Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File:                     r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier:          NdesOfNCZnEVUIN6hWXF90DMJ+dOR4jKleEFM1LdXOs=
Subject key identifier:   43:7B:97:55:EF:22:1F:09:88:A2:8C:4B:21:AD:A3:8C:71:F6:4C:53
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer:       /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial:       01962E98FFA5220AF6BFF6CAEC50F5094244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number:          09DF
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: jeJEFJSi4+KnWN8Up1q/UAfj/WPc8pz610g9Cf+f1F8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:a5:22:0a:f6:bf:f6:ca:ec:50:f5:09:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=437b9755ef221f0988a28c4b21ada38c71f64c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:bd:66:5e:da:83:76:a5:44:a8:19:4d:35:
                    09:c3:db:bd:d2:84:0a:04:83:9b:86:4c:c9:0c:8a:
                    c9:ba:01:92:d8:7c:e5:26:8c:0a:b8:3c:94:39:1c:
                    17:29:b8:95:32:1c:33:43:2f:52:1f:65:99:d0:32:
                    63:e1:1c:b5:25:cd:eb:2d:d5:71:2f:bf:53:ca:b8:
                    54:51:bd:55:55:3a:d7:3d:f3:c6:d9:f5:44:78:f8:
                    0f:07:81:c1:35:e9:10:46:49:57:08:a7:57:dc:6f:
                    c9:84:6d:89:b2:90:70:4a:e4:f5:70:48:00:3c:c3:
                    f2:f8:a8:92:16:dd:5e:1b:c3:1d:aa:c7:43:73:28:
                    87:d8:13:42:73:23:48:88:7a:78:1b:65:68:c8:65:
                    f4:67:4f:10:90:c3:0d:ef:d2:b4:3b:9b:0f:4a:04:
                    e2:d1:a9:01:8c:01:61:90:9c:6e:a9:bf:90:90:fe:
                    a2:3b:11:c4:3a:ee:f0:b4:78:da:0a:e3:9a:f1:0d:
                    c7:6c:bc:a3:61:fd:3f:58:cd:5a:85:a0:6e:27:d1:
                    a6:7a:08:1b:f9:52:83:11:f9:16:75:89:c8:3e:2f:
                    d9:b3:a1:87:b1:0c:75:5b:87:52:49:2f:2c:28:d0:
                    79:e4:f6:e1:3e:f8:e6:6b:13:e6:e6:9b:d6:4c:3c:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:97:55:EF:22:1F:09:88:A2:8C:4B:21:AD:A3:8C:71:F6:4C:53
            X509v3 Authority Key Identifier:
                keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:66:97:95:ee:56:7c:eb:5c:50:9b:8d:a9:e8:fe:84:ca:17:
         60:55:7a:ad:9a:ed:6d:fd:29:42:91:41:25:33:f4:9e:a9:e7:
         15:9b:1b:2d:62:dc:fe:dc:61:b2:0a:61:fd:6f:ab:c2:f4:0b:
         19:4c:2a:53:d4:39:20:5a:98:9e:e7:52:6b:96:ee:34:14:71:
         6f:f2:85:e7:44:80:82:b1:f7:7e:2d:16:23:3d:61:94:ca:a9:
         b9:ba:c4:16:22:d2:61:09:46:b4:9c:8a:6c:37:ad:e9:10:82:
         06:89:7f:78:b3:2d:5e:a4:cc:18:f1:fe:2b:f7:38:64:6a:76:
         2a:e7:a6:a6:b6:40:d0:bc:a0:60:4b:a6:85:1c:c1:db:8d:ff:
         66:85:08:1f:e3:c7:f7:57:1c:e8:48:18:e7:9b:54:81:24:39:
         b6:a7:ed:cf:fb:42:0b:6a:3a:fc:95:06:84:cf:82:bd:5c:82:
         d7:0b:06:70:db:ad:f0:04:56:5e:b4:f6:71:5b:4a:e0:b4:8e:
         d8:67:cc:fc:4d:67:31:cb:4d:c0:c6:99:e1:98:f5:7b:8e:3f:
         18:81:94:0f:a8:2a:82:fc:50:07:1d:c4:2d:98:2a:3c:09:2f:
         ce:a2:6d:8c:5b:7e:4f:f3:a3:6b:dc:4d:c1:55:bf:70:12:8a:
         ec:b1:83:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumP+lIgr2v/bK7FD1CUJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx
NWM5MTAwHhcNMjUwNDEzMTAwMTQwWhcNMjUwNDE0MTAwMTQwWjAzMTEwLwYDVQQD
Eyg0MzdiOTc1NWVmMjIxZjA5ODhhMjhjNGIyMWFkYTM4YzcxZjY0YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOm9Zl7ag3alRKgZTTUJw9u90oQK
BIObhkzJDIrJugGS2HzlJowKuDyUORwXKbiVMhwzQy9SH2WZ0DJj4Ry1Jc3rLdVx
L79TyrhUUb1VVTrXPfPG2fVEePgPB4HBNekQRklXCKdX3G/JhG2JspBwSuT1cEgA
PMPy+KiSFt1eG8MdqsdDcyiH2BNCcyNIiHp4G2VoyGX0Z08QkMMN79K0O5sPSgTi
0akBjAFhkJxuqb+QkP6iOxHEOu7wtHjaCuOa8Q3HbLyjYf0/WM1ahaBuJ9Gmeggb
+VKDEfkWdYnIPi/Zs6GHsQx1W4dSSS8sKNB55PbhPvjmaxPm5pvWTDwXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN7l1XvIh8JiKKMSyGto4xx9kxTMB8GA1UdIwQY
MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt
YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx
LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWaXle5W
fOtcUJuNqej+hMoXYFV6rZrtbf0pQpFBJTP0nqnnFZsbLWLc/txhsgph/W+rwvQL
GUwqU9Q5IFqYnudSa5buNBRxb/KF50SAgrH3fi0WIz1hlMqpubrEFiLSYQlGtJyK
bDet6RCCBol/eLMtXqTMGPH+K/c4ZGp2KuemprZA0LygYEumhRzB243/ZoUIH+PH
91cc6EgY55tUgSQ5tqftz/tCC2o6/JUGhM+CvVyC1wsGcNut8ARWXrT2cVtK4LSO
2GfM/E1nMctNwMaZ4Zj1e44/GIGUD6gqgvxQBx3ELZgqPAkvzqJtjFt+T/Oja9xN
wVW/cBKK7LGDGw==
-----END CERTIFICATE-----