Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
File:                     9j_pwTQEHOvaVoufkI4q7zirf3U.mft (raw, json)
Hash identifier:          O5tDh43/LW49CrLPltlezlEIN+STT5OPHuHykCIbvNc=
Subject key identifier:   80:62:DE:85:2C:31:D8:3E:67:CA:8B:70:58:27:21:E6:15:24:5F:CF
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Certificate issuer:       /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial:       01962E9980845AE5605E7906040D88AC424D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
Manifest number:          0B3E
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 9j_pwTQEHOvaVoufkI4q7zirf3U.crl (hash: IEqyMjQIvkCwcqjXTmiQ9i3bciensRIH/OV1fMDB56Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:84:5a:e5:60:5e:79:06:04:0d:88:ac:42:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=8062de852c31d83e67ca8b70582721e615245fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:23:8d:55:99:9a:fa:cb:6d:a5:f7:88:f6:
                    14:ee:24:06:70:03:84:8a:45:cc:87:2c:53:60:4e:
                    08:a1:f0:52:98:97:bf:62:fc:3c:2e:6c:36:5e:f8:
                    a7:27:e5:49:2d:42:98:88:b0:75:d7:46:c6:36:aa:
                    4b:38:fa:6e:bb:8f:2a:c9:ef:54:3d:83:1e:8c:7e:
                    3b:ea:11:e6:29:d0:e7:35:9a:cb:97:b3:94:b7:47:
                    de:db:47:fe:95:ba:43:04:e8:32:f0:29:91:2c:9f:
                    dc:7f:8d:52:83:12:c4:bc:47:83:f4:e3:1b:36:c5:
                    06:cd:55:8a:a9:d8:e9:cc:4a:79:1b:35:bc:39:45:
                    72:f8:ea:9e:28:e4:47:9d:03:06:a4:7e:0e:ae:ec:
                    a4:b1:ea:c8:48:99:f8:66:61:d8:98:eb:a2:95:c3:
                    23:e0:7e:e6:78:97:d1:a0:6d:8b:bf:d5:60:88:d7:
                    59:16:f1:5a:e9:a9:e4:4a:7d:7e:c7:b8:e8:20:d2:
                    fd:90:76:63:84:b3:e9:5e:a2:6b:93:e7:81:c1:80:
                    18:22:2a:19:fb:ad:64:25:84:e3:12:a7:ca:dc:ec:
                    ce:ea:56:9e:7e:80:85:b2:47:85:b6:75:0d:cf:8a:
                    8e:ad:cd:3a:79:a3:99:2b:35:71:4c:9c:a9:63:b2:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:DE:85:2C:31:D8:3E:67:CA:8B:70:58:27:21:E6:15:24:5F:CF
            X509v3 Authority Key Identifier:
                keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:15:f0:62:f9:ee:86:0d:fc:83:12:36:ae:6a:5c:00:70:92:
         37:07:53:9f:ae:9a:ca:3f:d8:04:07:88:e9:8c:8e:67:9b:13:
         15:6c:48:2f:8f:16:61:ae:ff:b8:46:6f:5d:43:95:7c:e4:d8:
         e1:51:2d:a0:db:21:b0:13:9d:d1:3d:69:26:7a:6a:db:08:27:
         c7:20:93:f6:5e:92:80:6d:1d:88:0e:9a:4b:64:09:64:a7:9f:
         cd:65:ed:38:b3:4c:96:c0:90:1d:65:5c:07:19:2c:47:2b:4c:
         71:d5:a2:74:e2:dd:42:b1:b4:5f:a6:50:73:7a:b0:19:29:fb:
         bd:4e:c5:d5:3e:6a:e9:a0:17:92:44:91:1a:30:f9:3d:94:d0:
         f2:cf:4d:83:81:66:a6:b8:ab:72:16:7a:b1:2e:dd:dd:8d:7c:
         58:03:8d:d8:88:17:fe:f2:67:fa:b6:08:f7:23:81:47:d4:ca:
         b2:4b:f6:2b:5e:1f:ed:df:a1:f4:50:64:72:93:53:23:71:fc:
         f6:29:cc:38:8c:94:da:bf:09:f7:39:9c:db:45:20:aa:0c:b5:
         51:9a:5e:ae:80:26:c4:bd:3c:02:b1:25:06:05:08:a6:df:c6:
         3b:2a:a5:06:f5:cc:59:30:4d:78:e4:b8:d5:f5:aa:af:7d:a0:
         8f:34:f1:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYCEWuVgXnkGBA2IrEJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2M2ZlOWMxMzQwNDFjZWJkYTU2OGI5ZjkwOGUyYWVmMzhh
YjdmNzUwHhcNMjUwNDEzMTAwMjEzWhcNMjUwNDE0MTAwMjEzWjAzMTEwLwYDVQQD
Eyg4MDYyZGU4NTJjMzFkODNlNjdjYThiNzA1ODI3MjFlNjE1MjQ1ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwcjjVWZmvrLbaX3iPYU7iQGcAOE
ikXMhyxTYE4IofBSmJe/Yvw8Lmw2XvinJ+VJLUKYiLB110bGNqpLOPpuu48qye9U
PYMejH476hHmKdDnNZrLl7OUt0fe20f+lbpDBOgy8CmRLJ/cf41SgxLEvEeD9OMb
NsUGzVWKqdjpzEp5GzW8OUVy+OqeKORHnQMGpH4OruykserISJn4ZmHYmOuilcMj
4H7meJfRoG2Lv9VgiNdZFvFa6ankSn1+x7joINL9kHZjhLPpXqJrk+eBwYAYIioZ
+61kJYTjEqfK3OzO6laefoCFskeFtnUNz4qOrc06eaOZKzVxTJypY7J2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBi3oUsMdg+Z8qLcFgnIeYVJF/PMB8GA1UdIwQY
MBaAFPY/6cE0BBzr2laLn5COKu84q391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMzlkM2EtMjc4NC00MjU1LTkwNjYt
NWFlYzc2NmE0OWI0LzEvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMzlkM2EtMjc4NC00MjU1LTkwNjYtNWFlYzc2NmE0OWI0
LzEvOWpfcHdUUUVIT3ZhVm91ZmtJNHE3emlyZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBXwYvnu
hg38gxI2rmpcAHCSNwdTn66ayj/YBAeI6YyOZ5sTFWxIL48WYa7/uEZvXUOVfOTY
4VEtoNshsBOd0T1pJnpq2wgnxyCT9l6SgG0diA6aS2QJZKefzWXtOLNMlsCQHWVc
BxksRytMcdWidOLdQrG0X6ZQc3qwGSn7vU7F1T5q6aAXkkSRGjD5PZTQ8s9Ng4Fm
prirchZ6sS7d3Y18WAON2IgX/vJn+rYI9yOBR9TKskv2K14f7d+h9FBkcpNTI3H8
9inMOIyU2r8J9zmc20Ugqgy1UZperoAmxL08ArElBgUIpt/GOyqlBvXMWTBNeOS4
1fWqr32gjzTxFQ==
-----END CERTIFICATE-----