Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File:                     ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier:          kNgC3ZOUy2Uu9dtT+M34SItvCcBFpw7gqXdcJIGfi9Y=
Subject key identifier:   98:37:90:1A:FC:6D:59:41:8D:C4:77:36:3D:5B:43:18:F5:72:38:D6
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer:       /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial:       01962E998C43D0788716B6DD4B333F03BF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: dD7/BWdKZ4WqIORRLLV0vn4nOgTfcJkEjdd3u/o4BH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8c:43:d0:78:87:16:b6:dd:4b:33:3f:03:bf:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=9837901afc6d59418dc477363d5b4318f57238d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:1a:c9:29:87:2e:69:e7:51:1f:7b:22:38:
                    c4:2d:7d:1c:cd:b3:18:d5:ff:44:d8:59:0e:dc:2d:
                    9a:50:1c:02:da:39:c2:a3:b9:2f:46:6d:4d:8f:9d:
                    6b:f2:c0:17:96:fb:11:c9:4f:c6:38:f9:bd:a1:38:
                    f6:8a:7d:3a:b7:e2:c8:3c:07:03:e5:19:c0:08:fc:
                    29:e3:72:12:8d:ec:59:79:b1:0b:07:50:86:ee:e6:
                    9d:92:c1:c9:7f:fb:1f:e3:b5:e4:19:95:1e:9d:79:
                    22:bb:fb:5c:86:b7:e4:2c:15:6f:44:bb:42:31:93:
                    5c:29:cb:5f:04:2d:ef:df:87:70:6c:aa:5d:fa:c9:
                    7d:37:d9:30:03:e4:a2:3f:da:87:a1:79:0b:0b:63:
                    6e:d3:4f:cd:25:31:6d:d5:0d:65:82:0b:45:01:bb:
                    97:58:c6:69:fe:6a:ed:0c:5a:bb:ae:bd:9c:a7:fd:
                    66:a9:5e:6e:f5:bb:db:b5:10:f9:e0:91:17:d7:62:
                    af:59:26:ae:1c:f0:5d:1c:7b:1d:d6:40:f5:aa:09:
                    d4:fd:e4:a4:65:7d:0f:76:2b:a6:19:3a:32:4b:a4:
                    61:1e:39:e8:f6:9d:78:50:c3:b4:68:c8:b9:24:aa:
                    ff:94:8e:74:c3:1e:e1:5f:4f:dd:4a:fc:f2:f5:ec:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:90:1A:FC:6D:59:41:8D:C4:77:36:3D:5B:43:18:F5:72:38:D6
            X509v3 Authority Key Identifier:
                keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:26:06:d4:a9:37:e5:96:d1:a4:ad:d4:8d:06:06:1b:4d:
         b2:c0:33:dd:4a:bd:5e:2b:b4:98:9d:6f:3d:5e:5b:25:c3:46:
         70:08:d7:74:5a:1b:75:ae:92:01:3a:c7:34:cc:23:28:4f:7e:
         3c:1f:c2:71:1c:12:0c:66:9b:fc:5f:de:ca:e2:0a:a5:57:ac:
         98:0e:b5:74:8f:b9:6e:d2:db:86:6e:bf:28:70:7f:be:99:44:
         57:ea:15:7b:b6:a4:0e:a6:7f:c8:c9:3b:0a:ba:25:72:5b:89:
         ee:b2:fb:17:63:c5:30:a7:9d:21:67:36:49:c1:41:28:af:32:
         0f:84:3e:30:f7:e7:1a:1b:a3:57:5b:55:0f:89:b0:98:67:65:
         34:86:ce:99:66:e2:9e:e2:51:16:73:17:e7:41:58:d2:73:a2:
         ca:b7:71:f6:6c:a6:6c:d3:77:60:f8:bb:ee:0e:d5:d2:48:4c:
         b5:5c:d6:cf:dd:6f:a4:cb:03:72:a2:6d:02:ee:04:62:eb:16:
         17:d7:bf:c3:46:bc:38:f9:de:ea:28:f1:20:9b:d1:30:7e:ff:
         62:a1:a2:33:b8:ab:da:1b:f9:14:91:ca:bb:b3:d8:5a:54:be:
         6d:a4:73:a7:bc:a8:6e:5f:a5:96:97:bf:e8:4a:30:c1:66:a1:
         1a:71:17:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYxD0HiHFrbdSzM/A7+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMThhMzMyOGM0NGYwOGY2NTI0M2M2MWUwNjRmZWZlZDY0
MTNjMDQwHhcNMjUwNDEzMTAwMjE2WhcNMjUwNDE0MTAwMjE2WjAzMTEwLwYDVQQD
Eyg5ODM3OTAxYWZjNmQ1OTQxOGRjNDc3MzYzZDViNDMxOGY1NzIzOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD4aySmHLmnnUR97IjjELX0czbMY
1f9E2FkO3C2aUBwC2jnCo7kvRm1Nj51r8sAXlvsRyU/GOPm9oTj2in06t+LIPAcD
5RnACPwp43ISjexZebELB1CG7uadksHJf/sf47XkGZUenXkiu/tchrfkLBVvRLtC
MZNcKctfBC3v34dwbKpd+sl9N9kwA+SiP9qHoXkLC2Nu00/NJTFt1Q1lggtFAbuX
WMZp/mrtDFq7rr2cp/1mqV5u9bvbtRD54JEX12KvWSauHPBdHHsd1kD1qgnU/eSk
ZX0PdiumGToyS6RhHjno9p14UMO0aMi5JKr/lI50wx7hX0/dSvzy9ewu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg3kBr8bVlBjcR3Nj1bQxj1cjjWMB8GA1UdIwQY
MBaAFAAYozKMRPCPZSQ8YeBk/v7WQTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYt
NzIwZTUxNTM5MTZjLzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYtNzIwZTUxNTM5MTZj
LzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyomBtSp
N+WW0aSt1I0GBhtNssAz3Uq9Xiu0mJ1vPV5bJcNGcAjXdFobda6SATrHNMwjKE9+
PB/CcRwSDGab/F/eyuIKpVesmA61dI+5btLbhm6/KHB/vplEV+oVe7akDqZ/yMk7
CrolcluJ7rL7F2PFMKedIWc2ScFBKK8yD4Q+MPfnGhujV1tVD4mwmGdlNIbOmWbi
nuJRFnMX50FY0nOiyrdx9mymbNN3YPi77g7V0khMtVzWz91vpMsDcqJtAu4EYusW
F9e/w0a8OPne6ijxIJvRMH7/YqGiM7ir2hv5FJHKu7PYWlS+baRzp7yobl+llpe/
6EowwWahGnEXlw==
-----END CERTIFICATE-----