Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File:                     h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier:          QKtX6HmCzd/upy5WUJBore406jZROz7+UFIfbaVAX8A=
Subject key identifier:   AD:1F:E2:D3:3A:EC:D5:55:B1:D5:D9:A7:08:32:C7:A0:88:94:C3:C0
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer:       /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial:       01962F06BCE39E88D8849E48390BE37818CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number:          D6
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: 2bzzi34gsFoX4tC9fwGiEsFuURELvgPZOdgbi7jcWhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:e3:9e:88:d8:84:9e:48:39:0b:e3:78:18:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=ad1fe2d33aecd555b1d5d9a70832c7a08894c3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:94:56:ef:4a:bf:e4:ea:93:6a:1b:82:cc:
                    32:60:e5:41:7c:4e:4d:a7:85:c7:72:f4:e5:77:c0:
                    d0:71:2d:96:d4:29:09:ce:23:2c:3e:fb:40:ff:b1:
                    a8:3b:3f:35:a0:d7:cd:6d:d1:60:83:c2:94:b7:92:
                    f5:d7:78:07:0f:55:47:4b:98:5a:c4:db:dc:c1:74:
                    ff:d0:1f:cc:fe:2b:c0:05:71:a2:ca:d4:31:e7:fe:
                    79:4e:76:94:d0:b3:05:8c:c9:2e:77:14:bb:dc:3c:
                    67:7e:f7:cf:66:c7:73:14:da:3b:68:28:bf:91:26:
                    7b:7f:9b:65:a2:44:78:fe:5e:e6:01:57:40:86:73:
                    d2:3d:7e:54:e3:aa:0f:a2:08:9a:2f:bd:71:3a:37:
                    3b:78:9a:e9:c4:2d:d6:dc:19:bd:76:52:8a:90:17:
                    a9:11:f1:03:c2:26:89:2f:f8:75:0b:44:5c:e8:41:
                    97:bd:0c:f9:62:65:fe:91:9d:33:68:79:a3:16:8c:
                    4f:d9:7e:dd:12:3a:f4:cc:8c:6b:20:95:a3:d6:23:
                    71:f8:f8:4a:d8:60:ac:6a:c5:30:06:ac:d2:ca:48:
                    f6:f1:70:35:84:96:3c:43:ef:f3:c1:a9:50:52:23:
                    d0:b6:05:d3:47:64:b5:6f:57:0c:97:75:78:e5:38:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1F:E2:D3:3A:EC:D5:55:B1:D5:D9:A7:08:32:C7:A0:88:94:C3:C0
            X509v3 Authority Key Identifier:
                keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:7d:47:7c:30:d7:d1:ce:87:a5:7f:b8:1b:78:52:85:78:
         fe:5a:86:9a:cf:e2:fb:84:66:3c:eb:2b:69:dd:ea:fb:69:73:
         df:35:08:ce:5d:60:2d:6b:e9:db:af:96:5b:8b:b3:ac:0d:17:
         2f:70:62:c3:8b:44:75:65:57:9f:4b:3d:72:f7:26:a8:fe:bb:
         d7:f0:38:8a:29:e8:a7:6f:52:5c:c3:a0:01:99:76:48:91:c6:
         4f:0e:b3:e6:3f:06:65:ac:32:50:93:92:c2:d6:5f:83:42:3a:
         cb:92:db:50:05:c8:6c:8f:d1:28:bf:49:57:65:8c:17:a2:b1:
         e0:08:9c:f7:67:05:40:9e:4d:eb:5b:93:b0:25:3f:cd:3e:99:
         b5:55:6b:be:69:52:d4:0b:01:e1:0e:f6:d1:83:e3:1f:30:99:
         57:8e:3e:b2:8e:a6:27:17:ac:02:96:9a:b6:2f:c9:d1:da:81:
         0d:66:35:1b:c3:61:e9:9a:45:3a:7f:24:1b:b4:5c:1e:59:69:
         9d:35:86:51:5f:4f:ac:62:12:c1:7f:b4:43:71:3c:4b:ea:f8:
         d7:2d:12:69:67:23:1a:12:ca:28:d1:e1:80:ef:3d:ed:a8:d8:
         6c:e2:9d:15:9b:d6:64:50:af:fd:a7:90:b5:a9:81:a4:11:0b:
         c7:6d:82:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrzjnojYhJ5IOQvjeBjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzNhYWJkZDNlMjZiNDRiNzk4MzdjMTQ3MGFiOGUxNzQx
NWVhOGUwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
EyhhZDFmZTJkMzNhZWNkNTU1YjFkNWQ5YTcwODMyYzdhMDg4OTRjM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB6UVu9Kv+Tqk2obgswyYOVBfE5N
p4XHcvTld8DQcS2W1CkJziMsPvtA/7GoOz81oNfNbdFgg8KUt5L113gHD1VHS5ha
xNvcwXT/0B/M/ivABXGiytQx5/55TnaU0LMFjMkudxS73DxnfvfPZsdzFNo7aCi/
kSZ7f5tlokR4/l7mAVdAhnPSPX5U46oPogiaL71xOjc7eJrpxC3W3Bm9dlKKkBep
EfEDwiaJL/h1C0Rc6EGXvQz5YmX+kZ0zaHmjFoxP2X7dEjr0zIxrIJWj1iNx+PhK
2GCsasUwBqzSykj28XA1hJY8Q+/zwalQUiPQtgXTR2S1b1cMl3V45TgtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0f4tM67NVVsdXZpwgyx6CIlMPAMB8GA1UdIwQY
MBaAFIdzqr3T4mtEt5g3wUcKuOF0FeqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNGIzZjYtMDQwYi00MDZlLWI0Mzgt
NmFiOGE4NzlhMTdiLzEvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNGIzZjYtMDQwYi00MDZlLWI0MzgtNmFiOGE4NzlhMTdi
LzEvaDNPcXZkUGlhMFMzbURmQlJ3cTQ0WFFWNm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC19R3ww
19HOh6V/uBt4UoV4/lqGms/i+4RmPOsrad3q+2lz3zUIzl1gLWvp26+WW4uzrA0X
L3Biw4tEdWVXn0s9cvcmqP671/A4iinop29SXMOgAZl2SJHGTw6z5j8GZawyUJOS
wtZfg0I6y5LbUAXIbI/RKL9JV2WMF6Kx4Aic92cFQJ5N61uTsCU/zT6ZtVVrvmlS
1AsB4Q720YPjHzCZV44+so6mJxesApaati/J0dqBDWY1G8Nh6ZpFOn8kG7RcHllp
nTWGUV9PrGISwX+0Q3E8S+r41y0SaWcjGhLKKNHhgO897ajYbOKdFZvWZFCv/aeQ
tamBpBELx22CTg==
-----END CERTIFICATE-----