Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
File:                     n34J7YuBilTMw-tCb2elWhOKuH0.mft (raw, json)
Hash identifier:          ErY0dp8MhLstfzPVdEOksTqILp40GNBpp66f5IgkGwc=
Subject key identifier:   64:13:D5:ED:F7:08:69:27:1C:1E:37:ED:C4:80:6C:7E:29:4B:17:4C
Authority key identifier: 9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D
Certificate issuer:       /CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
Certificate serial:       01962E993058B35BA275FC969C24AF525707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: n34J7YuBilTMw-tCb2elWhOKuH0.crl (hash: h1GZG5cxuqhJML2w/T/5hrzWuK8g+AUV+0zd2SOOOQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:30:58:b3:5b:a2:75:fc:96:9c:24:af:52:57:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7e09ed8b818a54ccc3eb426f67a55a138ab87d
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=6413d5edf70869271c1e37edc4806c7e294b174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:e1:15:dd:4a:58:28:c3:78:01:86:47:5d:
                    96:8b:ba:42:bd:d7:2b:e3:7d:f3:f9:7c:89:e7:c5:
                    9c:4f:ae:c9:c7:11:43:12:a1:9b:32:de:da:ec:3c:
                    8a:30:7f:96:1a:2d:ae:de:3b:e6:93:27:4b:be:3f:
                    6d:47:f5:c5:24:ab:eb:eb:55:c3:26:8d:a3:b5:1b:
                    30:45:f7:79:8f:30:51:ab:bf:5f:1c:82:15:1a:1b:
                    78:4c:3e:39:75:98:01:b2:5b:84:e5:cd:b1:89:4a:
                    b2:60:89:4b:14:09:f8:c4:2d:4e:30:fc:81:a5:5b:
                    57:02:68:62:63:fb:ba:ca:85:94:87:6b:63:93:f0:
                    74:83:7d:10:f0:45:bf:cc:21:2a:5b:a9:f7:6a:02:
                    0a:3f:43:c3:c9:d4:dc:37:47:b2:5d:41:19:49:ef:
                    c3:b4:f6:13:00:15:ee:a1:26:69:b2:c8:15:a6:4a:
                    4c:01:d0:3d:bf:15:b0:fe:a9:1b:62:2f:34:32:40:
                    9b:2f:a4:db:02:56:0b:77:cd:59:8b:f7:af:b8:2b:
                    21:70:e1:39:1c:62:d8:9b:2b:21:06:04:3a:28:db:
                    b7:eb:dd:22:ec:b9:73:01:de:5c:a3:71:1c:af:83:
                    bb:b4:37:9b:51:54:b7:1d:f1:72:c5:a1:f8:32:03:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:D5:ED:F7:08:69:27:1C:1E:37:ED:C4:80:6C:7E:29:4B:17:4C
            X509v3 Authority Key Identifier:
                keyid:9F:7E:09:ED:8B:81:8A:54:CC:C3:EB:42:6F:67:A5:5A:13:8A:B8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n34J7YuBilTMw-tCb2elWhOKuH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7f8cc1-94cc-4f7e-81a3-f19ad2bad7b9/1/n34J7YuBilTMw-tCb2elWhOKuH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:0e:6d:41:3f:b9:14:ca:a8:60:dc:64:67:ea:84:fa:33:
         6a:1d:8e:ba:35:8b:13:7f:67:e1:ec:b5:98:3e:37:77:1f:27:
         ae:ba:90:66:f9:be:68:e4:46:90:72:4a:8f:eb:e3:de:f4:4b:
         eb:91:d6:45:68:bc:a5:c4:ae:b0:0f:dd:6c:71:ee:20:ab:92:
         2f:0e:1f:89:dc:a6:89:cd:d0:e4:5f:38:7a:7c:65:a8:92:fa:
         02:58:4a:1f:ff:e2:fc:10:bd:fa:7e:bd:d4:88:2b:26:83:0c:
         8a:32:fd:a2:2d:03:d7:6a:91:a3:cf:96:7a:11:6d:7f:ed:b8:
         63:10:aa:fe:e6:04:47:ea:24:84:1e:51:f2:77:7f:7e:86:c0:
         22:df:ea:6c:18:60:5c:93:80:e5:8f:fc:0c:f0:9d:67:df:b7:
         61:9f:ef:d6:64:79:3b:38:3c:f9:a3:cc:bb:6d:c2:87:e8:58:
         dd:78:23:98:1e:98:89:76:80:08:78:b1:af:7c:bf:c8:ae:c8:
         2f:95:1b:55:7c:63:4b:56:5c:c8:fe:1b:bb:43:93:aa:ea:90:
         6e:cd:ce:2c:7c:c0:2a:f0:90:c3:72:7f:ae:cc:d8:2f:aa:41:
         1d:24:b9:90:2c:4b:96:6e:94:45:69:88:a9:b6:b4:35:f3:1a:
         75:c6:2e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTBYs1uidfyWnCSvUlcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmN2UwOWVkOGI4MThhNTRjY2MzZWI0MjZmNjdhNTVhMTM4
YWI4N2QwHhcNMjUwNDEzMTAwMTUzWhcNMjUwNDE0MTAwMTUzWjAzMTEwLwYDVQQD
Eyg2NDEzZDVlZGY3MDg2OTI3MWMxZTM3ZWRjNDgwNmM3ZTI5NGIxNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOzhFd1KWCjDeAGGR12Wi7pCvdcr
433z+XyJ58WcT67JxxFDEqGbMt7a7DyKMH+WGi2u3jvmkydLvj9tR/XFJKvr61XD
Jo2jtRswRfd5jzBRq79fHIIVGht4TD45dZgBsluE5c2xiUqyYIlLFAn4xC1OMPyB
pVtXAmhiY/u6yoWUh2tjk/B0g30Q8EW/zCEqW6n3agIKP0PDydTcN0eyXUEZSe/D
tPYTABXuoSZpssgVpkpMAdA9vxWw/qkbYi80MkCbL6TbAlYLd81Zi/evuCshcOE5
HGLYmyshBgQ6KNu3690i7LlzAd5co3Ecr4O7tDebUVS3HfFyxaH4MgOR3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQT1e33CGknHB437cSAbH4pSxdMMB8GA1UdIwQY
MBaAFJ9+Ce2LgYpUzMPrQm9npVoTirh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjM0SjdZdUJpbFRNdy10Q2IyZWxXaE9LdUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83ZjhjYzEtOTRjYy00ZjdlLTgxYTMt
ZjE5YWQyYmFkN2I5LzEvbjM0SjdZdUJpbFRNdy10Q2IyZWxXaE9LdUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83ZjhjYzEtOTRjYy00ZjdlLTgxYTMtZjE5YWQyYmFkN2I5
LzEvbjM0SjdZdUJpbFRNdy10Q2IyZWxXaE9LdUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfcObUE/
uRTKqGDcZGfqhPozah2OujWLE39n4ey1mD43dx8nrrqQZvm+aORGkHJKj+vj3vRL
65HWRWi8pcSusA/dbHHuIKuSLw4fidymic3Q5F84enxlqJL6AlhKH//i/BC9+n69
1IgrJoMMijL9oi0D12qRo8+WehFtf+24YxCq/uYER+okhB5R8nd/fobAIt/qbBhg
XJOA5Y/8DPCdZ9+3YZ/v1mR5Ozg8+aPMu23Ch+hY3XgjmB6YiXaACHixr3y/yK7I
L5UbVXxjS1ZcyP4bu0OTquqQbs3OLHzAKvCQw3J/rszYL6pBHSS5kCxLlm6URWmI
qba0NfMadcYuFA==
-----END CERTIFICATE-----