Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
File:                     9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json)
Hash identifier:          2QFmjMvKqY3TxDw9WCYyNLoeWOnw0ZBG9KmCFh2l6mU=
Subject key identifier:   83:F2:15:22:D2:D3:05:68:D4:98:55:99:4E:D3:ED:48:64:CE:ED:40
Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C
Certificate issuer:       /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
Certificate serial:       01962F74B4777B40E03773F076D2D5F8F692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: NxcBs5novLPZjUPm7hK4vcJsRRXu+CDO6OJxkc5pz2M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:77:7b:40:e0:37:73:f0:76:d2:d5:f8:f6:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=83f21522d2d30568d49855994ed3ed4864ceed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:45:e3:78:67:23:94:5d:a7:ee:9c:64:fc:
                    54:5a:71:41:0a:8b:44:db:01:b4:b9:78:0b:b4:45:
                    3a:3e:4c:a9:43:99:97:4e:8f:8a:4a:12:5e:1d:a9:
                    75:fc:4a:38:f0:95:43:71:96:e4:bf:78:50:ca:8b:
                    19:2e:4c:df:78:db:84:1d:2c:9f:51:6c:6e:34:b4:
                    83:43:b7:1b:f3:6c:7e:a8:74:b8:3f:8c:9f:c0:1e:
                    f1:4a:14:bb:dd:04:44:28:e0:7f:f4:f9:1b:ae:f7:
                    1c:a5:97:a0:46:f3:b9:39:a4:16:a1:a6:ac:fb:64:
                    ab:14:0b:ac:8e:ec:62:5f:6b:f9:fd:b6:0f:67:29:
                    78:77:82:ee:96:ce:59:ec:cb:1c:7f:f9:9d:39:4a:
                    5d:c2:34:51:8d:85:6e:ad:39:9c:d7:0f:fc:10:c3:
                    5f:3f:61:06:13:db:33:15:a3:2b:4d:b8:01:c0:e3:
                    89:a5:56:04:fa:78:4b:be:0f:0b:45:78:27:5a:51:
                    fe:e9:7f:25:cc:a7:e9:9c:5c:2a:e7:2e:64:6d:a1:
                    6b:fe:5f:0c:69:5c:d4:6f:3d:90:4d:2c:dc:b5:2a:
                    ad:53:47:61:38:0a:e4:84:c7:68:9a:fc:42:ec:a2:
                    d2:3e:fb:60:d4:75:1d:bb:12:41:3d:cd:2a:0d:da:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:15:22:D2:D3:05:68:D4:98:55:99:4E:D3:ED:48:64:CE:ED:40
            X509v3 Authority Key Identifier:
                keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:0a:b7:97:af:36:03:eb:42:82:5f:48:63:b8:46:94:d9:
         f8:d8:d1:40:7b:fc:08:8e:00:f3:07:77:c3:46:dc:84:26:ea:
         5a:7e:ac:5b:8b:8c:0f:fa:65:7d:5e:16:6c:4b:e1:c6:a6:64:
         f6:b1:86:de:b3:0e:86:d4:57:a4:27:85:1b:65:d6:e0:5c:cd:
         d9:a1:bd:71:e7:ee:34:7a:0a:b6:87:e2:56:d1:8d:30:93:bb:
         d3:c9:8d:ed:43:2c:d0:1f:1b:14:12:09:03:b9:6c:11:46:ac:
         63:d9:e1:c8:ca:2f:b5:04:e0:62:9a:96:23:da:d1:77:70:1c:
         7e:f5:7d:f1:27:40:75:c7:21:9f:60:50:6a:c9:99:22:f5:24:
         65:b5:d7:3e:2a:61:2f:f4:d9:7a:37:d1:2b:db:a4:af:9f:23:
         d6:22:ae:36:d4:20:05:68:47:c0:43:e0:07:3f:2b:f0:af:56:
         bb:76:cc:de:01:72:b4:9e:14:a4:b8:6f:07:e8:d6:1b:1b:3c:
         ce:b5:98:e1:ac:98:7a:d0:b6:b3:a7:67:0c:78:c5:08:c8:72:
         8f:b6:6f:a5:f2:a8:ee:80:c2:c6:b9:05:55:c0:22:da:b4:97:
         f2:23:c2:b9:b2:23:20:1f:49:aa:1e:b0:5d:1a:31:7a:31:12:
         54:72:f4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLR3e0DgN3PwdtLV+PaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2
MWM5NGMwHhcNMjUwNDEzMTQwMTM5WhcNMjUwNDE0MTQwMTM5WjAzMTEwLwYDVQQD
Eyg4M2YyMTUyMmQyZDMwNTY4ZDQ5ODU1OTk0ZWQzZWQ0ODY0Y2VlZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugtF43hnI5Rdp+6cZPxUWnFBCotE
2wG0uXgLtEU6PkypQ5mXTo+KShJeHal1/Eo48JVDcZbkv3hQyosZLkzfeNuEHSyf
UWxuNLSDQ7cb82x+qHS4P4yfwB7xShS73QREKOB/9PkbrvccpZegRvO5OaQWoaas
+2SrFAusjuxiX2v5/bYPZyl4d4Luls5Z7Mscf/mdOUpdwjRRjYVurTmc1w/8EMNf
P2EGE9szFaMrTbgBwOOJpVYE+nhLvg8LRXgnWlH+6X8lzKfpnFwq5y5kbaFr/l8M
aVzUbz2QTSzctSqtU0dhOArkhMdomvxC7KLSPvtg1HUduxJBPc0qDdpnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPyFSLS0wVo1JhVmU7T7Uhkzu1AMB8GA1UdIwQY
MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt
MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy
LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmukKt5ev
NgPrQoJfSGO4RpTZ+NjRQHv8CI4A8wd3w0bchCbqWn6sW4uMD/plfV4WbEvhxqZk
9rGG3rMOhtRXpCeFG2XW4FzN2aG9cefuNHoKtofiVtGNMJO708mN7UMs0B8bFBIJ
A7lsEUasY9nhyMovtQTgYpqWI9rRd3AcfvV98SdAdcchn2BQasmZIvUkZbXXPiph
L/TZejfRK9ukr58j1iKuNtQgBWhHwEPgBz8r8K9Wu3bM3gFytJ4UpLhvB+jWGxs8
zrWY4ayYetC2s6dnDHjFCMhyj7ZvpfKo7oDCxrkFVcAi2rSX8iPCubIjIB9Jqh6w
XRoxejESVHL0ng==
-----END CERTIFICATE-----