Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File:                     0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier:          if5BzdIBzXWDJPJl/JTRMqE3+zSPLAwtYf4M9xchPCQ=
Subject key identifier:   6C:B7:44:56:09:9F:7C:B7:56:CD:D5:95:88:F1:16:7F:EE:E9:B8:3E
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer:       /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial:       01962E98B31B361938F4E3A9CD193EA4D906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: Dj8WjfkhJJlMYlywSoYwMETcufpBc2ND6moJX8WkL/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b3:1b:36:19:38:f4:e3:a9:cd:19:3e:a4:d9:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=6cb74456099f7cb756cdd59588f1167feee9b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:2a:e9:2d:5b:6a:f8:13:1b:2b:6c:f1:2f:
                    12:5b:96:3d:85:69:0e:42:59:c5:3a:b2:15:8c:19:
                    67:68:d7:0a:0e:da:85:33:69:2a:59:9d:89:14:84:
                    51:72:9f:6a:9d:c4:85:18:18:b7:46:9d:06:63:59:
                    15:b7:28:b5:9d:08:59:21:14:d4:02:9c:b9:0b:f5:
                    48:86:56:8b:5f:61:3e:63:bc:e2:aa:63:07:40:e8:
                    92:c0:bb:e0:29:d0:07:2b:9f:ea:5d:22:a5:89:c4:
                    e5:45:33:81:9c:7e:8d:eb:23:9b:a0:66:fd:ec:d1:
                    5a:bc:78:17:b8:22:52:85:85:e8:15:76:e1:2f:a5:
                    19:b7:96:a0:f8:c5:c8:33:79:34:6a:62:f6:d3:cd:
                    e9:e6:c3:8d:cb:83:69:59:fe:33:e0:92:f6:7e:fd:
                    cf:f4:7a:b6:45:b3:02:5c:7a:e2:e8:f6:c2:c3:3d:
                    da:5f:fe:49:d8:4f:48:73:82:b0:5b:d5:30:8c:b0:
                    b1:96:8a:f1:5c:0d:3d:c1:55:d9:43:61:9a:9d:4d:
                    23:aa:ff:59:52:9d:eb:f2:1f:f0:51:f3:74:b7:2c:
                    94:86:3e:c6:5c:00:37:3d:9b:38:15:4e:38:fb:f9:
                    72:92:12:cb:a8:54:41:b9:74:ce:3f:7e:32:1c:3b:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B7:44:56:09:9F:7C:B7:56:CD:D5:95:88:F1:16:7F:EE:E9:B8:3E
            X509v3 Authority Key Identifier:
                keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:90:7e:6e:d6:1a:59:a3:fa:de:6a:f6:70:9b:b9:d5:a8:
         08:4a:73:a0:61:28:0a:b3:bd:49:8c:8d:69:96:5a:4a:0d:00:
         2c:bc:2a:a4:80:98:7b:ca:22:df:21:fe:2b:04:e5:df:46:b6:
         23:72:4a:0e:13:59:24:81:6e:1e:ef:df:d0:29:cf:c3:5d:a6:
         49:8f:cc:81:b6:ee:18:35:4a:a3:81:dc:14:89:a6:72:1a:8e:
         a2:8d:d4:b9:12:cb:e5:54:46:ef:84:76:92:3c:90:aa:55:c7:
         9e:30:1a:70:35:25:62:8e:ac:6e:cc:dd:47:1e:45:1a:73:15:
         28:06:52:78:6f:78:9e:b5:c6:45:72:ae:2c:2e:99:d8:1e:71:
         ea:3c:a3:c0:1c:be:ad:52:ea:42:b3:c7:ce:fb:0a:d7:93:27:
         7e:1c:6f:14:95:81:a0:53:e0:3b:d2:1b:07:36:10:fb:bd:ba:
         b2:ef:52:e5:26:6f:e0:37:c4:44:96:25:c3:60:1d:f8:47:d6:
         bf:50:5f:fb:b9:10:5d:94:d5:83:7b:0c:dd:0b:2c:27:39:b5:
         51:f8:dc:4c:2f:f7:b3:dc:3f:e8:b5:41:fc:6e:15:35:2f:e0:
         2a:24:af:7d:bc:bd:91:c9:38:cd:10:b7:f4:f1:42:92:c7:a1:
         24:16:3b:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLMbNhk49OOpzRk+pNkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4
NTQ1NzgwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
Eyg2Y2I3NDQ1NjA5OWY3Y2I3NTZjZGQ1OTU4OGYxMTY3ZmVlZTliODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa4q6S1bavgTGyts8S8SW5Y9hWkO
QlnFOrIVjBlnaNcKDtqFM2kqWZ2JFIRRcp9qncSFGBi3Rp0GY1kVtyi1nQhZIRTU
Apy5C/VIhlaLX2E+Y7ziqmMHQOiSwLvgKdAHK5/qXSKlicTlRTOBnH6N6yOboGb9
7NFavHgXuCJShYXoFXbhL6UZt5ag+MXIM3k0amL2083p5sONy4NpWf4z4JL2fv3P
9Hq2RbMCXHri6PbCwz3aX/5J2E9Ic4KwW9UwjLCxlorxXA09wVXZQ2GanU0jqv9Z
Up3r8h/wUfN0tyyUhj7GXAA3PZs4FU44+/lykhLLqFRBuXTOP34yHDuDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy3RFYJn3y3Vs3VlYjxFn/u6bg+MB8GA1UdIwQY
MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt
ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5
LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7KQfm7W
Glmj+t5q9nCbudWoCEpzoGEoCrO9SYyNaZZaSg0ALLwqpICYe8oi3yH+KwTl30a2
I3JKDhNZJIFuHu/f0CnPw12mSY/MgbbuGDVKo4HcFImmchqOoo3UuRLL5VRG74R2
kjyQqlXHnjAacDUlYo6sbszdRx5FGnMVKAZSeG94nrXGRXKuLC6Z2B5x6jyjwBy+
rVLqQrPHzvsK15MnfhxvFJWBoFPgO9IbBzYQ+726su9S5SZv4DfERJYlw2Ad+EfW
v1Bf+7kQXZTVg3sM3QssJzm1UfjcTC/3s9w/6LVB/G4VNS/gKiSvfby9kck4zRC3
9PFCksehJBY7WQ==
-----END CERTIFICATE-----