Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File:                     rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier:          bL3y9cWiV2ria/O9f2VdVVTJjamNjnVG/Ku6DzSPcvQ=
Subject key identifier:   F6:5E:C9:FD:29:8A:31:C8:04:FE:13:7A:B4:4F:EA:36:C0:32:B7:D8
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer:       /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial:       01962E2B09322B8B16F6533CABFA393C6834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number:          03B1
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: S5Kdz/RYLNcD1ltAN4BUWRopI6WESCvxGxBUZNKxIvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:32:2b:8b:16:f6:53:3c:ab:fa:39:3c:68:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=f65ec9fd298a31c804fe137ab44fea36c032b7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:03:19:27:e7:68:6a:48:ae:4e:73:7c:7b:
                    ba:69:77:38:be:48:ba:46:9f:c2:d9:b3:8c:00:9c:
                    60:35:ca:b6:2c:45:28:65:6c:6b:f6:f9:27:8a:c1:
                    60:3e:b1:0a:5c:16:ab:28:d5:13:7b:14:1b:9d:72:
                    8f:8a:d7:84:75:75:13:e5:fd:a9:e2:53:1e:6c:d5:
                    19:2e:78:8a:6f:80:61:1d:d1:da:04:7b:9b:a4:fc:
                    92:66:53:39:49:28:f0:e1:c4:8f:b1:89:5a:54:e4:
                    3a:b8:a6:e6:33:37:a6:50:de:cf:46:82:5b:07:b6:
                    14:90:a7:8f:37:5c:f1:3e:3c:e3:97:2e:36:52:29:
                    76:c0:e1:c7:08:e4:f3:1f:25:bb:23:3e:7f:2c:b3:
                    cf:8c:29:1f:99:2e:c1:54:a8:ad:09:61:78:aa:b7:
                    68:3b:e8:cd:99:b1:8d:4f:0b:ec:6a:ec:55:27:89:
                    f1:67:20:52:fd:98:7f:d9:c6:9e:b8:78:3d:75:ae:
                    e5:5e:63:03:4e:21:4e:bc:78:6b:19:cb:ed:f8:e2:
                    2e:e6:5b:bb:ab:0f:e4:bf:98:8b:cd:ec:56:bc:ab:
                    6c:1f:54:4f:64:65:08:99:7c:0b:f6:d3:5c:d8:5d:
                    c5:fc:72:c0:02:a0:ec:57:6b:e4:64:43:8f:d1:66:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5E:C9:FD:29:8A:31:C8:04:FE:13:7A:B4:4F:EA:36:C0:32:B7:D8
            X509v3 Authority Key Identifier:
                keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:14:12:6e:9c:d0:43:42:07:ab:9e:cf:c7:79:cf:b0:18:
         ff:4b:97:de:ef:5f:88:72:0b:1d:35:39:e2:a5:1f:8b:c6:35:
         55:c9:34:5e:d4:15:d3:2a:34:6f:f4:f4:1e:af:7a:34:98:df:
         09:34:39:be:4f:d0:d6:fd:92:98:80:66:a3:c5:09:79:e1:b0:
         9f:bb:45:57:d5:06:31:e2:e4:e3:fa:45:d5:01:b1:7e:e4:9e:
         57:18:5c:ff:30:80:b6:b6:19:eb:fa:bc:b1:57:6c:50:ae:0b:
         0e:6d:c0:62:c5:4c:00:be:24:4b:f2:d1:a8:dd:30:11:fe:64:
         d7:6a:0e:f4:a2:90:62:51:3d:d0:2a:c3:ee:5d:55:5e:6e:2d:
         f7:29:26:75:f3:3c:d7:2b:9b:97:60:dc:e7:ad:20:c8:f5:2a:
         84:51:c4:25:7d:09:de:d7:c9:d5:49:c6:0e:17:9b:35:8a:dc:
         ad:6f:de:6f:69:e1:2d:32:53:eb:6d:49:9b:84:2f:82:1f:f1:
         27:b7:43:a1:61:c6:9f:72:ff:98:c4:4b:a2:51:93:c3:5c:5e:
         b8:d6:d4:f4:e9:5c:48:c9:34:7a:21:f6:ab:9c:05:2b:c8:f6:
         df:fe:13:f3:7f:f1:aa:cd:80:7f:1c:66:5f:72:30:72:58:68:
         18:d9:59:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwkyK4sW9lM8q/o5PGg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGQ3ZmY0NTZmNWZkYzdkZTYxZmE0MjBlZTA4NmE3N2Ex
ZTYxZTUwHhcNMjUwNDEzMDgwMTM0WhcNMjUwNDE0MDgwMTM0WjAzMTEwLwYDVQQD
EyhmNjVlYzlmZDI5OGEzMWM4MDRmZTEzN2FiNDRmZWEzNmMwMzJiN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o8DGSfnaGpIrk5zfHu6aXc4vki6
Rp/C2bOMAJxgNcq2LEUoZWxr9vknisFgPrEKXBarKNUTexQbnXKPiteEdXUT5f2p
4lMebNUZLniKb4BhHdHaBHubpPySZlM5SSjw4cSPsYlaVOQ6uKbmMzemUN7PRoJb
B7YUkKePN1zxPjzjly42Uil2wOHHCOTzHyW7Iz5/LLPPjCkfmS7BVKitCWF4qrdo
O+jNmbGNTwvsauxVJ4nxZyBS/Zh/2caeuHg9da7lXmMDTiFOvHhrGcvt+OIu5lu7
qw/kv5iLzexWvKtsH1RPZGUImXwL9tNc2F3F/HLAAqDsV2vkZEOP0WZ7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZeyf0pijHIBP4TerRP6jbAMrfYMB8GA1UdIwQY
MBaAFK5Nf/RW9f3H3mH6Qg7ghqd6HmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQt
MDdiMThlNTE4NTYxLzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yYWNlMWUtNzBkYi00YTBhLTkzYzQtMDdiMThlNTE4NTYx
LzEvcmsxXzlGYjFfY2ZlWWZwQ0R1Q0dwM29lWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7MUEm6c
0ENCB6uez8d5z7AY/0uX3u9fiHILHTU54qUfi8Y1Vck0XtQV0yo0b/T0Hq96NJjf
CTQ5vk/Q1v2SmIBmo8UJeeGwn7tFV9UGMeLk4/pF1QGxfuSeVxhc/zCAtrYZ6/q8
sVdsUK4LDm3AYsVMAL4kS/LRqN0wEf5k12oO9KKQYlE90CrD7l1VXm4t9ykmdfM8
1yubl2Dc560gyPUqhFHEJX0J3tfJ1UnGDhebNYrcrW/eb2nhLTJT621Jm4Qvgh/x
J7dDoWHGn3L/mMRLolGTw1xeuNbU9OlcSMk0eiH2q5wFK8j23/4T83/xqs2Afxxm
X3IwclhoGNlZWA==
-----END CERTIFICATE-----