Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File:                     AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier:          qCtgn16I17CLS7Ch9jJfh4T54ppLy0ifVjaxFMELP9M=
Subject key identifier:   8D:EF:E8:21:EF:5B:BC:AF:1D:91:61:75:83:56:85:CC:56:AC:98:FD
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer:       /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial:       01962E98C1360F7205420BB06D362AA31756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number:          0665
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: VbORPMwsUyCGFHa0oPMqu2g6PGtp8Gd8UZvQBDCgBA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:36:0f:72:05:42:0b:b0:6d:36:2a:a3:17:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=8defe821ef5bbcaf1d916175835685cc56ac98fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:96:09:8b:19:f2:54:41:cf:1d:7d:93:cc:
                    17:28:3b:91:e7:ba:61:a2:89:8f:94:a7:6b:3c:15:
                    8a:02:64:99:db:93:fc:e1:19:45:68:35:35:c1:e9:
                    7e:ee:0a:d0:1c:41:0e:b2:1b:6b:0a:6d:60:d8:8d:
                    37:c6:11:36:31:1c:f3:d1:20:68:b0:23:3a:6a:c4:
                    37:10:82:39:bc:75:06:67:ec:6e:b9:64:3a:23:46:
                    f1:47:ca:c2:6c:4e:67:b6:d2:78:56:f6:90:ba:ec:
                    d9:09:dc:fb:dc:76:cc:4b:b7:7f:6c:3c:78:21:a5:
                    d3:77:94:1e:79:8d:5d:d3:91:77:da:7a:6f:05:10:
                    4a:58:14:3b:2e:2c:6e:bf:61:79:45:7e:f1:9a:79:
                    47:8f:ae:22:a6:6f:ab:44:df:ce:ec:61:51:2f:da:
                    03:e7:9a:10:bc:e6:6e:91:b9:be:eb:77:36:94:e8:
                    7f:c0:c9:f5:61:cc:e1:19:4f:42:e4:c7:19:7f:4d:
                    dc:57:2b:93:d1:c4:94:31:23:58:22:44:3a:a0:57:
                    4c:1b:9c:9c:97:8d:59:a9:57:ae:ec:8b:ec:94:e0:
                    96:d5:65:6c:cd:1c:79:91:a0:b5:aa:e5:76:1b:45:
                    0c:19:51:95:36:36:d4:e4:d0:6b:d4:93:db:50:bb:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EF:E8:21:EF:5B:BC:AF:1D:91:61:75:83:56:85:CC:56:AC:98:FD
            X509v3 Authority Key Identifier:
                keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:e9:4d:82:4e:23:ec:5c:ed:e6:7c:4c:0d:de:35:84:05:
         42:3e:43:be:07:f3:9f:5a:d1:89:2b:5c:08:60:15:2d:84:38:
         29:e2:78:f3:cf:bb:10:1f:53:42:cb:f7:d3:33:27:23:48:10:
         8e:5f:9c:a0:e4:ab:04:96:9f:37:c3:bf:9e:44:4c:4e:c8:bf:
         6b:ac:a0:ef:f5:2d:c3:5b:40:ab:1e:45:53:8a:e4:e9:59:54:
         cb:41:a5:16:52:25:79:6a:df:f1:81:36:cf:a1:48:ca:3b:1d:
         9f:3a:eb:c5:34:71:25:e6:cc:ea:fc:a8:e3:40:51:43:be:b7:
         b1:ba:8a:55:65:40:d9:9a:b1:84:29:79:f1:16:ae:22:cb:a2:
         00:22:d9:f4:f9:5a:21:63:f1:db:d0:4b:f5:2f:ef:3e:f0:d2:
         1a:b4:32:96:6d:70:80:d3:bd:93:ca:a9:08:5b:cc:84:90:2c:
         84:52:8d:98:9e:c2:40:d2:f8:92:57:08:5e:4f:48:94:8c:a5:
         21:73:4e:c8:ac:92:88:17:ad:36:9b:91:71:45:39:e1:e9:ec:
         31:4c:b2:3c:6a:fe:40:94:2a:15:89:af:4d:b8:cb:20:e1:dc:
         d6:9a:40:0a:00:3b:f6:74:25:fb:05:90:f5:3a:1b:e7:f1:aa:
         6b:38:c7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumME2D3IFQguwbTYqoxdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzJiZDNiMzJhZWNhZjI2Y2E4ZWRiM2M4NzhmZTU3OTVm
MmFiNmYwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
Eyg4ZGVmZTgyMWVmNWJiY2FmMWQ5MTYxNzU4MzU2ODVjYzU2YWM5OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxraWCYsZ8lRBzx19k8wXKDuR57ph
oomPlKdrPBWKAmSZ25P84RlFaDU1wel+7grQHEEOshtrCm1g2I03xhE2MRzz0SBo
sCM6asQ3EII5vHUGZ+xuuWQ6I0bxR8rCbE5nttJ4VvaQuuzZCdz73HbMS7d/bDx4
IaXTd5QeeY1d05F32npvBRBKWBQ7Lixuv2F5RX7xmnlHj64ipm+rRN/O7GFRL9oD
55oQvOZukbm+63c2lOh/wMn1YczhGU9C5McZf03cVyuT0cSUMSNYIkQ6oFdMG5yc
l41ZqVeu7IvslOCW1WVszRx5kaC1quV2G0UMGVGVNjbU5NBr1JPbULuaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3v6CHvW7yvHZFhdYNWhcxWrJj9MB8GA1UdIwQY
MBaAFAJyvTsyrsrybKjts8h4/leV8qtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYt
MTJkZWRlOWQwYzcxLzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjJlNzUtZWNlZS00OGUxLThhZjYtMTJkZWRlOWQwYzcx
LzEvQW5LOU96S3V5dkpzcU8yenlIai1WNVh5cTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFnpTYJO
I+xc7eZ8TA3eNYQFQj5Dvgfzn1rRiStcCGAVLYQ4KeJ488+7EB9TQsv30zMnI0gQ
jl+coOSrBJafN8O/nkRMTsi/a6yg7/Utw1tAqx5FU4rk6VlUy0GlFlIleWrf8YE2
z6FIyjsdnzrrxTRxJebM6vyo40BRQ763sbqKVWVA2ZqxhCl58RauIsuiACLZ9Pla
IWPx29BL9S/vPvDSGrQylm1wgNO9k8qpCFvMhJAshFKNmJ7CQNL4klcIXk9IlIyl
IXNOyKySiBetNpuRcUU54ensMUyyPGr+QJQqFYmvTbjLIOHc1ppACgA79nQl+wWQ
9Tob5/GqazjHvw==
-----END CERTIFICATE-----