Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
File:                     tkDbwv_PXWNFicBEAV1xdcuv8-0.mft (raw, json)
Hash identifier:          xzN+ng/G45+wlCn1yEQ3biT9VNu8oaO6YUuiXj0+VYo=
Subject key identifier:   DC:C4:D6:E1:33:68:0E:88:AC:5B:AF:A4:5C:7F:CF:92:0A:E4:75:52
Authority key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
Certificate issuer:       /CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Certificate serial:       01962F3DADA01D5F304AA840B317B8DC867A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
Manifest number:          0F89
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: tkDbwv_PXWNFicBEAV1xdcuv8-0.crl (hash: dYpz2vSo5Ze4YYf1es7NLU0cUfr1ivlyIt2Fe5VTyaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ad:a0:1d:5f:30:4a:a8:40:b3:17:b8:dc:86:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=dcc4d6e133680e88ac5bafa45c7fcf920ae47552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:0b:06:7e:dd:d7:63:73:89:b8:cf:5e:8d:
                    21:07:c8:40:e1:b8:dc:ca:1f:69:45:46:67:35:40:
                    0f:71:ed:20:cd:8a:2d:e2:1c:95:63:50:84:1a:9d:
                    77:b4:80:ad:91:11:28:f0:b3:da:7c:34:bd:39:3c:
                    6e:5e:f0:f5:3f:d6:b3:10:e5:f9:73:27:de:ba:58:
                    10:c0:e4:74:8f:d3:c8:f0:02:3d:e4:45:a7:68:3e:
                    af:06:96:ab:a4:c4:7e:4e:0f:42:2b:63:e4:bd:8c:
                    b6:ed:bf:77:86:2d:68:f4:26:8a:e1:79:32:30:d4:
                    57:04:6b:32:ed:2d:2f:07:a1:00:88:54:e3:a5:52:
                    a4:68:91:e8:73:82:0e:bf:72:a3:4e:6e:27:c3:2e:
                    66:e7:4c:0c:a5:cb:c0:26:10:29:f1:c9:6e:21:39:
                    b6:50:77:2a:f3:4a:f7:38:36:65:78:44:07:48:12:
                    11:ba:64:35:d4:20:a8:a0:54:54:fa:45:79:10:c3:
                    1e:94:8f:26:83:06:13:e9:8a:28:6c:71:22:b3:5b:
                    b7:a2:d7:d5:09:6e:e6:2d:74:8a:d2:b5:37:46:78:
                    fa:b8:99:d1:3d:fc:98:74:a9:27:22:9f:16:3f:59:
                    ed:db:ea:8e:9f:85:41:2f:7c:46:0a:6f:8f:8f:41:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:D6:E1:33:68:0E:88:AC:5B:AF:A4:5C:7F:CF:92:0A:E4:75:52
            X509v3 Authority Key Identifier:
                keyid:B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:77:fa:d9:e6:a7:a4:91:77:5f:84:ba:25:4b:90:62:7f:3a:
         5a:ea:af:aa:f6:f9:23:10:53:b0:5c:6c:50:be:de:05:c9:cc:
         47:17:6e:ff:24:69:34:18:a4:c1:6b:5d:f4:93:5a:72:88:7b:
         67:23:3b:29:4f:b1:63:ad:17:d9:eb:72:ff:7f:5f:c4:46:56:
         2a:7a:9e:6d:c8:fe:ab:33:7e:6d:fe:d5:03:e8:ce:91:ed:b2:
         d7:79:83:50:16:2d:15:22:aa:5c:94:44:ea:7b:ff:1a:32:ec:
         7b:5d:ef:5a:94:35:e4:4a:3b:22:ab:2b:b6:95:6e:a5:9a:6a:
         7f:fc:01:24:e4:5d:77:7a:a3:b2:c1:03:58:7e:a4:d5:8c:ad:
         bb:1e:ed:d0:d6:fe:5b:4d:d1:43:3a:21:ec:bd:3f:93:57:9f:
         dc:c8:4d:93:02:89:0a:7b:9d:a1:c1:45:a7:82:9b:fe:03:d2:
         6c:47:d7:14:b2:97:ac:6b:37:b3:28:27:e2:49:24:a4:6d:16:
         a2:96:08:e0:fd:0e:e8:f7:cc:e9:61:14:9f:c1:1c:e8:3a:ab:
         04:c2:2b:8f:f3:38:39:f0:75:92:26:15:6c:0d:1a:98:10:c7:
         5c:b0:0b:6c:c8:b7:31:7c:70:fc:a4:d6:2a:35:5e:95:15:25:
         6e:c2:6a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPa2gHV8wSqhAsxe43IZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDBkYmMyZmZjZjVkNjM0NTg5YzA0NDAxNWQ3MTc1Y2Jh
ZmYzZWQwHhcNMjUwNDEzMTMwMTMzWhcNMjUwNDE0MTMwMTMzWjAzMTEwLwYDVQQD
EyhkY2M0ZDZlMTMzNjgwZTg4YWM1YmFmYTQ1YzdmY2Y5MjBhZTQ3NTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntsLBn7d12NzibjPXo0hB8hA4bjc
yh9pRUZnNUAPce0gzYot4hyVY1CEGp13tICtkREo8LPafDS9OTxuXvD1P9azEOX5
cyfeulgQwOR0j9PI8AI95EWnaD6vBparpMR+Tg9CK2PkvYy27b93hi1o9CaK4Xky
MNRXBGsy7S0vB6EAiFTjpVKkaJHoc4IOv3KjTm4nwy5m50wMpcvAJhAp8cluITm2
UHcq80r3ODZleEQHSBIRumQ11CCooFRU+kV5EMMelI8mgwYT6YoobHEis1u3otfV
CW7mLXSK0rU3Rnj6uJnRPfyYdKknIp8WP1nt2+qOn4VBL3xGCm+Pj0H3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzE1uEzaA6IrFuvpFx/z5IK5HVSMB8GA1UdIwQY
MBaAFLZA28L/z11jRYnARAFdcXXLr/PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUt
NmNiYjc3YmFhMDJkLzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUtNmNiYjc3YmFhMDJk
LzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHf62ean
pJF3X4S6JUuQYn86Wuqvqvb5IxBTsFxsUL7eBcnMRxdu/yRpNBikwWtd9JNacoh7
ZyM7KU+xY60X2ety/39fxEZWKnqebcj+qzN+bf7VA+jOke2y13mDUBYtFSKqXJRE
6nv/GjLse13vWpQ15Eo7IqsrtpVupZpqf/wBJORdd3qjssEDWH6k1Yytux7t0Nb+
W03RQzoh7L0/k1ef3MhNkwKJCnudocFFp4Kb/gPSbEfXFLKXrGs3sygn4kkkpG0W
opYI4P0O6PfM6WEUn8Ec6DqrBMIrj/M4OfB1kiYVbA0amBDHXLALbMi3MXxw/KTW
KjVelRUlbsJqCw==
-----END CERTIFICATE-----