Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File:                     DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier:          koy7rxV1vElT/6DdysRAUQXx6fs/PHcsRJcMo1mwPrE=
Subject key identifier:   F9:15:9D:6C:0B:73:E2:51:3F:7F:FC:CE:82:4D:EB:3C:FD:45:37:22
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer:       /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial:       01962E999B583687929738E8B4456E2CB802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number:          067B
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: 2YbknOqUbs6OhIID+LpSQ025UDcReBGXnWfh1CVT3Rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9b:58:36:87:92:97:38:e8:b4:45:6e:2c:b8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=f9159d6c0b73e2513f7ffcce824deb3cfd453722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:f1:e1:db:0a:93:97:d1:23:a9:d2:80:96:
                    57:68:50:a7:f1:af:ce:60:6a:ee:e4:a4:ad:97:da:
                    8a:ac:9d:9f:eb:cd:d7:bd:06:08:f8:16:2e:e2:26:
                    55:51:2d:14:57:11:ce:ea:87:56:f7:3d:ff:ff:02:
                    c1:68:d3:ce:a2:e4:86:46:56:57:f7:f4:8a:29:db:
                    30:88:98:5e:d8:83:ab:7f:26:30:f3:e1:fe:5f:dd:
                    22:e3:f9:fd:a9:91:0f:be:ff:dc:1a:a9:97:a7:d9:
                    0d:04:d0:96:c2:0b:fd:a8:93:a3:90:db:d7:ce:97:
                    5a:9d:49:0b:fb:a4:9c:00:86:60:c1:26:b0:b1:93:
                    a8:5d:cd:ba:d7:6b:a9:0c:d9:77:d1:13:a0:ae:55:
                    e9:db:ef:22:56:25:f1:c5:2c:ad:c5:ad:7a:b6:68:
                    20:8e:47:62:0f:a6:9f:19:0d:fa:90:f4:d9:f4:31:
                    f0:9d:4e:81:a3:c3:b0:95:ef:8d:64:ee:f6:b1:b6:
                    90:71:d7:22:a2:f8:1f:b5:04:90:0d:4c:19:3a:c3:
                    b2:f8:c2:1f:4c:68:ab:22:cb:18:fc:d3:af:ad:e6:
                    2e:0c:f8:80:28:c3:52:90:4c:6a:a1:8c:c2:07:be:
                    a1:83:e0:c2:03:32:84:1c:41:84:fb:7c:36:8b:f1:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:9D:6C:0B:73:E2:51:3F:7F:FC:CE:82:4D:EB:3C:FD:45:37:22
            X509v3 Authority Key Identifier:
                keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:58:8b:24:8c:c8:59:4b:44:68:94:e8:dc:8d:3d:8a:8a:be:
         a8:21:a1:4a:fb:43:0e:54:c0:2d:65:37:cc:27:0e:4e:23:b6:
         e1:98:56:7c:95:c9:51:1c:69:37:f6:45:fb:c0:f2:17:37:a0:
         5c:56:fc:b7:51:20:2a:7b:53:21:59:a2:b4:80:f8:44:9a:d7:
         e9:7e:b3:de:85:0f:8a:1a:20:41:16:e7:f7:60:4a:f3:24:fe:
         3e:6f:4a:4a:50:4e:2f:16:79:0d:b3:da:fc:12:88:f2:36:24:
         ab:07:04:cf:c1:71:8d:f8:15:b9:9d:ff:7a:85:2b:37:da:52:
         14:9a:0e:3c:e8:d3:40:46:42:6e:6c:66:a7:03:6e:c9:ff:49:
         c2:4b:13:b9:69:d2:48:2f:6d:9d:69:d3:a8:55:16:a3:0f:8e:
         19:f8:fb:1d:bc:a7:bf:cb:30:53:ab:e4:25:2c:f3:b4:3a:81:
         10:c1:28:32:2e:bd:72:c3:3a:04:bc:9b:8b:77:e9:1b:3c:d2:
         e1:3c:f7:dd:bb:f8:0b:df:be:79:e4:0b:69:e3:45:07:a2:25:
         8d:a3:79:5f:f0:50:75:1a:b7:69:4c:98:47:89:96:5e:2c:77:
         52:a5:46:82:8b:b6:0b:c0:f8:e2:f4:22:0d:af:2b:8d:8f:6a:
         b5:9e:8a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZtYNoeSlzjotEVuLLgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOWM1NmExOGM5ODdhMmQxYTJlNzA0NGI3ZTMxYjMyMWJm
N2FjMTYwHhcNMjUwNDEzMTAwMjIwWhcNMjUwNDE0MTAwMjIwWjAzMTEwLwYDVQQD
EyhmOTE1OWQ2YzBiNzNlMjUxM2Y3ZmZjY2U4MjRkZWIzY2ZkNDUzNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGrx4dsKk5fRI6nSgJZXaFCn8a/O
YGru5KStl9qKrJ2f683XvQYI+BYu4iZVUS0UVxHO6odW9z3//wLBaNPOouSGRlZX
9/SKKdswiJhe2IOrfyYw8+H+X90i4/n9qZEPvv/cGqmXp9kNBNCWwgv9qJOjkNvX
zpdanUkL+6ScAIZgwSawsZOoXc2612upDNl30ROgrlXp2+8iViXxxSytxa16tmgg
jkdiD6afGQ36kPTZ9DHwnU6Bo8Owle+NZO72sbaQcdciovgftQSQDUwZOsOy+MIf
TGirIssY/NOvreYuDPiAKMNSkExqoYzCB76hg+DCAzKEHEGE+3w2i/EgSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkVnWwLc+JRP3/8zoJN6zz9RTciMB8GA1UdIwQY
MBaAFA2cVqGMmHotGi5wRLfjGzIb96wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYt
NDVhYjNmNTIwZjAwLzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZDFiOGYtZDA2NS00Y2M3LTlhMWYtNDVhYjNmNTIwZjAw
LzEvRFp4V29ZeVllaTBhTG5CRXQtTWJNaHYzckJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABliLJIzI
WUtEaJTo3I09ioq+qCGhSvtDDlTALWU3zCcOTiO24ZhWfJXJURxpN/ZF+8DyFzeg
XFb8t1EgKntTIVmitID4RJrX6X6z3oUPihogQRbn92BK8yT+Pm9KSlBOLxZ5DbPa
/BKI8jYkqwcEz8FxjfgVuZ3/eoUrN9pSFJoOPOjTQEZCbmxmpwNuyf9JwksTuWnS
SC9tnWnTqFUWow+OGfj7Hbynv8swU6vkJSzztDqBEMEoMi69csM6BLybi3fpGzzS
4Tz33bv4C9++eeQLaeNFB6IljaN5X/BQdRq3aUyYR4mWXix3UqVGgou2C8D44vQi
Da8rjY9qtZ6K9A==
-----END CERTIFICATE-----