzBiQ
7VwO39Y7oV33Aj/eFLSWGnAdaJUuW/mHTI9kMDsx+q+d0jmRJ15KhgIbeh5XXOJB
x+KqmHPwozZT/FZTuXaz7CEgqvLpxea1T8hE/OYE1kbgKY97tUx415ij2++wUJd4
PjTL/kSG2A7zfJQpzgdTQhIuX6Er28PHBJ9kq/kDzRqFySlUq+1rJvSkzf2F1R5A
k2UltGoXIEkfSQ==
-----END CERTIFICATE-----