Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File:                     savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier:          Z9XMSOWUPrOtT/RXNu9zTelOFSSjFcONJpycr3qMs2o=
Subject key identifier:   E5:61:7B:A1:68:7D:AE:C4:39:71:92:0D:D6:E9:B7:F1:69:8C:15:20
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer:       /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial:       01962DF39CEA89F6FCBCCB7D1298FC9433BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number:          02C0
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: ZA02NGan1ZHKqElN7mCGeR+3eLCXe6WHMyI6R+jKlZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:ea:89:f6:fc:bc:cb:7d:12:98:fc:94:33:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=e5617ba1687daec43971920dd6e9b7f1698c1520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:12:fe:2c:c0:b6:db:fe:88:f3:8f:c6:1e:
                    9d:37:69:d8:82:4c:41:84:d0:00:22:87:e8:a9:c2:
                    2f:15:f8:9d:46:75:93:e9:e5:2d:7a:f9:28:55:44:
                    ac:2d:7e:6e:be:a4:88:2f:77:e8:02:b4:79:df:fe:
                    8a:0f:94:da:62:bb:27:82:8e:8f:d6:7b:89:fb:54:
                    0e:ea:e3:08:8f:b2:39:7e:62:5d:27:0a:98:f2:fb:
                    fd:a8:0f:25:c8:af:cd:22:93:b7:d1:90:76:ea:34:
                    74:12:61:8e:cc:f8:d3:8c:a4:5a:4d:8a:f7:97:da:
                    6e:84:26:bb:30:42:0b:d1:68:ec:81:74:ee:6f:f8:
                    47:f8:d1:cf:0e:94:5f:d9:47:7a:93:30:ea:c6:30:
                    f6:b2:bf:af:37:1c:1a:44:7c:40:eb:fd:49:ba:e6:
                    50:14:37:5d:be:95:98:fd:23:f1:0e:89:07:d1:96:
                    03:34:5c:7b:89:14:d3:e0:ac:ce:af:9f:5b:53:c3:
                    0f:11:9e:00:1a:5b:c5:29:5a:35:b6:11:c3:3b:81:
                    ee:50:59:f0:e6:c1:9f:d0:74:ad:54:d4:c5:41:c2:
                    00:81:fc:2f:71:bf:e6:48:ef:b3:f5:e5:01:03:6e:
                    ad:29:14:87:11:33:29:02:2c:04:6f:2c:8f:7e:f7:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:61:7B:A1:68:7D:AE:C4:39:71:92:0D:D6:E9:B7:F1:69:8C:15:20
            X509v3 Authority Key Identifier:
                keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:36:dd:4a:4d:8b:db:38:00:8c:d1:07:e0:96:80:1f:c1:
         6c:c9:1e:83:30:ad:d2:d8:86:e6:25:3d:ad:49:e0:d8:d4:41:
         9b:38:e0:94:3a:36:5a:81:fa:9e:55:c9:3b:58:0c:b8:28:03:
         37:a4:a0:8b:33:9f:72:4d:1f:a6:f0:51:08:ec:83:6d:84:c9:
         36:53:97:f4:78:f2:7d:da:ab:0e:68:43:23:6a:b5:f4:2b:6c:
         95:63:ec:33:91:ba:97:44:53:f5:fb:55:33:11:d4:8c:ad:06:
         6e:2e:bf:cd:32:a7:3a:af:c1:80:a7:55:41:fa:5f:b3:03:b9:
         91:6b:a9:68:76:cd:d4:60:4b:e9:8d:25:73:02:67:c1:e7:3c:
         21:f1:94:63:a9:e7:05:1e:df:f2:01:9b:e4:b3:56:dc:1d:ce:
         53:76:f4:5b:4c:8c:14:54:4e:14:f5:1e:9f:c3:99:d0:ad:ef:
         50:6c:18:94:0a:d8:98:a0:fc:b0:37:e1:8c:2b:2b:5e:cb:28:
         0d:2e:67:e9:e5:60:14:96:28:d0:10:3c:fa:a4:a2:9c:ba:b1:
         c8:2d:4b:61:22:aa:6d:98:bd:62:6c:e1:f3:33:19:8a:16:78:
         14:b1:1e:35:d0:28:6f:95:4b:04:bf:a4:78:d8:2b:f5:05:b7:
         90:e5:8d:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85zqifb8vMt9Epj8lDO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWJlNzNmZmRhZDZmODYyYjBiZGQ4OTRkNDQzMjdjMmM5
NGE3ZDUwHhcNMjUwNDEzMDcwMTAyWhcNMjUwNDE0MDcwMTAyWjAzMTEwLwYDVQQD
EyhlNTYxN2JhMTY4N2RhZWM0Mzk3MTkyMGRkNmU5YjdmMTY5OGMxNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1kS/izAttv+iPOPxh6dN2nYgkxB
hNAAIofoqcIvFfidRnWT6eUtevkoVUSsLX5uvqSIL3foArR53/6KD5TaYrsngo6P
1nuJ+1QO6uMIj7I5fmJdJwqY8vv9qA8lyK/NIpO30ZB26jR0EmGOzPjTjKRaTYr3
l9puhCa7MEIL0WjsgXTub/hH+NHPDpRf2Ud6kzDqxjD2sr+vNxwaRHxA6/1JuuZQ
FDddvpWY/SPxDokH0ZYDNFx7iRTT4KzOr59bU8MPEZ4AGlvFKVo1thHDO4HuUFnw
5sGf0HStVNTFQcIAgfwvcb/mSO+z9eUBA26tKRSHETMpAiwEbyyPfvc2EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVhe6Fofa7EOXGSDdbpt/FpjBUgMB8GA1UdIwQY
MBaAFLGr5z/9rW+GKwvdiU1EMnwslKfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYt
ZTkxOWMzN2U0ZWJjLzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MTliMDEtN2EyMC00YzAwLTg2YWYtZTkxOWMzN2U0ZWJj
LzEvc2F2blBfMnRiNFlyQzkySlRVUXlmQ3lVcDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOw23UpN
i9s4AIzRB+CWgB/BbMkegzCt0tiG5iU9rUng2NRBmzjglDo2WoH6nlXJO1gMuCgD
N6SgizOfck0fpvBRCOyDbYTJNlOX9HjyfdqrDmhDI2q19CtslWPsM5G6l0RT9ftV
MxHUjK0Gbi6/zTKnOq/BgKdVQfpfswO5kWupaHbN1GBL6Y0lcwJnwec8IfGUY6nn
BR7f8gGb5LNW3B3OU3b0W0yMFFROFPUen8OZ0K3vUGwYlArYmKD8sDfhjCsrXsso
DS5n6eVgFJYo0BA8+qSinLqxyC1LYSKqbZi9Ymzh8zMZihZ4FLEeNdAob5VLBL+k
eNgr9QW3kOWNnw==
-----END CERTIFICATE-----