Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File:                     lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier:          yBW0LnugqUHaiMX/PO3bMfCmEmXJMUbAO3efKnpl9Y0=
Subject key identifier:   D1:C2:30:7B:6A:94:D3:F3:E5:80:BA:52:81:88:C6:DE:DA:A1:24:A0
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer:       /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial:       01962E9897A4DEBA8D3EC56836C6761C1565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number:          0376
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: DiydzDvc+9t6YcZr43nNaAsxp77eHGt9zuZZ294C2qA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:97:a4:de:ba:8d:3e:c5:68:36:c6:76:1c:15:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=d1c2307b6a94d3f3e580ba528188c6dedaa124a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:1b:67:1c:51:a9:8d:51:8f:b8:99:67:5f:
                    16:97:8b:92:04:15:f1:c8:f4:66:41:08:da:7c:60:
                    af:17:94:fc:7e:fe:5d:63:0c:ea:4d:f2:84:13:0f:
                    7b:9b:91:0f:22:9a:32:ab:75:ed:2a:96:54:da:6c:
                    b0:67:b9:ed:cd:7b:f6:52:29:70:89:bc:8e:59:ac:
                    78:ff:47:a7:ab:3b:3d:3e:2a:55:19:5d:e9:81:e4:
                    4e:2b:44:dc:ef:6c:96:91:94:fe:2e:18:a7:cd:11:
                    51:83:62:4a:0b:d6:80:b4:18:6c:f4:26:47:72:75:
                    a1:cf:0f:10:52:4c:11:72:ea:23:89:80:cf:21:75:
                    fb:7e:bd:9e:6e:6d:99:b6:b1:29:fb:ed:b8:dd:c6:
                    d0:de:10:9c:19:a7:a3:6d:b5:56:1f:ac:59:dd:67:
                    de:e7:7d:ff:75:0d:68:09:49:8c:aa:99:f2:9e:64:
                    c7:37:a3:d8:e4:c9:60:da:78:8e:71:91:0f:40:fe:
                    01:0c:63:5e:3b:d3:45:f5:d7:be:97:5a:6f:be:d5:
                    0c:a5:3a:53:b8:75:ce:51:6b:c1:79:93:93:6e:01:
                    fd:df:6d:18:d6:4f:b6:a4:0e:8f:01:c1:e5:f7:73:
                    e4:44:16:55:c9:94:93:60:ff:5f:e4:27:ee:8e:8f:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C2:30:7B:6A:94:D3:F3:E5:80:BA:52:81:88:C6:DE:DA:A1:24:A0
            X509v3 Authority Key Identifier:
                keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:9f:ff:9f:ce:37:cd:3d:bd:98:60:95:c4:55:5b:1f:2a:
         ca:09:5f:e9:78:bc:a0:15:26:9c:cf:dd:54:57:4f:5f:45:3c:
         c3:90:02:8a:4c:89:47:8a:e7:c3:5e:44:d1:92:57:0c:03:02:
         c4:66:9d:c2:6e:21:19:ef:55:6e:1e:c5:1a:96:89:ea:7c:dc:
         e0:d5:a7:1a:24:55:b5:56:d5:d4:e1:e4:e9:84:d5:c4:a6:89:
         64:4d:6a:2f:eb:bb:66:5a:6e:a8:8f:26:cb:d0:e5:4f:ad:aa:
         c4:d2:0e:0e:80:76:76:b5:ee:4e:6f:0c:16:c5:af:c0:e6:bc:
         ae:0c:8c:e4:ed:e0:cb:89:4f:5b:0c:99:2c:1b:b9:96:07:bd:
         65:a4:83:68:df:e4:8b:ee:15:de:3b:ae:af:a9:5e:e1:5a:49:
         f2:cb:d7:df:77:37:b6:94:50:d2:e5:0a:46:54:63:dc:68:4d:
         35:f2:f6:99:21:61:20:dc:7f:82:09:72:ca:8d:71:73:cd:97:
         41:57:bd:d4:96:61:5f:5b:9e:ac:b3:78:5a:c9:34:fd:86:c5:
         68:89:f5:ba:87:67:32:31:31:e6:2e:24:04:15:8d:0e:0f:cd:
         86:2f:0d:e9:f2:66:98:90:b7:fa:fd:99:8f:b5:2a:81:cc:02:
         45:6c:50:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJek3rqNPsVoNsZ2HBVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTBiMWM0ZWEyODQyZGRmOTkyOWVhOGE2NTQ1YjgxN2Ey
ODc2ODAwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
EyhkMWMyMzA3YjZhOTRkM2YzZTU4MGJhNTI4MTg4YzZkZWRhYTEyNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58AbZxxRqY1Rj7iZZ18Wl4uSBBXx
yPRmQQjafGCvF5T8fv5dYwzqTfKEEw97m5EPIpoyq3XtKpZU2mywZ7ntzXv2Uilw
ibyOWax4/0enqzs9PipVGV3pgeROK0Tc72yWkZT+LhinzRFRg2JKC9aAtBhs9CZH
cnWhzw8QUkwRcuojiYDPIXX7fr2ebm2ZtrEp++243cbQ3hCcGaejbbVWH6xZ3Wfe
533/dQ1oCUmMqpnynmTHN6PY5Mlg2niOcZEPQP4BDGNeO9NF9de+l1pvvtUMpTpT
uHXOUWvBeZOTbgH9320Y1k+2pA6PAcHl93PkRBZVyZSTYP9f5Cfujo/5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHCMHtqlNPz5YC6UoGIxt7aoSSgMB8GA1UdIwQY
MBaAFJSQscTqKELd+ZKeqKZUW4F6KHaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUt
MDU2NmY1MTI1MmE5LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lZGRkYWEtYzMxYS00MDI2LThmODUtMDU2NmY1MTI1MmE5
LzEvbEpDeHhPb29RdDM1a3A2b3BsUmJnWG9vZG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApqf/5/O
N809vZhglcRVWx8qyglf6Xi8oBUmnM/dVFdPX0U8w5ACikyJR4rnw15E0ZJXDAMC
xGadwm4hGe9Vbh7FGpaJ6nzc4NWnGiRVtVbV1OHk6YTVxKaJZE1qL+u7ZlpuqI8m
y9DlT62qxNIODoB2drXuTm8MFsWvwOa8rgyM5O3gy4lPWwyZLBu5lge9ZaSDaN/k
i+4V3juur6le4VpJ8svX33c3tpRQ0uUKRlRj3GhNNfL2mSFhINx/gglyyo1xc82X
QVe91JZhX1uerLN4Wsk0/YbFaIn1uodnMjEx5i4kBBWNDg/Nhi8N6fJmmJC3+v2Z
j7UqgcwCRWxQkw==
-----END CERTIFICATE-----