Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File:                     uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier:          U73nL1P97EciU4jn5BGq5wpDzc/wDSpqNjQr7Lju7RQ=
Subject key identifier:   9D:7E:36:77:58:BB:12:B6:D9:37:C4:2E:87:D8:BC:08:CC:03:16:78
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer:       /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial:       01962E98CBCDED4A6D1E796ACD4C94E4BBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number:          0CC7
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: hb+nE9elu0fzfI3qpthesolZUEeXmEvvY+8T5GJd53w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:cd:ed:4a:6d:1e:79:6a:cd:4c:94:e4:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=9d7e367758bb12b6d937c42e87d8bc08cc031678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:b2:80:ef:27:b8:e3:04:a9:ef:21:0e:45:
                    20:41:fc:21:5a:60:2d:06:0d:d9:0b:83:2f:4e:8e:
                    ab:e5:80:33:a3:a1:dd:81:b6:00:be:92:00:a5:c8:
                    ab:6e:17:d4:1e:22:5f:6b:f5:a1:46:e1:7a:2c:bf:
                    2f:da:84:14:3b:89:ed:20:77:56:60:3b:47:18:f3:
                    7b:7a:79:09:22:92:b9:54:a1:a1:8f:bb:69:3e:62:
                    5e:fe:06:d5:9c:7a:ba:17:25:28:28:62:34:1c:5d:
                    9a:c6:de:b1:ca:48:29:6a:f6:0e:57:2f:8a:6e:f9:
                    4d:d0:c9:99:09:8d:e5:bb:52:e6:cf:e1:c5:48:31:
                    45:0c:0a:13:af:df:bf:dc:ac:a0:6c:0f:bf:8d:12:
                    91:5d:ae:65:1a:07:ec:c4:74:86:f6:56:ce:48:91:
                    7e:e9:30:25:4b:b6:fb:34:b7:86:44:fc:5d:fa:eb:
                    7f:4b:36:b2:72:3c:b6:bc:a8:ff:19:1e:81:92:df:
                    32:df:50:c5:fc:fb:2c:e9:2f:6e:4c:b4:3c:e6:83:
                    e9:33:75:93:1d:a3:3d:87:62:33:d5:20:d5:ba:a4:
                    f2:a4:00:0b:f6:12:09:a6:df:fa:eb:96:9a:70:f2:
                    6e:39:dd:06:87:7e:8d:ad:b8:4f:4f:93:3a:00:fe:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7E:36:77:58:BB:12:B6:D9:37:C4:2E:87:D8:BC:08:CC:03:16:78
            X509v3 Authority Key Identifier:
                keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:ef:8f:e5:8f:86:7d:e4:94:17:63:3f:68:33:4c:e7:f7:
         ae:12:b6:cb:00:0f:d0:2a:05:d0:1b:42:06:c7:cb:5d:19:bb:
         3e:7c:40:4c:99:cb:b2:02:2d:97:d2:fb:a6:31:5d:55:df:9b:
         85:ab:c4:73:20:05:6e:c4:23:b1:b0:75:dd:3b:f3:df:a3:aa:
         a6:36:6d:6e:a2:49:22:cb:03:aa:ae:cd:f4:64:f2:82:1a:87:
         f2:83:e0:1c:de:3a:53:c2:d6:7f:20:12:19:7d:bc:b6:c0:be:
         37:5d:d9:4c:69:09:47:fa:df:4f:8c:80:79:1d:35:3d:a4:bf:
         d5:8b:81:e4:f2:49:3c:19:62:d5:7d:dd:e2:0d:7c:46:11:97:
         cf:24:32:c3:e7:82:f6:ac:28:7e:66:3a:9a:b4:a3:d3:eb:35:
         b6:c2:4e:ae:09:e3:b0:ab:c2:e5:56:5e:a6:2a:2e:ba:65:d2:
         3a:a9:f1:d1:7b:b1:56:72:9f:d6:d8:3a:0c:30:08:98:68:13:
         af:8e:f4:21:b0:49:ca:65:df:47:5f:c2:5c:74:c4:4c:2d:09:
         49:02:d1:ae:99:f9:96:11:f4:b5:a7:00:9d:19:6f:c6:e8:dc:
         d0:76:97:51:40:ba:ac:17:c2:d8:d7:c0:61:c9:91:17:e1:d9:
         21:45:1d:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMvN7UptHnlqzUyU5Lv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2Y1ZThmZWViNWY1ZTczYjA5N2I2NjY1N2VlZDhkYjk3
NGE0MGUwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
Eyg5ZDdlMzY3NzU4YmIxMmI2ZDkzN2M0MmU4N2Q4YmMwOGNjMDMxNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiygO8nuOMEqe8hDkUgQfwhWmAt
Bg3ZC4MvTo6r5YAzo6HdgbYAvpIApcirbhfUHiJfa/WhRuF6LL8v2oQUO4ntIHdW
YDtHGPN7enkJIpK5VKGhj7tpPmJe/gbVnHq6FyUoKGI0HF2axt6xykgpavYOVy+K
bvlN0MmZCY3lu1Lmz+HFSDFFDAoTr9+/3KygbA+/jRKRXa5lGgfsxHSG9lbOSJF+
6TAlS7b7NLeGRPxd+ut/Szaycjy2vKj/GR6Bkt8y31DF/Pss6S9uTLQ85oPpM3WT
HaM9h2Iz1SDVuqTypAAL9hIJpt/665aacPJuOd0Gh36NrbhPT5M6AP5RTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1+NndYuxK22TfELofYvAjMAxZ4MB8GA1UdIwQY
MBaAFLh/Xo/utfXnOwl7ZmV+7Y25dKQOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzIt
Y2M2MGE1ZmRlZWIyLzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzItY2M2MGE1ZmRlZWIy
LzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwDvj+WP
hn3klBdjP2gzTOf3rhK2ywAP0CoF0BtCBsfLXRm7PnxATJnLsgItl9L7pjFdVd+b
havEcyAFbsQjsbB13Tvz36OqpjZtbqJJIssDqq7N9GTyghqH8oPgHN46U8LWfyAS
GX28tsC+N13ZTGkJR/rfT4yAeR01PaS/1YuB5PJJPBli1X3d4g18RhGXzyQyw+eC
9qwofmY6mrSj0+s1tsJOrgnjsKvC5VZepiouumXSOqnx0XuxVnKf1tg6DDAImGgT
r470IbBJymXfR1/CXHTETC0JSQLRrpn5lhH0tacAnRlvxujc0HaXUUC6rBfC2NfA
YcmRF+HZIUUdlw==
-----END CERTIFICATE-----