Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File:                     MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier:          Eg1WgcwfxjXEK7hX3SKODP8765pMNfYL0G354LWsaus=
Subject key identifier:   8D:8A:81:AF:B0:1C:87:A4:74:D1:60:C4:0F:4D:D9:23:01:CD:6F:A1
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer:       /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial:       01962F07001E191FBB933112A34B806FCA6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:50 +0000
Files and hashes:         1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: QqBpa8BxR010XpZ6Hlm0d7AW7128dHdpq6aesxpjUpU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:00:1e:19:1f:bb:93:31:12:a3:4b:80:6f:ca:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
        Validity
            Not Before: Apr 13 12:01:50 2025 GMT
            Not After : Apr 14 12:01:50 2025 GMT
        Subject: CN=8d8a81afb01c87a474d160c40f4dd92301cd6fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cf:65:4d:95:d4:9a:0b:41:fb:5b:9a:46:39:
                    ed:7a:1b:4d:7b:8f:eb:e8:a5:56:46:5b:1d:e7:4f:
                    59:7e:94:21:a9:8c:9e:86:70:b0:9e:e4:66:23:43:
                    e7:3a:67:39:eb:81:e4:86:fa:23:01:cf:9c:0f:8b:
                    f2:91:f8:19:ba:c2:e0:50:43:8a:52:cb:8f:65:0e:
                    a0:11:a4:40:4e:7f:b4:17:8b:24:06:49:95:fb:4c:
                    25:df:a8:81:a2:6f:fb:04:29:4d:ed:a2:a2:06:6e:
                    b6:0c:5b:6c:39:04:cc:a0:d3:cf:1a:44:dc:cd:fa:
                    2b:ef:22:cc:16:ca:e4:53:ab:43:44:e8:7a:c5:23:
                    a5:be:e7:bc:8f:cd:02:3c:44:44:45:8b:5c:be:36:
                    d3:21:9d:f7:ce:1e:34:ca:d6:13:db:e0:49:f4:b9:
                    0f:02:05:6b:72:89:13:81:84:15:0c:67:9e:12:01:
                    da:9a:d5:65:37:06:ae:f5:9a:80:49:3a:13:81:92:
                    a4:40:74:d7:30:6c:dc:e2:6d:60:32:83:46:68:80:
                    8f:22:6f:db:16:49:da:50:60:0a:23:44:f0:ae:70:
                    99:f0:fd:08:c0:a0:4b:0d:f4:0c:cd:8a:64:c3:03:
                    06:43:ae:d0:bd:c3:d1:29:6f:c3:40:11:f9:88:7a:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:81:AF:B0:1C:87:A4:74:D1:60:C4:0F:4D:D9:23:01:CD:6F:A1
            X509v3 Authority Key Identifier:
                keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:b3:d6:81:6b:60:4b:a8:2e:28:c2:a2:67:74:42:f8:55:
         e7:48:63:e0:6b:3c:6b:67:4a:4b:04:8d:71:7e:03:47:56:3f:
         82:44:87:8c:d1:76:1e:1e:e9:21:b6:c6:55:95:00:b8:75:c2:
         a2:0d:6d:5d:56:bf:15:31:4d:32:30:2d:a0:a8:38:6e:43:c3:
         64:83:df:c4:ed:cf:2f:2e:4e:8c:a5:0b:a6:22:69:0b:ad:5e:
         75:1d:29:15:32:ec:e1:44:40:9f:d6:2b:04:2a:bb:a1:e7:fc:
         d6:60:64:b9:d6:68:9f:7c:e0:68:df:06:c1:66:0d:0d:32:0b:
         58:9e:1f:4e:9a:4a:6f:45:e1:7c:2b:ba:f9:ed:01:fa:b4:55:
         ec:e7:53:25:a6:19:df:ba:11:c5:88:75:e1:3a:c6:dd:6c:57:
         9d:c5:e5:be:65:2c:3d:79:d9:17:2e:5d:54:8b:ad:36:78:4a:
         c0:27:c0:f7:e7:13:5e:c7:a4:8f:9a:30:d4:e7:95:79:ff:01:
         c2:b5:87:3e:ee:d8:84:6e:58:9f:15:1a:22:d6:7e:1a:ad:48:
         ac:22:90:48:68:19:7e:09:5e:84:0a:73:04:2c:63:9a:f0:1e:
         25:7a:39:d5:d1:0d:86:a5:d7:a3:09:28:84:b7:47:58:af:d2:
         1d:ed:1c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwAeGR+7kzESo0uAb8prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw
NWY5YjMwHhcNMjUwNDEzMTIwMTUwWhcNMjUwNDE0MTIwMTUwWjAzMTEwLwYDVQQD
Eyg4ZDhhODFhZmIwMWM4N2E0NzRkMTYwYzQwZjRkZDkyMzAxY2Q2ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c9lTZXUmgtB+1uaRjntehtNe4/r
6KVWRlsd509ZfpQhqYyehnCwnuRmI0PnOmc564HkhvojAc+cD4vykfgZusLgUEOK
UsuPZQ6gEaRATn+0F4skBkmV+0wl36iBom/7BClN7aKiBm62DFtsOQTMoNPPGkTc
zfor7yLMFsrkU6tDROh6xSOlvue8j80CPERERYtcvjbTIZ33zh40ytYT2+BJ9LkP
AgVrcokTgYQVDGeeEgHamtVlNwau9ZqASToTgZKkQHTXMGzc4m1gMoNGaICPIm/b
FknaUGAKI0TwrnCZ8P0IwKBLDfQMzYpkwwMGQ67QvcPRKW/DQBH5iHoVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2Kga+wHIekdNFgxA9N2SMBzW+hMB8GA1UdIwQY
MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt
MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1
LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNKz1oFr
YEuoLijComd0QvhV50hj4Gs8a2dKSwSNcX4DR1Y/gkSHjNF2Hh7pIbbGVZUAuHXC
og1tXVa/FTFNMjAtoKg4bkPDZIPfxO3PLy5OjKULpiJpC61edR0pFTLs4URAn9Yr
BCq7oef81mBkudZon3zgaN8GwWYNDTILWJ4fTppKb0XhfCu6+e0B+rRV7OdTJaYZ
37oRxYh14TrG3WxXncXlvmUsPXnZFy5dVIutNnhKwCfA9+cTXsekj5ow1OeVef8B
wrWHPu7YhG5YnxUaItZ+Gq1IrCKQSGgZfglehApzBCxjmvAeJXo51dENhqXXowko
hLdHWK/SHe0cow==
-----END CERTIFICATE-----