Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
File:                     83MAhqFPMbJWQMFC7f0XvJMyDFo.mft (raw, json)
Hash identifier:          sDwG0wLgQO81HxdegBxPK3tRGuo3/TtkEtrPS4CWz0o=
Subject key identifier:   C8:5E:71:E2:26:80:97:70:8C:E9:7C:99:6C:A9:65:B7:E5:35:7A:5D
Authority key identifier: F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A
Certificate issuer:       /CN=f3730086a14f31b25640c142edfd17bc93320c5a
Certificate serial:       01962F745DEEBBFF3558CEF02BADE42CB84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft
Manifest number:          0D91
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 83MAhqFPMbJWQMFC7f0XvJMyDFo.crl (hash: I9Fenx7Wex5CTBT1TZrLZcs8LBhs069HyEG7v89ug7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5d:ee:bb:ff:35:58:ce:f0:2b:ad:e4:2c:b8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3730086a14f31b25640c142edfd17bc93320c5a
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=c85e71e2268097708ce97c996ca965b7e5357a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:6c:ed:e1:8e:4a:ba:f3:65:ff:a0:ec:6d:
                    7e:12:91:45:46:ec:34:fe:14:9a:95:a6:97:d6:0d:
                    7e:bf:36:86:2b:1c:78:99:b7:ea:00:4d:b1:48:10:
                    48:65:00:ba:b1:f1:0b:a7:b1:2f:df:c1:ea:f9:a0:
                    5e:e6:b2:b7:9c:43:b1:d9:21:a7:19:1f:d7:85:2a:
                    aa:d0:d4:32:36:2f:33:96:8a:ae:dc:a6:ae:7c:29:
                    d8:04:0b:e6:50:87:23:d8:af:b5:80:3f:9d:30:96:
                    6b:61:fa:2d:17:63:cb:cd:9d:ee:c4:c0:52:37:4a:
                    aa:ec:c7:f8:13:a1:aa:8a:f3:91:38:1c:0a:bc:29:
                    d6:5e:a7:a0:41:73:97:fd:bf:02:2e:cf:b1:42:43:
                    49:20:55:95:58:ae:df:e2:4d:e7:15:32:69:52:e8:
                    fc:57:cf:aa:67:da:d4:c5:68:b5:4f:a8:a8:87:45:
                    c2:d2:5a:99:ba:ac:ca:c6:b7:23:07:5c:24:a1:b8:
                    b5:53:57:33:23:9d:b1:b7:8c:55:b8:8f:3d:6f:6b:
                    76:4b:52:cc:d6:4c:60:17:76:b7:5c:e4:c7:2a:b4:
                    c0:eb:be:33:2e:9e:d0:61:43:f9:aa:46:b2:32:d2:
                    a6:60:ef:b0:6c:e9:d8:b1:f0:15:59:cb:bd:8e:0b:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:71:E2:26:80:97:70:8C:E9:7C:99:6C:A9:65:B7:E5:35:7A:5D
            X509v3 Authority Key Identifier:
                keyid:F3:73:00:86:A1:4F:31:B2:56:40:C1:42:ED:FD:17:BC:93:32:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83MAhqFPMbJWQMFC7f0XvJMyDFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a8cef-bc09-42b8-b76d-79f32fd4e33d/1/83MAhqFPMbJWQMFC7f0XvJMyDFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:55:14:c5:47:e4:66:c6:63:03:0c:b6:40:25:46:3a:f6:
         8b:20:0c:d0:50:52:e2:72:f4:41:48:9e:3a:69:2b:43:a1:d0:
         ac:b7:2b:a6:12:b6:63:e4:1b:7f:6e:6f:ae:a2:7c:00:96:c0:
         7f:2f:1b:e6:71:69:be:82:ca:f9:8b:a3:9e:0b:9d:d0:f8:b3:
         90:c8:72:0a:56:1a:e3:f5:50:b9:a0:61:ba:9b:53:44:b4:22:
         0f:6d:bb:0f:5b:38:ff:15:2d:8f:a7:e5:1a:48:35:13:40:dd:
         60:40:a6:df:49:38:5e:3a:de:31:b3:65:b6:d2:79:fd:f3:9f:
         28:db:e5:14:1e:53:a4:b2:76:5f:51:44:1d:af:05:59:c5:10:
         6e:fc:5b:23:03:63:70:bd:ee:61:c5:9b:6a:ab:f1:18:16:75:
         e0:65:db:48:85:a8:91:8d:90:10:03:33:c3:c8:2a:b0:74:54:
         6c:f8:a1:b2:10:81:4a:99:64:60:8e:a1:ac:4d:45:64:04:26:
         a8:6e:68:dc:1a:51:e2:b7:43:72:8d:ff:db:08:af:e6:cd:ae:
         00:37:69:2e:b5:35:6a:9a:67:19:fe:2d:2d:e9:a9:1d:b6:d0:
         43:e4:2c:86:ec:13:84:a4:63:e4:77:c8:98:18:d8:e2:8d:bd:
         0f:f5:bb:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdF3uu/81WM7wK63kLLhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzMwMDg2YTE0ZjMxYjI1NjQwYzE0MmVkZmQxN2JjOTMz
MjBjNWEwHhcNMjUwNDEzMTQwMTE3WhcNMjUwNDE0MTQwMTE3WjAzMTEwLwYDVQQD
EyhjODVlNzFlMjI2ODA5NzcwOGNlOTdjOTk2Y2E5NjViN2U1MzU3YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5s7eGOSrrzZf+g7G1+EpFFRuw0
/hSalaaX1g1+vzaGKxx4mbfqAE2xSBBIZQC6sfELp7Ev38Hq+aBe5rK3nEOx2SGn
GR/XhSqq0NQyNi8zloqu3KaufCnYBAvmUIcj2K+1gD+dMJZrYfotF2PLzZ3uxMBS
N0qq7Mf4E6GqivOROBwKvCnWXqegQXOX/b8CLs+xQkNJIFWVWK7f4k3nFTJpUuj8
V8+qZ9rUxWi1T6ioh0XC0lqZuqzKxrcjB1wkobi1U1czI52xt4xVuI89b2t2S1LM
1kxgF3a3XOTHKrTA674zLp7QYUP5qkayMtKmYO+wbOnYsfAVWcu9jgviYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMheceImgJdwjOl8mWypZbflNXpdMB8GA1UdIwQY
MBaAFPNzAIahTzGyVkDBQu39F7yTMgxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQt
NzlmMzJmZDRlMzNkLzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYThjZWYtYmMwOS00MmI4LWI3NmQtNzlmMzJmZDRlMzNk
LzEvODNNQWhxRlBNYkpXUU1GQzdmMFh2Sk15REZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLZVFMVH
5GbGYwMMtkAlRjr2iyAM0FBS4nL0QUieOmkrQ6HQrLcrphK2Y+Qbf25vrqJ8AJbA
fy8b5nFpvoLK+Yujngud0PizkMhyClYa4/VQuaBhuptTRLQiD227D1s4/xUtj6fl
Gkg1E0DdYECm30k4XjreMbNlttJ5/fOfKNvlFB5TpLJ2X1FEHa8FWcUQbvxbIwNj
cL3uYcWbaqvxGBZ14GXbSIWokY2QEAMzw8gqsHRUbPihshCBSplkYI6hrE1FZAQm
qG5o3BpR4rdDco3/2wiv5s2uADdpLrU1appnGf4tLempHbbQQ+QshuwThKRj5HfI
mBjY4o29D/W74g==
-----END CERTIFICATE-----