Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File:                     Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier:          mdLJn4f4iYYqMwW5Uy2KSRL1Xav4FnRzEBxIqyNU/VY=
Subject key identifier:   AD:92:86:CD:15:9D:AF:86:1C:01:4D:C3:C4:0A:E0:42:AD:24:78:E7
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer:       /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial:       01962F3D5CD1061C47284F7B32A3E778C749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: 0nEWqJiY79/Xdct83IQpuzpFsc3drs6x4xNNj5IDG64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:d1:06:1c:47:28:4f:7b:32:a3:e7:78:c7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=ad9286cd159daf861c014dc3c40ae042ad2478e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:ef:2d:6e:6a:53:16:2f:a6:d6:31:17:61:
                    a6:3d:67:bf:b8:bf:5e:b2:38:90:8a:65:3a:d6:4b:
                    c4:fe:2f:9b:b3:6a:e4:5b:73:ff:ea:2a:2b:de:6e:
                    76:64:fc:dd:6a:26:ad:1a:cb:a9:a0:c0:5c:0e:27:
                    94:c0:1a:03:a1:5e:45:80:82:15:21:e7:4d:2b:18:
                    b3:90:3b:2a:d9:76:9a:af:94:1f:80:7d:1d:4a:ad:
                    c7:e8:54:e5:f6:c9:5c:57:da:2b:64:8d:b2:c5:0e:
                    f1:ab:1c:e4:88:89:da:53:e3:bc:93:fd:0a:ff:1f:
                    0d:60:f5:03:1f:f8:af:e5:c8:db:df:33:51:96:5f:
                    73:8c:0b:4d:73:c8:f6:4f:48:41:cd:16:72:5d:3c:
                    61:2e:c7:7f:4b:26:4b:ad:29:1d:ac:0c:a0:23:b1:
                    87:0f:33:62:e6:4b:49:c7:46:92:eb:0e:7f:20:00:
                    24:be:4e:e3:c2:49:9e:da:5d:3f:8f:a0:5b:0f:58:
                    0e:a0:39:7e:ae:04:a7:fe:ba:1a:25:1c:a5:bd:44:
                    c9:54:ce:71:d5:78:31:31:45:f9:1e:0a:05:33:df:
                    00:7c:aa:cd:57:17:3c:ad:09:60:aa:55:2d:f8:43:
                    07:ef:e1:4c:27:ec:35:c7:83:19:8d:c0:84:33:7a:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:86:CD:15:9D:AF:86:1C:01:4D:C3:C4:0A:E0:42:AD:24:78:E7
            X509v3 Authority Key Identifier:
                keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:3c:9f:48:7c:0e:c7:0c:83:5e:71:87:41:37:27:92:a8:
         1b:52:bd:8a:ed:79:3d:92:f5:46:d5:c7:92:9f:91:0a:ef:c4:
         51:ba:d6:bf:20:3a:06:d1:74:8b:3b:90:70:b0:43:32:bf:62:
         8f:92:8e:56:10:69:38:61:de:10:5d:9a:cc:6b:dc:3e:0d:b1:
         91:db:6a:08:4a:7c:d3:15:d9:eb:e0:c5:fb:21:25:35:8e:39:
         9c:e5:b9:33:36:32:b5:07:9d:c8:00:0b:0f:66:fe:d7:eb:e3:
         9c:e6:8e:b2:01:a5:eb:64:40:69:7f:f1:95:2b:79:3b:e9:14:
         0f:d5:6b:17:d3:89:5c:aa:66:28:bf:ef:0b:94:97:97:bd:23:
         84:43:b0:1b:aa:f3:af:e3:d9:ca:88:6c:38:3d:e2:ae:dd:4e:
         cc:19:61:b6:4c:66:b8:18:97:b5:f2:81:69:20:05:6a:e9:55:
         ac:04:2e:13:02:37:de:d6:f8:6d:d1:69:88:97:02:ff:90:23:
         26:ec:c0:04:eb:30:e6:ae:af:a6:96:65:a3:0e:92:aa:0a:95:
         21:62:df:2e:89:7f:2a:54:8f:eb:5c:5c:63:cd:0a:de:0a:bb:
         a9:f1:24:f8:86:f6:a0:11:0a:a1:62:1c:86:46:41:e8:fb:65:
         8c:7e:5b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVzRBhxHKE97MqPneMdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzg3MWRiNTA5OGJmODM4ZmZlYTk5YTAyZjY3OTM2OGIz
ZTFhYjIwHhcNMjUwNDEzMTMwMTEyWhcNMjUwNDE0MTMwMTEyWjAzMTEwLwYDVQQD
EyhhZDkyODZjZDE1OWRhZjg2MWMwMTRkYzNjNDBhZTA0MmFkMjQ3OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRDvLW5qUxYvptYxF2GmPWe/uL9e
sjiQimU61kvE/i+bs2rkW3P/6ior3m52ZPzdaiatGsupoMBcDieUwBoDoV5FgIIV
IedNKxizkDsq2Xaar5QfgH0dSq3H6FTl9slcV9orZI2yxQ7xqxzkiInaU+O8k/0K
/x8NYPUDH/iv5cjb3zNRll9zjAtNc8j2T0hBzRZyXTxhLsd/SyZLrSkdrAygI7GH
DzNi5ktJx0aS6w5/IAAkvk7jwkme2l0/j6BbD1gOoDl+rgSn/roaJRylvUTJVM5x
1XgxMUX5HgoFM98AfKrNVxc8rQlgqlUt+EMH7+FMJ+w1x4MZjcCEM3o1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2Shs0Vna+GHAFNw8QK4EKtJHjnMB8GA1UdIwQY
MBaAFA3IcdtQmL+Dj/6pmgL2eTaLPhqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUt
NjViZTQ0ZDBkYmQ0LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUtNjViZTQ0ZDBkYmQ0
LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKI8n0h8
DscMg15xh0E3J5KoG1K9iu15PZL1RtXHkp+RCu/EUbrWvyA6BtF0izuQcLBDMr9i
j5KOVhBpOGHeEF2azGvcPg2xkdtqCEp80xXZ6+DF+yElNY45nOW5MzYytQedyAAL
D2b+1+vjnOaOsgGl62RAaX/xlSt5O+kUD9VrF9OJXKpmKL/vC5SXl70jhEOwG6rz
r+PZyohsOD3irt1OzBlhtkxmuBiXtfKBaSAFaulVrAQuEwI33tb4bdFpiJcC/5Aj
JuzABOsw5q6vppZlow6SqgqVIWLfLol/KlSP61xcY80K3gq7qfEk+Ib2oBEKoWIc
hkZB6PtljH5b1Q==
-----END CERTIFICATE-----