Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
File:                     Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft (raw, json)
Hash identifier:          arTt9bEQ22cCk40mEwe4c/QuMADRBjJ1nVgVtf8nXls=
Subject key identifier:   35:9F:0D:16:67:86:74:23:9A:F3:AD:6B:CE:39:31:34:F4:45:73:E3
Authority key identifier: 3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33
Certificate issuer:       /CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
Certificate serial:       01962E9899D8D29518F592E3FC50856DAD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl (hash: rIYMUSX60o/vuSmJW3O2wyM2D/6xsYIfbg06ct9ohtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:d8:d2:95:18:f5:92:e3:fc:50:85:6d:ad:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=359f0d16678674239af3ad6bce393134f44573e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:8a:37:b2:f2:fa:0f:7c:7e:85:c9:32:22:
                    1f:f3:8e:42:89:d8:f9:33:a2:f6:d5:b2:38:54:4d:
                    19:e0:81:77:79:aa:99:44:0c:02:90:aa:d3:90:d2:
                    22:35:00:c3:90:4d:ff:a4:96:1e:67:64:44:e6:94:
                    75:40:1d:bd:57:13:c4:17:f8:a3:36:55:39:44:7d:
                    0e:84:a7:b2:9a:0c:d8:56:98:a5:16:e6:06:55:89:
                    3b:29:b7:2b:63:ff:d0:25:b4:ec:e5:2e:7d:c9:0f:
                    4a:47:5e:66:ee:7f:da:5b:f4:ce:3a:f9:c2:77:62:
                    2d:65:2b:81:33:51:b4:a2:c1:ed:c1:e2:22:bd:b5:
                    b7:24:30:a7:28:2f:a6:9d:d0:db:f8:1f:05:5c:98:
                    fb:75:24:89:a9:b4:65:35:6b:5f:cd:b1:f3:1b:a8:
                    72:63:3c:21:61:12:fd:7e:7c:03:cb:46:51:12:6b:
                    42:7c:13:79:ec:85:cb:f0:bc:28:fa:90:76:41:a3:
                    1d:77:bd:52:b6:43:80:38:60:70:25:be:96:31:99:
                    e0:c3:6b:bb:b4:ca:c7:b1:c2:ec:fa:8e:98:69:53:
                    09:78:cf:f0:e5:b7:7a:24:bb:8b:10:fb:b9:7e:bb:
                    35:da:fd:83:d7:53:d9:06:4c:bf:08:9c:28:a7:7e:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:0D:16:67:86:74:23:9A:F3:AD:6B:CE:39:31:34:F4:45:73:E3
            X509v3 Authority Key Identifier:
                keyid:3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:54:56:34:d0:9b:36:86:14:ec:d3:7a:dc:e2:df:42:04:
         12:11:a0:de:41:91:a3:6e:27:68:d4:94:7b:6e:f4:ee:93:1d:
         ca:66:f1:dd:b0:52:30:2e:5b:9e:43:9c:02:89:4c:11:b1:60:
         fd:69:83:9a:5b:9a:8c:7f:a2:3d:a0:cf:a7:91:96:d3:77:9b:
         55:63:7c:f3:56:22:3e:27:b1:62:3f:ed:7b:e1:57:62:6a:db:
         64:cf:51:56:2e:2b:0d:d7:ee:02:a5:b3:b3:dd:9c:c3:38:3a:
         c2:65:8f:b7:1e:58:88:62:b2:f6:fc:d6:a3:8d:87:a1:e4:ad:
         cb:ed:c0:0f:87:e4:03:41:af:03:9c:77:89:2e:00:bd:ca:88:
         ff:fe:08:29:0b:2d:1b:16:b5:ee:96:f6:aa:f4:b0:27:b7:c5:
         0a:2b:70:38:93:c1:34:85:b8:ae:62:f6:4e:81:81:14:bb:08:
         b9:83:c5:64:d4:8e:20:3d:dd:83:82:56:2b:d3:12:83:4a:90:
         a1:68:9b:60:60:fe:a9:fd:6e:0d:d1:64:bd:ee:39:7d:5f:24:
         29:80:3b:43:58:40:16:f7:46:7e:05:97:1e:e7:79:6b:d4:df:
         24:d3:ac:2e:45:f7:67:cf:71:bf:3e:ba:32:53:9e:7a:c7:a8:
         74:6a:c2:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJnY0pUY9ZLj/FCFba1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWYzMWIzNjgyNjg3OWM3ZWJjMTEyYzYyOTQxYTFjZDNh
MmJiMzMwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
EygzNTlmMGQxNjY3ODY3NDIzOWFmM2FkNmJjZTM5MzEzNGY0NDU3M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4qKN7Ly+g98foXJMiIf845Cidj5
M6L21bI4VE0Z4IF3eaqZRAwCkKrTkNIiNQDDkE3/pJYeZ2RE5pR1QB29VxPEF/ij
NlU5RH0OhKeymgzYVpilFuYGVYk7KbcrY//QJbTs5S59yQ9KR15m7n/aW/TOOvnC
d2ItZSuBM1G0osHtweIivbW3JDCnKC+mndDb+B8FXJj7dSSJqbRlNWtfzbHzG6hy
YzwhYRL9fnwDy0ZREmtCfBN57IXL8Lwo+pB2QaMdd71StkOAOGBwJb6WMZngw2u7
tMrHscLs+o6YaVMJeM/w5bd6JLuLEPu5frs12v2D11PZBky/CJwop37dQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWfDRZnhnQjmvOta845MTT0RXPjMB8GA1UdIwQY
MBaAFDrvMbNoJoecfrwRLGKUGhzTorszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZmIzNTItZWY5NC00MmRlLTg5YWMt
ZDlhZjcxMGJhMWRlLzEvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yZmIzNTItZWY5NC00MmRlLTg5YWMtZDlhZjcxMGJhMWRl
LzEvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ1UVjTQ
mzaGFOzTetzi30IEEhGg3kGRo24naNSUe2707pMdymbx3bBSMC5bnkOcAolMEbFg
/WmDmluajH+iPaDPp5GW03ebVWN881YiPiexYj/te+FXYmrbZM9RVi4rDdfuAqWz
s92cwzg6wmWPtx5YiGKy9vzWo42HoeSty+3AD4fkA0GvA5x3iS4AvcqI//4IKQst
Gxa17pb2qvSwJ7fFCitwOJPBNIW4rmL2ToGBFLsIuYPFZNSOID3dg4JWK9MSg0qQ
oWibYGD+qf1uDdFkve45fV8kKYA7Q1hAFvdGfgWXHud5a9TfJNOsLkX3Z89xvz66
MlOeeseodGrC6Q==
-----END CERTIFICATE-----