Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File:                     PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier:          jpLogze6TZVi9uKpsKGsuag1yKGfnj6PPIFHbxf35zk=
Subject key identifier:   A9:81:4A:FA:3A:FE:18:35:0E:89:08:09:FD:33:C3:6A:84:33:55:25
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer:       /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial:       01962F3D8A3AD0D088512E4B74F68F2304CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: TJS1sjSsSrZB1Bx4xLM/vzvw3oEyqeqWWhEhIsHSJqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8a:3a:d0:d0:88:51:2e:4b:74:f6:8f:23:04:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=a9814afa3afe18350e890809fd33c36a84335525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:ad:bc:27:88:0d:95:39:04:87:e1:e9:82:
                    a5:06:ae:71:16:71:31:eb:d6:9a:8d:a7:b8:d0:7b:
                    fe:22:97:b8:1b:ee:42:8c:6e:82:b5:9b:67:40:51:
                    c0:d8:5d:c8:f1:74:45:ca:95:7c:b9:42:1b:28:cf:
                    ac:af:0f:49:bc:e6:34:a5:83:fa:02:dc:68:b1:84:
                    3b:eb:c6:03:f0:6d:60:ec:75:b0:a6:a0:ac:a3:3f:
                    07:c5:60:3b:44:d3:89:a8:3b:42:2c:62:15:81:33:
                    b6:4f:22:52:b3:de:2a:50:4d:f3:0b:91:47:6f:97:
                    45:42:6e:9c:a1:d6:fc:8d:ae:62:44:f3:79:a7:04:
                    53:19:c8:8b:9a:af:63:12:ea:9f:30:91:81:83:2f:
                    9d:37:f0:ed:8d:a2:53:d4:48:06:1a:64:95:d1:c4:
                    1e:cf:99:dc:34:dd:e1:d0:b7:2e:52:f5:3c:d9:d6:
                    6d:c5:19:e5:a2:d0:ad:d0:9c:bf:b9:68:15:7c:4a:
                    28:e3:83:65:5a:7c:62:5b:b0:02:db:17:29:b1:fc:
                    aa:aa:72:19:0b:45:af:77:a5:fb:57:ec:ff:38:e8:
                    0e:1b:c0:ea:87:af:65:1c:0c:a4:1f:d3:40:fd:52:
                    db:ca:d0:a1:10:78:bc:74:a1:62:12:ab:d2:95:b0:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:4A:FA:3A:FE:18:35:0E:89:08:09:FD:33:C3:6A:84:33:55:25
            X509v3 Authority Key Identifier:
                keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:ac:f8:91:2f:0b:03:91:35:ab:eb:84:5e:8b:a9:d0:81:7a:
         91:1d:a6:85:42:01:f9:27:b0:64:0b:86:14:fd:7c:04:38:6b:
         06:56:f3:5a:bc:61:40:c3:c7:7d:23:ff:e3:4e:e5:be:e0:c6:
         1a:ea:ab:38:6e:50:eb:70:e9:01:01:6c:53:8c:06:76:d7:ac:
         17:6f:44:e5:5a:a4:c2:62:51:d8:28:cc:96:a8:35:5c:ed:8f:
         54:f5:fb:3d:84:e1:03:8d:81:68:88:f3:ba:da:ef:bc:16:96:
         5a:b6:97:28:85:51:b8:2e:57:b1:49:f0:72:91:e4:15:e6:4a:
         b8:d4:1a:79:1a:e6:82:fc:1a:b7:e3:38:0c:6f:53:a7:a5:9e:
         da:a1:91:a4:2a:cb:b7:d0:d5:8e:f4:53:2f:95:c9:cd:bf:44:
         c7:fe:43:e2:be:f5:22:10:48:1b:05:ae:ae:c2:d3:4c:7d:44:
         66:5c:a8:77:f2:1a:d8:1d:4d:32:83:bc:39:b6:2b:85:44:20:
         0f:ad:d1:38:8e:61:20:d6:ff:48:00:55:8e:46:93:63:6e:da:
         32:f5:19:f8:77:56:04:91:df:ac:41:e3:a5:4f:8b:78:c4:a9:
         b5:cb:56:1a:a7:47:b0:4b:dc:39:37:88:d4:cb:a1:52:9d:74:
         34:7b:0f:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYo60NCIUS5LdPaPIwTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMjNhYjczMDUzMDQ3OTJkYzJjZTgxNzgwYjVkYjg4OWQ4
ZjdmM2EwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
EyhhOTgxNGFmYTNhZmUxODM1MGU4OTA4MDlmZDMzYzM2YTg0MzM1NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfutvCeIDZU5BIfh6YKlBq5xFnEx
69aajae40Hv+Ipe4G+5CjG6CtZtnQFHA2F3I8XRFypV8uUIbKM+srw9JvOY0pYP6
AtxosYQ768YD8G1g7HWwpqCsoz8HxWA7RNOJqDtCLGIVgTO2TyJSs94qUE3zC5FH
b5dFQm6codb8ja5iRPN5pwRTGciLmq9jEuqfMJGBgy+dN/DtjaJT1EgGGmSV0cQe
z5ncNN3h0LcuUvU82dZtxRnlotCt0Jy/uWgVfEoo44NlWnxiW7AC2xcpsfyqqnIZ
C0Wvd6X7V+z/OOgOG8Dqh69lHAykH9NA/VLbytChEHi8dKFiEqvSlbDjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmBSvo6/hg1DokICf0zw2qEM1UlMB8GA1UdIwQY
MBaAFD8jq3MFMEeS3CzoF4C124idj386MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzIt
NjAwMzNkNWIwM2JiLzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mN2RiOWQtZmNkOS00ZjIxLTkxYzItNjAwMzNkNWIwM2Ji
LzEvUHlPcmN3VXdSNUxjTE9nWGdMWGJpSjJQZnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Kz4kS8L
A5E1q+uEXoup0IF6kR2mhUIB+SewZAuGFP18BDhrBlbzWrxhQMPHfSP/407lvuDG
GuqrOG5Q63DpAQFsU4wGdtesF29E5VqkwmJR2CjMlqg1XO2PVPX7PYThA42BaIjz
utrvvBaWWraXKIVRuC5XsUnwcpHkFeZKuNQaeRrmgvwat+M4DG9Tp6We2qGRpCrL
t9DVjvRTL5XJzb9Ex/5D4r71IhBIGwWursLTTH1EZlyod/Ia2B1NMoO8ObYrhUQg
D63ROI5hINb/SABVjkaTY27aMvUZ+HdWBJHfrEHjpU+LeMSptctWGqdHsEvcOTeI
1MuhUp10NHsPug==
-----END CERTIFICATE-----