Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          gY3bVFqAG2G5vtVV7B6F2uYo2QKK+SN/3ZvfWd/F2fU=
Subject key identifier:   E9:E9:A0:1B:59:83:08:24:32:60:56:E6:36:D2:5A:0B:D1:18:62:92
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       01962F3D9D7A2F5A6A12022E4F1B2D1353B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          0D97
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: 15G1kqt/Am4pq+OLcWaq/fWVC92HNi6Vg4LFcxvcR44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9d:7a:2f:5a:6a:12:02:2e:4f:1b:2d:13:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=e9e9a01b59830824326056e636d25a0bd1186292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:61:57:26:89:99:c0:97:bb:af:8e:20:91:
                    4e:cb:dd:19:96:53:98:54:24:00:50:d3:54:f8:c3:
                    a8:29:69:71:1e:86:c2:13:a1:b7:59:88:f6:7c:82:
                    85:af:54:16:5f:a3:33:82:be:95:56:db:11:2f:a3:
                    72:13:9f:c0:3a:5b:0f:aa:ad:68:41:fc:01:f6:18:
                    63:60:e9:64:f9:ab:d0:24:4f:d5:c0:86:1e:36:83:
                    39:cf:28:63:06:33:5e:68:f7:e1:77:4e:3a:e5:20:
                    b0:97:51:4a:31:4d:53:05:34:22:19:82:45:3d:34:
                    86:f5:2d:77:48:ce:45:a2:4e:b2:07:9c:f4:44:c6:
                    a1:a8:a4:4c:ce:d5:64:bc:16:c6:ad:63:91:c0:41:
                    f7:f3:b7:f7:b8:34:a2:67:2c:d9:0a:48:4e:bb:b6:
                    bc:f5:6c:f4:01:ae:8c:9f:79:d0:6b:1a:98:d2:83:
                    12:3e:ff:23:c0:2e:41:1b:e7:9b:35:38:15:b8:f1:
                    1d:07:f0:bb:10:46:d2:78:b8:fe:89:ee:12:4b:06:
                    15:58:2e:2e:dc:06:07:3d:eb:4c:84:7c:4d:4a:b6:
                    5e:d8:db:fc:9b:27:a1:07:2f:1a:8e:60:e7:36:90:
                    ca:dd:11:7b:66:db:62:a2:e8:02:8b:20:cd:ab:70:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:A0:1B:59:83:08:24:32:60:56:E6:36:D2:5A:0B:D1:18:62:92
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:8b:06:e7:ab:02:1b:8f:fa:e8:a2:d4:22:3e:36:9c:5c:
         25:b6:93:b9:8a:49:a8:ba:b0:58:bf:bf:9c:9b:8c:b8:be:97:
         ca:ef:bc:53:4f:30:30:08:4a:cc:29:50:d0:4d:2c:57:5d:b2:
         e3:06:8b:35:70:a3:36:8b:0e:ce:51:93:a1:2b:40:d6:48:1d:
         45:b2:45:f8:25:73:a5:f6:13:25:fd:d7:c2:d5:b5:de:11:59:
         a9:b2:bb:59:6b:fb:f8:9d:d4:2c:66:58:c3:e7:cb:77:55:23:
         7f:f3:6e:1a:14:b5:b2:de:04:cc:d9:9e:e7:29:d9:ca:34:94:
         c5:ea:37:73:c9:e8:93:ad:38:87:96:58:0a:84:f2:92:60:d5:
         fe:67:23:7c:a8:75:ec:ee:32:5d:da:45:bb:13:f6:3e:0b:45:
         82:0c:81:c7:5d:1a:30:43:0c:6e:dd:f3:8f:9c:b4:3a:08:e4:
         a3:bd:8c:45:5e:c2:7b:ce:28:9c:41:66:54:d7:fb:d2:a5:02:
         b3:16:eb:a0:f5:64:63:59:a2:51:c8:78:e8:c7:51:de:d5:50:
         3e:04:df:63:e9:2f:f6:10:90:b3:6c:9d:c1:cb:fa:db:4b:3b:
         c5:9b:91:3f:d4:79:1c:93:3a:75:40:ef:48:23:b7:64:95:f6:
         1d:db:cb:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZ16L1pqEgIuTxstE1OxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm
ZDRhZWMwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
EyhlOWU5YTAxYjU5ODMwODI0MzI2MDU2ZTYzNmQyNWEwYmQxMTg2MjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YJhVyaJmcCXu6+OIJFOy90ZllOY
VCQAUNNU+MOoKWlxHobCE6G3WYj2fIKFr1QWX6Mzgr6VVtsRL6NyE5/AOlsPqq1o
QfwB9hhjYOlk+avQJE/VwIYeNoM5zyhjBjNeaPfhd0465SCwl1FKMU1TBTQiGYJF
PTSG9S13SM5Fok6yB5z0RMahqKRMztVkvBbGrWORwEH387f3uDSiZyzZCkhOu7a8
9Wz0Aa6Mn3nQaxqY0oMSPv8jwC5BG+ebNTgVuPEdB/C7EEbSeLj+ie4SSwYVWC4u
3AYHPetMhHxNSrZe2Nv8myehBy8ajmDnNpDK3RF7ZttiougCiyDNq3CT6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnpoBtZgwgkMmBW5jbSWgvRGGKSMB8GA1UdIwQY
MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct
Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx
LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE2LBuer
AhuP+uii1CI+NpxcJbaTuYpJqLqwWL+/nJuMuL6Xyu+8U08wMAhKzClQ0E0sV12y
4waLNXCjNosOzlGToStA1kgdRbJF+CVzpfYTJf3XwtW13hFZqbK7WWv7+J3ULGZY
w+fLd1Ujf/NuGhS1st4EzNme5ynZyjSUxeo3c8nok604h5ZYCoTykmDV/mcjfKh1
7O4yXdpFuxP2PgtFggyBx10aMEMMbt3zj5y0Ogjko72MRV7Ce84onEFmVNf70qUC
sxbroPVkY1miUch46MdR3tVQPgTfY+kv9hCQs2ydwcv620s7xZuRP9R5HJM6dUDv
SCO3ZJX2HdvL2Q==
-----END CERTIFICATE-----