Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File:                     udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier:          BRB9nymhIPegjw68UFc4imID6ReRwnWZx4OpRZUlSGc=
Subject key identifier:   C3:FF:FE:A6:65:DF:06:AD:14:69:9B:5D:AE:01:49:73:B9:11:8D:F5
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer:       /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial:       01962E2AEA2BD940630023BEFF1230E8691B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number:          023E
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: Kuy+5em+yRjywb3Zb56e4JEkvFdN0BtBppJiPRPhuVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ea:2b:d9:40:63:00:23:be:ff:12:30:e8:69:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=c3fffea665df06ad14699b5dae014973b9118df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:65:68:c3:bc:0b:b9:68:5c:dd:34:8f:45:
                    ee:7f:b7:de:7a:75:c1:4f:33:2c:04:7e:1e:74:81:
                    68:57:4a:9d:b9:ae:6d:98:ed:ca:ff:05:ba:89:6d:
                    a4:0f:73:66:88:19:a7:63:a5:99:c4:84:a1:84:e9:
                    42:38:ed:82:9f:dd:fb:a0:e8:9f:70:d2:86:63:50:
                    56:dd:9a:9e:a1:fd:20:57:68:fe:57:02:3d:1b:c1:
                    be:f6:73:6f:22:24:da:9e:b9:99:1b:d4:1c:da:ed:
                    73:63:ac:16:e3:d6:55:f8:82:93:8e:da:c8:5c:78:
                    26:d6:54:22:41:fc:d0:65:db:6a:7c:96:78:e2:57:
                    6c:e0:b0:3b:b3:aa:2c:4a:17:49:ec:13:31:2a:9b:
                    55:be:bb:47:6f:bc:0a:86:f3:37:97:36:0c:74:cc:
                    e9:de:97:26:73:51:43:40:c0:f2:cb:fb:55:5d:89:
                    1f:fe:b0:97:b9:05:bc:a7:5f:18:d0:ba:7f:bd:11:
                    75:eb:05:a2:31:be:5b:14:c1:ae:71:26:4c:d5:10:
                    8e:be:8e:37:c3:73:63:14:06:af:4b:66:34:8e:b4:
                    e7:79:68:08:db:f9:ec:28:2d:1a:91:8c:6f:fe:46:
                    f1:69:b2:cb:88:44:27:64:5b:da:e3:d0:bf:9f:98:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:FE:A6:65:DF:06:AD:14:69:9B:5D:AE:01:49:73:B9:11:8D:F5
            X509v3 Authority Key Identifier:
                keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f8:b1:3b:78:2f:fd:7c:82:91:f0:5f:5d:1d:97:38:da:d8:
         b1:0a:a8:fa:d1:e7:61:11:a7:c1:b5:4b:36:e1:32:a3:0a:fd:
         9e:ae:9c:12:0a:c5:a0:9b:f8:c6:da:91:76:b2:60:4c:71:46:
         f0:cb:bd:90:e9:93:f3:fb:6d:43:31:c5:1b:42:94:dd:15:7b:
         cf:d3:86:8f:35:dd:d4:b0:62:bd:20:76:d1:34:98:1a:a5:f4:
         9a:fc:d0:15:e6:43:9d:b0:65:5d:c3:47:84:91:3d:06:a7:59:
         f8:9d:cc:87:90:c9:09:80:b9:4f:ba:26:fc:30:0c:19:9c:75:
         8b:14:86:71:61:f7:9f:ba:60:2e:04:67:ce:20:fb:8a:c3:f5:
         70:b0:46:9b:6e:8d:9f:7f:8a:d1:72:cd:17:a4:58:5a:53:f5:
         54:c9:0a:a0:38:ec:14:38:8a:91:0a:1b:0f:a3:43:f3:4b:31:
         1a:32:66:7e:06:3d:0a:1a:05:7e:81:89:b6:0c:5b:27:2b:72:
         ab:2e:5a:e8:33:9f:a4:77:ee:82:a3:7c:e6:e5:60:96:77:c1:
         bd:e1:fc:cc:a9:d0:e1:d4:38:ed:ac:e8:07:27:19:05:e3:5d:
         1b:91:c4:a2:47:08:42:55:98:5c:ae:6f:73:c6:ba:c5:95:cf:
         2d:b0:7c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuor2UBjACO+/xIw6GkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZDA5NWNjZTM1YjNhMzZiZWYxMDhlZjc2MmE2MjFhZjQ2
NjI2MjEwHhcNMjUwNDEzMDgwMTI2WhcNMjUwNDE0MDgwMTI2WjAzMTEwLwYDVQQD
EyhjM2ZmZmVhNjY1ZGYwNmFkMTQ2OTliNWRhZTAxNDk3M2I5MTE4ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72ZlaMO8C7loXN00j0Xuf7feenXB
TzMsBH4edIFoV0qdua5tmO3K/wW6iW2kD3NmiBmnY6WZxIShhOlCOO2Cn937oOif
cNKGY1BW3Zqeof0gV2j+VwI9G8G+9nNvIiTanrmZG9Qc2u1zY6wW49ZV+IKTjtrI
XHgm1lQiQfzQZdtqfJZ44lds4LA7s6osShdJ7BMxKptVvrtHb7wKhvM3lzYMdMzp
3pcmc1FDQMDyy/tVXYkf/rCXuQW8p18Y0Lp/vRF16wWiMb5bFMGucSZM1RCOvo43
w3NjFAavS2Y0jrTneWgI2/nsKC0akYxv/kbxabLLiEQnZFva49C/n5hxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP//qZl3watFGmbXa4BSXO5EY31MB8GA1UdIwQY
MBaAFLnQlczjWzo2vvEI73YqYhr0ZiYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODFjYzItOTU5ZS00MTkyLWJkZGUt
OGM3MGJjODQ3YmM1LzEvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yODFjYzItOTU5ZS00MTkyLWJkZGUtOGM3MGJjODQ3YmM1
LzEvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfixO3gv
/XyCkfBfXR2XONrYsQqo+tHnYRGnwbVLNuEyowr9nq6cEgrFoJv4xtqRdrJgTHFG
8Mu9kOmT8/ttQzHFG0KU3RV7z9OGjzXd1LBivSB20TSYGqX0mvzQFeZDnbBlXcNH
hJE9BqdZ+J3Mh5DJCYC5T7om/DAMGZx1ixSGcWH3n7pgLgRnziD7isP1cLBGm26N
n3+K0XLNF6RYWlP1VMkKoDjsFDiKkQobD6ND80sxGjJmfgY9ChoFfoGJtgxbJyty
qy5a6DOfpHfugqN85uVglnfBveH8zKnQ4dQ47azoBycZBeNdG5HEokcIQlWYXK5v
c8a6xZXPLbB8VA==
-----END CERTIFICATE-----