Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File:                     nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier:          41m/LMwKY2ulzT5CnR/E9cTr3oyl3BDi4n1q0bDk0gg=
Subject key identifier:   78:80:34:40:58:50:7B:12:65:6E:6B:50:D7:BE:74:8E:A0:70:1B:57
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer:       /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial:       01962DF440B94B1705C9FB8BA35261F30C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number:          0438
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: yVwXDkGPpTD+93Hs7l6pPaAEq8wj4B1+Y/GY6Y/Rrzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:40:b9:4b:17:05:c9:fb:8b:a3:52:61:f3:0c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=7880344058507b12656e6b50d7be748ea0701b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:29:c6:3d:9f:f2:9d:2a:52:dd:5c:bb:76:
                    e8:5a:7f:b0:13:93:38:f5:dc:43:1c:f7:04:a3:b1:
                    80:16:13:08:0c:27:74:92:07:61:f2:0e:85:af:dd:
                    e3:be:ce:92:34:68:9d:df:e8:34:3b:4f:fa:54:89:
                    7c:a0:48:f0:92:04:09:dd:03:c8:28:29:6d:97:de:
                    c3:3c:93:1e:c7:95:1a:7b:f8:88:e1:4a:5a:95:b3:
                    f7:e7:ec:f9:fb:0d:8b:80:00:6c:1e:e8:1b:ee:36:
                    84:dd:bd:34:4c:bb:38:e8:f4:95:32:bf:4a:df:a8:
                    16:9e:da:09:de:25:77:3f:d3:7d:64:67:89:d0:56:
                    de:fd:71:23:9b:e2:3a:5c:7d:4e:9f:bd:b1:52:e0:
                    1d:83:2f:ae:f8:07:b2:6d:84:9b:2a:b3:78:94:31:
                    e3:d9:e9:f5:ed:5e:00:49:82:59:f5:2e:ed:14:89:
                    65:d2:7c:80:44:f7:d6:c3:7c:d5:83:eb:2d:2f:9b:
                    ec:8b:b9:80:bb:1d:c2:6d:99:bf:15:02:5a:29:cd:
                    71:45:7c:a1:25:20:95:df:6a:0f:ed:fc:a3:68:6c:
                    d8:c2:8d:6f:8b:f4:a3:d7:91:18:7d:88:a3:ab:91:
                    6c:66:8f:27:64:db:c8:9a:9c:38:94:da:9e:f4:5f:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:80:34:40:58:50:7B:12:65:6E:6B:50:D7:BE:74:8E:A0:70:1B:57
            X509v3 Authority Key Identifier:
                keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:5c:ec:15:c6:98:c6:fb:d3:39:ce:4b:5b:1f:4f:8f:65:
         a1:3a:ac:1e:97:84:d0:82:44:7f:c2:3f:6a:a7:6c:21:66:c1:
         d9:aa:e1:c9:b0:ab:dd:50:f3:86:ff:1d:b8:84:9b:a0:ae:a4:
         f0:8e:26:a6:02:c8:78:d3:3f:06:c5:ae:a6:54:2d:9b:c8:f7:
         6b:f7:4a:85:41:23:0b:7a:f9:18:79:39:69:fe:13:bf:0c:7a:
         89:45:ba:17:e0:22:bd:82:7c:75:54:17:4f:61:5e:71:bb:49:
         74:76:82:48:62:ae:e3:7a:40:13:bf:26:33:25:cc:4e:1d:f2:
         be:b4:d7:ba:43:4e:67:58:e8:d5:00:63:5d:ec:42:f4:43:97:
         24:ed:f7:23:aa:5f:6f:ee:b3:dd:61:6c:ca:25:57:b7:42:9f:
         81:1b:58:07:22:0e:1c:d2:6b:df:87:b4:b6:8a:8d:df:ee:77:
         e5:51:13:13:00:f6:8c:59:e5:54:b6:0e:a1:94:75:e1:35:bc:
         6f:cc:57:15:f7:4d:a3:41:19:1b:a6:e5:48:b6:15:b7:ea:b1:
         53:dd:f1:2c:90:39:2d:83:cb:1b:45:90:d1:58:4c:f7:0e:3c:
         b8:29:cd:54:a4:a7:e4:f8:20:7c:01:01:65:3e:36:d1:4d:68:
         af:a7:e2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EC5SxcFyfuLo1Jh8wxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDg3MzVhMzU3ZDMxZmE4YWRhMzFlMjlmMTk1ODZhNmZm
ZDk1OTIwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg3ODgwMzQ0MDU4NTA3YjEyNjU2ZTZiNTBkN2JlNzQ4ZWEwNzAxYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueIpxj2f8p0qUt1cu3boWn+wE5M4
9dxDHPcEo7GAFhMIDCd0kgdh8g6Fr93jvs6SNGid3+g0O0/6VIl8oEjwkgQJ3QPI
KCltl97DPJMex5Uae/iI4UpalbP35+z5+w2LgABsHugb7jaE3b00TLs46PSVMr9K
36gWntoJ3iV3P9N9ZGeJ0Fbe/XEjm+I6XH1On72xUuAdgy+u+AeybYSbKrN4lDHj
2en17V4ASYJZ9S7tFIll0nyARPfWw3zVg+stL5vsi7mAux3CbZm/FQJaKc1xRXyh
JSCV32oP7fyjaGzYwo1vi/Sj15EYfYijq5FsZo8nZNvImpw4lNqe9F9w+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiANEBYUHsSZW5rUNe+dI6gcBtXMB8GA1UdIwQY
MBaAFJ0Ic1o1fTH6itox4p8ZWGpv/ZWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzIt
YTM0ODgyMWNhMWUwLzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzItYTM0ODgyMWNhMWUw
LzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATI5c7BXG
mMb70znOS1sfT49loTqsHpeE0IJEf8I/aqdsIWbB2arhybCr3VDzhv8duISboK6k
8I4mpgLIeNM/BsWuplQtm8j3a/dKhUEjC3r5GHk5af4Tvwx6iUW6F+AivYJ8dVQX
T2FecbtJdHaCSGKu43pAE78mMyXMTh3yvrTXukNOZ1jo1QBjXexC9EOXJO33I6pf
b+6z3WFsyiVXt0KfgRtYByIOHNJr34e0toqN3+535VETEwD2jFnlVLYOoZR14TW8
b8xXFfdNo0EZG6blSLYVt+qxU93xLJA5LYPLG0WQ0VhM9w48uCnNVKSn5PggfAEB
ZT420U1or6fiVQ==
-----END CERTIFICATE-----