Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File:                     1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier:          Jcku2rJY1EH8E2LczpYsGhfTSR3tD+hJDYr/6FbfEIk=
Subject key identifier:   06:89:CB:9F:DD:FE:06:3E:E5:72:21:CB:6C:B5:C6:C8:8C:9B:F2:DB
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer:       /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial:       01962ECF611B02161B2E370465CEC6C45EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number:          08FB
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: 2iTu1oocBvPMPsveVq26Ym9T86MwlRUZOat61lsxMSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:1b:02:16:1b:2e:37:04:65:ce:c6:c4:5e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=0689cb9fddfe063ee57221cb6cb5c6c88c9bf2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:45:21:4a:0c:dd:e2:00:13:f3:97:0c:3e:
                    8f:80:3c:1f:ac:f6:c1:97:4b:fa:b2:c8:8e:df:99:
                    e6:b4:8b:6f:1e:f4:8e:81:8e:09:a9:00:5b:c6:98:
                    fa:f3:60:61:78:56:a9:e0:10:d6:91:06:7a:04:ae:
                    8d:c5:6b:7b:ef:30:db:f6:2b:78:07:fa:8e:e8:b4:
                    76:33:2a:97:bf:fa:eb:67:c3:9f:f0:51:98:a2:f9:
                    88:93:54:f6:e2:ed:4d:fd:a5:e3:3b:c0:4c:ae:26:
                    85:24:ae:c3:90:9f:8e:5d:aa:13:59:84:12:78:07:
                    e8:60:e6:b5:84:8c:e7:e7:84:8c:14:76:a7:e2:99:
                    77:87:26:cc:17:03:f0:ad:d2:2a:75:15:75:a9:47:
                    20:00:12:6e:7b:d2:27:8d:42:f8:20:40:2e:6d:c3:
                    e5:4f:cc:9f:33:4d:f3:0a:a8:6e:7b:71:9e:ac:d6:
                    1e:1f:d0:66:d7:32:3a:7c:d4:0f:1c:f7:03:86:a3:
                    93:02:9b:86:b5:89:87:64:34:e4:02:8d:ca:11:fd:
                    c0:32:e8:e4:7e:18:60:36:3f:b0:60:90:5b:59:e0:
                    a1:27:2e:5c:c2:60:58:57:91:0d:0e:41:57:e2:4d:
                    29:4f:74:36:38:31:cf:c8:cc:15:b3:9f:94:17:7c:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:89:CB:9F:DD:FE:06:3E:E5:72:21:CB:6C:B5:C6:C8:8C:9B:F2:DB
            X509v3 Authority Key Identifier:
                keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:91:61:e2:a5:8b:e2:71:cf:51:cd:a2:2f:34:d8:69:01:
         b1:6d:29:ca:f2:87:b9:62:4f:cf:21:61:06:2a:3e:3e:89:49:
         9a:67:09:1b:ab:9a:d0:98:e8:7c:cf:ed:31:53:5f:ea:84:0f:
         93:64:2d:06:35:fb:00:15:d3:13:96:35:b3:4b:01:d3:6c:1d:
         e4:e7:d3:d1:c7:ab:da:c9:7b:38:f2:d8:6c:e8:4d:68:6b:9d:
         7c:db:ef:46:2c:94:a0:5b:f7:c2:93:10:ad:46:e9:76:8f:af:
         ee:42:3b:4a:d7:84:d7:ac:11:44:6b:8b:48:5b:00:b9:7f:8e:
         93:04:b1:5b:f3:9f:1e:47:f9:18:6b:ef:ba:d4:c6:9d:82:ab:
         1e:05:96:4d:4b:1f:81:30:fc:48:2f:0a:8d:de:8c:2d:fb:50:
         03:ac:0d:e7:c2:34:76:3c:a3:28:60:52:65:d6:10:c5:08:d6:
         70:e4:1f:91:db:5b:c1:4f:e9:87:5d:21:7b:94:f6:54:18:e7:
         ac:50:93:6c:bc:47:1e:29:27:6f:a0:d1:d0:bf:30:9a:40:32:
         b2:97:bf:33:51:f8:13:ca:25:7f:af:88:ab:14:e1:66:e7:3c:
         09:49:05:a7:34:65:f8:f9:db:89:fa:bb:6d:2c:5d:60:42:46:
         f0:ba:76:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYuz2EbAhYbLjcEZc7GxF6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGY2OThiNWY3NGExYzZkMWUwMDk4YjIyNTE5YmRjNTgz
MDA1NWEwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
EygwNjg5Y2I5ZmRkZmUwNjNlZTU3MjIxY2I2Y2I1YzZjODhjOWJmMmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46VFIUoM3eIAE/OXDD6PgDwfrPbB
l0v6ssiO35nmtItvHvSOgY4JqQBbxpj682BheFap4BDWkQZ6BK6NxWt77zDb9it4
B/qO6LR2MyqXv/rrZ8Of8FGYovmIk1T24u1N/aXjO8BMriaFJK7DkJ+OXaoTWYQS
eAfoYOa1hIzn54SMFHan4pl3hybMFwPwrdIqdRV1qUcgABJue9InjUL4IEAubcPl
T8yfM03zCqhue3GerNYeH9Bm1zI6fNQPHPcDhqOTApuGtYmHZDTkAo3KEf3AMujk
fhhgNj+wYJBbWeChJy5cwmBYV5ENDkFX4k0pT3Q2ODHPyMwVs5+UF3xliwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAaJy5/d/gY+5XIhy2y1xsiMm/LbMB8GA1UdIwQY
MBaAFPvfaYtfdKHG0eAJiyJRm9xYMAVaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05OXBpMTkwb2NiUjRBbUxJbEdiM0Znd0JWby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZGU5YzJkLTcwMjYtNDllYi05M2Q0
LTk4ZjJhMjE2YTdmOC8xLzEtOTlwaTE5MG9jYlI0QW1MSWxHYjNGZ3dCVm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk0L2RlOWMyZC03MDI2LTQ5ZWItOTNkNC05OGYyYTIxNmE3
ZjgvMS8xLTk5cGkxOTBvY2JSNEFtTElsR2IzRmd3QlZvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcWR
YeKli+Jxz1HNoi802GkBsW0pyvKHuWJPzyFhBio+PolJmmcJG6ua0JjofM/tMVNf
6oQPk2QtBjX7ABXTE5Y1s0sB02wd5OfT0cer2sl7OPLYbOhNaGudfNvvRiyUoFv3
wpMQrUbpdo+v7kI7SteE16wRRGuLSFsAuX+OkwSxW/OfHkf5GGvvutTGnYKrHgWW
TUsfgTD8SC8Kjd6MLftQA6wN58I0djyjKGBSZdYQxQjWcOQfkdtbwU/ph10he5T2
VBjnrFCTbLxHHiknb6DR0L8wmkAyspe/M1H4E8olf6+IqxThZuc8CUkFpzRl+Pnb
ifq7bSxdYEJG8Lp2ng==
-----END CERTIFICATE-----