Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File:                     lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier:          IKWYloJBAyIhDss27xBTYovuq+eBL3ZpurqdZppbpUY=
Subject key identifier:   87:52:D2:52:A3:2D:5A:78:DE:6B:0D:60:A0:FD:CD:A7:6C:62:C9:2C
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer:       /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial:       01962E61B09784F5F96CFC43CA7550C4B8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number:          0CA9
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: HWg4yYcv6S3SkRGPZkPyWKDl0v84Jl9gC0FL6icu8Qg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b0:97:84:f5:f9:6c:fc:43:ca:75:50:c4:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=8752d252a32d5a78de6b0d60a0fdcda76c62c92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:a5:5d:93:bd:20:66:6d:55:b7:6b:bc:8c:
                    71:1a:31:b7:99:42:a2:8a:21:b0:ff:03:77:d8:16:
                    af:2c:8c:06:7e:1a:e3:43:36:50:05:65:86:09:7e:
                    af:8a:db:c8:0f:26:22:48:31:9c:d9:e7:91:4d:36:
                    a2:c0:37:de:8c:51:fc:d3:e1:8a:a7:4d:29:81:9f:
                    6c:a7:7a:50:83:86:d7:66:ba:ad:2e:4c:c8:63:1a:
                    98:9e:d2:07:42:4d:4d:07:ac:da:e2:73:f1:21:c8:
                    48:8d:8c:90:04:cd:7a:8f:46:a4:2c:71:1d:cb:53:
                    cc:ca:cd:3f:d0:ba:9c:51:2d:73:95:53:2a:99:92:
                    b8:3b:ed:fd:db:ba:04:9c:1b:c2:40:63:94:43:46:
                    64:b2:08:a6:22:45:dc:0c:c7:6e:14:f7:65:25:06:
                    92:22:17:b0:07:8d:eb:fe:d1:f6:ea:fa:84:3d:df:
                    61:92:05:2a:b9:74:ce:f7:45:ee:96:06:e1:76:24:
                    8f:e3:69:58:c2:17:3a:c3:bd:31:1d:0c:34:e2:99:
                    5a:7c:33:15:93:f1:b8:11:24:93:6b:98:c5:e1:7d:
                    55:8a:bd:c8:5d:e3:95:74:9c:b0:44:cd:b4:9a:48:
                    c9:2c:b6:81:dc:25:bb:c1:03:1a:d7:62:12:66:27:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:D2:52:A3:2D:5A:78:DE:6B:0D:60:A0:FD:CD:A7:6C:62:C9:2C
            X509v3 Authority Key Identifier:
                keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c3:e2:da:bc:a5:49:3b:d9:ba:e9:ea:98:55:33:59:7e:e0:
         21:46:34:8a:14:a4:c7:0c:4c:69:46:ca:3a:9b:a1:de:91:f6:
         f1:ba:5c:ae:1e:a4:b5:d0:0b:1d:25:26:3e:b1:5d:ae:cb:b9:
         c7:89:9d:20:2c:24:2c:55:d3:44:da:c4:34:cc:22:53:76:2e:
         9a:b1:c8:6b:6d:46:8f:0c:b1:d6:c9:5e:59:c5:3d:e3:f7:89:
         2c:61:4a:9a:8b:28:a0:5a:4c:5b:47:be:4d:d7:f1:68:98:a9:
         90:54:b0:2e:05:3c:ad:db:7b:28:44:c9:6b:50:55:6d:22:e6:
         e8:0c:a7:70:95:42:7c:a9:56:fe:15:ed:af:cc:59:9f:09:bc:
         d4:16:42:d9:a2:5b:be:ba:60:05:f7:1b:34:ac:66:22:a7:b6:
         14:d4:a0:7c:00:d2:7a:8c:60:c7:24:c3:58:7a:38:b0:90:0d:
         12:fd:fb:f5:b9:f4:b6:7e:bf:42:ef:84:2d:9c:9b:9a:94:e0:
         cb:af:c9:69:a0:b9:9a:91:bd:1a:4b:8f:4a:c6:cd:e2:14:1a:
         1f:bb:45:4c:3c:fd:d0:59:47:95:91:fd:20:97:a5:c6:93:77:
         de:a3:4b:f6:69:96:88:bf:1c:94:04:13:e8:a1:3d:ff:90:65:
         ea:bc:b9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbCXhPX5bPxDynVQxLjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YTRlMmZjOWVlYWNkY2Y1YjBmNTBhYjkzMjg0Y2QzYjA5
NDIxNzEwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
Eyg4NzUyZDI1MmEzMmQ1YTc4ZGU2YjBkNjBhMGZkY2RhNzZjNjJjOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bGlXZO9IGZtVbdrvIxxGjG3mUKi
iiGw/wN32BavLIwGfhrjQzZQBWWGCX6vitvIDyYiSDGc2eeRTTaiwDfejFH80+GK
p00pgZ9sp3pQg4bXZrqtLkzIYxqYntIHQk1NB6za4nPxIchIjYyQBM16j0akLHEd
y1PMys0/0LqcUS1zlVMqmZK4O+3927oEnBvCQGOUQ0ZksgimIkXcDMduFPdlJQaS
IhewB43r/tH26vqEPd9hkgUquXTO90XulgbhdiSP42lYwhc6w70xHQw04plafDMV
k/G4ESSTa5jF4X1Vir3IXeOVdJywRM20mkjJLLaB3CW7wQMa12ISZicdmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdS0lKjLVp43msNYKD9zadsYsksMB8GA1UdIwQY
MBaAFJSk4vye6s3PWw9Qq5MoTNOwlCFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2It
MDI0OGQ2YWZkNjNmLzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZmY3YTctMjdjYi00MDcyLWIzM2ItMDI0OGQ2YWZkNjNm
LzEvbEtUaV9KN3F6YzliRDFDcmt5aE0wN0NVSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcPi2ryl
STvZuunqmFUzWX7gIUY0ihSkxwxMaUbKOpuh3pH28bpcrh6ktdALHSUmPrFdrsu5
x4mdICwkLFXTRNrENMwiU3YumrHIa21Gjwyx1sleWcU94/eJLGFKmosooFpMW0e+
TdfxaJipkFSwLgU8rdt7KETJa1BVbSLm6AyncJVCfKlW/hXtr8xZnwm81BZC2aJb
vrpgBfcbNKxmIqe2FNSgfADSeoxgxyTDWHo4sJANEv379bn0tn6/Qu+ELZybmpTg
y6/JaaC5mpG9GkuPSsbN4hQaH7tFTDz90FlHlZH9IJelxpN33qNL9mmWiL8clAQT
6KE9/5Bl6ry5xA==
-----END CERTIFICATE-----