Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File:                     ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier:          vyKwP2sem3cbvUryWSXvBi5vae7nYLE1gBc4xrRkG+k=
Subject key identifier:   4B:08:3C:3E:5C:8C:97:19:24:FD:97:27:59:79:E8:B7:ED:E0:DD:D0
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer:       /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial:       01962DF3D750D63B6FCDDCBDEBE37570C267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: kz3ejc/C6iokBdQ3s9vDNpcB4n82FccQ1xDnnPgCwnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:50:d6:3b:6f:cd:dc:bd:eb:e3:75:70:c2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=4b083c3e5c8c971924fd97275979e8b7ede0ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:ee:3c:48:b7:7d:cc:bc:23:97:c0:16:8c:
                    07:d3:31:0f:d7:58:4d:51:8b:b1:2e:47:e5:81:9e:
                    e1:bb:97:86:ed:99:32:97:3d:0e:97:83:3a:4d:e1:
                    7a:8a:8f:ce:09:5f:36:df:ac:95:a4:f0:74:38:31:
                    f6:8e:0b:2f:eb:f9:f1:3f:a2:45:7a:26:a5:b4:37:
                    f4:a0:22:f1:98:26:c4:05:87:e8:84:c9:13:c9:c0:
                    6b:0d:70:3e:b1:4e:24:af:85:da:23:e2:c8:0e:51:
                    78:5b:4e:6d:4d:58:62:34:3e:0f:c8:a3:75:19:89:
                    ee:b7:f1:82:f3:fc:e6:4b:4e:a2:eb:01:d9:60:69:
                    99:f2:85:86:e8:79:00:87:5d:b7:22:d2:8c:90:a2:
                    96:f6:d5:71:87:10:05:65:5d:f1:a8:7c:22:5a:ca:
                    7c:22:3d:4e:19:ff:14:32:77:29:41:f5:8c:3b:60:
                    40:cf:32:16:84:d6:bb:43:b2:d7:0a:fd:98:9e:32:
                    51:29:34:29:6b:be:ca:7c:21:92:ef:e1:0c:b8:36:
                    e1:95:02:c9:60:15:e8:89:04:18:6a:0f:fa:c7:36:
                    7d:03:0d:ac:8d:91:d3:0c:cb:fa:c6:32:1a:89:8a:
                    bd:51:1c:7e:b6:48:61:69:71:12:e1:d8:39:46:f3:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:08:3C:3E:5C:8C:97:19:24:FD:97:27:59:79:E8:B7:ED:E0:DD:D0
            X509v3 Authority Key Identifier:
                keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:84:89:63:7f:6d:ef:f4:bf:8b:71:d0:22:b2:ed:de:a3:82:
         f7:bf:4f:68:ba:99:7c:8c:7b:fa:2a:29:92:e3:be:74:77:12:
         41:3e:cf:93:ef:8b:ca:34:00:eb:72:7f:7d:1b:cb:a3:9c:ae:
         06:c8:3a:77:8a:b8:09:40:d5:32:c2:1b:08:12:9b:9b:d3:6a:
         1b:0d:95:44:f7:d4:2b:fb:4f:0f:44:c0:0c:3d:6f:e5:e9:14:
         8a:6a:d6:b4:94:7e:56:d7:a2:45:06:c3:21:08:fa:0a:db:a5:
         a1:53:87:06:3c:df:49:df:de:38:fc:23:ef:e1:78:1f:35:f2:
         86:54:20:55:00:66:d7:d9:de:e3:e0:8b:3c:a3:d2:ee:5b:97:
         73:43:2a:e2:27:a8:e0:de:41:3a:06:07:84:51:55:5b:35:b2:
         4e:51:71:33:1b:f8:20:68:93:ec:3d:0b:cc:b0:e0:30:f2:4f:
         9b:de:8d:c7:2a:51:7e:d4:69:dc:22:ad:c2:85:36:d2:67:b8:
         a3:e8:29:11:43:35:a9:5f:b6:3c:ae:02:07:6b:be:3f:1e:34:
         a9:dd:cb:1d:69:4e:f8:6b:20:da:38:39:58:34:ae:0b:05:11:
         28:4d:fb:07:c4:c1:c6:d7:e0:d6:c1:c9:47:b5:15:08:87:5b:
         a2:e6:06:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89dQ1jtvzdy96+N1cMJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjE4NThjZDM3ZmIzOGIyYWNmYTVjYjRlZjQzZTNjMzA4
ZDNkNjEwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
Eyg0YjA4M2MzZTVjOGM5NzE5MjRmZDk3Mjc1OTc5ZThiN2VkZTBkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuobuPEi3fcy8I5fAFowH0zEP11hN
UYuxLkflgZ7hu5eG7Zkylz0Ol4M6TeF6io/OCV8236yVpPB0ODH2jgsv6/nxP6JF
eialtDf0oCLxmCbEBYfohMkTycBrDXA+sU4kr4XaI+LIDlF4W05tTVhiND4PyKN1
GYnut/GC8/zmS06i6wHZYGmZ8oWG6HkAh123ItKMkKKW9tVxhxAFZV3xqHwiWsp8
Ij1OGf8UMncpQfWMO2BAzzIWhNa7Q7LXCv2YnjJRKTQpa77KfCGS7+EMuDbhlQLJ
YBXoiQQYag/6xzZ9Aw2sjZHTDMv6xjIaiYq9URx+tkhhaXES4dg5RvPmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsIPD5cjJcZJP2XJ1l56Lft4N3QMB8GA1UdIwQY
MBaAFInxhYzTf7OLKs+ly070PjwwjT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMt
M2ZlNGY3Y2JhZGFiLzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMtM2ZlNGY3Y2JhZGFi
LzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUISJY39t
7/S/i3HQIrLt3qOC979PaLqZfIx7+iopkuO+dHcSQT7Pk++LyjQA63J/fRvLo5yu
Bsg6d4q4CUDVMsIbCBKbm9NqGw2VRPfUK/tPD0TADD1v5ekUimrWtJR+VteiRQbD
IQj6CtuloVOHBjzfSd/eOPwj7+F4HzXyhlQgVQBm19ne4+CLPKPS7luXc0Mq4ieo
4N5BOgYHhFFVWzWyTlFxMxv4IGiT7D0LzLDgMPJPm96NxypRftRp3CKtwoU20me4
o+gpEUM1qV+2PK4CB2u+Px40qd3LHWlO+Gsg2jg5WDSuCwURKE37B8TBxtfg1sHJ
R7UVCIdbouYG3Q==
-----END CERTIFICATE-----