Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
File:                     9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json)
Hash identifier:          8rLomAkHxJSrOxSdrtET3Ru0IsL+5X7jzK7pppM7iYE=
Subject key identifier:   89:8F:93:63:E7:B0:87:AD:7E:60:D9:59:28:D4:2B:6B:13:0D:72:6B
Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0
Certificate issuer:       /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
Certificate serial:       01962E999C523A48EF3C314DCB4F802D125C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: 1/j3okimfTwx6CXUwl3Nkx4tVr4H/IAC3e7x3iliq/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9c:52:3a:48:ef:3c:31:4d:cb:4f:80:2d:12:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=898f9363e7b087ad7e60d95928d42b6b130d726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:c6:71:c9:16:60:fb:92:9d:7d:64:86:f1:
                    42:8b:f5:b4:f6:a0:2f:57:80:4c:de:7d:24:36:e8:
                    17:40:3c:3d:6a:7f:bf:86:c1:2e:55:cc:e7:e3:23:
                    45:cc:50:f7:5b:6a:61:ed:67:ad:20:9e:a3:3f:69:
                    d6:32:52:2c:05:24:2e:63:fb:3a:6d:19:d7:0a:41:
                    94:99:46:9d:c7:c1:e7:12:24:ed:e7:9a:0c:65:69:
                    8f:b6:06:ff:94:5b:6f:bb:0c:cc:f2:bf:81:07:b8:
                    c7:b0:98:a0:bd:4f:f7:c6:6b:dd:ac:f3:5f:b9:6f:
                    d0:54:10:a7:51:0a:a5:0a:8e:9d:d7:34:1c:b8:1f:
                    e8:f7:b8:f7:3c:19:fe:e6:8d:63:38:9c:e7:af:12:
                    0e:3d:c0:ec:12:d9:69:90:99:da:2e:6b:f9:4f:c8:
                    f7:12:69:69:28:99:63:0f:07:72:50:b2:0e:3e:52:
                    fa:32:10:c3:b3:67:b7:60:54:75:ca:33:4d:9d:21:
                    19:40:38:62:80:34:7d:9a:40:2c:b8:c8:dc:22:61:
                    a7:72:b6:a1:fe:cf:c2:49:6f:56:23:bb:19:b3:6e:
                    46:72:67:cb:d6:95:08:f5:9f:6e:34:3a:3a:90:ba:
                    b1:94:dc:fb:f3:d5:38:09:26:e9:da:c1:08:fe:f8:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:93:63:E7:B0:87:AD:7E:60:D9:59:28:D4:2B:6B:13:0D:72:6B
            X509v3 Authority Key Identifier:
                keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:50:7c:7c:c5:01:bd:a1:c7:2f:21:65:48:a8:a0:b7:35:
         7c:51:26:df:19:ce:55:f0:de:11:73:67:51:67:88:63:03:ae:
         2b:ab:a2:7e:17:5f:21:96:a7:de:25:78:47:94:5e:c7:df:d2:
         c0:4f:45:69:6d:df:21:83:51:d7:55:56:da:11:b6:07:6a:a9:
         65:96:5f:f6:7e:4d:86:6e:3a:75:26:df:b5:d5:3e:20:d9:32:
         c4:16:ad:92:27:78:70:44:cf:b3:58:a6:ee:97:3a:49:5a:39:
         b2:f0:63:57:f7:51:62:dd:a5:2e:10:b6:a5:9b:af:60:86:e2:
         7a:8f:e9:f1:80:f6:96:1c:ad:b5:91:0e:26:44:e9:5b:4a:80:
         7b:51:05:6e:dc:23:12:e0:67:d8:97:47:78:53:39:5a:4a:81:
         5e:89:cb:f6:e5:b2:b8:48:0c:c7:68:62:38:12:21:2d:09:dc:
         02:9b:99:ad:70:62:f7:a9:fb:f6:9d:8d:18:fb:4f:fc:4d:46:
         ed:85:4d:74:51:b8:d1:35:ae:61:43:94:b0:dd:d0:4a:ae:71:
         71:26:b1:3b:0e:2b:e1:39:68:ce:5f:6c:08:fa:8e:a5:61:6d:
         ff:85:47:4d:0b:c6:3f:cc:fc:48:ad:6c:a9:98:18:ce:d3:19:
         22:68:6a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZxSOkjvPDFNy0+ALRJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YjI3MzdlNWQ5N2UxMTA4ZWIwNDk5MDRkZTliMTZmMzZh
ZWIxZTAwHhcNMjUwNDEzMTAwMjIxWhcNMjUwNDE0MTAwMjIxWjAzMTEwLwYDVQQD
Eyg4OThmOTM2M2U3YjA4N2FkN2U2MGQ5NTkyOGQ0MmI2YjEzMGQ3MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobjGcckWYPuSnX1khvFCi/W09qAv
V4BM3n0kNugXQDw9an+/hsEuVczn4yNFzFD3W2ph7WetIJ6jP2nWMlIsBSQuY/s6
bRnXCkGUmUadx8HnEiTt55oMZWmPtgb/lFtvuwzM8r+BB7jHsJigvU/3xmvdrPNf
uW/QVBCnUQqlCo6d1zQcuB/o97j3PBn+5o1jOJznrxIOPcDsEtlpkJnaLmv5T8j3
EmlpKJljDwdyULIOPlL6MhDDs2e3YFR1yjNNnSEZQDhigDR9mkAsuMjcImGncrah
/s/CSW9WI7sZs25GcmfL1pUI9Z9uNDo6kLqxlNz789U4CSbp2sEI/vgi/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImPk2PnsIetfmDZWSjUK2sTDXJrMB8GA1UdIwQY
MBaAFPWyc35dl+EQjrBJkE3psW82rrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2Ut
ZWQyZGZkYTdkZjZhLzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2UtZWQyZGZkYTdkZjZh
LzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMBQfHzF
Ab2hxy8hZUiooLc1fFEm3xnOVfDeEXNnUWeIYwOuK6uifhdfIZan3iV4R5Rex9/S
wE9FaW3fIYNR11VW2hG2B2qpZZZf9n5Nhm46dSbftdU+INkyxBatkid4cETPs1im
7pc6SVo5svBjV/dRYt2lLhC2pZuvYIbieo/p8YD2lhyttZEOJkTpW0qAe1EFbtwj
EuBn2JdHeFM5WkqBXonL9uWyuEgMx2hiOBIhLQncApuZrXBi96n79p2NGPtP/E1G
7YVNdFG40TWuYUOUsN3QSq5xcSaxOw4r4Tlozl9sCPqOpWFt/4VHTQvGP8z8SK1s
qZgYztMZImhqBw==
-----END CERTIFICATE-----