Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          +V63zhyWRDjFK377CnP0FUnXYKUVLQYS8UbHzK8dwyw=
Subject key identifier:   42:C9:FD:FA:E9:1B:2D:BD:84:A7:02:DB:2D:2B:58:D3:36:23:DD:CB
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       01962F06B16CEFE4DB76DE896866708B363E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          D9
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: sCUAgKauKOJvFLCgoaXq4eGSHPzAxNbCn59yZi2mNH0=)
                          2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:6c:ef:e4:db:76:de:89:68:66:70:8b:36:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=42c9fdfae91b2dbd84a702db2d2b58d33623ddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:ea:92:8d:d2:4c:46:31:d4:b6:79:9d:22:
                    a7:f8:1a:b9:3c:25:62:7b:30:88:46:71:81:07:9f:
                    48:9f:63:df:46:ac:b2:ab:1a:63:02:3d:0f:38:05:
                    6a:6f:70:fb:82:90:ad:bc:3f:b5:a9:ef:a5:d4:60:
                    00:6a:f4:f4:82:3d:fd:a3:46:19:65:d6:a5:ab:29:
                    56:ca:3b:5a:b3:1b:1d:b0:14:a1:0c:6e:42:85:3a:
                    3c:85:17:45:7b:75:8a:b1:e3:f1:68:1a:a3:e6:20:
                    83:c1:b4:10:82:43:08:c8:30:3f:8c:69:82:41:2d:
                    5a:42:3c:3f:3c:f7:c0:e3:3d:1e:c7:c8:0f:40:aa:
                    51:78:68:7e:e9:db:85:d1:f7:0a:e6:e1:dd:8a:6f:
                    4e:a6:51:54:04:09:73:b8:58:5f:78:cb:bc:2d:d3:
                    4c:cd:73:49:17:87:5d:dc:9a:c8:12:f9:d6:ef:00:
                    e6:d6:91:46:0a:7d:f3:36:7c:69:fa:fd:9d:f9:04:
                    79:b5:fc:0f:69:ff:26:af:7f:07:97:d2:c2:c2:77:
                    7f:64:2f:ac:a6:1b:65:4f:ae:1a:29:c9:54:39:7a:
                    8d:5c:73:56:7e:c3:c9:d9:1a:fb:68:7c:17:42:be:
                    20:62:af:f7:dd:f8:a5:7c:05:58:2f:73:35:43:a3:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C9:FD:FA:E9:1B:2D:BD:84:A7:02:DB:2D:2B:58:D3:36:23:DD:CB
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:3d:54:30:55:39:21:a2:59:08:3f:e7:1d:40:a7:1d:4f:
         0b:42:93:45:c7:91:25:df:9c:63:b2:78:14:58:49:10:58:48:
         ec:9b:45:c4:fd:53:01:27:0e:ac:7c:55:3e:4f:1d:6f:2c:d1:
         38:61:53:b5:1a:19:72:90:f6:a4:98:36:be:31:a1:13:3a:d0:
         3a:60:34:83:9c:3f:17:bb:2b:f6:db:95:cf:b8:54:67:80:07:
         3f:18:e8:8a:73:05:42:7f:b2:fb:30:db:7e:2c:29:b6:06:3c:
         88:77:c4:11:86:6c:71:37:98:fa:57:7b:ae:8f:73:a1:7c:6b:
         81:7d:88:23:48:be:07:15:ed:6e:d6:2e:21:76:84:99:24:21:
         e8:19:25:45:af:a8:55:54:97:46:5d:f3:72:f2:9b:53:84:c1:
         be:d3:0e:69:bd:3b:89:da:d7:47:4e:ea:54:0d:e4:63:0f:32:
         ba:ef:ca:0a:34:e1:65:28:c0:95:0c:19:65:a1:eb:4b:97:83:
         89:be:9e:ef:f9:7c:be:97:96:63:da:eb:55:dc:b7:93:20:76:
         1c:44:61:50:b3:60:24:8e:fb:f5:95:97:3c:2b:13:ae:37:b1:
         64:76:c2:7d:a6:55:97:d4:a1:8b:34:4f:d2:06:ef:85:74:df:
         a9:b0:c6:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrFs7+Tbdt6JaGZwizY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjI0MDY1Zjg2YjRjZjk4NDhkZWM3ZGFiODZhNGRiODZj
MTVlMTEwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
Eyg0MmM5ZmRmYWU5MWIyZGJkODRhNzAyZGIyZDJiNThkMzM2MjNkZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaHqko3STEYx1LZ5nSKn+Bq5PCVi
ezCIRnGBB59In2PfRqyyqxpjAj0POAVqb3D7gpCtvD+1qe+l1GAAavT0gj39o0YZ
ZdalqylWyjtasxsdsBShDG5ChTo8hRdFe3WKsePxaBqj5iCDwbQQgkMIyDA/jGmC
QS1aQjw/PPfA4z0ex8gPQKpReGh+6duF0fcK5uHdim9OplFUBAlzuFhfeMu8LdNM
zXNJF4dd3JrIEvnW7wDm1pFGCn3zNnxp+v2d+QR5tfwPaf8mr38Hl9LCwnd/ZC+s
phtlT64aKclUOXqNXHNWfsPJ2Rr7aHwXQr4gYq/33filfAVYL3M1Q6NFWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELJ/frpGy29hKcC2y0rWNM2I93LMB8GA1UdIwQY
MBaAFPJiQGX4a0z5hI3sfauGpNuGwV4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEt
ZTU0NzBjNTJkNGRkLzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEtZTU0NzBjNTJkNGRk
LzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBI9VDBV
OSGiWQg/5x1Apx1PC0KTRceRJd+cY7J4FFhJEFhI7JtFxP1TAScOrHxVPk8dbyzR
OGFTtRoZcpD2pJg2vjGhEzrQOmA0g5w/F7sr9tuVz7hUZ4AHPxjoinMFQn+y+zDb
fiwptgY8iHfEEYZscTeY+ld7ro9zoXxrgX2II0i+BxXtbtYuIXaEmSQh6BklRa+o
VVSXRl3zcvKbU4TBvtMOab07idrXR07qVA3kYw8yuu/KCjThZSjAlQwZZaHrS5eD
ib6e7/l8vpeWY9rrVdy3kyB2HERhULNgJI779ZWXPCsTrjexZHbCfaZVl9ShizRP
0gbvhXTfqbDGNg==
-----END CERTIFICATE-----