Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File:                     0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier:          /7hvKxNLG/xtRfANFPWTES7dbXfdFNe/s1VCNTLFLsQ=
Subject key identifier:   AB:DD:8F:C1:8E:35:03:5A:4B:8F:77:71:1A:3A:A7:AC:8B:97:6D:5C
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer:       /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial:       01962E9909A94479B939F4AD745DD1F5B5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: aAxGaPtqAuoDNuzrcLGboytyK92vjOYjMr6PYkgJLHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:09:a9:44:79:b9:39:f4:ad:74:5d:d1:f5:b5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=abdd8fc18e35035a4b8f77711a3aa7ac8b976d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:9f:d3:f7:7c:92:08:4b:83:7d:55:7a:11:
                    1b:61:dd:49:6c:38:89:0d:f9:26:99:64:bc:cd:4f:
                    80:71:8f:f8:bc:e6:78:db:28:bd:79:3f:5c:85:11:
                    a6:58:57:28:45:fe:95:eb:e1:7e:75:98:90:df:ab:
                    e7:44:7a:2f:c1:ce:be:c7:d9:4b:14:2c:34:44:82:
                    50:60:e7:93:e0:bf:68:b4:23:ae:25:0d:00:85:8b:
                    a4:50:4a:f1:47:f7:77:27:37:23:4a:c4:2b:be:7e:
                    f5:cc:11:20:34:44:c7:13:db:41:9c:64:a3:c1:cb:
                    85:ee:f2:5f:56:46:cd:bf:74:5a:e3:42:ec:c6:d4:
                    4f:d7:7d:1d:4d:4c:8f:42:85:4f:1d:ae:3a:63:bf:
                    56:97:d8:61:61:42:2e:45:a6:a1:48:82:1a:06:1f:
                    52:66:d0:e1:1d:d1:88:bb:b3:f6:86:ab:55:45:8a:
                    ac:ba:62:64:aa:cf:5a:c9:67:05:49:f4:de:12:15:
                    4a:f4:69:01:e4:7a:48:40:24:04:62:11:a2:8c:43:
                    d3:b7:02:21:62:c8:e1:3b:31:63:5c:cb:90:0d:48:
                    89:b6:e2:c2:3d:f3:de:72:10:cf:f2:18:23:0c:f0:
                    7d:06:e1:23:46:3b:33:20:c3:a8:ed:1f:8f:2b:4d:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DD:8F:C1:8E:35:03:5A:4B:8F:77:71:1A:3A:A7:AC:8B:97:6D:5C
            X509v3 Authority Key Identifier:
                keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:38:e4:af:00:b2:d3:5f:ee:ed:c3:c0:0e:1f:5c:0e:51:ed:
         57:57:76:59:f7:a2:f8:2b:d4:f3:4f:e3:dd:c8:8e:da:a5:62:
         0f:cc:c3:02:8e:63:fe:7f:4b:2f:20:8b:4b:b3:83:b0:14:36:
         01:79:94:6c:45:6b:88:2a:17:52:e0:c3:62:77:cb:4b:6a:b6:
         2f:a6:5f:2c:18:0d:2c:3c:c7:49:a0:fc:5a:2b:69:b9:c3:47:
         66:84:c0:00:1f:9b:63:a2:e1:b9:98:3d:57:59:df:89:09:0d:
         8b:bf:89:c4:63:0c:1a:91:e1:ad:10:70:03:85:56:79:d3:ac:
         48:12:58:62:e0:27:af:1c:b5:de:b0:bc:9f:86:27:5d:7e:56:
         d5:01:6f:22:0f:8c:0e:5b:d6:70:25:49:d2:23:92:12:20:fc:
         7f:69:04:f5:7c:cc:83:3b:4a:0b:92:e5:50:f5:58:52:51:0e:
         23:0c:f8:51:d9:e2:ae:d0:f4:17:c3:6c:72:14:87:bb:fe:45:
         2f:16:c6:39:5d:65:5c:25:ec:bd:f0:d8:24:fd:b7:b1:7e:2a:
         5e:af:fa:5b:cd:d1:2f:e9:ea:95:fe:b1:02:e5:92:72:55:a8:
         42:11:a2:71:3d:90:d3:86:7f:8d:17:47:7a:5c:57:d0:25:62:
         d0:2b:97:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQmpRHm5OfStdF3R9bX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi
MDNhYWQwHhcNMjUwNDEzMTAwMTQzWhcNMjUwNDE0MTAwMTQzWjAzMTEwLwYDVQQD
EyhhYmRkOGZjMThlMzUwMzVhNGI4Zjc3NzExYTNhYTdhYzhiOTc2ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2f0/d8kghLg31VehEbYd1JbDiJ
DfkmmWS8zU+AcY/4vOZ42yi9eT9chRGmWFcoRf6V6+F+dZiQ36vnRHovwc6+x9lL
FCw0RIJQYOeT4L9otCOuJQ0AhYukUErxR/d3JzcjSsQrvn71zBEgNETHE9tBnGSj
wcuF7vJfVkbNv3Ra40LsxtRP130dTUyPQoVPHa46Y79Wl9hhYUIuRaahSIIaBh9S
ZtDhHdGIu7P2hqtVRYqsumJkqs9ayWcFSfTeEhVK9GkB5HpIQCQEYhGijEPTtwIh
YsjhOzFjXMuQDUiJtuLCPfPechDP8hgjDPB9BuEjRjszIMOo7R+PK03BlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvdj8GONQNaS493cRo6p6yLl21cMB8GA1UdIwQY
MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt
OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0
LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjjkrwCy
01/u7cPADh9cDlHtV1d2Wfei+CvU80/j3ciO2qViD8zDAo5j/n9LLyCLS7ODsBQ2
AXmUbEVriCoXUuDDYnfLS2q2L6ZfLBgNLDzHSaD8WitpucNHZoTAAB+bY6LhuZg9
V1nfiQkNi7+JxGMMGpHhrRBwA4VWedOsSBJYYuAnrxy13rC8n4YnXX5W1QFvIg+M
DlvWcCVJ0iOSEiD8f2kE9XzMgztKC5LlUPVYUlEOIwz4UdnirtD0F8NschSHu/5F
LxbGOV1lXCXsvfDYJP23sX4qXq/6W83RL+nqlf6xAuWSclWoQhGicT2Q04Z/jRdH
elxX0CVi0CuXjA==
-----END CERTIFICATE-----