Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
File:                     nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json)
Hash identifier:          OrosHO/cfUi1Ba6Kz+otYFcsaaZ8U8J94R4gb8x/ErQ=
Subject key identifier:   0D:68:EE:2D:AD:78:AF:AB:51:81:6E:97:72:32:52:BB:0A:21:59:75
Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA
Certificate issuer:       /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
Certificate serial:       01962F3D9B042BDA83C68407B2EE354439C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft
Manifest number:          0377
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: JrzHO+4lpY4SUfuFKCvICzJucMrQrf0Ityg7Y40RuOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:04:2b:da:83:c6:84:07:b2:ee:35:44:39:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=0d68ee2dad78afab51816e97723252bb0a215975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:9c:a1:fd:8c:f0:11:18:b3:c8:a7:ec:1b:
                    3e:2e:84:9f:d8:1b:b4:7e:9f:2d:fc:13:dd:42:2e:
                    9a:56:90:92:2a:48:0d:79:2d:3e:6e:0e:66:3c:a5:
                    44:41:e6:2b:42:7e:7d:81:62:e8:d3:e5:64:d1:08:
                    9b:6c:ad:13:9b:8b:93:a0:4e:58:2e:d3:82:59:5d:
                    6b:d6:f3:b3:1b:a7:2b:70:1e:a8:a3:8e:52:b9:cd:
                    67:04:df:15:7a:e2:b6:71:9c:82:15:2d:34:00:69:
                    77:dd:ca:4e:ae:7a:d2:78:f9:4a:74:5b:37:af:c6:
                    c8:12:98:77:09:77:c6:83:4b:b3:72:5c:b1:16:a0:
                    8b:5e:8d:96:58:5b:31:a8:9d:c7:28:e6:db:4e:48:
                    13:08:1f:c2:89:3c:ee:ce:6e:a5:85:cd:30:f6:5e:
                    ae:42:37:b6:84:fb:79:6c:d5:40:b2:05:ae:0e:e8:
                    2a:6b:79:fb:d5:7e:0f:c6:b2:44:78:cc:af:b5:f8:
                    d4:b7:91:a9:d1:b6:e1:a6:10:d5:1b:10:c8:87:e0:
                    a9:4a:c4:cd:8a:da:0e:93:79:20:f0:2a:86:fb:40:
                    1c:94:6b:07:36:71:aa:60:20:3a:e5:27:01:d4:b4:
                    d0:c3:0b:d3:d5:83:d1:1c:88:7c:c6:88:8a:06:81:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:68:EE:2D:AD:78:AF:AB:51:81:6E:97:72:32:52:BB:0A:21:59:75
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:bf:b3:dd:c7:77:7b:51:b3:51:dc:2e:27:8c:5e:77:9f:
         d1:df:59:6c:8f:d6:bd:f1:79:75:75:86:0b:45:81:43:21:f1:
         1b:56:bd:12:d1:7d:f6:13:24:00:a7:eb:ec:d6:8a:99:42:e1:
         6a:55:b7:98:7e:4a:12:17:c3:ee:8b:41:f2:c5:dd:83:0b:65:
         2d:9f:90:f8:a0:a4:e6:8e:f6:72:06:58:5d:1c:12:c0:2a:a6:
         c7:70:b2:fa:76:6d:15:76:fb:b8:bf:2a:2b:3b:04:c7:91:aa:
         bb:74:f9:79:51:b9:23:4f:f2:21:7f:42:ed:0b:cd:59:ff:fb:
         6b:88:03:6f:8c:f8:1e:df:4e:6d:7e:04:9c:f9:f5:ca:e1:d2:
         c4:5b:e2:70:7c:d4:ef:90:0f:c5:79:91:70:76:a4:2f:bd:d2:
         75:c7:37:00:50:5d:5a:9c:b5:58:24:a4:ad:85:f6:3c:fc:0a:
         92:ac:9c:1f:74:d5:63:92:e2:28:82:29:a6:8d:79:26:61:16:
         85:6f:89:12:16:4d:ba:27:50:cf:16:5e:0c:bd:00:2c:62:5f:
         0b:3d:5a:fb:4a:36:71:df:22:40:f5:68:56:61:e6:59:3c:3f:
         a6:36:69:d3:14:7f:d9:bd:b7:71:9d:08:21:be:e1:e1:b5:94:
         11:e0:20:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZsEK9qDxoQHsu41RDnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjA1ZDRiZDVkNDJiNDE3NWFjYzYzNGFjY2YwZmZhMTg3
M2YwYWEwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
EygwZDY4ZWUyZGFkNzhhZmFiNTE4MTZlOTc3MjMyNTJiYjBhMjE1OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj62cof2M8BEYs8in7Bs+LoSf2Bu0
fp8t/BPdQi6aVpCSKkgNeS0+bg5mPKVEQeYrQn59gWLo0+Vk0QibbK0Tm4uToE5Y
LtOCWV1r1vOzG6crcB6oo45Suc1nBN8VeuK2cZyCFS00AGl33cpOrnrSePlKdFs3
r8bIEph3CXfGg0uzclyxFqCLXo2WWFsxqJ3HKObbTkgTCB/CiTzuzm6lhc0w9l6u
Qje2hPt5bNVAsgWuDugqa3n71X4PxrJEeMyvtfjUt5Gp0bbhphDVGxDIh+CpSsTN
itoOk3kg8CqG+0AclGsHNnGqYCA65ScB1LTQwwvT1YPRHIh8xoiKBoHxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1o7i2teK+rUYFul3IyUrsKIVl1MB8GA1UdIwQY
MBaAFJzwXUvV1CtBdazGNKzPD/oYc/CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEt
OGJiYTVmYTNjMzE3LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEtOGJiYTVmYTNjMzE3
LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf2/s93H
d3tRs1HcLieMXnef0d9ZbI/WvfF5dXWGC0WBQyHxG1a9EtF99hMkAKfr7NaKmULh
alW3mH5KEhfD7otB8sXdgwtlLZ+Q+KCk5o72cgZYXRwSwCqmx3Cy+nZtFXb7uL8q
KzsEx5Gqu3T5eVG5I0/yIX9C7QvNWf/7a4gDb4z4Ht9ObX4EnPn1yuHSxFvicHzU
75APxXmRcHakL73Sdcc3AFBdWpy1WCSkrYX2PPwKkqycH3TVY5LiKIIppo15JmEW
hW+JEhZNuidQzxZeDL0ALGJfCz1a+0o2cd8iQPVoVmHmWTw/pjZp0xR/2b23cZ0I
Ib7h4bWUEeAgzw==
-----END CERTIFICATE-----