Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
File:                     27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json)
Hash identifier:          ik4ekhT3rogTjET8dHpl2l5s8OHaJepQplvJyTv4ing=
Subject key identifier:   82:13:46:B5:48:DE:45:09:51:58:9F:F8:C1:27:AE:F5:F7:58:FF:69
Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6
Certificate issuer:       /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
Certificate serial:       01962DF425F77F4021496235AA894BC36773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft
Manifest number:          0654
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: RtAy/4IVeHhzNxzz7lWJascon6NpscMDKzcfCTD34I4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:f7:7f:40:21:49:62:35:aa:89:4b:c3:67:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=821346b548de450951589ff8c127aef5f758ff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:b9:73:0d:70:16:1e:66:45:2e:f9:f7:28:
                    f9:7a:2b:46:5b:70:65:00:d6:5c:55:d1:a6:c4:62:
                    ac:08:cd:cb:88:56:c9:46:6b:1d:c7:6c:fc:ab:67:
                    06:93:83:52:54:2a:05:d8:7e:d9:52:45:1c:ba:8a:
                    e0:05:ed:28:4c:41:3f:01:e7:2d:50:63:bc:f0:e0:
                    d7:26:8f:5b:84:d5:f8:46:50:ec:0d:72:73:b3:41:
                    0f:42:1f:48:e8:dc:27:a7:04:d0:0f:eb:3e:b6:31:
                    bd:77:a1:23:86:ee:d1:15:66:b9:95:d8:7c:4d:fe:
                    d8:1b:4e:c4:9b:ce:4b:ea:d2:54:b2:c1:55:4d:ef:
                    5f:cf:e8:65:26:e9:e2:f3:d5:47:3e:18:81:37:35:
                    f0:89:64:3a:02:d8:27:b0:9a:00:1e:66:87:9e:95:
                    af:04:2f:5e:53:f4:a0:b0:6e:a6:c7:cb:79:27:33:
                    32:30:ea:e6:8f:b3:ab:da:eb:e1:de:f3:f9:ea:71:
                    8b:0c:1d:60:6b:d2:f9:38:6b:4f:46:54:70:ab:3f:
                    8d:38:cf:a3:64:72:55:b9:b1:f6:97:61:58:6b:11:
                    e1:ad:2c:51:34:d8:a9:26:2f:e7:47:9d:b4:65:34:
                    56:96:49:16:63:82:ff:e6:6c:f6:99:79:62:b6:c5:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:13:46:B5:48:DE:45:09:51:58:9F:F8:C1:27:AE:F5:F7:58:FF:69
            X509v3 Authority Key Identifier:
                keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:9c:dd:42:b6:8f:18:ba:85:5e:1e:d9:3d:3d:a4:dd:11:
         c1:67:fd:db:04:19:9d:35:6f:10:37:dd:0d:3b:05:30:56:40:
         49:aa:62:9e:7c:1c:22:1f:3b:88:23:67:38:57:21:f3:ec:a0:
         9e:5f:a4:e2:7a:51:d5:44:60:10:c9:f4:88:fd:d2:27:0e:6e:
         cf:2a:a2:8f:2a:2d:58:63:f7:e4:75:ae:7a:24:46:fa:e2:f2:
         ec:ed:d6:9c:ae:ff:46:e4:86:b7:23:5c:41:b3:ea:72:2b:06:
         bc:30:f6:56:f2:7c:25:07:ac:0b:d1:85:3a:4e:8d:ef:f7:cb:
         f1:f1:e1:d9:90:91:a6:04:53:08:46:cf:15:63:7c:0a:ac:cb:
         dc:fd:f1:a9:b0:2c:70:ae:b5:4a:29:74:82:f1:05:f4:19:61:
         ac:6a:74:42:ee:04:ac:51:84:66:cf:ee:dc:3d:72:06:25:1a:
         3e:b8:f2:33:b9:3d:60:65:4b:04:cc:8a:38:6a:1a:35:06:a0:
         ae:b6:d4:e1:50:ec:47:16:e0:d6:dc:b7:ac:89:73:6a:48:65:
         f1:19:6c:0d:a1:d8:c9:b1:94:fc:b0:7d:86:35:e1:61:05:a0:
         b6:40:2e:09:7a:d4:89:8d:98:b5:3d:12:c1:ba:72:d3:c1:5f:
         46:dc:c1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CX3f0AhSWI1qolLw2dzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1
NmZkYTYwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
Eyg4MjEzNDZiNTQ4ZGU0NTA5NTE1ODlmZjhjMTI3YWVmNWY3NThmZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZG5cw1wFh5mRS759yj5eitGW3Bl
ANZcVdGmxGKsCM3LiFbJRmsdx2z8q2cGk4NSVCoF2H7ZUkUcuorgBe0oTEE/Aect
UGO88ODXJo9bhNX4RlDsDXJzs0EPQh9I6NwnpwTQD+s+tjG9d6Ejhu7RFWa5ldh8
Tf7YG07Em85L6tJUssFVTe9fz+hlJuni89VHPhiBNzXwiWQ6AtgnsJoAHmaHnpWv
BC9eU/SgsG6mx8t5JzMyMOrmj7Or2uvh3vP56nGLDB1ga9L5OGtPRlRwqz+NOM+j
ZHJVubH2l2FYaxHhrSxRNNipJi/nR520ZTRWlkkWY4L/5mz2mXlitsWSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIITRrVI3kUJUVif+MEnrvX3WP9pMB8GA1UdIwQY
MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt
ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh
LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN2c3UK2
jxi6hV4e2T09pN0RwWf92wQZnTVvEDfdDTsFMFZASapinnwcIh87iCNnOFch8+yg
nl+k4npR1URgEMn0iP3SJw5uzyqijyotWGP35HWueiRG+uLy7O3WnK7/RuSGtyNc
QbPqcisGvDD2VvJ8JQesC9GFOk6N7/fL8fHh2ZCRpgRTCEbPFWN8CqzL3P3xqbAs
cK61Sil0gvEF9BlhrGp0Qu4ErFGEZs/u3D1yBiUaPrjyM7k9YGVLBMyKOGoaNQag
rrbU4VDsRxbg1ty3rIlzakhl8RlsDaHYybGU/LB9hjXhYQWgtkAuCXrUiY2YtT0S
wbpy08FfRtzBqA==
-----END CERTIFICATE-----