Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File:                     dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier:          3TWK7tugrEChwomqsEQRttt1e2re9p4kLKk7rv7rWxk=
Subject key identifier:   CC:57:68:A3:19:4A:D4:50:68:9C:01:D0:1D:AD:5F:B7:7E:C8:A7:AA
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer:       /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial:       01962F06A6DEC48408996986C230465A03C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number:          08D5
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: Y9N0BhiJHCqhHp0M9r+peViZJgvWN9f+ZyfpEw3p62Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:de:c4:84:08:99:69:86:c2:30:46:5a:03:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=cc5768a3194ad450689c01d01dad5fb77ec8a7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:74:24:27:fa:3d:32:d2:de:95:fc:e7:0e:
                    04:71:8a:e3:38:57:7b:8f:3d:8d:b7:82:86:ef:c7:
                    3d:b4:80:78:e8:d7:19:63:36:35:c5:f4:06:21:8e:
                    f5:31:49:ef:7e:e7:18:a9:84:0a:47:60:fc:76:39:
                    34:a7:8d:00:4c:b5:4a:7d:a2:06:9d:bb:14:5f:4d:
                    5e:85:68:2a:56:bd:8f:77:05:0f:39:51:3b:46:d7:
                    cd:9c:88:25:2b:96:98:91:58:50:01:fd:76:69:44:
                    4f:bf:88:e4:0a:fe:a7:a1:cc:22:96:9d:45:51:df:
                    d4:08:4e:88:d2:22:34:ec:e2:9e:90:86:b0:d8:0f:
                    de:8a:79:ae:e4:bf:7d:b3:c1:48:68:d6:73:73:78:
                    f2:d7:46:d4:6a:b2:83:7b:4c:45:6c:80:cd:e0:9e:
                    fd:6a:d8:df:fc:8d:77:a4:3f:25:be:6f:ea:1a:05:
                    ba:30:c8:f5:40:38:1f:06:4c:36:14:56:3a:d1:34:
                    9a:c8:bd:e5:4e:6f:02:26:9d:ca:76:77:e0:a6:2b:
                    5d:3a:a6:5d:95:24:df:2e:5e:46:4f:1e:63:0b:1f:
                    8f:8d:3c:4e:3c:89:5e:99:1e:01:92:bf:42:46:c2:
                    ff:59:23:a9:58:c4:f2:07:14:a0:64:7b:16:3e:6f:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:57:68:A3:19:4A:D4:50:68:9C:01:D0:1D:AD:5F:B7:7E:C8:A7:AA
            X509v3 Authority Key Identifier:
                keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:98:be:46:e2:9b:4a:1c:a4:e7:5a:f0:cb:b3:0d:41:5e:
         cd:49:91:05:e0:ef:84:79:05:fe:4c:87:a3:5c:89:3a:5a:a6:
         05:5a:05:86:6d:68:de:c8:df:4c:8e:8f:f6:2d:bd:36:24:40:
         20:4a:3c:3c:58:f4:3d:fe:de:76:19:97:94:f9:3e:29:48:df:
         59:c1:c7:c1:d9:25:fb:f2:a0:d3:29:21:cf:7f:ab:a6:f4:2d:
         65:c7:b9:93:a6:9e:8f:0e:56:22:59:1d:cc:76:c0:8c:f4:dd:
         59:4d:ed:f8:7d:9f:70:8c:94:e8:91:b8:ed:2e:e9:bd:bf:0d:
         7c:ff:7f:3e:df:4e:20:ac:00:e5:61:34:73:e0:30:82:69:5a:
         ba:5e:b1:5a:c8:52:93:c1:91:86:4d:6d:a4:c8:a8:4a:8a:1f:
         8b:49:bb:45:c6:be:4f:3a:f7:5d:c5:aa:b2:a5:6d:4a:84:81:
         53:c1:f8:77:81:44:c7:bf:b8:67:3c:86:ec:36:c7:7b:c9:b8:
         f5:fe:4c:cc:db:7f:fa:84:ea:ae:a3:e9:f4:7f:9c:e9:10:67:
         f8:3c:4d:77:88:fa:26:5a:66:9e:cc:67:7f:b4:cb:b2:6c:26:
         0b:8d:d1:0e:5c:ce:19:37:ac:62:93:ad:48:74:87:6f:c9:49:
         2d:cc:4d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqbexIQImWmGwjBGWgPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz
ZDlkYzYwHhcNMjUwNDEzMTIwMTI3WhcNMjUwNDE0MTIwMTI3WjAzMTEwLwYDVQQD
EyhjYzU3NjhhMzE5NGFkNDUwNjg5YzAxZDAxZGFkNWZiNzdlYzhhN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ50JCf6PTLS3pX85w4EcYrjOFd7
jz2Nt4KG78c9tIB46NcZYzY1xfQGIY71MUnvfucYqYQKR2D8djk0p40ATLVKfaIG
nbsUX01ehWgqVr2PdwUPOVE7RtfNnIglK5aYkVhQAf12aURPv4jkCv6nocwilp1F
Ud/UCE6I0iI07OKekIaw2A/einmu5L99s8FIaNZzc3jy10bUarKDe0xFbIDN4J79
atjf/I13pD8lvm/qGgW6MMj1QDgfBkw2FFY60TSayL3lTm8CJp3KdnfgpitdOqZd
lSTfLl5GTx5jCx+PjTxOPIlemR4Bkr9CRsL/WSOpWMTyBxSgZHsWPm8FzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxXaKMZStRQaJwB0B2tX7d+yKeqMB8GA1UdIwQY
MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt
MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw
LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlT2Yvkbi
m0ocpOda8MuzDUFezUmRBeDvhHkF/kyHo1yJOlqmBVoFhm1o3sjfTI6P9i29NiRA
IEo8PFj0Pf7edhmXlPk+KUjfWcHHwdkl+/Kg0ykhz3+rpvQtZce5k6aejw5WIlkd
zHbAjPTdWU3t+H2fcIyU6JG47S7pvb8NfP9/Pt9OIKwA5WE0c+Awgmlaul6xWshS
k8GRhk1tpMioSoofi0m7Rca+Tzr3XcWqsqVtSoSBU8H4d4FEx7+4ZzyG7DbHe8m4
9f5MzNt/+oTqrqPp9H+c6RBn+DxNd4j6Jlpmnsxnf7TLsmwmC43RDlzOGTesYpOt
SHSHb8lJLcxNdQ==
-----END CERTIFICATE-----