Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
File:                     hyDPLDSRRvabop66wMiCKIEcovE.mft (raw, json)
Hash identifier:          dFwAz9wF5GReFu10hTgmVj56gD0WKjFkNAVdTQZdqUU=
Subject key identifier:   87:6C:91:80:AB:A4:C3:9B:BF:05:7B:E1:5F:43:9D:96:56:53:A9:7F
Authority key identifier: 87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
Certificate issuer:       /CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Certificate serial:       01962E98B115B6C8C2AAA9EC77A9447BAA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
Manifest number:          08B6
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: hyDPLDSRRvabop66wMiCKIEcovE.crl (hash: F/4LeysBWnEEL5mng6oleR/uZ1HUvq1YOlKZC1c5spg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:15:b6:c8:c2:aa:a9:ec:77:a9:44:7b:aa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=876c9180aba4c39bbf057be15f439d965653a97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:9c:08:37:c4:80:cb:16:11:00:4c:96:df:
                    11:d9:55:d8:ca:77:76:07:fc:c9:1b:c5:d3:9d:af:
                    ce:ed:ab:a7:8b:63:f3:75:c1:c0:d7:9f:87:2a:8e:
                    ad:23:4d:29:db:6b:c1:62:de:f1:c2:b0:1b:18:66:
                    30:0d:7a:be:56:8e:eb:5c:01:cc:e0:3c:e9:3c:80:
                    6c:2d:54:8c:21:0a:1f:07:7b:3b:08:a6:dc:6d:a3:
                    57:ff:b7:ba:53:a8:f0:2c:8a:d5:b6:12:46:e8:82:
                    06:5b:6c:f1:60:35:fb:28:06:68:d3:7b:ff:19:59:
                    d9:ac:b7:8b:73:d7:5e:86:9a:7d:8e:bc:0f:43:2b:
                    bd:43:90:82:2d:96:0a:bb:7a:b2:18:bb:b0:27:d1:
                    74:1c:0b:c7:80:7f:8d:09:20:0e:bd:9e:19:f6:b7:
                    4d:43:af:08:76:41:59:fe:bd:40:7e:24:b2:a4:a7:
                    88:58:71:48:ac:ec:3a:29:84:9c:88:32:cf:33:9d:
                    ea:97:6e:83:18:d4:f5:fe:4f:fd:60:6c:4a:70:d8:
                    7f:02:98:d6:c3:2b:05:36:53:a6:5b:19:7f:72:28:
                    2b:6d:fe:1d:b6:e2:39:a8:0a:0d:39:c7:2f:62:d1:
                    88:b1:d4:a6:5d:2f:a8:36:5c:85:16:c9:3d:82:30:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6C:91:80:AB:A4:C3:9B:BF:05:7B:E1:5F:43:9D:96:56:53:A9:7F
            X509v3 Authority Key Identifier:
                keyid:87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:1d:f8:b9:b9:bf:13:62:6c:7c:9d:7e:ae:7d:c6:33:bf:
         30:aa:9e:af:b3:7c:22:7e:28:5c:90:3a:01:ac:a6:27:41:41:
         12:a7:3f:1b:fe:5f:df:71:99:87:b5:44:1c:a6:5e:9c:0e:d1:
         3f:11:3b:d2:0d:04:77:92:73:c9:47:b5:9d:73:31:57:d0:34:
         6b:99:5a:90:03:2c:3f:60:80:bc:90:39:79:eb:8f:f5:c1:1a:
         51:77:b2:62:80:e2:0f:40:80:27:eb:6c:d6:3d:95:47:56:cf:
         d1:d5:67:ce:c4:b9:dc:20:e7:19:bd:d9:9a:e5:b7:92:5d:23:
         85:40:2a:fb:bf:f1:79:e7:20:95:f0:26:4d:22:45:64:df:de:
         d0:3a:e8:a1:29:2f:3b:46:5b:ea:0d:2b:59:02:a5:3e:09:70:
         81:16:d1:42:be:b6:5f:24:23:86:a3:05:11:69:bc:47:db:4d:
         50:3f:4b:41:92:f8:ca:04:c0:73:6f:db:2e:83:bd:3a:7b:9c:
         18:13:8b:5a:9d:3f:2b:fa:74:81:93:90:23:6b:e1:ee:d0:02:
         7b:d7:11:11:2d:0f:0e:a7:35:d3:d4:0c:2f:79:b5:82:15:9c:
         ff:b8:d5:8d:73:a2:47:d7:ab:42:cf:88:dc:a9:32:68:fd:90:
         e8:ee:4a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLEVtsjCqqnsd6lEe6oJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjBjZjJjMzQ5MTQ2ZjY5YmEyOWViYWMwYzg4MjI4ODEx
Y2EyZjEwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
Eyg4NzZjOTE4MGFiYTRjMzliYmYwNTdiZTE1ZjQzOWQ5NjU2NTNhOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuCcCDfEgMsWEQBMlt8R2VXYynd2
B/zJG8XTna/O7auni2PzdcHA15+HKo6tI00p22vBYt7xwrAbGGYwDXq+Vo7rXAHM
4DzpPIBsLVSMIQofB3s7CKbcbaNX/7e6U6jwLIrVthJG6IIGW2zxYDX7KAZo03v/
GVnZrLeLc9dehpp9jrwPQyu9Q5CCLZYKu3qyGLuwJ9F0HAvHgH+NCSAOvZ4Z9rdN
Q68IdkFZ/r1AfiSypKeIWHFIrOw6KYSciDLPM53ql26DGNT1/k/9YGxKcNh/ApjW
wysFNlOmWxl/cigrbf4dtuI5qAoNOccvYtGIsdSmXS+oNlyFFsk9gjAwcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdskYCrpMObvwV74V9DnZZWU6l/MB8GA1UdIwQY
MBaAFIcgzyw0kUb2m6KeusDIgiiBHKLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlEUExEU1JSdmFib3A2NndNaUNLSUVjb3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYmJkMzctZDNjYi00MTViLWEzOGEt
ZDQxNTA2N2E4Zjc2LzEvaHlEUExEU1JSdmFib3A2NndNaUNLSUVjb3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYmJkMzctZDNjYi00MTViLWEzOGEtZDQxNTA2N2E4Zjc2
LzEvaHlEUExEU1JSdmFib3A2NndNaUNLSUVjb3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXod+Lm5
vxNibHydfq59xjO/MKqer7N8In4oXJA6AaymJ0FBEqc/G/5f33GZh7VEHKZenA7R
PxE70g0Ed5JzyUe1nXMxV9A0a5lakAMsP2CAvJA5eeuP9cEaUXeyYoDiD0CAJ+ts
1j2VR1bP0dVnzsS53CDnGb3ZmuW3kl0jhUAq+7/xeecglfAmTSJFZN/e0DrooSkv
O0Zb6g0rWQKlPglwgRbRQr62XyQjhqMFEWm8R9tNUD9LQZL4ygTAc2/bLoO9Onuc
GBOLWp0/K/p0gZOQI2vh7tACe9cRES0PDqc109QML3m1ghWc/7jVjXOiR9erQs+I
3KkyaP2Q6O5KbQ==
-----END CERTIFICATE-----