Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File:                     FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier:          subLffe2HQtiPtY/3kXs7haBLh/S05kwUqtGGPzMXno=
Subject key identifier:   A7:72:91:12:13:77:28:81:B9:EE:36:09:A8:EC:F6:D9:8F:CF:C3:24
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer:       /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial:       01962F3D34813E33B0318A900CBCEFB1C05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number:          0E4A
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: BiRaZEMKPAQArUdpkmh8eHvqvB+6FbL3Q/PBhAqSSu0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:34:81:3e:33:b0:31:8a:90:0c:bc:ef:b1:c0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=a772911213772881b9ee3609a8ecf6d98fcfc324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:17:28:11:8b:9a:16:9f:d6:b1:08:69:5b:
                    6f:bc:a7:ad:10:52:5e:dd:c6:42:28:9e:38:b2:41:
                    fc:3e:55:df:30:6a:29:a0:36:73:4f:bb:90:35:6b:
                    62:03:11:e9:c3:f1:0c:ce:e2:32:35:96:e6:aa:73:
                    29:2b:5b:12:18:6b:f5:83:bb:90:01:78:04:7a:05:
                    5d:68:a8:2d:fe:6c:f6:7c:10:c9:77:ee:16:f4:40:
                    e3:99:78:d5:6f:69:e3:42:43:e0:78:09:c7:7e:66:
                    0b:60:25:d0:5c:97:7b:d6:ea:55:b1:92:6d:97:e2:
                    02:46:7b:df:62:cc:a8:0e:27:de:3b:e2:25:d9:88:
                    c7:70:18:ce:9b:93:da:fd:e2:cd:5a:03:f3:7d:41:
                    96:2b:21:41:a3:1d:16:a7:82:d0:09:58:5b:5d:bc:
                    36:39:8e:83:d9:c0:96:bc:f3:d5:4f:37:20:05:f8:
                    79:9c:b0:51:04:76:44:33:b7:e8:49:83:ce:49:42:
                    51:f3:e5:cb:c9:4a:30:d1:c1:9f:84:88:1a:98:76:
                    c3:6e:1b:64:1e:82:23:4c:79:6d:52:f0:77:b8:f1:
                    5e:76:8e:2a:91:0a:1b:15:56:77:35:d9:e4:7f:11:
                    ae:ad:be:1d:48:1e:30:44:3d:28:88:a2:39:a1:65:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:91:12:13:77:28:81:B9:EE:36:09:A8:EC:F6:D9:8F:CF:C3:24
            X509v3 Authority Key Identifier:
                keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:bd:2b:f4:fc:51:cc:44:45:f5:51:41:64:d7:6d:5c:af:
         49:cb:1f:aa:32:48:3c:c7:8c:be:a2:81:0a:62:ef:94:8c:37:
         1d:09:60:95:fc:3d:46:18:e3:8a:9b:13:f1:48:d9:63:d5:51:
         d3:5a:82:78:9a:0d:a3:4c:8d:2a:88:bc:fc:fa:d1:75:d6:05:
         2b:94:4f:f0:21:26:08:22:3d:f1:9d:ca:1c:08:ff:e3:32:b0:
         44:75:5d:7f:6a:53:91:fa:d5:44:db:72:da:c6:8f:65:38:65:
         de:bb:6c:4b:f5:e3:f0:1f:8e:86:ca:97:80:4f:10:99:65:61:
         59:fe:d8:9c:4c:d6:97:d2:ff:c0:9b:a9:df:34:06:93:a9:a0:
         71:0a:f5:15:93:72:ae:9b:5f:bd:e7:8f:86:68:09:2e:ec:e9:
         a6:63:af:45:e8:9c:da:e0:6a:34:25:6b:58:27:d2:2e:7d:4b:
         a8:e7:07:5c:fb:dd:22:1a:50:2f:b5:04:27:14:08:c8:11:49:
         ae:01:ee:bc:b0:0e:1a:30:ee:f7:4b:1d:1d:09:b7:11:a1:01:
         00:1c:e4:de:14:af:88:d1:67:7d:ac:c3:2c:33:9a:39:15:90:
         00:0f:a2:5e:70:b7:9e:f1:19:58:ca:06:05:bc:8c:e9:b8:7e:
         cf:16:42:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTSBPjOwMYqQDLzvscBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MjhmYzg3MTdlOTE5YWUwNzI2MWFhZTI4ZDhjODQ1NjRj
OGE3MTIwHhcNMjUwNDEzMTMwMTAyWhcNMjUwNDE0MTMwMTAyWjAzMTEwLwYDVQQD
EyhhNzcyOTExMjEzNzcyODgxYjllZTM2MDlhOGVjZjZkOThmY2ZjMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+AXKBGLmhaf1rEIaVtvvKetEFJe
3cZCKJ44skH8PlXfMGopoDZzT7uQNWtiAxHpw/EMzuIyNZbmqnMpK1sSGGv1g7uQ
AXgEegVdaKgt/mz2fBDJd+4W9EDjmXjVb2njQkPgeAnHfmYLYCXQXJd71upVsZJt
l+ICRnvfYsyoDifeO+Il2YjHcBjOm5Pa/eLNWgPzfUGWKyFBox0Wp4LQCVhbXbw2
OY6D2cCWvPPVTzcgBfh5nLBRBHZEM7foSYPOSUJR8+XLyUow0cGfhIgamHbDbhtk
HoIjTHltUvB3uPFedo4qkQobFVZ3NdnkfxGurb4dSB4wRD0oiKI5oWXWaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdykRITdyiBue42Cajs9tmPz8MkMB8GA1UdIwQY
MBaAFBUo/IcX6RmuByYarijYyEVkyKcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTkt
NjcxMDcyZjkxYTEzLzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTktNjcxMDcyZjkxYTEz
LzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHq9K/T8
UcxERfVRQWTXbVyvScsfqjJIPMeMvqKBCmLvlIw3HQlglfw9RhjjipsT8UjZY9VR
01qCeJoNo0yNKoi8/PrRddYFK5RP8CEmCCI98Z3KHAj/4zKwRHVdf2pTkfrVRNty
2saPZThl3rtsS/Xj8B+OhsqXgE8QmWVhWf7YnEzWl9L/wJup3zQGk6mgcQr1FZNy
rptfveePhmgJLuzppmOvReic2uBqNCVrWCfSLn1LqOcHXPvdIhpQL7UEJxQIyBFJ
rgHuvLAOGjDu90sdHQm3EaEBABzk3hSviNFnfazDLDOaORWQAA+iXnC3nvEZWMoG
BbyM6bh+zxZCLw==
-----END CERTIFICATE-----