Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
File:                     iX81rEgorqlfpdLYBNM6ewz_RYo.mft (raw, json)
Hash identifier:          pxxa3lPmjWw87yFpc4gZK9owgMEevKPawr/0L53q/PM=
Subject key identifier:   8F:78:EB:8B:CE:31:98:9E:E5:BC:DF:AD:DF:F6:4A:52:B8:E8:24:2C
Authority key identifier: 89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A
Certificate issuer:       /CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
Certificate serial:       01962E2AF581B3C423AC69788203C01DC531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft
Manifest number:          03AB
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: iX81rEgorqlfpdLYBNM6ewz_RYo.crl (hash: TjEI/HtrlT6Zf5te+GDTmTuvLDPq463vHY8lg7es974=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:81:b3:c4:23:ac:69:78:82:03:c0:1d:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897f35ac4828aea95fa5d2d804d33a7b0cff458a
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=8f78eb8bce31989ee5bcdfaddff64a52b8e8242c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:2b:14:3a:f2:0a:29:a0:28:dd:16:68:d4:
                    28:47:53:ff:99:38:73:c2:fd:a3:91:44:75:0e:c7:
                    14:e5:94:21:48:39:f6:bd:11:b3:b6:e6:cb:24:c5:
                    e3:db:d0:df:73:15:14:28:93:8e:a2:b2:a2:81:a9:
                    f4:72:34:dd:c8:0b:d4:fe:ad:0b:1a:5d:1e:c2:23:
                    e8:b7:45:08:2c:c6:1a:4d:f5:ac:d6:a4:a5:95:3e:
                    2a:f9:fe:d8:79:95:2d:40:f0:74:12:86:96:59:aa:
                    01:5e:c5:fe:73:e2:7c:3d:f8:6a:e9:71:cb:8e:76:
                    ed:3c:5e:7a:d9:70:6b:b9:ce:53:2e:e8:1a:d5:cc:
                    46:e1:6a:b2:1d:b4:78:6e:fc:5d:6c:39:43:b0:d3:
                    1d:1c:cf:1a:88:79:a8:59:f7:ba:50:35:61:f6:9a:
                    10:d2:6b:02:42:97:de:ab:cf:31:6b:e0:f1:51:61:
                    80:72:81:4f:2a:0c:eb:17:f1:94:e2:8c:31:4f:1f:
                    0f:3c:cb:9f:73:e8:0f:eb:61:79:55:02:7e:14:df:
                    26:83:2c:0b:a4:55:4b:1a:1f:f3:f9:2c:21:92:ef:
                    c5:c3:86:c9:0d:1f:5e:c3:d8:5f:4f:e6:c5:5d:2e:
                    f0:cd:ec:e7:0b:40:6a:b3:06:c4:43:50:7d:f2:d1:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:78:EB:8B:CE:31:98:9E:E5:BC:DF:AD:DF:F6:4A:52:B8:E8:24:2C
            X509v3 Authority Key Identifier:
                keyid:89:7F:35:AC:48:28:AE:A9:5F:A5:D2:D8:04:D3:3A:7B:0C:FF:45:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX81rEgorqlfpdLYBNM6ewz_RYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/dba2f7-7c2b-4670-a1df-b0e4103f4962/1/iX81rEgorqlfpdLYBNM6ewz_RYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:e4:b3:75:3c:2f:1e:84:67:b7:14:9b:01:16:d5:89:38:
         f8:ec:55:49:f7:5a:7a:c4:b7:0a:f6:21:94:4b:7b:d5:48:6f:
         7c:f4:c8:b5:7a:2d:9b:e3:e9:9b:b5:18:00:6e:ec:b7:86:cd:
         57:4b:6e:36:9e:38:94:85:73:3d:f4:8c:c9:e8:04:57:40:1c:
         4a:49:0d:a5:50:53:61:74:86:15:59:8b:2c:3c:db:e5:d2:7e:
         25:90:66:34:5c:05:d1:09:96:2f:c4:74:a5:3d:60:23:19:dc:
         96:66:07:f2:e4:f4:c8:2e:1f:e1:60:57:a6:02:9c:d4:fc:1f:
         cd:9e:8d:a1:95:db:cf:0d:32:e4:fb:da:c9:71:13:8b:3b:ae:
         98:06:d5:5b:d5:90:2d:3c:a5:dd:70:1e:2f:b8:d7:8d:f4:ae:
         85:a9:dd:ed:40:b9:d5:bf:5d:03:66:c1:ba:e6:3c:c0:95:2b:
         aa:af:23:a4:65:8a:05:bb:35:3a:78:17:e0:f2:d1:39:52:3b:
         6a:48:d3:04:26:65:41:f8:d7:2b:e4:8f:97:9c:6b:73:e7:c1:
         b7:d5:46:68:92:55:a0:d7:56:5f:57:02:64:95:71:f1:74:05:
         ae:7c:30:29:5a:78:25:e6:40:ec:35:63:a5:21:b0:ac:e7:33:
         5b:90:ec:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvWBs8QjrGl4ggPAHcUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2YzNWFjNDgyOGFlYTk1ZmE1ZDJkODA0ZDMzYTdiMGNm
ZjQ1OGEwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
Eyg4Zjc4ZWI4YmNlMzE5ODllZTViY2RmYWRkZmY2NGE1MmI4ZTgyNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxcrFDryCimgKN0WaNQoR1P/mThz
wv2jkUR1DscU5ZQhSDn2vRGztubLJMXj29DfcxUUKJOOorKigan0cjTdyAvU/q0L
Gl0ewiPot0UILMYaTfWs1qSllT4q+f7YeZUtQPB0EoaWWaoBXsX+c+J8Pfhq6XHL
jnbtPF562XBruc5TLuga1cxG4WqyHbR4bvxdbDlDsNMdHM8aiHmoWfe6UDVh9poQ
0msCQpfeq88xa+DxUWGAcoFPKgzrF/GU4owxTx8PPMufc+gP62F5VQJ+FN8mgywL
pFVLGh/z+Swhku/Fw4bJDR9ew9hfT+bFXS7wzeznC0BqswbEQ1B98tEE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9464vOMZie5bzfrd/2SlK46CQsMB8GA1UdIwQY
MBaAFIl/NaxIKK6pX6XS2ATTOnsM/0WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kYmEyZjctN2MyYi00NjcwLWExZGYt
YjBlNDEwM2Y0OTYyLzEvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kYmEyZjctN2MyYi00NjcwLWExZGYtYjBlNDEwM2Y0OTYy
LzEvaVg4MXJFZ29ycWxmcGRMWUJOTTZld3pfUllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNvks3U8
Lx6EZ7cUmwEW1Yk4+OxVSfdaesS3CvYhlEt71UhvfPTItXotm+Ppm7UYAG7st4bN
V0tuNp44lIVzPfSMyegEV0AcSkkNpVBTYXSGFVmLLDzb5dJ+JZBmNFwF0QmWL8R0
pT1gIxnclmYH8uT0yC4f4WBXpgKc1PwfzZ6NoZXbzw0y5PvayXETizuumAbVW9WQ
LTyl3XAeL7jXjfSuhand7UC51b9dA2bBuuY8wJUrqq8jpGWKBbs1OngX4PLROVI7
akjTBCZlQfjXK+SPl5xrc+fBt9VGaJJVoNdWX1cCZJVx8XQFrnwwKVp4JeZA7DVj
pSGwrOczW5Ds/A==
-----END CERTIFICATE-----