Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File:                     k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier:          /W/klxZwlmtxEQ/GY25xbUYdl08yfWtS4XE6360WzC4=
Subject key identifier:   F9:EB:D3:FF:A9:9C:6B:33:EE:7C:1A:EF:64:42:A9:5A:44:81:CF:27
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer:       /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial:       01962F7476A14E1FB2A4B27E954791D3C047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number:          0DAB
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: Z7TSw7BuwlaOO6CWqir71KaS1mH+ZPTW3L34f9qzP7Y=)
                          2: rqMllQ155A2S7SS_4PQfBNAn4gw.roa (hash: fS87JWrPgH68/hK1SJfJVRTn1bsQGrCVPuQ1+n82lao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:a1:4e:1f:b2:a4:b2:7e:95:47:91:d3:c0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=f9ebd3ffa99c6b33ee7c1aef6442a95a4481cf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:bd:a8:7c:d6:d5:f7:66:e4:d3:37:82:60:
                    ae:d9:b8:43:e9:9f:e2:b6:72:3d:e5:50:f7:a4:b6:
                    0c:f6:91:35:0a:4d:4a:a1:58:83:d6:94:13:a9:78:
                    ea:30:f4:43:da:e5:1c:5e:5a:31:91:18:7c:05:37:
                    07:3f:49:40:89:0c:29:25:ea:76:c9:00:cb:0a:bd:
                    f2:46:12:0c:cd:bc:a9:fa:d2:05:20:35:d1:e3:76:
                    98:28:a4:d0:b3:a6:38:6c:89:75:84:a5:b6:c0:42:
                    35:2e:16:4f:00:7e:fd:a9:42:bb:55:fa:c9:fd:a0:
                    62:99:ff:cf:4c:cb:c7:f3:5a:15:ab:f0:f2:99:26:
                    ea:52:9a:ba:84:89:c9:c7:d9:6c:12:7b:e3:e9:b1:
                    2b:ac:8c:72:6e:73:55:fc:d8:d0:43:a6:a6:77:6b:
                    ee:7a:48:56:61:91:9b:11:87:88:91:64:e8:d9:7c:
                    ee:da:ea:85:86:a3:d9:28:71:d8:29:2c:49:92:e7:
                    74:28:dd:aa:7e:0b:69:ec:2d:5f:52:88:ee:49:aa:
                    7d:02:47:9f:68:90:c2:c2:bd:b5:6d:48:2b:ae:58:
                    8b:8e:a5:6b:21:27:d8:0f:35:6d:e6:ad:97:23:b2:
                    6d:52:9b:c6:fb:51:38:df:70:a0:de:e2:02:c0:8a:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:D3:FF:A9:9C:6B:33:EE:7C:1A:EF:64:42:A9:5A:44:81:CF:27
            X509v3 Authority Key Identifier:
                keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:7f:40:d0:79:6b:61:be:6b:fd:cc:b6:d4:40:44:bb:72:
         5c:84:ad:35:da:b9:5a:b4:72:2a:cc:33:79:ee:92:f4:1c:c2:
         ce:a8:57:a5:45:02:09:ea:ce:4f:e9:07:27:75:c0:f1:4e:ed:
         3c:c8:13:7d:4f:4d:3b:b5:c2:91:eb:b7:96:07:cf:85:8a:8c:
         0d:0e:e0:8d:f2:28:75:c7:90:9f:d6:2b:4f:6d:f6:39:d3:36:
         71:39:59:f6:bc:f2:15:4b:84:ff:cc:50:3b:c3:9e:f7:c7:60:
         a3:3d:d4:f9:56:42:fb:a4:d3:e4:eb:8e:10:43:15:53:d4:0c:
         e8:af:fe:b9:ca:9c:8e:3c:a0:67:fe:4c:33:18:73:06:61:83:
         fd:36:de:d1:c4:4f:4e:2d:d9:45:22:fa:8b:f5:47:3f:02:43:
         65:61:3f:bb:c9:a1:41:d5:f3:0e:88:d1:79:7f:05:3c:d8:87:
         66:ac:23:48:40:ba:ac:c4:be:86:fd:bc:11:da:aa:79:1d:42:
         95:92:7c:62:3e:78:50:0b:08:47:03:aa:ce:73:a4:aa:c8:37:
         3b:50:d2:94:30:94:a2:db:e5:4b:ea:5a:48:f0:0f:60:a2:df:
         13:3e:29:b8:4a:e7:83:19:33:1d:d0:e3:f5:b6:16:41:04:26:
         b8:43:e0:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHahTh+ypLJ+lUeR08BHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTE1ZjI1OTg2ZTRiNTcyYTc4YjEwOWQ5OTVjOWRkZjVk
YTEyNjYwHhcNMjUwNDEzMTQwMTIzWhcNMjUwNDE0MTQwMTIzWjAzMTEwLwYDVQQD
EyhmOWViZDNmZmE5OWM2YjMzZWU3YzFhZWY2NDQyYTk1YTQ0ODFjZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS29qHzW1fdm5NM3gmCu2bhD6Z/i
tnI95VD3pLYM9pE1Ck1KoViD1pQTqXjqMPRD2uUcXloxkRh8BTcHP0lAiQwpJep2
yQDLCr3yRhIMzbyp+tIFIDXR43aYKKTQs6Y4bIl1hKW2wEI1LhZPAH79qUK7VfrJ
/aBimf/PTMvH81oVq/DymSbqUpq6hInJx9lsEnvj6bErrIxybnNV/NjQQ6amd2vu
ekhWYZGbEYeIkWTo2Xzu2uqFhqPZKHHYKSxJkud0KN2qfgtp7C1fUojuSap9Akef
aJDCwr21bUgrrliLjqVrISfYDzVt5q2XI7JtUpvG+1E433Cg3uICwIq0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnr0/+pnGsz7nwa72RCqVpEgc8nMB8GA1UdIwQY
MBaAFJNRXyWYbktXKnixCdmVyd312hJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2Yt
MTNkNTEzMjhhOWY3LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84NGIwM2ItNTYxOS00MjcyLTk0N2YtMTNkNTEzMjhhOWY3
LzEvazFGZkpaaHVTMWNxZUxFSjJaWEozZlhhRW1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRt/QNB5
a2G+a/3MttRARLtyXIStNdq5WrRyKswzee6S9BzCzqhXpUUCCerOT+kHJ3XA8U7t
PMgTfU9NO7XCkeu3lgfPhYqMDQ7gjfIodceQn9YrT232OdM2cTlZ9rzyFUuE/8xQ
O8Oe98dgoz3U+VZC+6TT5OuOEEMVU9QM6K/+ucqcjjygZ/5MMxhzBmGD/Tbe0cRP
Ti3ZRSL6i/VHPwJDZWE/u8mhQdXzDojReX8FPNiHZqwjSEC6rMS+hv28EdqqeR1C
lZJ8Yj54UAsIRwOqznOkqsg3O1DSlDCUotvlS+paSPAPYKLfEz4puErngxkzHdDj
9bYWQQQmuEPgXg==
-----END CERTIFICATE-----