Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File:                     CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier:          Ygr0NjY4aJ/i79c3GuB/k0v1GSgwNB9PRFK1yv+plc8=
Subject key identifier:   78:19:90:1A:0C:F4:14:0B:3B:DF:5A:CE:AE:AA:A6:55:5B:1B:33:F2
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer:       /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial:       01962F746C86EB5171F5EB0F5488B82B0448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number:          01B7
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: p31CY2kRne1nBqESs3Ag/IqbqLJqO5smpXRKMlyWsng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6c:86:eb:51:71:f5:eb:0f:54:88:b8:2b:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=7819901a0cf4140b3bdf5aceaeaaa6555b1b33f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:9e:db:fb:ed:d1:4a:cb:06:4d:e4:50:34:
                    52:75:66:87:46:91:ae:63:d7:3a:dc:09:09:b9:72:
                    2a:2f:3e:a5:85:b3:86:f8:36:92:50:eb:14:fb:09:
                    65:a4:36:e9:06:7e:e5:d7:c1:fe:41:35:8a:59:34:
                    22:68:d2:ee:e1:eb:8a:21:99:4f:d6:78:2d:fd:23:
                    18:0b:93:b9:0d:67:1f:d5:13:ca:b0:1a:91:52:26:
                    ad:49:67:3b:21:cb:48:e2:1e:5b:ed:c1:06:8f:c9:
                    70:e4:96:6e:5b:64:02:79:33:11:74:89:90:aa:ac:
                    f3:89:5f:cd:6f:d9:a4:e0:8b:d1:eb:8a:13:09:91:
                    32:e5:bc:ca:a1:e9:90:75:d2:c2:63:53:2c:ac:98:
                    b0:17:9c:b4:6e:3a:ad:f3:2e:e1:51:be:ac:cc:fe:
                    26:5d:ff:f9:a0:8f:7f:85:9b:9c:1f:d2:94:99:aa:
                    14:64:a1:68:d6:74:e5:57:b7:3f:ac:68:31:a3:94:
                    6b:a1:b4:d6:b3:26:3a:1f:47:a2:b6:5a:aa:0e:61:
                    86:d4:d5:e4:88:86:fc:ea:78:51:1b:07:be:ee:2b:
                    f1:20:26:ed:15:87:83:e8:34:41:a2:c4:8a:76:ef:
                    e6:26:c7:30:cd:d5:8d:1b:0f:62:2f:f6:d5:3e:98:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:90:1A:0C:F4:14:0B:3B:DF:5A:CE:AE:AA:A6:55:5B:1B:33:F2
            X509v3 Authority Key Identifier:
                keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:34:4e:e3:d8:06:cf:17:bc:c2:0b:5e:c1:86:df:2d:84:
         db:66:4e:ff:26:b5:2e:4f:62:b9:9d:7a:0d:68:5b:10:8e:98:
         1b:dc:5b:ac:8e:ca:b3:eb:65:54:f3:82:4b:83:dc:68:cd:de:
         d3:f4:c3:3a:0a:a5:2f:0f:38:8e:3e:ba:99:15:03:f2:99:64:
         ab:ce:c1:65:08:8b:a8:98:f9:00:60:4f:04:e1:ec:6a:cb:93:
         0e:e2:aa:6b:79:c2:93:f1:c9:8c:42:c4:11:f4:6e:33:57:b0:
         e6:16:be:e8:5e:46:df:26:5d:89:f8:5a:b7:d4:2b:cf:57:90:
         d7:38:8d:2e:55:66:9c:ec:7d:0e:d0:77:fe:4c:80:13:17:06:
         e6:f6:d5:76:6f:37:7f:87:ed:af:f0:a8:32:82:e4:84:34:e3:
         8e:0a:65:83:cf:6b:79:41:78:ee:93:d9:7c:cf:42:0d:92:41:
         44:44:af:be:5e:a4:29:8c:cf:4c:57:53:4a:40:38:67:c4:85:
         ae:dd:d3:ae:09:15:a3:5e:93:0c:5e:d3:f9:78:cd:3b:1a:df:
         32:c7:4e:1a:10:07:b0:5d:67:3a:0a:ca:8c:38:46:6c:90:5c:
         c8:88:7f:d0:c2:26:6a:45:3b:24:66:f4:5a:54:6c:0f:67:db:
         d9:32:a0:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGyG61Fx9esPVIi4KwRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjNlNDIzYmQxZTk3MzZhNWY1ZDc4NGVjOTI5OWQ1MDgy
NzI3ZGMwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
Eyg3ODE5OTAxYTBjZjQxNDBiM2JkZjVhY2VhZWFhYTY1NTViMWIzM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+qe2/vt0UrLBk3kUDRSdWaHRpGu
Y9c63AkJuXIqLz6lhbOG+DaSUOsU+wllpDbpBn7l18H+QTWKWTQiaNLu4euKIZlP
1ngt/SMYC5O5DWcf1RPKsBqRUiatSWc7IctI4h5b7cEGj8lw5JZuW2QCeTMRdImQ
qqzziV/Nb9mk4IvR64oTCZEy5bzKoemQddLCY1MsrJiwF5y0bjqt8y7hUb6szP4m
Xf/5oI9/hZucH9KUmaoUZKFo1nTlV7c/rGgxo5RrobTWsyY6H0eitlqqDmGG1NXk
iIb86nhRGwe+7ivxICbtFYeD6DRBosSKdu/mJscwzdWNGw9iL/bVPpiwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgZkBoM9BQLO99azq6qplVbGzPyMB8GA1UdIwQY
MBaAFArz5CO9Hpc2pfXXhOySmdUIJyfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEt
ZmUxZTkyYzM2YWRiLzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEtZmUxZTkyYzM2YWRi
LzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpA0TuPY
Bs8XvMILXsGG3y2E22ZO/ya1Lk9iuZ16DWhbEI6YG9xbrI7Ks+tlVPOCS4PcaM3e
0/TDOgqlLw84jj66mRUD8plkq87BZQiLqJj5AGBPBOHsasuTDuKqa3nCk/HJjELE
EfRuM1ew5ha+6F5G3yZdifhat9Qrz1eQ1ziNLlVmnOx9DtB3/kyAExcG5vbVdm83
f4ftr/CoMoLkhDTjjgplg89reUF47pPZfM9CDZJBRESvvl6kKYzPTFdTSkA4Z8SF
rt3TrgkVo16TDF7T+XjNOxrfMsdOGhAHsF1nOgrKjDhGbJBcyIh/0MImakU7JGb0
WlRsD2fb2TKgYg==
-----END CERTIFICATE-----