Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          ySn74g0UbOyrvIOA4JPW3j0dIzQqLSMwetPBnLAQQH4=
Subject key identifier:   B1:0B:1E:1E:8F:AF:37:55:76:42:49:E2:2D:16:C2:DF:E2:5E:49:37
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       01962F7478744A0117742B2683F352295A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          06D3
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: aodBvdcNCczDgRQKEzW3PvIS5MnApE7TV/3mxoPFiV0=)
                          2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:74:4a:01:17:74:2b:26:83:f3:52:29:5a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=b10b1e1e8faf3755764249e22d16c2dfe25e4937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:5e:01:79:0b:fe:a2:87:2c:e8:33:c2:56:
                    71:f4:e2:e4:26:d1:0d:26:30:66:c3:47:73:6a:2d:
                    2d:c1:c7:37:fb:d1:40:cd:6f:33:be:cf:54:4c:aa:
                    7b:1e:b4:cc:d8:3c:9a:25:d0:5c:96:25:74:0d:29:
                    9f:3f:44:62:7c:2b:50:19:7c:26:f6:85:5f:c4:95:
                    4f:53:ca:f5:ec:b2:15:73:3a:5e:c5:1c:83:06:ca:
                    3d:6b:b2:59:0b:2f:45:dc:3f:d4:2b:ca:3f:06:bb:
                    1f:67:72:af:9a:d3:e0:c7:6c:8c:2b:45:90:dd:99:
                    90:ff:24:4c:d3:0e:b5:f5:f1:5b:4f:89:65:72:28:
                    c7:e1:7c:23:de:1b:37:64:3b:54:11:7f:90:95:44:
                    f8:36:9d:12:d2:37:8b:f6:5b:db:43:7c:6c:1f:cd:
                    ea:b7:9d:2a:75:59:dd:35:19:18:4f:0e:1b:f9:c4:
                    fe:83:1d:3f:2b:64:c6:f2:0a:e1:dd:e4:d8:29:fb:
                    52:32:f6:c1:c9:c6:3c:33:4e:22:19:96:b4:a3:fe:
                    f4:e9:2e:38:47:89:d6:ad:03:b7:9a:ad:bd:18:8b:
                    14:65:ed:9d:f8:1a:87:87:95:de:d0:47:d9:be:25:
                    cf:2d:9e:35:00:de:da:2c:30:d9:a2:14:44:8b:fd:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:1E:1E:8F:AF:37:55:76:42:49:E2:2D:16:C2:DF:E2:5E:49:37
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:f9:0f:4c:45:65:e9:c2:4a:c3:64:5e:72:ae:08:bd:43:
         2e:2d:8b:d0:76:93:77:10:57:18:40:89:2c:4d:c1:3a:ac:8f:
         2d:97:72:d5:30:fe:c9:21:6d:d6:e1:df:64:ff:c0:31:e4:b5:
         f9:3a:0b:92:fd:6c:c3:a6:84:50:ed:b1:95:a8:b3:06:b7:56:
         0a:bd:84:c0:31:6c:82:ec:52:4c:c4:a8:0f:6d:7c:d4:3c:4d:
         1f:3f:27:41:94:4c:79:08:f4:6a:29:84:ee:dc:73:4b:76:00:
         80:f4:f0:c1:3b:f7:54:e0:e4:77:28:a6:cc:f6:fe:23:8f:2d:
         4d:79:a8:3b:72:85:b6:71:36:c1:8a:27:db:d4:05:68:e1:32:
         9e:d5:a4:0f:f4:64:34:e1:58:51:a9:c5:b9:e9:58:73:56:2f:
         e3:5f:bd:f8:1d:40:86:d3:c0:ea:b7:76:4c:ef:01:5d:66:e8:
         dc:ce:9a:ca:62:c6:dc:80:3e:21:5f:33:8a:cf:b0:1d:6d:45:
         a1:63:a1:4f:d9:ce:74:ad:41:ba:8c:f8:9e:70:66:b4:1e:af:
         fa:a0:2b:28:56:84:ab:96:85:2b:ef:21:f3:64:58:96:8f:0b:
         78:79:68:52:2a:59:1e:92:3e:2e:48:42:2c:ae:62:f9:e7:4e:
         7f:67:76:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHh0SgEXdCsmg/NSKVowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhiMTBiMWUxZThmYWYzNzU1NzY0MjQ5ZTIyZDE2YzJkZmUyNWU0OTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwxeAXkL/qKHLOgzwlZx9OLkJtEN
JjBmw0dzai0twcc3+9FAzW8zvs9UTKp7HrTM2DyaJdBcliV0DSmfP0RifCtQGXwm
9oVfxJVPU8r17LIVczpexRyDBso9a7JZCy9F3D/UK8o/BrsfZ3KvmtPgx2yMK0WQ
3ZmQ/yRM0w619fFbT4llcijH4Xwj3hs3ZDtUEX+QlUT4Np0S0jeL9lvbQ3xsH83q
t50qdVndNRkYTw4b+cT+gx0/K2TG8grh3eTYKftSMvbBycY8M04iGZa0o/706S44
R4nWrQO3mq29GIsUZe2d+BqHh5Xe0EfZviXPLZ41AN7aLDDZohREi/3eyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLELHh6PrzdVdkJJ4i0Wwt/iXkk3MB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5L5D0xF
ZenCSsNkXnKuCL1DLi2L0HaTdxBXGECJLE3BOqyPLZdy1TD+ySFt1uHfZP/AMeS1
+ToLkv1sw6aEUO2xlaizBrdWCr2EwDFsguxSTMSoD2181DxNHz8nQZRMeQj0aimE
7txzS3YAgPTwwTv3VODkdyimzPb+I48tTXmoO3KFtnE2wYon29QFaOEyntWkD/Rk
NOFYUanFuelYc1Yv41+9+B1AhtPA6rd2TO8BXWbo3M6aymLG3IA+IV8zis+wHW1F
oWOhT9nOdK1Buoz4nnBmtB6v+qArKFaEq5aFK+8h82RYlo8LeHloUipZHpI+LkhC
LK5i+edOf2d2iQ==
-----END CERTIFICATE-----