Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File:                     mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier:          kgvzmhuyDup9vDWRn59+PK3Omhm8ngP5DQPSg3nWJLs=
Subject key identifier:   C5:80:97:AB:58:A7:0A:35:3B:2D:9A:1E:D5:B9:3D:70:CF:D8:7B:79
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer:       /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial:       01962E9985BBB9FCB91A5D5A3F8B5F7C12A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number:          0A22
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: 26CbDCBJ7G9CQQWIYx3YGVbkezzHyH4/2IbkT9NmB74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:85:bb:b9:fc:b9:1a:5d:5a:3f:8b:5f:7c:12:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=c58097ab58a70a353b2d9a1ed5b93d70cfd87b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:22:09:37:07:cf:62:14:d7:b5:d9:a5:68:
                    fb:2d:6c:19:56:70:b5:f9:ff:7e:39:38:25:70:28:
                    b9:05:83:99:ae:2e:c7:dd:e5:80:2f:54:74:40:bd:
                    6c:84:d5:02:0a:8d:89:f1:8d:02:28:61:be:7a:d6:
                    ae:63:93:c6:eb:32:5e:93:62:b6:72:50:b4:24:22:
                    3a:30:29:6e:cd:55:2b:4f:89:0b:a8:bc:23:ea:5b:
                    86:ba:bc:1d:09:03:d8:71:43:2b:7a:08:f3:2a:67:
                    26:41:a8:75:e5:29:fd:63:90:2e:d9:50:72:17:5a:
                    60:e9:3d:bd:69:be:4d:44:56:eb:c2:d1:3d:50:6a:
                    81:8b:63:bc:98:7d:c0:3c:64:3a:a5:58:9d:17:0a:
                    0d:8d:1a:34:4e:e7:6e:17:df:d4:20:f7:f9:5f:f5:
                    76:45:17:a9:4e:df:06:7e:e6:2d:3e:1f:c9:bd:77:
                    2e:d3:44:7a:a7:02:5d:25:fc:9e:5b:17:c9:18:96:
                    7f:c0:b2:e0:e0:39:b8:ac:46:1a:c5:11:99:31:9f:
                    f2:73:1e:de:09:f0:e4:5b:69:8f:81:8c:98:5d:7a:
                    d0:e8:1f:4b:44:7a:de:41:70:c8:41:ea:0b:3b:3e:
                    68:fc:cb:85:02:ed:0d:00:db:8f:b6:9e:7a:87:2f:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:97:AB:58:A7:0A:35:3B:2D:9A:1E:D5:B9:3D:70:CF:D8:7B:79
            X509v3 Authority Key Identifier:
                keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:23:55:c1:90:2e:04:d1:0a:55:f6:8d:32:89:2d:6e:d4:
         3f:30:5f:ad:fe:7d:f1:f2:09:68:1c:c4:d3:51:9b:f7:1b:a9:
         d6:d6:41:d3:d6:45:e1:af:68:22:9b:a0:49:90:ea:0c:d8:06:
         bc:ac:aa:0b:75:d5:bb:d7:f1:9a:69:24:af:11:c6:ed:79:3c:
         f9:6b:a9:f5:87:78:8b:e4:5e:20:ce:98:8b:b3:11:3d:34:65:
         2f:87:df:ee:5d:60:77:e2:1f:55:30:57:21:bb:7a:4a:72:57:
         fc:f4:c1:c3:55:84:68:8a:4a:45:1d:5f:42:7b:bf:d2:e8:78:
         d5:f2:03:70:ff:7a:10:38:41:fe:da:33:88:83:bc:8d:1e:87:
         5b:00:26:97:dc:43:cf:bd:9f:5d:eb:a1:82:a1:2e:15:95:da:
         b7:c1:05:7d:1d:7a:6b:35:4c:dc:a3:27:0e:6c:0d:42:89:b8:
         00:ac:6e:98:ea:d5:74:5b:5d:75:d3:23:e0:ad:9b:4c:4f:38:
         0a:3e:ed:59:38:2b:02:3d:3d:1a:17:16:84:86:2e:43:86:43:
         cb:33:8f:0b:74:0e:44:41:47:4d:64:86:42:55:fd:3f:68:30:
         54:e1:2a:5d:20:6e:b9:20:dd:3f:2e:3c:39:c6:fd:55:89:b2:
         e6:77:42:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYW7ufy5Gl1aP4tffBKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjhiODEyZTJlOWY0NzJlZWM3ZDIzM2Y2MDRhZjI2M2U4
NTBmMzEwHhcNMjUwNDEzMTAwMjE1WhcNMjUwNDE0MTAwMjE1WjAzMTEwLwYDVQQD
EyhjNTgwOTdhYjU4YTcwYTM1M2IyZDlhMWVkNWI5M2Q3MGNmZDg3Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojYiCTcHz2IU17XZpWj7LWwZVnC1
+f9+OTglcCi5BYOZri7H3eWAL1R0QL1shNUCCo2J8Y0CKGG+etauY5PG6zJek2K2
clC0JCI6MCluzVUrT4kLqLwj6luGurwdCQPYcUMregjzKmcmQah15Sn9Y5Au2VBy
F1pg6T29ab5NRFbrwtE9UGqBi2O8mH3APGQ6pVidFwoNjRo0TuduF9/UIPf5X/V2
RRepTt8GfuYtPh/JvXcu00R6pwJdJfyeWxfJGJZ/wLLg4Dm4rEYaxRGZMZ/ycx7e
CfDkW2mPgYyYXXrQ6B9LRHreQXDIQeoLOz5o/MuFAu0NANuPtp56hy+ftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWAl6tYpwo1Oy2aHtW5PXDP2Ht5MB8GA1UdIwQY
MBaAFJkouBLi6fRy7sfSM/YEryY+hQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1Mzgt
YzAxOGJkN2VkNDgwLzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1MzgtYzAxOGJkN2VkNDgw
LzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmesjVcGQ
LgTRClX2jTKJLW7UPzBfrf598fIJaBzE01Gb9xup1tZB09ZF4a9oIpugSZDqDNgG
vKyqC3XVu9fxmmkkrxHG7Xk8+Wup9Yd4i+ReIM6Yi7MRPTRlL4ff7l1gd+IfVTBX
Ibt6SnJX/PTBw1WEaIpKRR1fQnu/0uh41fIDcP96EDhB/toziIO8jR6HWwAml9xD
z72fXeuhgqEuFZXat8EFfR16azVM3KMnDmwNQom4AKxumOrVdFtdddMj4K2bTE84
Cj7tWTgrAj09GhcWhIYuQ4ZDyzOPC3QOREFHTWSGQlX9P2gwVOEqXSBuuSDdPy48
Ocb9VYmy5ndCFw==
-----END CERTIFICATE-----