Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
File:                     I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft (raw, json)
Hash identifier:          c3iQPJRBLk3jwY6SvaxN3f6SYt+t7fvatjczoEwsxfQ=
Subject key identifier:   F8:BA:41:1F:21:06:A6:83:1A:A5:EB:A1:25:49:D2:49:1F:A8:C5:42
Authority key identifier: 23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0
Certificate issuer:       /CN=23f91084058819889a4a8f32ea347759543134f0
Certificate serial:       01962F06B0A9E20616823C28B8180DAB8B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl (hash: gQBgnN8bA7POGpsVjXWgFvnhp0BnrcmeulQLO379Mc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:a9:e2:06:16:82:3c:28:b8:18:0d:ab:8b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f91084058819889a4a8f32ea347759543134f0
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=f8ba411f2106a6831aa5eba12549d2491fa8c542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:d8:21:83:20:19:77:c5:5f:2b:94:1d:6c:
                    30:77:2a:0a:9f:ee:d2:6f:5b:d6:82:2d:43:0b:fd:
                    3b:e6:df:53:3e:2c:a2:dc:e2:d2:c1:ee:79:bc:21:
                    9c:be:2b:b3:15:f2:3c:09:07:1f:79:f9:b3:89:b4:
                    13:51:9f:df:e0:bc:7c:44:ef:fc:e6:c9:ea:bc:6e:
                    65:d1:d3:c9:4b:a7:5e:d8:ee:44:98:36:ed:c0:fa:
                    93:19:99:64:bb:36:13:3a:c4:c0:16:cf:4e:ca:2a:
                    be:6e:d0:07:24:fd:c7:19:24:ce:60:11:d4:54:1b:
                    af:e6:1a:a2:4b:57:69:62:28:bc:2a:c7:67:9c:f7:
                    8a:0c:ad:fe:0c:d5:ac:8a:be:5f:bd:fd:ce:0b:82:
                    82:07:16:ca:30:d7:48:df:08:7a:94:ca:e7:8d:3d:
                    06:6d:93:ba:32:65:1d:90:a1:ba:9e:12:e5:e7:4b:
                    0b:53:96:e7:aa:8a:75:b8:b8:74:2f:a3:9e:9f:7c:
                    86:ae:f6:aa:35:9c:67:df:b7:4c:65:63:40:5c:e0:
                    0c:4a:7e:0a:e9:ea:40:bd:74:e3:e5:26:b8:bd:9f:
                    ab:49:0a:ad:ed:69:d8:21:a4:1c:20:6e:89:0f:4b:
                    ae:f0:ae:0f:9c:37:7f:c8:8e:b3:ab:66:d4:49:88:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:41:1F:21:06:A6:83:1A:A5:EB:A1:25:49:D2:49:1F:A8:C5:42
            X509v3 Authority Key Identifier:
                keyid:23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:6a:49:17:0a:5e:53:e1:86:db:c4:e6:ad:38:2a:a1:a1:
         6e:3e:e9:5a:11:69:46:d0:0b:87:5b:04:5c:fa:07:87:69:53:
         f9:46:21:79:0d:2a:c8:84:7b:d7:14:1a:83:f0:ed:b6:33:16:
         61:82:09:80:6b:78:59:54:56:fa:c2:d9:a7:f5:38:4e:cf:bf:
         ee:9a:c8:4a:c7:33:85:00:3c:4b:97:7a:3f:b8:f5:13:1a:ea:
         46:7d:33:0f:3c:c1:d7:de:1f:9b:bc:66:66:59:ac:a2:c4:fd:
         95:0c:be:17:aa:7a:66:d5:94:3f:b5:a4:bb:8e:89:fc:79:59:
         0e:a9:41:88:b5:a6:5f:d1:0f:18:d9:d9:17:1e:a8:be:14:a6:
         59:fd:99:10:13:31:1c:73:53:53:0a:50:3e:1e:54:d4:c7:b7:
         40:a1:7f:de:19:10:bd:08:c9:a0:81:5d:0e:a4:49:f7:b0:4a:
         32:88:2d:f1:2f:87:7d:c9:91:47:4c:a5:1b:86:89:67:5c:bd:
         f5:17:59:f2:87:7d:33:f9:4b:4e:b5:95:5d:9c:4b:44:60:45:
         42:d3:6b:dd:b0:06:d6:28:9c:1b:59:bf:d9:e7:40:13:67:65:
         35:60:e7:9f:c2:68:98:64:a8:1f:98:8e:e1:bb:60:e7:36:59:
         92:bd:ad:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrCp4gYWgjwouBgNq4tzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjkxMDg0MDU4ODE5ODg5YTRhOGYzMmVhMzQ3NzU5NTQz
MTM0ZjAwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
EyhmOGJhNDExZjIxMDZhNjgzMWFhNWViYTEyNTQ5ZDI0OTFmYThjNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgfYIYMgGXfFXyuUHWwwdyoKn+7S
b1vWgi1DC/075t9TPiyi3OLSwe55vCGcviuzFfI8CQcfefmzibQTUZ/f4Lx8RO/8
5snqvG5l0dPJS6de2O5EmDbtwPqTGZlkuzYTOsTAFs9Oyiq+btAHJP3HGSTOYBHU
VBuv5hqiS1dpYii8KsdnnPeKDK3+DNWsir5fvf3OC4KCBxbKMNdI3wh6lMrnjT0G
bZO6MmUdkKG6nhLl50sLU5bnqop1uLh0L6Oen3yGrvaqNZxn37dMZWNAXOAMSn4K
6epAvXTj5Sa4vZ+rSQqt7WnYIaQcIG6JD0uu8K4PnDd/yI6zq2bUSYgAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi6QR8hBqaDGqXroSVJ0kkfqMVCMB8GA1UdIwQY
MBaAFCP5EIQFiBmImkqPMuo0d1lUMTTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9rUWhBV0lHWWlhU284eTZqUjNXVlF4TlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yMDUwMDctNzljNi00ODUyLTg5MjQt
ZmRjZWQ0NWQyZmVjLzEvSV9rUWhBV0lHWWlhU284eTZqUjNXVlF4TlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yMDUwMDctNzljNi00ODUyLTg5MjQtZmRjZWQ0NWQyZmVj
LzEvSV9rUWhBV0lHWWlhU284eTZqUjNXVlF4TlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwtqSRcK
XlPhhtvE5q04KqGhbj7pWhFpRtALh1sEXPoHh2lT+UYheQ0qyIR71xQag/DttjMW
YYIJgGt4WVRW+sLZp/U4Ts+/7prISsczhQA8S5d6P7j1ExrqRn0zDzzB194fm7xm
ZlmsosT9lQy+F6p6ZtWUP7Wku46J/HlZDqlBiLWmX9EPGNnZFx6ovhSmWf2ZEBMx
HHNTUwpQPh5U1Me3QKF/3hkQvQjJoIFdDqRJ97BKMogt8S+HfcmRR0ylG4aJZ1y9
9RdZ8od9M/lLTrWVXZxLRGBFQtNr3bAG1iicG1m/2edAE2dlNWDnn8JomGSoH5iO
4btg5zZZkr2t8Q==
-----END CERTIFICATE-----