Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File:                     9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier:          ewxPT/iDupgZABY5tFxwboPUC469/AMviYVaMHGKY3Y=
Subject key identifier:   CB:F8:41:F6:5E:C4:88:2E:DF:7D:0A:92:56:B1:15:55:60:28:90:D3
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer:       /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial:       01962F064F7F514659432300D42AF64BC377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number:          08B0
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: xh0QnL662ukdlIQ8JOkYEnp8QIVMTEc1fFf0sFAt3HM=)
                          2: iIjePRipe22Xt3i-0k7Htqe5OiY.roa (hash: ZRSy/isYMR/Q32/3YEImTWCaf6Cp+8bokFU0sdfABNw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:7f:51:46:59:43:23:00:d4:2a:f6:4b:c3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=cbf841f65ec4882edf7d0a9256b11555602890d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:95:11:fe:70:10:55:77:2d:30:f2:57:91:
                    7a:44:11:9c:fe:48:a4:30:40:5b:32:b5:6d:85:65:
                    6c:2c:33:d0:4c:bf:b1:33:54:6a:d6:90:1f:bd:0a:
                    97:50:8b:ef:d9:ff:2b:a6:0d:d4:8c:12:c8:43:d5:
                    25:f0:b5:0f:c8:15:11:b2:f0:b9:f2:a6:3c:28:4e:
                    2a:ad:35:51:65:f8:64:e3:c0:9f:83:43:df:f4:a6:
                    8f:2a:13:d4:b8:eb:ee:21:cf:15:97:b3:71:8d:d5:
                    18:62:99:dc:9f:16:6c:be:f3:26:d3:1d:a6:92:58:
                    79:41:89:98:22:50:65:1d:2f:f0:7c:82:dc:d1:37:
                    fe:e4:c0:e5:0b:bf:0e:cf:0a:01:6f:20:dd:7f:d8:
                    fc:4d:13:64:3e:c2:a6:03:6f:df:44:66:7e:69:82:
                    89:9a:2c:b6:81:f9:b2:23:4f:08:e1:0d:d7:06:f0:
                    08:8c:8b:9b:d8:ba:34:97:87:49:32:d5:12:16:b1:
                    33:34:97:73:40:7a:6e:70:3f:dd:01:ac:5b:ca:69:
                    76:4a:52:0b:f9:62:7b:00:cf:89:98:06:ce:30:e6:
                    97:91:a7:cf:26:34:af:c6:91:e3:e2:43:72:b5:58:
                    ba:17:2e:73:86:d7:6a:0c:b2:02:97:ab:8f:f3:b1:
                    2b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F8:41:F6:5E:C4:88:2E:DF:7D:0A:92:56:B1:15:55:60:28:90:D3
            X509v3 Authority Key Identifier:
                keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:56:16:b7:07:4d:d0:48:95:d8:75:94:9d:21:e7:b3:a0:
         5a:6d:6c:26:01:62:a9:a6:a2:3a:d1:10:91:b2:45:fe:d6:06:
         eb:0f:7f:96:fe:17:3b:cc:51:b3:56:12:95:de:80:89:0e:17:
         dd:7f:bf:1d:38:92:53:2c:24:ff:5c:de:a8:bd:48:58:53:90:
         99:ba:3a:77:ed:68:b2:d0:67:cc:81:a2:d3:3a:50:fc:0f:32:
         a5:30:5f:bf:f2:56:b6:f6:fc:b6:83:ab:28:e0:8d:84:6b:37:
         af:98:bb:05:9c:5d:1d:f7:ad:dc:b9:bb:38:96:5c:a5:1b:4c:
         10:05:ac:69:99:58:e0:52:45:79:10:65:19:5b:05:0d:f9:c1:
         57:77:61:e9:8c:4e:50:b4:bf:68:53:1d:2b:d2:36:db:dc:39:
         2c:68:09:b2:1b:13:c0:39:19:1a:75:56:02:02:1b:c1:67:19:
         0e:b1:3e:32:4c:5e:3e:25:ad:ee:6a:59:ae:98:d0:a2:e7:bb:
         ce:4a:5d:fa:ad:2c:80:07:f7:14:4a:cf:1b:f7:37:81:c9:f1:
         d5:93:41:af:ac:de:b0:0f:e9:5a:b6:3c:d2:db:1a:3c:a0:26:
         56:01:6f:3d:b5:a3:fd:71:7e:95:02:62:20:87:0a:98:6f:16:
         ef:a4:96:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBk9/UUZZQyMA1Cr2S8N3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWRhMjBiZDk4YmFiZGY3NGMzZDU2Y2Q3OGFkYTY2ZWQ4
N2ExNDgwHhcNMjUwNDEzMTIwMTA0WhcNMjUwNDE0MTIwMTA0WjAzMTEwLwYDVQQD
EyhjYmY4NDFmNjVlYzQ4ODJlZGY3ZDBhOTI1NmIxMTU1NTYwMjg5MGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhmVEf5wEFV3LTDyV5F6RBGc/kik
MEBbMrVthWVsLDPQTL+xM1Rq1pAfvQqXUIvv2f8rpg3UjBLIQ9Ul8LUPyBURsvC5
8qY8KE4qrTVRZfhk48Cfg0Pf9KaPKhPUuOvuIc8Vl7NxjdUYYpncnxZsvvMm0x2m
klh5QYmYIlBlHS/wfILc0Tf+5MDlC78OzwoBbyDdf9j8TRNkPsKmA2/fRGZ+aYKJ
miy2gfmyI08I4Q3XBvAIjIub2Lo0l4dJMtUSFrEzNJdzQHpucD/dAaxbyml2SlIL
+WJ7AM+JmAbOMOaXkafPJjSvxpHj4kNytVi6Fy5zhtdqDLICl6uP87ErCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv4QfZexIgu330KklaxFVVgKJDTMB8GA1UdIwQY
MBaAFPatogvZi6vfdMPVbNeK2mbth6FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzkt
OWRiMTdhNWRlNDYzLzEvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzktOWRiMTdhNWRlNDYz
LzEvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxENWFrcH
TdBIldh1lJ0h57OgWm1sJgFiqaaiOtEQkbJF/tYG6w9/lv4XO8xRs1YSld6AiQ4X
3X+/HTiSUywk/1zeqL1IWFOQmbo6d+1ostBnzIGi0zpQ/A8ypTBfv/JWtvb8toOr
KOCNhGs3r5i7BZxdHfet3Lm7OJZcpRtMEAWsaZlY4FJFeRBlGVsFDfnBV3dh6YxO
ULS/aFMdK9I229w5LGgJshsTwDkZGnVWAgIbwWcZDrE+MkxePiWt7mpZrpjQoue7
zkpd+q0sgAf3FErPG/c3gcnx1ZNBr6zesA/pWrY80tsaPKAmVgFvPbWj/XF+lQJi
IIcKmG8W76SW+g==
-----END CERTIFICATE-----