Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File:                     Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier:          rEGjgdqtbxf9x9D46J4CCnFNs6F4yDAMKEnorgNWZ0Y=
Subject key identifier:   C8:9F:4C:36:E3:B8:90:79:16:C8:6F:98:EA:4E:94:91:EC:07:43:B2
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer:       /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial:       01962E61F34A28B341F33CC61F839638159B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number:          0CEA
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: mc2FlB7oya/xqyq2QVFVYz29Z1NpEUDXFcYD/2KmMzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:4a:28:b3:41:f3:3c:c6:1f:83:96:38:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=c89f4c36e3b8907916c86f98ea4e9491ec0743b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:0d:88:88:06:e6:97:dd:dc:55:65:9c:99:
                    34:69:99:13:32:58:f1:27:18:17:aa:fd:23:f1:92:
                    d7:30:83:0a:f6:e0:a6:46:dd:a8:9c:ba:3c:16:76:
                    90:79:07:c3:d0:a9:ad:3a:70:a4:00:79:bd:dd:cd:
                    14:38:88:3d:42:06:1d:ee:4c:c1:94:9d:b3:32:79:
                    a8:7f:47:fb:a3:51:9e:5c:7b:b4:92:b7:91:d8:b8:
                    ae:4e:2e:a7:9a:cc:e4:08:a7:14:52:02:fc:0c:64:
                    6b:a5:37:82:73:84:86:a7:09:04:bd:6b:df:98:f2:
                    91:9c:03:da:f7:69:5d:fe:06:b1:d6:8b:08:f2:5e:
                    0f:30:f7:c6:8f:7c:28:19:70:9d:24:4b:a1:05:3b:
                    ba:8d:7d:4e:55:98:ba:8c:4b:46:33:c2:8a:aa:1f:
                    7a:21:ef:6e:0a:5d:4e:4d:4e:da:42:7c:ef:4d:4f:
                    fc:8b:c9:bb:82:d6:11:83:dc:05:78:59:5a:1e:81:
                    d2:ab:40:ef:a7:7e:57:08:39:db:55:dc:15:fd:bc:
                    e0:32:25:1e:96:7b:a7:b4:5e:42:ce:ca:ce:18:52:
                    7d:0b:c9:f3:22:65:23:05:87:f8:91:22:0c:d9:a1:
                    53:c4:db:4a:fa:3e:f8:b7:9f:b1:30:68:b8:a7:64:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:4C:36:E3:B8:90:79:16:C8:6F:98:EA:4E:94:91:EC:07:43:B2
            X509v3 Authority Key Identifier:
                keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:0b:cf:78:23:70:7e:ee:fd:58:c3:b2:14:0e:a9:5d:7a:
         c0:7f:f3:e6:3e:de:69:79:59:d8:db:bf:05:15:9b:80:ba:42:
         c7:ea:69:09:c6:e2:30:5f:2a:ea:ad:c7:42:97:c9:25:74:93:
         40:a1:37:92:f8:27:99:de:5e:cd:ca:85:c7:3b:f6:83:6c:1d:
         c8:a5:f2:45:6a:f0:0c:7c:50:13:c9:3a:a0:a5:ee:82:6c:32:
         a4:53:09:6a:60:64:1a:55:93:88:3f:e6:3b:10:04:90:39:69:
         83:e0:e0:a1:ab:f5:74:6e:70:b5:24:f5:90:e7:e5:30:58:33:
         dd:45:3a:66:ae:d6:31:43:e7:bd:b7:be:0f:34:59:eb:37:3d:
         38:2e:b6:2d:ac:c0:08:c8:73:91:f0:d6:51:b3:21:e0:10:5c:
         b9:cd:1a:cd:8a:ef:ec:8f:86:96:a8:85:69:2d:39:76:94:ee:
         64:46:1d:58:27:eb:4f:41:b2:ef:07:11:7e:9b:08:54:bc:e4:
         89:c8:05:53:25:04:b5:66:60:ac:61:1c:05:0d:1f:8b:57:19:
         00:4a:c6:6d:70:20:21:5d:01:5c:60:de:3e:87:25:77:51:97:
         c6:f9:27:1d:2b:5e:ba:73:ae:dc:ee:55:ba:88:c2:de:31:84:
         1c:a3:64:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfNKKLNB8zzGH4OWOBWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjcxZGUzZTAxMDU5YWJlNmQxYTU5M2M0YTI0ZmY2ZTE4
OGQ2NGYwHhcNMjUwNDEzMDkwMTMzWhcNMjUwNDE0MDkwMTMzWjAzMTEwLwYDVQQD
EyhjODlmNGMzNmUzYjg5MDc5MTZjODZmOThlYTRlOTQ5MWVjMDc0M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGENiIgG5pfd3FVlnJk0aZkTMljx
JxgXqv0j8ZLXMIMK9uCmRt2onLo8FnaQeQfD0KmtOnCkAHm93c0UOIg9QgYd7kzB
lJ2zMnmof0f7o1GeXHu0kreR2LiuTi6nmszkCKcUUgL8DGRrpTeCc4SGpwkEvWvf
mPKRnAPa92ld/gax1osI8l4PMPfGj3woGXCdJEuhBTu6jX1OVZi6jEtGM8KKqh96
Ie9uCl1OTU7aQnzvTU/8i8m7gtYRg9wFeFlaHoHSq0Dvp35XCDnbVdwV/bzgMiUe
lnuntF5CzsrOGFJ9C8nzImUjBYf4kSIM2aFTxNtK+j74t5+xMGi4p2QcZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMifTDbjuJB5FshvmOpOlJHsB0OyMB8GA1UdIwQY
MBaAFCMnHePgEFmr5tGlk8SiT/bhiNZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMt
OTU4YzM3NjUwNmVkLzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zZjdhMDYtMmI0NS00YTBiLWJhNmMtOTU4YzM3NjUwNmVk
LzEvSXljZDQtQVFXYXZtMGFXVHhLSlA5dUdJMWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8gLz3gj
cH7u/VjDshQOqV16wH/z5j7eaXlZ2Nu/BRWbgLpCx+ppCcbiMF8q6q3HQpfJJXST
QKE3kvgnmd5ezcqFxzv2g2wdyKXyRWrwDHxQE8k6oKXugmwypFMJamBkGlWTiD/m
OxAEkDlpg+Dgoav1dG5wtST1kOflMFgz3UU6Zq7WMUPnvbe+DzRZ6zc9OC62LazA
CMhzkfDWUbMh4BBcuc0azYrv7I+GlqiFaS05dpTuZEYdWCfrT0Gy7wcRfpsIVLzk
icgFUyUEtWZgrGEcBQ0fi1cZAErGbXAgIV0BXGDePocld1GXxvknHSteunOu3O5V
uojC3jGEHKNkOA==
-----END CERTIFICATE-----