Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File:                     L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier:          uibU6h3fNA+rGA0eHNJn2vN0KlOWx8pDpoQpluIwssk=
Subject key identifier:   8B:49:8A:93:D8:33:0A:A4:A5:D7:8D:13:C4:3B:AA:4F:31:4F:65:CE
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer:       /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial:       01962F0721A0FFD67ACC4C1139FD4C89595B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: 7FuXaakqWorfYFaTr2VFGEAaudmiQgcFnrVamkNDkkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:a0:ff:d6:7a:cc:4c:11:39:fd:4c:89:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=8b498a93d8330aa4a5d78d13c43baa4f314f65ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:53:2f:7a:8b:52:20:a9:57:5e:5e:c4:93:
                    a3:78:b2:6e:d3:1c:c9:cb:5b:bc:b4:ad:2d:74:f2:
                    6e:43:eb:2c:a9:5c:5a:95:0a:e4:98:ee:01:85:6e:
                    2f:7a:4b:44:30:ff:74:4b:e4:6d:b3:64:7c:61:34:
                    bd:06:a4:0f:0e:d3:c1:ba:2e:8a:a7:df:27:db:e5:
                    65:03:44:db:01:82:9f:40:19:40:e9:84:43:8c:ac:
                    5c:1b:43:2c:c3:c0:fd:44:a7:f8:5d:f5:59:bd:7c:
                    2d:eb:8e:78:bd:0b:50:2c:cf:35:b0:01:f6:69:c5:
                    cb:d3:11:a3:7e:0f:1b:9b:f6:ab:8d:75:6f:9c:f8:
                    35:a3:02:1e:00:3b:3f:f0:7a:4b:0e:0d:19:6d:60:
                    5b:11:3a:9c:e9:c4:26:3c:1c:30:28:d5:7e:f1:36:
                    99:4b:ab:50:12:b8:f2:ec:69:46:16:15:5b:4a:17:
                    7e:ec:ee:11:ec:1b:cd:33:53:e3:44:b8:11:ee:a9:
                    5c:a2:a7:cc:e6:1f:7c:51:17:04:df:d6:76:29:e8:
                    04:0f:9e:78:37:12:a0:05:cc:a7:fd:0e:03:56:7e:
                    c9:f2:bc:14:37:db:38:0e:8c:27:d1:fe:44:af:21:
                    1d:f0:ca:a1:06:a1:1c:33:01:c4:5f:84:43:13:51:
                    ae:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:8A:93:D8:33:0A:A4:A5:D7:8D:13:C4:3B:AA:4F:31:4F:65:CE
            X509v3 Authority Key Identifier:
                keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:79:10:ce:45:46:e8:02:5e:de:aa:7e:86:c1:13:79:ad:
         1b:91:b8:be:0b:ab:1e:f7:34:dd:69:c2:f0:ff:7b:32:cd:55:
         9b:86:d7:07:6e:d7:37:f9:22:6b:92:cf:1e:66:c2:be:8d:8e:
         92:41:61:b4:09:54:0f:91:b5:a6:36:71:8f:a9:84:e6:f3:55:
         f7:49:c4:6c:6d:97:31:8c:9d:41:36:81:1c:49:df:7a:73:e3:
         fd:1c:a0:4f:12:c0:54:27:d4:43:a2:66:08:de:64:35:24:49:
         37:51:14:ae:c5:05:68:6a:f8:b5:ab:de:be:b0:65:62:04:be:
         24:ff:d2:a8:af:e2:63:54:98:94:86:30:7f:5e:25:de:99:0b:
         f5:13:7c:b0:f5:6b:96:55:ad:24:75:85:29:ed:e4:58:b2:17:
         32:72:ca:3b:9f:b4:33:ff:90:9d:cd:d1:a7:c2:49:c7:1a:97:
         59:f9:4f:ac:c6:88:22:7a:43:74:34:8c:33:c3:24:d8:6e:01:
         cb:e8:d6:3e:ac:25:25:69:3a:2c:1a:fc:50:03:1f:89:99:cd:
         27:e9:b0:13:b4:d3:99:c1:a9:bf:fd:68:27:4a:66:2c:56:53:
         09:f6:64:20:48:06:ae:c3:45:2e:73:e8:3c:45:66:cf:17:31:
         55:05:6f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByGg/9Z6zEwROf1MiVlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTE0MzRlZTE2YzYxMzM0ZWMyNzBkZjU2OGM3N2EwYjVk
ZTA1MmEwHhcNMjUwNDEzMTIwMTU4WhcNMjUwNDE0MTIwMTU4WjAzMTEwLwYDVQQD
Eyg4YjQ5OGE5M2Q4MzMwYWE0YTVkNzhkMTNjNDNiYWE0ZjMxNGY2NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrpTL3qLUiCpV15exJOjeLJu0xzJ
y1u8tK0tdPJuQ+ssqVxalQrkmO4BhW4vektEMP90S+Rts2R8YTS9BqQPDtPBui6K
p98n2+VlA0TbAYKfQBlA6YRDjKxcG0Msw8D9RKf4XfVZvXwt6454vQtQLM81sAH2
acXL0xGjfg8bm/arjXVvnPg1owIeADs/8HpLDg0ZbWBbETqc6cQmPBwwKNV+8TaZ
S6tQErjy7GlGFhVbShd+7O4R7BvNM1PjRLgR7qlcoqfM5h98URcE39Z2KegED554
NxKgBcyn/Q4DVn7J8rwUN9s4Down0f5EryEd8MqhBqEcMwHEX4RDE1GuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItJipPYMwqkpdeNE8Q7qk8xT2XOMB8GA1UdIwQY
MBaAFC+RQ07hbGEzTsJw31aMd6C13gUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEt
NWZkYjMyMjhmZTFmLzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEtNWZkYjMyMjhmZTFm
LzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbZ5EM5F
RugCXt6qfobBE3mtG5G4vgurHvc03WnC8P97Ms1Vm4bXB27XN/kia5LPHmbCvo2O
kkFhtAlUD5G1pjZxj6mE5vNV90nEbG2XMYydQTaBHEnfenPj/RygTxLAVCfUQ6Jm
CN5kNSRJN1EUrsUFaGr4tavevrBlYgS+JP/SqK/iY1SYlIYwf14l3pkL9RN8sPVr
llWtJHWFKe3kWLIXMnLKO5+0M/+Qnc3Rp8JJxxqXWflPrMaIInpDdDSMM8Mk2G4B
y+jWPqwlJWk6LBr8UAMfiZnNJ+mwE7TTmcGpv/1oJ0pmLFZTCfZkIEgGrsNFLnPo
PEVmzxcxVQVvaw==
-----END CERTIFICATE-----