Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File:                     8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier:          2u/nL3UoBu8BCAnVXpBYTGI7q5n0TGvgd3wQJNlKXKI=
Subject key identifier:   73:C1:21:AD:1D:15:3E:80:B0:B3:2E:EF:D6:E5:18:87:65:40:4E:90
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer:       /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial:       01962F3D79A740C7D9DFE132C9ABDC5730A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number:          03D4
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: 6L4dXFnrQNV/HrjZcJeeijyZqEdjj6qxDhgrh5AL2oY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:79:a7:40:c7:d9:df:e1:32:c9:ab:dc:57:30:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=73c121ad1d153e80b0b32eefd6e5188765404e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:de:e2:c5:93:da:32:1f:ff:d9:9b:32:26:
                    f9:1b:06:f5:96:0c:83:d5:bb:31:b2:34:71:2f:76:
                    81:05:59:3a:ce:78:56:ab:38:06:a7:d7:95:cd:38:
                    26:86:23:2b:b9:9e:cf:49:c5:c9:c0:a7:bc:be:4d:
                    04:2e:e6:0a:de:78:4d:d3:26:90:26:b9:78:54:41:
                    02:6d:36:b3:b5:73:44:4b:0d:d2:be:72:f8:67:4c:
                    fa:15:86:f1:9a:93:40:c4:a8:7e:70:4e:b4:bd:0b:
                    f0:ab:20:de:43:b9:df:90:3b:50:c3:22:e5:86:6c:
                    bd:d9:ce:33:0e:22:2b:0d:34:f4:ba:24:a2:54:a1:
                    aa:51:0c:29:fb:80:23:b7:69:df:fe:f3:0c:e5:a1:
                    34:84:03:c5:fb:30:da:4e:57:aa:d4:5c:6a:6e:14:
                    10:8e:a4:5b:44:14:5e:d3:45:8f:52:0c:86:70:0f:
                    4c:21:dd:5e:30:4f:ad:d2:e4:c5:97:01:52:10:20:
                    be:c1:ce:ce:7a:6f:e6:5e:3b:bf:9c:68:c1:30:db:
                    17:ee:80:4d:19:b9:26:f8:77:2c:df:cb:e5:8e:5a:
                    b0:2e:50:04:a6:de:c8:59:7b:8d:5c:0c:12:a1:d3:
                    4b:d7:6d:65:5f:ff:b8:97:36:f5:a8:c6:ca:89:7d:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C1:21:AD:1D:15:3E:80:B0:B3:2E:EF:D6:E5:18:87:65:40:4E:90
            X509v3 Authority Key Identifier:
                keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:af:50:7f:91:5e:4a:86:9b:20:a0:f0:b7:5c:44:70:61:
         69:3c:27:32:ab:d1:88:f1:b3:fe:b3:5b:8c:b1:be:bf:1e:90:
         d1:5c:01:fe:be:a7:93:d0:44:f5:c9:a7:43:f8:3a:2c:5e:14:
         dc:70:eb:e2:14:55:79:5e:d1:7c:36:7d:6d:75:e1:1b:4b:de:
         35:b4:32:03:5e:e6:33:e7:91:dd:3f:20:2e:a6:e5:c1:75:96:
         a9:96:0e:f8:9a:2a:e1:72:5c:64:a2:67:2f:01:73:25:c4:94:
         52:7b:cf:50:fd:69:2c:26:59:0a:06:4f:3a:30:49:3f:96:85:
         ff:8f:f5:64:dd:d4:cc:88:d8:c7:74:55:2f:41:a8:fe:f0:8e:
         33:59:6e:67:71:63:d6:74:c8:14:db:f1:e5:85:98:06:c9:63:
         28:a8:de:5b:1a:79:a7:27:ea:6b:a5:0b:94:d7:cd:a6:6d:ca:
         1d:d3:8f:79:6c:9c:ed:4a:26:9e:b8:28:d6:96:45:e3:a1:0e:
         93:8c:71:79:34:93:db:00:79:32:e5:3e:a0:a9:fe:59:9c:af:
         4c:3c:04:50:73:b6:78:33:92:b5:aa:4c:d2:b1:ce:b4:fe:69:
         4c:9c:23:de:0a:55:a7:ec:a9:80:e3:ef:b2:05:a6:78:c2:46:
         2a:4c:5d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXmnQMfZ3+EyyavcVzCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjUwNDEzMTMwMTIwWhcNMjUwNDE0MTMwMTIwWjAzMTEwLwYDVQQD
Eyg3M2MxMjFhZDFkMTUzZTgwYjBiMzJlZWZkNmU1MTg4NzY1NDA0ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26He4sWT2jIf/9mbMib5Gwb1lgyD
1bsxsjRxL3aBBVk6znhWqzgGp9eVzTgmhiMruZ7PScXJwKe8vk0ELuYK3nhN0yaQ
Jrl4VEECbTaztXNESw3SvnL4Z0z6FYbxmpNAxKh+cE60vQvwqyDeQ7nfkDtQwyLl
hmy92c4zDiIrDTT0uiSiVKGqUQwp+4Ajt2nf/vMM5aE0hAPF+zDaTleq1FxqbhQQ
jqRbRBRe00WPUgyGcA9MId1eME+t0uTFlwFSECC+wc7Oem/mXju/nGjBMNsX7oBN
Gbkm+Hcs38vljlqwLlAEpt7IWXuNXAwSodNL121lX/+4lzb1qMbKiX08PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPBIa0dFT6AsLMu79blGIdlQE6QMB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7ivUH+R
XkqGmyCg8LdcRHBhaTwnMqvRiPGz/rNbjLG+vx6Q0VwB/r6nk9BE9cmnQ/g6LF4U
3HDr4hRVeV7RfDZ9bXXhG0veNbQyA17mM+eR3T8gLqblwXWWqZYO+Joq4XJcZKJn
LwFzJcSUUnvPUP1pLCZZCgZPOjBJP5aF/4/1ZN3UzIjYx3RVL0Go/vCOM1luZ3Fj
1nTIFNvx5YWYBsljKKjeWxp5pyfqa6ULlNfNpm3KHdOPeWyc7Uomnrgo1pZF46EO
k4xxeTST2wB5MuU+oKn+WZyvTDwEUHO2eDOStapM0rHOtP5pTJwj3gpVp+ypgOPv
sgWmeMJGKkxd9A==
-----END CERTIFICATE-----