Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          2+9XN1wEqGlnpAmUo6lzX5Icypy8Vv9iLXQe1E0reAc=
Subject key identifier:   63:25:50:F7:7C:6E:6C:DB:30:DB:13:0E:41:C8:F6:58:02:5C:D8:C4
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       01962F06DAA7897EAC8A15D0083A893182C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0B55
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: bPSLind3GMZtk05dVHaJ9/E42x6Q0AzhnIljJR4K/6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:da:a7:89:7e:ac:8a:15:d0:08:3a:89:31:82:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=632550f77c6e6cdb30db130e41c8f658025cd8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:b4:d2:81:0f:4a:01:57:13:5c:f1:c7:c4:
                    3a:ba:bf:ad:c9:67:86:d3:ae:3c:c1:0c:c1:c7:84:
                    56:ec:70:cb:86:ee:35:6d:1e:37:68:e5:ce:0b:ce:
                    b7:d6:be:0f:18:15:08:b5:ac:91:c8:8b:cc:ff:a1:
                    93:b3:4a:58:5f:f2:23:4b:36:90:1e:8b:11:ab:77:
                    ce:36:44:55:3c:0a:8d:f6:7a:68:04:be:2e:fd:ea:
                    5e:1c:b6:e1:eb:f1:02:08:ad:35:4a:dc:3c:7b:80:
                    11:05:82:86:88:93:be:3c:27:e7:94:91:b3:5e:a5:
                    7f:81:2d:ec:04:b6:44:11:f2:75:15:d8:2b:f7:ed:
                    12:ae:59:9f:80:5d:90:b2:ad:d0:d9:3e:07:34:8a:
                    61:da:00:8e:0c:25:76:c6:96:54:a9:4a:4b:9c:04:
                    38:c6:d8:e1:d8:d0:4e:83:e2:8a:76:87:42:e6:03:
                    08:70:92:dc:70:3b:2f:e4:a8:ac:40:39:cc:eb:ab:
                    23:54:c7:a0:45:b5:b4:b9:58:1c:29:7d:c5:ad:8d:
                    5b:e2:a3:ce:83:5b:c0:b8:46:6f:38:46:d5:47:e8:
                    a2:65:1e:3b:f7:c4:3e:9a:55:99:14:c5:a1:78:17:
                    54:d3:cf:67:3b:f9:a9:80:b0:7f:82:d4:c4:85:04:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:25:50:F7:7C:6E:6C:DB:30:DB:13:0E:41:C8:F6:58:02:5C:D8:C4
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ce:8a:e3:e7:c8:84:65:df:b1:0c:96:b3:4b:e1:c6:a2:b1:
         72:2a:e2:07:2d:e4:63:ca:b8:0c:e8:73:7f:fa:5b:51:03:b9:
         61:4d:b1:ad:6c:6a:6b:24:e7:34:71:a6:b5:6e:31:f8:7d:67:
         b3:4b:fd:ff:7f:66:dd:85:5f:00:71:3d:b2:6a:7f:8b:1d:c3:
         90:e6:ae:bf:9f:91:54:96:d0:30:62:46:0d:27:ab:21:bd:63:
         ea:54:0f:ed:3e:08:36:58:34:9e:d1:f1:68:20:19:f9:97:d0:
         ea:c5:f5:ff:67:c0:d6:23:ef:88:57:fc:1a:29:46:50:f1:ea:
         9e:2f:17:6e:2c:25:3c:18:38:ee:e2:7b:d7:16:96:13:68:5d:
         79:5d:0f:a0:4b:19:75:82:97:d5:29:d9:4a:0a:bd:9f:41:84:
         d0:b2:0f:2a:25:21:cc:13:dc:16:f1:0b:96:21:a8:c6:75:c5:
         e8:f8:8b:3b:d9:81:82:ee:a4:31:53:3e:46:40:87:c4:83:a5:
         95:d9:0c:d4:53:78:50:2d:27:01:86:af:99:e9:a9:be:02:89:
         87:d6:55:11:a4:65:f8:23:d0:91:a2:15:7c:66:76:5c:95:aa:
         25:48:c8:0d:1a:b3:95:4d:c7:e0:7c:46:be:23:aa:f3:67:65:
         0a:42:a2:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtqniX6sihXQCDqJMYLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGQ1N2UzMmJkNzZkYjc3YmVkZmM1MjExMzYzYzQ4MDgw
ZjA2MDUwHhcNMjUwNDEzMTIwMTQwWhcNMjUwNDE0MTIwMTQwWjAzMTEwLwYDVQQD
Eyg2MzI1NTBmNzdjNmU2Y2RiMzBkYjEzMGU0MWM4ZjY1ODAyNWNkOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5+00oEPSgFXE1zxx8Q6ur+tyWeG
0648wQzBx4RW7HDLhu41bR43aOXOC8631r4PGBUItayRyIvM/6GTs0pYX/IjSzaQ
HosRq3fONkRVPAqN9npoBL4u/epeHLbh6/ECCK01Stw8e4ARBYKGiJO+PCfnlJGz
XqV/gS3sBLZEEfJ1Fdgr9+0SrlmfgF2Qsq3Q2T4HNIph2gCODCV2xpZUqUpLnAQ4
xtjh2NBOg+KKdodC5gMIcJLccDsv5KisQDnM66sjVMegRbW0uVgcKX3FrY1b4qPO
g1vAuEZvOEbVR+iiZR4798Q+mlWZFMWheBdU089nO/mpgLB/gtTEhQTJ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMlUPd8bmzbMNsTDkHI9lgCXNjEMB8GA1UdIwQY
MBaAFMPdV+Mr1223e+38UhE2PEgIDwYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85ZTM4OGQtMzk5MC00ZmQ4LTgyYjMt
ZDc3NTExN2FmMTJmLzEvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85ZTM4OGQtMzk5MC00ZmQ4LTgyYjMtZDc3NTExN2FmMTJm
LzEvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwc6K4+fI
hGXfsQyWs0vhxqKxciriBy3kY8q4DOhzf/pbUQO5YU2xrWxqayTnNHGmtW4x+H1n
s0v9/39m3YVfAHE9smp/ix3DkOauv5+RVJbQMGJGDSerIb1j6lQP7T4INlg0ntHx
aCAZ+ZfQ6sX1/2fA1iPviFf8GilGUPHqni8XbiwlPBg47uJ71xaWE2hdeV0PoEsZ
dYKX1SnZSgq9n0GE0LIPKiUhzBPcFvELliGoxnXF6PiLO9mBgu6kMVM+RkCHxIOl
ldkM1FN4UC0nAYavmempvgKJh9ZVEaRl+CPQkaIVfGZ2XJWqJUjIDRqzlU3H4HxG
viOq82dlCkKirQ==
-----END CERTIFICATE-----