Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File:                     dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier:          39OVDktttQt7E+NPwfU8ai18U+acau0XZhbMaCPw0NY=
Subject key identifier:   CF:41:58:DC:38:29:84:63:72:CA:8A:B6:C0:BE:CB:B4:99:29:22:39
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer:       /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial:       01962ECF61700675AC43464C81D5C741A65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number:          0394
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: weQNQSQlzK31oytmjJ44rL6lX4jDhq1yI8njLHmDf2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:70:06:75:ac:43:46:4c:81:d5:c7:41:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=cf4158dc3829846372ca8ab6c0becbb499292239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:3f:36:f3:44:e7:d8:e4:cc:68:45:37:6d:
                    c5:ce:59:b4:54:42:88:21:ca:13:5c:b9:02:e5:31:
                    0b:21:83:88:c1:19:7b:5f:74:d9:d6:cf:0e:90:e3:
                    77:40:70:fe:8d:04:d7:4a:18:8b:01:22:7b:00:6e:
                    a9:1f:76:9a:3a:14:51:35:40:5f:75:46:34:d2:19:
                    bf:2b:f4:87:1e:d2:d9:9f:c7:f4:31:9f:30:78:a8:
                    26:ab:07:3f:a7:81:48:68:a8:6e:fa:34:e7:34:c6:
                    d7:6d:07:46:2c:c3:4f:1b:cf:83:15:79:8a:a7:43:
                    29:1b:4b:85:cf:9b:15:35:44:08:ac:71:14:25:de:
                    44:da:48:68:c5:1b:83:d5:28:4b:41:24:8d:ed:c7:
                    f4:33:32:ec:e3:20:ce:8d:71:a5:75:d8:81:88:ab:
                    af:40:66:01:5e:b8:31:ba:e3:0a:46:98:2a:4a:21:
                    53:66:f7:6f:67:67:23:dd:37:c9:ba:5b:af:44:26:
                    0a:0a:84:45:3f:7f:f0:dc:e5:c2:e7:08:ed:56:cc:
                    89:37:ad:3f:b2:3b:18:3e:7c:50:34:5e:26:2b:2b:
                    5e:f2:36:54:cf:20:1b:09:0f:25:87:a9:e6:36:ff:
                    58:d3:5f:84:ff:af:9d:86:ae:a3:46:ab:e6:86:c4:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:41:58:DC:38:29:84:63:72:CA:8A:B6:C0:BE:CB:B4:99:29:22:39
            X509v3 Authority Key Identifier:
                keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:db:d3:1d:58:73:6d:2a:37:40:30:2c:c5:db:85:8c:72:65:
         29:4e:82:ca:60:b8:58:f9:42:e9:46:fb:e7:0c:e7:5a:2f:21:
         35:84:d5:b9:6a:c8:b6:2b:c3:bd:65:2c:88:19:57:40:59:00:
         f5:98:69:02:37:7f:6a:f3:30:b5:8c:ee:40:d0:2b:0f:4a:7b:
         e1:7c:78:87:10:4a:ba:94:c8:b2:b2:24:50:e9:d8:90:6d:84:
         a0:72:c4:4b:7c:38:ca:be:3b:11:10:d5:4a:28:17:a2:1e:c3:
         5d:02:9e:34:fc:d9:ab:f2:cb:d7:44:3f:05:10:88:a3:c3:29:
         8e:2f:03:20:8d:d9:4c:43:c3:d2:2c:dd:38:6e:90:f0:80:5d:
         2c:f9:e4:f4:81:9f:5a:65:d0:06:6b:8c:f9:86:0b:34:11:75:
         46:8a:3b:de:f1:7f:82:dd:99:40:7a:d3:fa:36:71:e2:b8:ec:
         10:a4:0d:27:69:e5:f1:57:05:6a:2b:9c:81:46:ba:fd:f6:2a:
         42:de:5a:c2:8b:1d:cd:4b:e6:36:ec:6b:bf:5d:55:1e:96:85:
         bb:ae:7b:24:3c:5e:46:3a:15:51:39:c4:be:af:ec:0c:f5:95:
         4a:ee:4c:26:a3:12:86:bc:5c:02:d7:00:f8:5f:0d:3b:6a:68:
         e1:cf:08:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2FwBnWsQ0ZMgdXHQaZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY2MmY3ZTg5OTgxNzQ0MTE4MDkzNWY0MmI4MmEzOTk4
MGEyZGMwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
EyhjZjQxNThkYzM4Mjk4NDYzNzJjYThhYjZjMGJlY2JiNDk5MjkyMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQA/NvNE59jkzGhFN23Fzlm0VEKI
IcoTXLkC5TELIYOIwRl7X3TZ1s8OkON3QHD+jQTXShiLASJ7AG6pH3aaOhRRNUBf
dUY00hm/K/SHHtLZn8f0MZ8weKgmqwc/p4FIaKhu+jTnNMbXbQdGLMNPG8+DFXmK
p0MpG0uFz5sVNUQIrHEUJd5E2khoxRuD1ShLQSSN7cf0MzLs4yDOjXGlddiBiKuv
QGYBXrgxuuMKRpgqSiFTZvdvZ2cj3TfJuluvRCYKCoRFP3/w3OXC5wjtVsyJN60/
sjsYPnxQNF4mKyte8jZUzyAbCQ8lh6nmNv9Y01+E/6+dhq6jRqvmhsTa5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9BWNw4KYRjcsqKtsC+y7SZKSI5MB8GA1UdIwQY
MBaAFHcvYvfomYF0QRgJNfQrgqOZgKLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTkt
YTA2MWE4Yzc3ZjE2LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTktYTA2MWE4Yzc3ZjE2
LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9vTHVhz
bSo3QDAsxduFjHJlKU6CymC4WPlC6Ub75wznWi8hNYTVuWrItivDvWUsiBlXQFkA
9ZhpAjd/avMwtYzuQNArD0p74Xx4hxBKupTIsrIkUOnYkG2EoHLES3w4yr47ERDV
SigXoh7DXQKeNPzZq/LL10Q/BRCIo8Mpji8DII3ZTEPD0izdOG6Q8IBdLPnk9IGf
WmXQBmuM+YYLNBF1Roo73vF/gt2ZQHrT+jZx4rjsEKQNJ2nl8VcFaiucgUa6/fYq
Qt5awosdzUvmNuxrv11VHpaFu657JDxeRjoVUTnEvq/sDPWVSu5MJqMShrxcAtcA
+F8NO2po4c8Ikg==
-----END CERTIFICATE-----