Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File:                     1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier:          iuYsUVPIy9/M+2vPxqL2+vbGVW2SN6pThxwi/wiwzfg=
Subject key identifier:   39:A1:41:BA:81:A7:80:3E:C3:FD:FD:5F:F6:16:0A:D7:08:AE:68:AF
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer:       /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial:       01962E991E929EC8709F7590E6C52179CFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: qaF5DLq1prZIJgKL9ZkI9/rgezVsGA8LMMJEqX4mB0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1e:92:9e:c8:70:9f:75:90:e6:c5:21:79:cf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=39a141ba81a7803ec3fdfd5ff6160ad708ae68af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:73:d6:4f:07:e9:71:1d:16:b3:20:0a:51:bc:
                    55:0f:73:ce:aa:1e:ac:7b:41:ce:57:1f:8f:86:ee:
                    2e:aa:5e:36:a6:97:5a:c4:93:e7:53:76:f4:d9:b9:
                    17:70:60:a7:43:13:ee:70:d9:a1:98:96:a5:62:26:
                    91:aa:92:8b:88:98:80:44:61:cb:1b:1a:ed:5a:b8:
                    98:55:de:12:e0:68:e6:25:f7:de:df:72:d9:70:04:
                    7d:d7:10:a7:21:d1:1a:89:d8:44:0d:59:f8:b6:2a:
                    81:22:21:15:52:59:1f:fe:26:7a:82:5a:36:7c:34:
                    cd:99:11:05:64:fd:6d:42:4e:1f:02:1b:02:33:29:
                    f3:9f:1c:5e:6e:96:af:d3:f9:90:7f:0e:35:fc:4d:
                    ce:63:53:1b:bf:03:ce:2e:21:fd:59:a4:d8:f2:cf:
                    1a:42:38:b0:10:10:bb:cb:09:3b:81:93:aa:28:44:
                    22:27:18:ec:a1:d7:77:04:c0:df:75:d0:f8:01:92:
                    75:36:30:51:61:a1:86:f8:55:6d:af:91:81:e7:86:
                    d2:6e:01:b0:64:1f:45:83:69:40:e1:d1:1a:61:d1:
                    32:36:e1:03:56:ef:4d:65:b6:81:c4:2d:a0:e1:90:
                    f3:c7:b6:fa:7c:b4:a9:d3:5b:b0:1e:a2:4e:91:24:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:41:BA:81:A7:80:3E:C3:FD:FD:5F:F6:16:0A:D7:08:AE:68:AF
            X509v3 Authority Key Identifier:
                keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:64:7d:c4:f0:bc:d9:2f:f3:5e:c7:24:d1:4c:a6:5b:10:15:
         26:47:cb:b1:a2:00:db:0b:fb:e0:c6:ea:23:94:0a:55:14:02:
         b8:ce:78:9d:4c:a5:9c:15:42:99:9d:3e:0f:4e:61:be:d2:5a:
         d3:a7:b1:7c:e8:64:c8:08:34:b8:60:4b:cf:05:2a:db:b4:45:
         e0:09:db:ec:dd:c4:9d:99:89:49:e0:c7:91:74:02:24:96:16:
         18:5d:b7:2c:8c:33:c8:44:1d:28:8a:b8:a3:81:84:6a:2c:74:
         bd:63:f6:88:06:d7:a0:1f:58:7f:bd:c9:f6:aa:08:0a:8d:45:
         81:8f:28:06:07:a2:e7:76:e5:be:d3:a4:d2:a0:8f:65:3f:31:
         eb:47:95:1b:96:1a:1c:5f:7d:00:7c:91:8a:9f:ee:55:42:c6:
         48:cb:a9:ea:27:c0:60:fe:ec:3b:29:8d:0c:bc:ed:95:0d:4c:
         98:ce:43:af:9c:22:3a:31:66:16:1b:95:69:ef:bc:23:36:29:
         db:4b:c1:bf:1a:3c:a7:be:ee:ab:5a:19:f9:3b:05:3b:0d:65:
         39:21:0d:39:0e:94:62:3e:7d:7c:5a:fb:df:78:5f:d2:f5:eb:
         e0:7c:4c:7f:72:ff:e9:9c:9b:d7:f5:2e:46:f7:d8:22:c6:11:
         7a:6e:74:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumR6Snshwn3WQ5sUhec/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjUwNDEzMTAwMTQ4WhcNMjUwNDE0MTAwMTQ4WjAzMTEwLwYDVQQD
EygzOWExNDFiYTgxYTc4MDNlYzNmZGZkNWZmNjE2MGFkNzA4YWU2OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HPWTwfpcR0WsyAKUbxVD3POqh6s
e0HOVx+Phu4uql42ppdaxJPnU3b02bkXcGCnQxPucNmhmJalYiaRqpKLiJiARGHL
GxrtWriYVd4S4GjmJffe33LZcAR91xCnIdEaidhEDVn4tiqBIiEVUlkf/iZ6glo2
fDTNmREFZP1tQk4fAhsCMynznxxebpav0/mQfw41/E3OY1MbvwPOLiH9WaTY8s8a
QjiwEBC7ywk7gZOqKEQiJxjsodd3BMDfddD4AZJ1NjBRYaGG+FVtr5GB54bSbgGw
ZB9Fg2lA4dEaYdEyNuEDVu9NZbaBxC2g4ZDzx7b6fLSp01uwHqJOkSTEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmhQbqBp4A+w/39X/YWCtcIrmivMB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWR9xPC8
2S/zXsck0UymWxAVJkfLsaIA2wv74MbqI5QKVRQCuM54nUylnBVCmZ0+D05hvtJa
06exfOhkyAg0uGBLzwUq27RF4Anb7N3EnZmJSeDHkXQCJJYWGF23LIwzyEQdKIq4
o4GEaix0vWP2iAbXoB9Yf73J9qoICo1FgY8oBgei53blvtOk0qCPZT8x60eVG5Ya
HF99AHyRip/uVULGSMup6ifAYP7sOymNDLztlQ1MmM5Dr5wiOjFmFhuVae+8IzYp
20vBvxo8p77uq1oZ+TsFOw1lOSENOQ6UYj59fFr733hf0vXr4HxMf3L/6Zyb1/Uu
RvfYIsYRem50lQ==
-----END CERTIFICATE-----