Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File:                     P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier:          LxCdZmWUhbmuFn2hOOMDlg9f+xWXkZWIVtK7rzBnpY4=
Subject key identifier:   DA:FB:72:2E:7E:96:FE:0C:E3:C3:6F:90:3F:19:0B:66:B4:C1:11:AC
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer:       /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial:       01962DF3C92B9DE421F043FD004D965BE2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number:          10B8
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: SRLVBZaxrNdbIQqcNmRZqu1090Mm6OFfVEGkPgVtfYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:2b:9d:e4:21:f0:43:fd:00:4d:96:5b:e2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=dafb722e7e96fe0ce3c36f903f190b66b4c111ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:94:0e:00:57:fc:a4:99:e9:39:d4:db:4f:
                    ef:e8:ae:56:05:55:ac:b4:09:c8:40:b3:2b:3c:33:
                    70:9f:cb:49:f5:3f:82:ed:c6:f9:f5:7e:4d:05:13:
                    75:24:a4:c2:b3:8a:46:ac:1f:49:2b:d3:29:a7:4e:
                    d2:21:5c:ee:b9:b3:b8:c9:c2:ae:92:11:4b:bd:cc:
                    22:55:c9:12:44:46:74:7c:20:25:db:7d:e7:61:27:
                    9c:e9:29:6d:65:e2:e8:18:2e:55:64:53:0f:5f:81:
                    ce:71:00:b9:33:e7:ca:b1:0a:7e:a8:37:94:2b:f0:
                    c6:fc:c3:f1:4a:83:70:b3:73:77:3d:1d:f1:0d:e5:
                    da:47:a9:42:2f:14:c8:18:fe:55:67:59:e8:24:72:
                    e0:76:96:6d:71:35:dd:d3:f8:60:b8:18:95:f1:76:
                    23:e4:03:bf:4c:ea:69:7d:11:3b:3b:cf:e8:da:e1:
                    d1:47:79:cd:74:94:c8:37:40:eb:af:80:af:90:5d:
                    bc:b0:07:d0:5e:68:f7:5e:17:dc:7f:66:6d:3f:55:
                    6e:ab:8f:38:46:61:3b:66:36:f5:1f:76:d7:66:84:
                    3d:0c:7c:31:f3:ca:ed:b3:42:e0:12:ac:22:8a:b7:
                    70:6c:41:ab:88:cd:03:7e:d9:ae:6f:71:a8:1c:bf:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:72:2E:7E:96:FE:0C:E3:C3:6F:90:3F:19:0B:66:B4:C1:11:AC
            X509v3 Authority Key Identifier:
                keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:d8:ad:67:01:c4:fb:3b:f3:6e:b8:45:e0:bc:30:11:fa:52:
         da:f9:22:53:f5:ca:7f:60:d6:0a:89:67:6f:8f:c6:e1:1d:66:
         45:ec:f5:d5:4c:47:3e:e8:98:49:12:78:bf:2b:7e:26:cd:56:
         96:50:58:1c:e6:fc:19:05:9a:7e:2b:60:e9:ae:ee:85:84:3a:
         c9:cd:c3:6e:5e:21:6d:25:b1:31:a1:d4:73:1e:f2:df:59:1b:
         c9:4b:52:07:75:1d:43:99:9c:c3:71:cf:8c:15:6f:6a:63:c4:
         6b:5a:9d:cb:c8:2b:cd:94:99:ca:d3:16:12:74:51:72:42:0c:
         9d:54:9c:11:c6:8b:84:d9:d7:4c:33:b8:0e:f3:a8:29:d4:3c:
         83:2e:00:9d:81:06:8a:f3:4e:4c:81:01:54:14:26:39:16:cb:
         a8:76:55:51:41:16:14:24:e9:ec:1c:1e:10:53:4e:bf:ec:90:
         d1:99:28:b5:bb:e5:60:6b:4d:2f:e0:11:0e:05:31:e1:0d:37:
         db:02:06:04:a9:1f:90:27:12:49:a6:c1:a5:75:11:84:00:a7:
         cf:15:34:b2:5d:ea:38:63:d1:ea:d2:25:d9:ea:95:cd:61:2b:
         82:d9:c5:54:7a:77:1c:a2:57:b1:a9:05:21:42:97:4f:9a:6c:
         33:51:d2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88krneQh8EP9AE2WW+K0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjUwNDEzMDcwMTEzWhcNMjUwNDE0MDcwMTEzWjAzMTEwLwYDVQQD
EyhkYWZiNzIyZTdlOTZmZTBjZTNjMzZmOTAzZjE5MGI2NmI0YzExMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V6UDgBX/KSZ6TnU20/v6K5WBVWs
tAnIQLMrPDNwn8tJ9T+C7cb59X5NBRN1JKTCs4pGrB9JK9Mpp07SIVzuubO4ycKu
khFLvcwiVckSREZ0fCAl233nYSec6SltZeLoGC5VZFMPX4HOcQC5M+fKsQp+qDeU
K/DG/MPxSoNws3N3PR3xDeXaR6lCLxTIGP5VZ1noJHLgdpZtcTXd0/hguBiV8XYj
5AO/TOppfRE7O8/o2uHRR3nNdJTIN0Drr4CvkF28sAfQXmj3Xhfcf2ZtP1Vuq484
RmE7Zjb1H3bXZoQ9DHwx88rts0LgEqwiirdwbEGriM0Dftmub3GoHL9vOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr7ci5+lv4M48NvkD8ZC2a0wRGsMB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA59itZwHE
+zvzbrhF4LwwEfpS2vkiU/XKf2DWColnb4/G4R1mRez11UxHPuiYSRJ4vyt+Js1W
llBYHOb8GQWafitg6a7uhYQ6yc3Dbl4hbSWxMaHUcx7y31kbyUtSB3UdQ5mcw3HP
jBVvamPEa1qdy8grzZSZytMWEnRRckIMnVScEcaLhNnXTDO4DvOoKdQ8gy4AnYEG
ivNOTIEBVBQmORbLqHZVUUEWFCTp7BweEFNOv+yQ0ZkotbvlYGtNL+ARDgUx4Q03
2wIGBKkfkCcSSabBpXURhACnzxU0sl3qOGPR6tIl2eqVzWErgtnFVHp3HKJXsakF
IUKXT5psM1HSDg==
-----END CERTIFICATE-----