Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File:                     t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier:          2eNTAAv6mQhNOSpa7+SzsdVAY5Pp7AMMuwOVgpXdIVU=
Subject key identifier:   B5:40:7D:E1:2C:FB:C8:68:04:58:4F:85:33:E0:DC:43:2F:8E:7F:52
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer:       /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial:       01962F3D624ADA90D09D5B488095870BD419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number:          032F
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: Mq/wS6RLSNhKmsovTCZ3AKviJAeS1gNWAkJ4a3ozVb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:62:4a:da:90:d0:9d:5b:48:80:95:87:0b:d4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=b5407de12cfbc86804584f8533e0dc432f8e7f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:6e:52:69:27:7d:09:3d:ca:7e:b3:83:81:
                    9c:89:e2:08:ea:ec:a1:f1:a7:8c:a3:43:ac:2f:b2:
                    b9:ab:80:9e:72:07:e1:a4:d2:b2:50:c5:a2:eb:db:
                    fd:d7:45:76:88:6f:5f:3c:3e:e4:ce:ad:e9:fa:0d:
                    4e:18:bb:ba:a0:34:0d:0e:6f:d4:ef:3f:b3:9c:65:
                    8a:2c:b6:67:5e:dc:06:c2:66:32:f3:f6:ad:3c:60:
                    87:88:23:70:59:71:84:03:b5:6c:e9:ea:22:b3:08:
                    e9:cf:a5:d6:ab:b8:e8:64:13:e9:9f:ee:a4:04:8e:
                    87:4e:e6:f8:0d:71:06:49:30:16:6d:76:08:65:c0:
                    ca:07:a5:13:e3:ae:c0:81:c7:02:bb:a5:2c:fa:3a:
                    b2:a9:84:4b:91:59:c3:a7:f1:5f:0f:f3:f0:11:37:
                    59:3d:3a:c1:78:06:f3:de:b9:f8:a2:64:e6:7d:71:
                    e2:43:f3:17:0f:f4:84:57:a7:cd:c9:71:92:ab:15:
                    73:83:34:73:62:1c:b3:ac:f9:e7:f5:0f:01:fd:3b:
                    21:d2:0c:7f:d9:44:23:a1:ae:47:67:41:e3:90:cd:
                    5d:39:f5:db:2e:e1:5c:a4:da:9b:47:22:45:59:04:
                    38:de:6f:8f:db:cb:e8:6c:14:c7:ef:43:5e:4e:02:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:7D:E1:2C:FB:C8:68:04:58:4F:85:33:E0:DC:43:2F:8E:7F:52
            X509v3 Authority Key Identifier:
                keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:7a:9b:31:c8:90:28:0b:a1:7a:72:80:fc:9d:85:05:53:
         8c:68:07:0b:e6:40:08:56:9e:92:3b:bc:cd:e2:26:83:c7:cd:
         1d:55:78:b4:6f:84:03:1c:c9:28:9e:9f:70:c7:f5:ec:6c:28:
         e6:cd:71:5c:6f:74:18:85:33:92:0f:88:78:b0:d8:ea:34:3b:
         18:e9:54:e4:15:78:58:17:6a:5e:a9:9e:dd:5d:d5:12:45:0b:
         c1:f4:77:a5:95:ad:57:77:96:70:31:4b:76:66:0d:52:9b:15:
         b7:b8:05:70:64:15:40:55:47:dd:19:0f:9b:d6:03:10:f9:fc:
         b2:1f:5f:12:f4:e3:8c:9a:17:ba:b0:35:d4:aa:31:f3:84:ac:
         06:1d:21:4b:5b:d2:39:b5:1c:12:a1:62:ea:3d:61:5a:52:37:
         eb:72:8e:4c:19:e2:9f:a6:d7:aa:ac:0c:74:3f:b8:2f:68:de:
         8a:c9:96:1c:d2:17:6e:46:2b:2c:23:03:f6:71:03:6f:7c:05:
         e2:5f:77:d4:6c:a6:b9:d5:31:3a:bd:5f:36:3a:16:41:f0:34:
         43:88:d9:ed:78:52:e9:d2:8d:72:b5:68:93:c4:ad:1e:01:08:
         96:bb:26:8e:44:16:51:00:3e:d2:66:1d:be:50:1a:98:6b:a7:
         72:8e:13:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWJK2pDQnVtIgJWHC9QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzA4NzdmZTA3ZGY0OWEyMTY4MTRhZGU3MDFkMDg3YjEx
NjkzYjQwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
EyhiNTQwN2RlMTJjZmJjODY4MDQ1ODRmODUzM2UwZGM0MzJmOGU3ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpRuUmknfQk9yn6zg4GcieII6uyh
8aeMo0OsL7K5q4CecgfhpNKyUMWi69v910V2iG9fPD7kzq3p+g1OGLu6oDQNDm/U
7z+znGWKLLZnXtwGwmYy8/atPGCHiCNwWXGEA7Vs6eoiswjpz6XWq7joZBPpn+6k
BI6HTub4DXEGSTAWbXYIZcDKB6UT467AgccCu6Us+jqyqYRLkVnDp/FfD/PwETdZ
PTrBeAbz3rn4omTmfXHiQ/MXD/SEV6fNyXGSqxVzgzRzYhyzrPnn9Q8B/Tsh0gx/
2UQjoa5HZ0HjkM1dOfXbLuFcpNqbRyJFWQQ43m+P28vobBTH70NeTgLcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVAfeEs+8hoBFhPhTPg3EMvjn9SMB8GA1UdIwQY
MBaAFLdwh3/gffSaIWgUrecB0IexFpO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0Njkt
YzRhMGU5NzA2NTk3LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0NjktYzRhMGU5NzA2NTk3
LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau16mzHI
kCgLoXpygPydhQVTjGgHC+ZACFaekju8zeImg8fNHVV4tG+EAxzJKJ6fcMf17Gwo
5s1xXG90GIUzkg+IeLDY6jQ7GOlU5BV4WBdqXqme3V3VEkULwfR3pZWtV3eWcDFL
dmYNUpsVt7gFcGQVQFVH3RkPm9YDEPn8sh9fEvTjjJoXurA11Kox84SsBh0hS1vS
ObUcEqFi6j1hWlI363KOTBnin6bXqqwMdD+4L2jeismWHNIXbkYrLCMD9nEDb3wF
4l931GymudUxOr1fNjoWQfA0Q4jZ7XhS6dKNcrVok8StHgEIlrsmjkQWUQA+0mYd
vlAamGunco4T1A==
-----END CERTIFICATE-----