Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File:                     0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier:          3MgnB+27w2G8TxO7k+1H7bXhbJpxN3S5+nwgM24LxsA=
Subject key identifier:   11:C9:75:65:C9:B4:51:B9:1B:1D:B9:A1:21:C8:12:7B:C7:C9:D3:D7
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer:       /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial:       01962F06D60DBC7BC028D6B95612DE4866A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number:          0B94
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: fwkB/o6Xw4jTHgxRJWx5V9yGVoSul0xjHBG97B7ZEEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:0d:bc:7b:c0:28:d6:b9:56:12:de:48:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=11c97565c9b451b91b1db9a121c8127bc7c9d3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:46:f5:3b:23:87:d2:5f:73:28:2f:a2:24:
                    80:26:41:d7:af:d4:d6:13:66:f4:00:09:4f:20:55:
                    c8:e6:83:2d:a2:d6:fe:f9:1e:50:f6:11:53:bb:92:
                    29:c8:9d:ee:10:43:3d:b8:0b:b2:3f:e3:fc:f0:9e:
                    df:4f:1a:74:d2:2e:ab:6d:74:18:5d:19:e2:70:15:
                    9b:57:5e:3a:09:18:c4:bf:81:00:af:cf:d2:b6:fb:
                    ad:8f:b6:dd:4f:69:a9:14:fc:90:47:61:7b:1a:5e:
                    23:f2:9d:ce:e2:5f:91:a0:04:34:c2:2a:1c:f2:1a:
                    48:4e:de:c5:13:5f:e3:5b:9f:08:5e:f0:b3:38:c5:
                    de:62:a2:b7:6a:79:bc:e9:70:f0:8d:3a:9c:05:dc:
                    f1:85:b7:36:ee:55:ee:fb:98:a5:3c:82:90:da:b2:
                    ab:98:c3:21:a7:a9:e3:87:d6:1f:2b:b9:ed:46:5a:
                    8e:d5:f8:e1:a1:3c:9b:95:5d:1b:15:52:5c:d2:3b:
                    af:2c:83:6d:6a:80:80:a9:be:f2:eb:12:3c:9d:bc:
                    ce:68:e4:64:a6:f3:68:3c:a6:75:55:d4:a2:23:58:
                    31:86:20:7d:f5:12:e9:55:f8:56:6e:e8:5d:4c:71:
                    dc:dd:2c:8b:4e:4c:52:f1:56:c3:2a:54:8b:19:dc:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:75:65:C9:B4:51:B9:1B:1D:B9:A1:21:C8:12:7B:C7:C9:D3:D7
            X509v3 Authority Key Identifier:
                keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:6c:54:67:8c:c4:e0:f8:a7:c5:5e:e9:fa:b8:6e:f4:81:
         df:45:30:9c:b8:71:14:26:25:0e:6e:19:24:5f:e4:78:35:28:
         54:c8:5d:57:57:61:d5:2a:a1:76:4f:09:c2:27:3d:a7:df:fa:
         4b:b2:86:11:50:63:76:a3:7a:bc:31:b6:20:c7:e0:93:06:6a:
         47:b6:e4:5f:86:ae:42:0e:a1:dc:22:20:db:64:71:40:ce:eb:
         35:f5:88:b7:8e:fd:c0:71:83:91:18:a8:a2:7d:45:a4:04:4a:
         a0:08:5d:7f:34:58:6b:24:dc:4d:33:ea:0d:01:e0:50:03:a3:
         6b:7f:94:42:13:d8:02:bb:33:69:d9:dd:2c:bb:b5:b7:52:7e:
         6f:66:13:f7:72:d0:f4:d6:85:e9:81:b4:4e:2e:02:ef:d3:85:
         15:14:d5:42:fc:b3:51:77:a1:09:9b:1d:84:f4:1f:a6:67:5e:
         7a:36:3a:3d:48:72:6f:70:8d:de:ad:36:14:61:22:94:98:03:
         81:e2:f1:c2:49:38:24:d3:e8:35:2f:89:14:c8:f2:c5:bb:93:
         93:c4:8a:ad:bb:33:31:30:72:0b:6f:9f:d1:0d:b1:b4:fe:b8:
         3e:fd:e3:83:bc:34:d9:fd:34:9b:b6:46:03:41:b9:ce:36:ee:
         ec:fe:ac:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtYNvHvAKNa5VhLeSGalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGI0YTdkMWU2YWJmZmJjZGE3OGJmYzMzMTI1MGRkMTZi
ZTNkZTAwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
EygxMWM5NzU2NWM5YjQ1MWI5MWIxZGI5YTEyMWM4MTI3YmM3YzlkM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWhG9Tsjh9JfcygvoiSAJkHXr9TW
E2b0AAlPIFXI5oMtotb++R5Q9hFTu5IpyJ3uEEM9uAuyP+P88J7fTxp00i6rbXQY
XRnicBWbV146CRjEv4EAr8/Stvutj7bdT2mpFPyQR2F7Gl4j8p3O4l+RoAQ0wioc
8hpITt7FE1/jW58IXvCzOMXeYqK3anm86XDwjTqcBdzxhbc27lXu+5ilPIKQ2rKr
mMMhp6njh9YfK7ntRlqO1fjhoTyblV0bFVJc0juvLINtaoCAqb7y6xI8nbzOaORk
pvNoPKZ1VdSiI1gxhiB99RLpVfhWbuhdTHHc3SyLTkxS8VbDKlSLGdwcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHJdWXJtFG5Gx25oSHIEnvHydPXMB8GA1UdIwQY
MBaAFNHbSn0ear/7zaeL/DMSUN0Wvj3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjIt
Y2M3OGFmNGU4MDE2LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjItY2M3OGFmNGU4MDE2
LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKNsVGeM
xOD4p8Ve6fq4bvSB30UwnLhxFCYlDm4ZJF/keDUoVMhdV1dh1Sqhdk8Jwic9p9/6
S7KGEVBjdqN6vDG2IMfgkwZqR7bkX4auQg6h3CIg22RxQM7rNfWIt479wHGDkRio
on1FpARKoAhdfzRYayTcTTPqDQHgUAOja3+UQhPYArszadndLLu1t1J+b2YT93LQ
9NaF6YG0Ti4C79OFFRTVQvyzUXehCZsdhPQfpmdeejY6PUhyb3CN3q02FGEilJgD
geLxwkk4JNPoNS+JFMjyxbuTk8SKrbszMTByC2+f0Q2xtP64Pv3jg7w02f00m7ZG
A0G5zjbu7P6sGQ==
-----END CERTIFICATE-----