Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File:                     8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier:          iYmiJ6+1ksj8J0edlWKaSyC4ey+QhEQOrpT/CxCfF7A=
Subject key identifier:   51:D3:16:E3:39:57:92:31:F5:46:49:39:3F:A0:44:6C:C0:B2:36:C2
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer:       /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial:       01962F74C43A3B9839E18CB254B88504D80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number:          0D81
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: iW5b//gA2jpf5/L6UwVueOi1XXwgLNeqbka5sogRtHQ=)
                          2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:3a:3b:98:39:e1:8c:b2:54:b8:85:04:d8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=51d316e339579231f54649393fa0446cc0b236c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:37:bb:5a:d8:a7:3a:45:d4:3e:02:fa:1b:
                    95:c5:d8:03:8b:33:9b:8d:fd:a0:48:35:3d:99:d0:
                    33:a1:d5:b1:a4:42:fa:18:37:80:94:cb:3e:1e:f4:
                    aa:cd:51:c8:30:01:34:54:f0:2e:03:c3:20:3c:e0:
                    78:3e:5d:9b:d7:07:21:f8:21:ab:8a:9e:7c:2d:7e:
                    d2:d2:a4:36:4a:3f:c8:e0:db:6f:1b:af:bc:39:68:
                    45:a1:ac:61:e7:78:96:9d:3d:15:81:56:90:71:51:
                    58:03:b1:42:06:55:2a:d4:e3:c6:da:fe:c2:41:ea:
                    0b:fe:5e:18:87:de:97:3c:80:34:62:96:1a:1f:46:
                    7d:49:8b:42:85:36:63:ef:67:1c:2c:70:6d:e9:12:
                    39:32:53:54:84:ea:64:1b:da:ec:d5:c6:9b:32:22:
                    f7:0c:0a:d1:e9:2b:df:f2:da:f6:b7:6b:46:b4:9d:
                    c5:e4:f1:64:84:5c:50:a0:2a:13:0f:9a:8d:65:d1:
                    9e:79:0c:bb:15:6a:e0:3c:8f:bd:59:bf:ee:12:22:
                    15:95:52:73:d0:b5:a2:ab:28:a6:a7:4f:18:7f:7a:
                    fc:cf:22:5c:ec:61:9a:1d:b9:5e:85:4d:65:8b:3d:
                    56:5d:86:98:47:fc:56:65:cb:e0:93:65:20:a9:dd:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:16:E3:39:57:92:31:F5:46:49:39:3F:A0:44:6C:C0:B2:36:C2
            X509v3 Authority Key Identifier:
                keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:52:e1:6e:9f:33:33:f7:9e:c9:09:3b:f7:3f:0f:cf:4e:
         d8:e4:41:63:d6:28:bc:85:78:fa:80:8f:30:18:aa:dc:f2:c4:
         8c:0b:bb:62:bd:48:ee:50:eb:eb:44:2f:38:2f:f6:1f:66:f6:
         c2:c9:14:66:a1:0a:67:21:ad:e4:a5:73:e8:36:99:0b:27:af:
         90:04:eb:ba:77:fa:d5:69:94:c7:72:08:76:f0:da:7a:b1:1d:
         81:ab:4a:26:70:4d:65:24:3e:c0:0e:54:c9:00:06:cb:8b:55:
         36:0a:7f:22:c6:f3:7a:f9:4f:96:86:02:61:7a:3a:c1:64:83:
         41:f8:2c:11:d5:dc:30:74:40:90:63:39:f2:34:9b:28:08:96:
         82:d7:cb:a6:48:a3:d3:bb:19:49:f2:ea:2f:72:55:f6:49:46:
         af:95:7d:a7:55:8c:e8:37:3e:b8:90:ee:11:f3:3c:aa:f2:34:
         9d:b3:e3:9c:9d:2f:1a:31:1d:a5:1d:2f:f2:38:7d:c7:d8:80:
         a9:9c:83:82:b1:bf:a9:35:f9:f0:b6:0f:88:9f:89:ba:1b:4c:
         81:8c:99:3e:0a:ee:ba:a3:25:37:89:47:1a:7c:bd:33:8f:e3:
         d8:dc:e5:d3:32:c4:d3:aa:49:01:0b:b9:9c:9c:af:e6:e6:b7:
         73:bb:57:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMQ6O5g54YyyVLiFBNgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMjBjYjRmOWI1Zjc5YjlkYTZiNDgyN2JhZDljNTRhMmE4
MGM1MzEwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
Eyg1MWQzMTZlMzM5NTc5MjMxZjU0NjQ5MzkzZmEwNDQ2Y2MwYjIzNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN43u1rYpzpF1D4C+huVxdgDizOb
jf2gSDU9mdAzodWxpEL6GDeAlMs+HvSqzVHIMAE0VPAuA8MgPOB4Pl2b1wch+CGr
ip58LX7S0qQ2Sj/I4NtvG6+8OWhFoaxh53iWnT0VgVaQcVFYA7FCBlUq1OPG2v7C
QeoL/l4Yh96XPIA0YpYaH0Z9SYtChTZj72ccLHBt6RI5MlNUhOpkG9rs1cabMiL3
DArR6Svf8tr2t2tGtJ3F5PFkhFxQoCoTD5qNZdGeeQy7FWrgPI+9Wb/uEiIVlVJz
0LWiqyimp08Yf3r8zyJc7GGaHblehU1liz1WXYaYR/xWZcvgk2Ugqd1FGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHTFuM5V5Ix9UZJOT+gRGzAsjbCMB8GA1UdIwQY
MBaAFPAgy0+bX3m52mtIJ7rZxUoqgMUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83YzQ0YzQtZWNjZC00OTVjLWI5ODMt
ODRjOTBiYmE5Y2Q0LzEvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83YzQ0YzQtZWNjZC00OTVjLWI5ODMtODRjOTBiYmE5Y2Q0
LzEvOENETFQ1dGZlYm5hYTBnbnV0bkZTaXFBeFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSFS4W6f
MzP3nskJO/c/D89O2ORBY9YovIV4+oCPMBiq3PLEjAu7Yr1I7lDr60QvOC/2H2b2
wskUZqEKZyGt5KVz6DaZCyevkATrunf61WmUx3IIdvDaerEdgatKJnBNZSQ+wA5U
yQAGy4tVNgp/IsbzevlPloYCYXo6wWSDQfgsEdXcMHRAkGM58jSbKAiWgtfLpkij
07sZSfLqL3JV9klGr5V9p1WM6Dc+uJDuEfM8qvI0nbPjnJ0vGjEdpR0v8jh9x9iA
qZyDgrG/qTX58LYPiJ+JuhtMgYyZPgruuqMlN4lHGny9M4/j2Nzl0zLE06pJAQu5
nJyv5ua3c7tXeQ==
-----END CERTIFICATE-----