Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File:                     nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier:          YzJ61aY9sxkpFASFuAqR/eagGjDvq7yU/zxnokKV8YE=
Subject key identifier:   8C:40:72:27:0D:7E:33:93:C8:48:6B:CB:F4:F8:6E:0B:8D:64:30:BB
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer:       /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial:       01962E993C78AE74C7C9C672762ABADBDB24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number:          0A32
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: TUjHzSravJfMEF3u3CGX9a/hYUkr5fqo3EHyzwWykX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:78:ae:74:c7:c9:c6:72:76:2a:ba:db:db:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=8c4072270d7e3393c8486bcbf4f86e0b8d6430bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:7c:c6:c7:36:c4:dc:1d:c4:36:29:98:bf:
                    92:31:ad:7b:b5:1f:3a:a9:fb:40:9a:47:04:b0:60:
                    b2:b9:6d:f3:ba:52:6c:bc:56:bb:36:0b:4c:09:7d:
                    5b:75:62:df:f4:56:bd:a6:8b:8b:b4:6b:fa:01:22:
                    0c:16:11:78:1f:2b:64:6e:8c:a4:b1:9a:b9:ab:16:
                    6c:8d:25:ef:ff:89:9b:17:f7:82:6b:c0:9c:b9:b0:
                    9d:fc:a7:01:fc:48:96:54:d8:1b:ab:0c:2d:7d:63:
                    81:e9:6f:3e:c4:51:b7:47:8f:fd:b1:59:18:a4:60:
                    33:01:e8:7b:43:df:a8:d3:7b:93:c1:cb:1b:fc:11:
                    6e:e0:50:9f:c7:4f:65:f7:23:1e:d4:95:c5:d0:06:
                    f6:4a:d4:f8:5f:09:49:53:01:7e:3d:8a:f5:a8:ac:
                    db:ee:a4:f9:82:42:08:1f:0e:24:6e:e3:5e:26:44:
                    b7:e1:54:83:78:cd:64:1a:3e:c4:05:b6:f3:c3:23:
                    40:cc:66:5a:c9:9e:b9:70:04:69:4b:24:6d:cd:1b:
                    e7:5f:f1:8d:40:6a:3f:db:08:0c:0f:06:ad:ce:c1:
                    5e:3f:94:9f:bd:82:9f:8a:1a:e9:d8:eb:33:bd:68:
                    50:e7:98:ad:58:e3:45:9d:e2:3b:ee:9f:90:c4:17:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:40:72:27:0D:7E:33:93:C8:48:6B:CB:F4:F8:6E:0B:8D:64:30:BB
            X509v3 Authority Key Identifier:
                keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:07:b0:41:92:ec:af:69:99:23:e4:92:58:4a:54:25:a6:58:
         a3:aa:f4:0d:08:d5:d3:56:1a:ee:ff:70:d5:d0:d3:85:d9:6a:
         6e:66:c6:b6:11:dc:59:86:5b:be:15:9b:20:7d:a8:9c:7e:21:
         45:11:f5:1f:6a:a9:81:ac:aa:cf:10:4a:07:68:42:ec:4c:95:
         16:16:07:06:90:e6:d2:d1:93:a6:c0:87:31:94:33:bb:4d:96:
         ad:c9:e2:de:75:17:ae:db:1d:d5:b3:00:cf:b3:57:9a:23:f1:
         84:b0:b8:82:f4:33:77:b1:a4:30:38:8d:3a:5f:08:18:05:10:
         f2:7d:65:cb:9d:0c:40:90:ad:99:a1:b2:9e:10:2c:9d:45:9b:
         9c:bb:b4:22:0e:69:b3:2b:91:3b:32:d4:32:4d:0b:b7:01:06:
         ba:19:fe:08:75:c9:10:65:5f:ba:ee:3e:6d:90:09:e3:d1:d3:
         79:33:a6:3d:f3:17:80:62:e8:36:5d:c6:cc:7a:27:14:72:30:
         f0:28:c4:95:67:c8:7b:78:c6:73:68:ab:25:10:1d:92:c0:44:
         f6:f5:c9:9c:62:66:2b:79:17:52:21:06:4a:58:0f:47:50:2f:
         20:d5:d1:97:d4:e5:e8:13:62:85:80:d4:51:a2:ab:75:31:a9:
         72:21:b1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTx4rnTHycZydiq629skMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMzc1MjI2ZmNlNjI3ZTMyMjgwNmM5M2E1NDNlMjNmMjZm
NTQ5MTYwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
Eyg4YzQwNzIyNzBkN2UzMzkzYzg0ODZiY2JmNGY4NmUwYjhkNjQzMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeF8xsc2xNwdxDYpmL+SMa17tR86
qftAmkcEsGCyuW3zulJsvFa7NgtMCX1bdWLf9Fa9pouLtGv6ASIMFhF4Hytkboyk
sZq5qxZsjSXv/4mbF/eCa8CcubCd/KcB/EiWVNgbqwwtfWOB6W8+xFG3R4/9sVkY
pGAzAeh7Q9+o03uTwcsb/BFu4FCfx09l9yMe1JXF0Ab2StT4XwlJUwF+PYr1qKzb
7qT5gkIIHw4kbuNeJkS34VSDeM1kGj7EBbbzwyNAzGZayZ65cARpSyRtzRvnX/GN
QGo/2wgMDwatzsFeP5SfvYKfihrp2OszvWhQ55itWONFneI77p+QxBfvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxAcicNfjOTyEhry/T4bguNZDC7MB8GA1UdIwQY
MBaAFJw3Uib85ifjIoBsk6VD4j8m9UkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQt
Y2I2ZDhiNjIwZGM4LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQtY2I2ZDhiNjIwZGM4
LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwewQZLs
r2mZI+SSWEpUJaZYo6r0DQjV01Ya7v9w1dDThdlqbmbGthHcWYZbvhWbIH2onH4h
RRH1H2qpgayqzxBKB2hC7EyVFhYHBpDm0tGTpsCHMZQzu02Wrcni3nUXrtsd1bMA
z7NXmiPxhLC4gvQzd7GkMDiNOl8IGAUQ8n1ly50MQJCtmaGynhAsnUWbnLu0Ig5p
syuROzLUMk0LtwEGuhn+CHXJEGVfuu4+bZAJ49HTeTOmPfMXgGLoNl3GzHonFHIw
8CjElWfIe3jGc2irJRAdksBE9vXJnGJmK3kXUiEGSlgPR1AvINXRl9Tl6BNihYDU
UaKrdTGpciGxZQ==
-----END CERTIFICATE-----