Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File:                     9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier:          i5/gj0nxJEOrnVaMsKB6aYAlQElJUPNdCHb9Z2e5yXc=
Subject key identifier:   AB:27:0C:7F:A9:23:43:C3:D5:CA:FF:1F:39:48:9B:F2:EB:C7:6F:B0
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer:       /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial:       01962F3DC6E484895F04E214AD098566C8CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number:          0FF1
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: NmtCQ0lzIJUJfqiUP0Pol7CkrHyVbsBEcziLCQCjxkA=)
                          2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:e4:84:89:5f:04:e2:14:ad:09:85:66:c8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=ab270c7fa92343c3d5caff1f39489bf2ebc76fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:54:11:65:8f:53:1f:2b:78:4b:55:72:21:
                    91:86:b6:50:d3:40:3e:5f:78:3b:89:21:51:d5:d6:
                    c0:72:fa:2e:00:6d:9a:0c:0b:71:17:7e:47:07:04:
                    85:76:6d:94:bf:5f:8c:ed:c8:b4:08:1c:fb:cf:ed:
                    35:f0:50:98:47:d5:2e:2d:b9:e3:a5:cd:c0:d0:07:
                    25:9c:02:39:18:a6:76:f1:3a:90:4d:44:83:4c:73:
                    6f:28:40:ae:57:07:28:87:7f:53:ba:52:ca:7b:5c:
                    36:82:aa:d2:25:d0:7a:d0:57:4e:37:91:ba:fe:6b:
                    ed:f5:d8:ad:f0:29:48:a7:51:ff:73:54:a2:1f:d3:
                    ae:a8:d6:0a:25:57:bb:ac:87:f1:ef:63:3b:44:b1:
                    c6:17:08:bb:0c:a9:26:22:a7:a1:7c:68:4a:aa:33:
                    3a:e6:91:a4:a1:32:08:fd:04:f0:11:4f:5d:f0:b2:
                    09:c5:b8:17:1e:fe:0a:8e:22:d5:5c:0e:20:5d:0a:
                    94:c1:30:7e:bb:9a:c4:af:b7:de:50:10:4b:b3:6c:
                    df:b5:83:46:82:80:9f:d6:8a:cb:72:2e:83:8c:c9:
                    52:3a:29:9c:f6:b1:e5:48:c8:9b:eb:e5:46:94:c6:
                    9c:5a:73:58:ef:19:60:d6:c0:09:e0:57:43:29:8d:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:0C:7F:A9:23:43:C3:D5:CA:FF:1F:39:48:9B:F2:EB:C7:6F:B0
            X509v3 Authority Key Identifier:
                keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:09:b2:2c:7c:5d:eb:3d:92:55:2f:31:1b:60:55:ed:40:4b:
         a3:70:5d:f2:3c:b9:26:2b:60:f8:8d:6d:08:15:f4:aa:4d:1c:
         74:6f:6c:53:35:02:38:e1:90:86:8d:de:88:f9:93:d2:f5:fd:
         5d:54:39:09:c6:0f:cc:66:8c:6d:02:39:bb:d2:28:29:8a:47:
         11:3b:37:95:4b:4f:a9:4e:b7:06:d4:1c:78:2a:eb:da:8d:a6:
         90:c2:be:c1:32:d8:00:41:45:83:a5:aa:fa:07:16:d2:f3:0f:
         60:5b:8f:31:7a:ba:be:13:8e:c5:01:43:71:d2:41:4f:8f:60:
         9b:54:91:e6:51:5b:79:e7:aa:09:e1:1e:d9:b0:7b:5d:34:65:
         80:bb:72:55:8d:1b:c5:ee:87:e9:74:5a:0e:1a:fa:1b:62:17:
         e2:df:a6:2a:c7:30:b8:09:03:87:fa:6c:c4:a6:e0:4f:d7:fc:
         6e:94:11:ed:70:69:bb:5d:4c:65:6c:7e:2b:43:09:9a:d1:f2:
         02:c3:41:00:31:dc:aa:99:2b:6b:55:cd:b6:dd:3e:37:fe:ae:
         6b:af:e1:07:ab:c2:e4:1a:b5:97:62:23:15:0f:11:63:7b:fd:
         47:60:f1:c6:ed:d1:c9:99:2e:ca:78:b6:78:53:66:d6:7c:78:
         e3:63:1f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcbkhIlfBOIUrQmFZsjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi
MWFhZDYwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
EyhhYjI3MGM3ZmE5MjM0M2MzZDVjYWZmMWYzOTQ4OWJmMmViYzc2ZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06lUEWWPUx8reEtVciGRhrZQ00A+
X3g7iSFR1dbAcvouAG2aDAtxF35HBwSFdm2Uv1+M7ci0CBz7z+018FCYR9UuLbnj
pc3A0AclnAI5GKZ28TqQTUSDTHNvKECuVwcoh39TulLKe1w2gqrSJdB60FdON5G6
/mvt9dit8ClIp1H/c1SiH9OuqNYKJVe7rIfx72M7RLHGFwi7DKkmIqehfGhKqjM6
5pGkoTII/QTwEU9d8LIJxbgXHv4KjiLVXA4gXQqUwTB+u5rEr7feUBBLs2zftYNG
goCf1orLci6DjMlSOimc9rHlSMib6+VGlMacWnNY7xlg1sAJ4FdDKY1bAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsnDH+pI0PD1cr/HzlIm/Lrx2+wMB8GA1UdIwQY
MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt
NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3
LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAmyLHxd
6z2SVS8xG2BV7UBLo3Bd8jy5Jitg+I1tCBX0qk0cdG9sUzUCOOGQho3eiPmT0vX9
XVQ5CcYPzGaMbQI5u9IoKYpHETs3lUtPqU63BtQceCrr2o2mkMK+wTLYAEFFg6Wq
+gcW0vMPYFuPMXq6vhOOxQFDcdJBT49gm1SR5lFbeeeqCeEe2bB7XTRlgLtyVY0b
xe6H6XRaDhr6G2IX4t+mKscwuAkDh/psxKbgT9f8bpQR7XBpu11MZWx+K0MJmtHy
AsNBADHcqpkra1XNtt0+N/6ua6/hB6vC5Bq1l2IjFQ8RY3v9R2Dxxu3RyZkuyni2
eFNm1nx442Mfuw==
-----END CERTIFICATE-----