Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
File:                     zQwDKJL2la9ME_sKyoBD0Xsbl78.mft (raw, json)
Hash identifier:          IB944xE30VAfY/erNsXc9nSczM85iR0fCmqBwXzJG5s=
Subject key identifier:   8D:90:AC:D6:62:0A:D9:3E:9C:E1:C6:D6:62:84:7A:02:03:20:F7:69
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Certificate issuer:       /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial:       01962F74BBD2262A4C6102B85623273A7020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
Manifest number:          088C
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: zQwDKJL2la9ME_sKyoBD0Xsbl78.crl (hash: ayuw3YPSqicXLRTmNysT6zMmCPrLGaW5ewOeTcwzj40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:d2:26:2a:4c:61:02:b8:56:23:27:3a:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=8d90acd6620ad93e9ce1c6d662847a020320f769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:9e:c6:11:ca:a0:0f:0c:00:51:1c:13:05:
                    24:cd:99:dd:10:a9:83:82:7f:59:2f:73:7a:5e:dc:
                    62:59:a6:b9:ac:b1:73:ec:da:14:01:83:b8:22:a8:
                    e5:e7:be:16:f4:41:9d:8e:d3:19:f3:c2:1d:7a:fa:
                    ad:c2:1d:87:08:44:1f:86:b6:79:d3:12:16:13:98:
                    8d:a6:92:7e:9d:2c:cc:54:ba:b6:f2:35:3d:85:9f:
                    a3:89:f4:60:f9:97:9e:98:16:e0:52:5e:d4:5b:67:
                    69:81:ec:d3:73:98:44:f4:fa:fd:3d:1a:3a:17:5e:
                    6c:f9:13:c8:2d:31:bf:81:0d:6d:bb:23:0e:f6:29:
                    c2:1c:63:88:55:12:f6:d7:0e:d9:7b:23:0c:07:5f:
                    60:a2:19:c3:58:bc:ff:9d:62:b5:7b:e8:9e:2d:79:
                    ee:a0:8c:a9:e3:ec:c6:cc:3f:48:b8:38:59:dc:ac:
                    68:5a:54:74:83:14:24:1d:9e:49:97:0f:b3:c2:e3:
                    49:af:09:3a:6c:fe:ac:82:1e:11:87:63:27:5e:3f:
                    93:e6:c2:2e:f9:7e:3c:1d:5c:06:de:1f:a8:30:dd:
                    00:7a:9f:c2:ba:6a:73:64:13:11:62:f2:50:23:53:
                    44:40:13:75:25:c1:22:c3:c1:81:ee:ee:4b:9a:ca:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:AC:D6:62:0A:D9:3E:9C:E1:C6:D6:62:84:7A:02:03:20:F7:69
            X509v3 Authority Key Identifier:
                keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:84:d7:34:c8:f6:4a:7e:30:70:89:04:b6:01:d3:ad:cb:be:
         f9:bb:15:f8:5b:15:9a:63:cb:4a:b5:5c:28:f8:ba:f2:ab:35:
         6e:8d:d7:57:76:19:9d:7c:28:f1:27:28:9c:b8:e5:76:a8:9f:
         45:24:fa:4e:58:b7:2c:c6:64:2c:b3:1d:82:9d:a5:6b:99:cf:
         4e:63:19:7b:ea:96:58:18:53:61:46:79:d9:e1:c9:b3:ac:a5:
         fc:3f:ac:6d:aa:89:59:90:2a:03:e5:2f:66:8a:29:eb:8d:d9:
         c7:ca:93:51:d1:53:31:96:a7:04:3c:49:31:43:ac:2b:b8:a6:
         9e:f1:60:05:17:53:1b:f0:86:d3:8b:d8:b4:5d:fd:1e:00:e8:
         a4:cb:4d:57:cc:76:ec:15:5a:95:c9:90:52:95:bc:3c:53:18:
         61:33:dd:37:4b:fa:45:2f:9b:0c:7e:5d:5c:17:1c:83:fe:45:
         89:9b:87:cd:76:db:c9:68:c0:85:30:28:a7:4d:64:9f:70:42:
         d8:4a:3b:19:11:bc:aa:32:64:db:19:b2:66:e9:ef:4c:5e:72:
         64:3c:f0:90:0c:be:c1:99:9d:a4:f9:36:ab:f6:27:e7:b2:22:
         67:a0:0a:77:56:fa:1e:9d:c2:2c:00:03:c5:81:a2:ee:d5:90:
         65:e8:06:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLvSJipMYQK4ViMnOnAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMGMwMzI4OTJmNjk1YWY0YzEzZmIwYWNhODA0M2QxN2Ix
Yjk3YmYwHhcNMjUwNDEzMTQwMTQxWhcNMjUwNDE0MTQwMTQxWjAzMTEwLwYDVQQD
Eyg4ZDkwYWNkNjYyMGFkOTNlOWNlMWM2ZDY2Mjg0N2EwMjAzMjBmNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nyexhHKoA8MAFEcEwUkzZndEKmD
gn9ZL3N6XtxiWaa5rLFz7NoUAYO4Iqjl574W9EGdjtMZ88Idevqtwh2HCEQfhrZ5
0xIWE5iNppJ+nSzMVLq28jU9hZ+jifRg+ZeemBbgUl7UW2dpgezTc5hE9Pr9PRo6
F15s+RPILTG/gQ1tuyMO9inCHGOIVRL21w7ZeyMMB19gohnDWLz/nWK1e+ieLXnu
oIyp4+zGzD9IuDhZ3KxoWlR0gxQkHZ5Jlw+zwuNJrwk6bP6sgh4Rh2MnXj+T5sIu
+X48HVwG3h+oMN0Aep/CumpzZBMRYvJQI1NEQBN1JcEiw8GB7u5LmsqgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2QrNZiCtk+nOHG1mKEegIDIPdpMB8GA1UdIwQY
MBaAFM0MAyiS9pWvTBP7CsqAQ9F7G5e/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zODRhMzItM2UxYy00ZDg2LWJkYjgt
MzUyNzZiNzk3NWFlLzEvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zODRhMzItM2UxYy00ZDg2LWJkYjgtMzUyNzZiNzk3NWFl
LzEvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJITXNMj2
Sn4wcIkEtgHTrcu++bsV+FsVmmPLSrVcKPi68qs1bo3XV3YZnXwo8SconLjldqif
RST6Tli3LMZkLLMdgp2la5nPTmMZe+qWWBhTYUZ52eHJs6yl/D+sbaqJWZAqA+Uv
Zoop643Zx8qTUdFTMZanBDxJMUOsK7imnvFgBRdTG/CG04vYtF39HgDopMtNV8x2
7BValcmQUpW8PFMYYTPdN0v6RS+bDH5dXBccg/5FiZuHzXbbyWjAhTAop01kn3BC
2Eo7GRG8qjJk2xmyZunvTF5yZDzwkAy+wZmdpPk2q/Yn57IiZ6AKd1b6Hp3CLAAD
xYGi7tWQZegGiA==
-----END CERTIFICATE-----