Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          3LyW2wToPvKkif3QaOXrwET5cFVsMk0Uyj0N9LmIkNY=
Subject key identifier:   D7:13:16:FA:D7:8A:E4:54:53:FA:AF:34:2B:3B:CE:CA:DC:DD:B7:26
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       01962F3D9073C37F05CBD52FC36CF5280D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: NoDgzr103lc4ixr3YapFuMmn7ZXv2sbCirxuyFKpCuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:73:c3:7f:05:cb:d5:2f:c3:6c:f5:28:0d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=d71316fad78ae45453faaf342b3bcecadcddb726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:5b:75:62:b3:2b:41:d4:72:c1:44:de:62:
                    6f:71:b5:1e:6a:b0:2f:40:a0:6a:5f:1a:7d:07:ce:
                    73:26:11:f6:73:26:9f:16:45:c6:96:e7:17:d8:77:
                    a0:90:6d:68:54:e3:5d:6a:33:bc:85:58:fb:7e:38:
                    1e:43:ed:a7:ce:54:f4:b1:a9:c2:16:de:26:e0:1f:
                    b0:45:04:f2:5a:9d:76:54:c7:93:9b:cf:c4:73:94:
                    1a:78:2c:74:80:54:b7:ef:e1:bd:62:ee:ab:db:1d:
                    b7:e1:7d:69:40:60:64:da:06:bd:ec:bf:25:b7:7c:
                    b0:61:32:bb:7a:08:c9:d9:de:3c:1d:92:b9:91:ef:
                    a2:14:ad:c0:0e:8a:e0:d9:ff:19:8a:8d:f8:65:3a:
                    0d:7f:6f:9f:d0:e3:e9:26:01:d3:25:e2:72:09:2b:
                    4e:54:ef:59:ee:12:7a:cb:9f:5c:64:e0:d6:52:cb:
                    09:93:e2:0a:34:b4:01:58:62:be:5f:b0:df:f3:43:
                    fa:97:fa:66:8f:56:4e:d8:5c:4d:f1:b2:78:69:0d:
                    84:14:94:ad:c3:ca:b7:84:e7:24:6f:fa:ae:09:ba:
                    c8:29:d7:84:9e:5d:97:0a:2d:85:66:dc:20:4c:e1:
                    06:f2:a6:d6:6a:f1:1b:0e:8d:33:f4:2a:b6:34:c2:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:16:FA:D7:8A:E4:54:53:FA:AF:34:2B:3B:CE:CA:DC:DD:B7:26
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9b:d6:81:f4:96:59:b1:0f:b5:c0:2f:88:c9:42:26:05:a6:
         d2:3f:2e:21:92:78:c1:32:ef:01:ed:a9:60:04:dc:56:97:31:
         91:da:7e:cd:d2:69:26:72:c5:93:40:95:c3:0e:87:2d:e4:2f:
         63:a2:1f:d2:7f:0a:2b:9a:af:b1:48:da:95:d4:3f:ae:9e:72:
         05:d1:2e:1a:58:4f:b6:c8:c7:c9:de:7e:71:ce:31:40:bf:e2:
         14:13:34:60:9e:9f:24:da:82:a4:1a:ad:e6:84:07:c6:e2:60:
         f9:5d:a7:fc:08:44:3f:9c:6a:9b:fa:c1:e1:75:eb:bd:d3:4e:
         0a:6e:38:27:5c:b8:28:e0:56:e5:4b:47:43:d0:31:ae:95:6f:
         62:ed:77:39:3a:fa:89:d7:6a:07:4c:71:7f:e9:c5:45:81:c2:
         9f:6a:a3:6a:28:ce:b7:ab:f3:4f:02:dc:85:ec:a3:66:37:8d:
         6b:b2:f0:45:bf:e3:e7:b1:0e:96:07:70:0f:10:40:1d:8c:e5:
         df:e2:fa:fd:d9:ff:4f:2e:2d:db:60:ba:e4:66:d5:4f:f5:3d:
         34:34:43:0c:66:44:8d:0b:fe:33:61:12:25:f7:42:5a:6f:c5:
         9d:f5:c6:d8:3b:2a:cf:96:8f:99:6c:a4:0b:b6:42:ef:be:04:
         4d:5c:cb:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZBzw38Fy9Uvw2z1KA0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjUwNDEzMTMwMTI1WhcNMjUwNDE0MTMwMTI1WjAzMTEwLwYDVQQD
EyhkNzEzMTZmYWQ3OGFlNDU0NTNmYWFmMzQyYjNiY2VjYWRjZGRiNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvtbdWKzK0HUcsFE3mJvcbUearAv
QKBqXxp9B85zJhH2cyafFkXGlucX2HegkG1oVONdajO8hVj7fjgeQ+2nzlT0sanC
Ft4m4B+wRQTyWp12VMeTm8/Ec5QaeCx0gFS37+G9Yu6r2x234X1pQGBk2ga97L8l
t3ywYTK7egjJ2d48HZK5ke+iFK3ADorg2f8Zio34ZToNf2+f0OPpJgHTJeJyCStO
VO9Z7hJ6y59cZODWUssJk+IKNLQBWGK+X7Df80P6l/pmj1ZO2FxN8bJ4aQ2EFJSt
w8q3hOckb/quCbrIKdeEnl2XCi2FZtwgTOEG8qbWavEbDo0z9Cq2NMLwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcTFvrXiuRUU/qvNCs7zsrc3bcmMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5vWgfSW
WbEPtcAviMlCJgWm0j8uIZJ4wTLvAe2pYATcVpcxkdp+zdJpJnLFk0CVww6HLeQv
Y6If0n8KK5qvsUjaldQ/rp5yBdEuGlhPtsjHyd5+cc4xQL/iFBM0YJ6fJNqCpBqt
5oQHxuJg+V2n/AhEP5xqm/rB4XXrvdNOCm44J1y4KOBW5UtHQ9AxrpVvYu13OTr6
iddqB0xxf+nFRYHCn2qjaijOt6vzTwLcheyjZjeNa7LwRb/j57EOlgdwDxBAHYzl
3+L6/dn/Ty4t22C65GbVT/U9NDRDDGZEjQv+M2ESJfdCWm/FnfXG2Dsqz5aPmWyk
C7ZC774ETVzLyA==
-----END CERTIFICATE-----