Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File:                     tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier:          PavOwkznz2+J1eTfQjU+QoOXsJ6RZrgTRdE7blX1nyo=
Subject key identifier:   82:BD:16:5F:B7:46:B7:14:A4:07:84:0F:D4:C2:E8:C2:83:59:E6:59
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer:       /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial:       01962E9913570CC61C9590F1CCC4FB2271DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: kAR0YFhWRac8hZ4lJAeppPBYu69C17M6Lxzlrg3EZ28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:13:57:0c:c6:1c:95:90:f1:cc:c4:fb:22:71:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=82bd165fb746b714a407840fd4c2e8c28359e659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:c9:ea:ce:ac:fc:33:be:77:91:89:c1:d7:
                    d7:3d:9a:00:97:b4:20:3d:ba:3b:f8:80:fc:15:14:
                    64:44:4f:0a:24:a3:df:82:42:91:d0:b0:b7:d5:04:
                    6a:97:4d:5a:62:e4:94:5c:a9:cd:57:be:91:79:a2:
                    d5:cd:d5:9e:e9:26:c2:2b:58:80:a1:e2:02:03:b4:
                    d2:8d:99:10:55:47:57:49:03:5e:dc:a4:2a:55:28:
                    de:f0:47:34:f8:4c:5c:d5:e4:43:7a:0c:90:5b:0f:
                    2d:dd:f4:5b:14:3c:ef:db:9a:b1:80:59:9b:11:92:
                    11:06:bf:6b:e7:86:97:01:5b:89:38:1c:77:18:4f:
                    eb:8b:10:9c:48:e7:e2:72:e2:d7:c9:22:fd:5d:4f:
                    10:42:47:f3:4f:1c:c8:e9:10:7e:bd:04:6c:52:c6:
                    6e:34:ca:1d:ba:77:69:14:17:66:58:5c:8d:04:88:
                    8e:7c:26:b0:66:c2:e2:38:ed:14:13:11:26:5c:68:
                    c4:29:0b:78:31:7d:8c:ca:8b:71:6a:c9:2f:09:df:
                    e3:dc:dc:73:21:47:38:32:65:ab:75:fb:49:c8:0f:
                    5d:25:01:e3:0d:c1:e0:d0:a5:a6:be:1e:2b:28:dd:
                    d9:b8:e7:25:f0:cd:6f:c8:c8:9b:d8:94:f7:5d:80:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BD:16:5F:B7:46:B7:14:A4:07:84:0F:D4:C2:E8:C2:83:59:E6:59
            X509v3 Authority Key Identifier:
                keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:af:d7:28:09:41:fa:94:d0:b7:68:68:af:42:24:56:67:
         c5:42:78:6c:c9:47:22:32:38:f7:fe:45:60:ba:0b:d8:70:a0:
         82:87:8e:c5:e4:04:9f:df:46:3f:2d:11:44:45:b1:4c:ac:68:
         92:09:61:d4:f5:12:12:09:b5:43:49:ad:57:e3:50:df:61:c4:
         df:87:dd:4c:ba:b1:7f:0e:bf:4b:78:77:cf:9c:4f:e6:4f:ec:
         38:ca:48:d6:9c:33:db:e9:81:e4:8d:26:cd:86:1f:7d:48:ab:
         41:55:74:af:31:c8:c3:dc:e8:bb:ce:8a:7b:1f:07:0e:26:b6:
         7d:ce:73:71:f7:0d:be:17:8a:ce:cb:d8:0e:df:32:3c:52:4b:
         b3:28:1c:da:f1:b5:10:e2:5c:2e:94:72:b9:b5:0e:a1:fb:08:
         b4:e7:4b:fc:64:42:c1:59:07:ba:1d:bb:40:83:26:50:41:6c:
         b5:72:7f:d1:8f:d9:fd:4a:19:24:d0:f6:66:15:c4:d5:50:83:
         0a:30:b8:cb:a0:54:ec:04:6f:2b:7f:36:17:a7:b9:b9:38:e4:
         0b:b4:83:08:ab:58:ef:02:46:f5:ec:6d:29:ca:27:22:87:3c:
         30:d4:ce:4e:86:a0:61:18:6c:42:9e:09:bf:48:39:92:06:32:
         9f:89:8b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRNXDMYclZDxzMT7InHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzJhMzFkNjBlZDI1NjExOTk3ZTdiN2RlNGE5YjZmMjYw
NmVkMzQwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
Eyg4MmJkMTY1ZmI3NDZiNzE0YTQwNzg0MGZkNGMyZThjMjgzNTllNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktrJ6s6s/DO+d5GJwdfXPZoAl7Qg
Pbo7+ID8FRRkRE8KJKPfgkKR0LC31QRql01aYuSUXKnNV76ReaLVzdWe6SbCK1iA
oeICA7TSjZkQVUdXSQNe3KQqVSje8Ec0+Exc1eRDegyQWw8t3fRbFDzv25qxgFmb
EZIRBr9r54aXAVuJOBx3GE/rixCcSOficuLXySL9XU8QQkfzTxzI6RB+vQRsUsZu
NModundpFBdmWFyNBIiOfCawZsLiOO0UExEmXGjEKQt4MX2MyotxaskvCd/j3Nxz
IUc4MmWrdftJyA9dJQHjDcHg0KWmvh4rKN3ZuOcl8M1vyMib2JT3XYCZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK9Fl+3RrcUpAeED9TC6MKDWeZZMB8GA1UdIwQY
MBaAFLbCox1g7SVhGZfnt95Km28mBu00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQt
NmNkZjBkZTUyNzQ2LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84NTA2YTEtOTFkZC00Y2ZjLThjMDQtNmNkZjBkZTUyNzQ2
LzEvdHNLakhXRHRKV0VabC1lMzNrcWJieVlHN1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTSv1ygJ
QfqU0LdoaK9CJFZnxUJ4bMlHIjI49/5FYLoL2HCggoeOxeQEn99GPy0RREWxTKxo
kglh1PUSEgm1Q0mtV+NQ32HE34fdTLqxfw6/S3h3z5xP5k/sOMpI1pwz2+mB5I0m
zYYffUirQVV0rzHIw9zou86Kex8HDia2fc5zcfcNvheKzsvYDt8yPFJLsygc2vG1
EOJcLpRyubUOofsItOdL/GRCwVkHuh27QIMmUEFstXJ/0Y/Z/UoZJND2ZhXE1VCD
CjC4y6BU7ARvK382F6e5uTjkC7SDCKtY7wJG9extKconIoc8MNTOToagYRhsQp4J
v0g5kgYyn4mLCA==
-----END CERTIFICATE-----