Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File:                     i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier:          ch+xeiU9R52WSJ7LUMcMtHnSCIq+kPXylK2u0eBkROs=
Subject key identifier:   92:E9:46:7B:B1:8D:71:9A:3E:E8:B0:F0:A0:86:3E:23:15:B5:53:69
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer:       /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial:       01962ECFC6E4F7086FA5D3F5FC9C3F18536E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number:          0911
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: rtLD4ulTX6mun4WuS+7TtEBsrTFgLDNeVPPENwDnltc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:e4:f7:08:6f:a5:d3:f5:fc:9c:3f:18:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=92e9467bb18d719a3ee8b0f0a0863e2315b55369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:df:45:8e:90:66:81:58:6b:bc:f7:d1:09:bd:
                    48:74:c8:d9:b0:01:6c:85:61:ab:e3:4b:50:8d:bd:
                    93:69:4d:96:4b:92:5b:a3:a5:78:f6:8c:28:61:bb:
                    54:b6:70:63:91:c9:86:61:82:f2:bf:ce:0f:1c:6c:
                    c0:fc:8f:0a:4e:94:e5:17:c7:e0:cb:6e:d4:eb:53:
                    57:d4:fe:e4:cb:79:12:37:9e:c7:f2:89:1c:fa:8a:
                    68:12:73:4c:53:b7:89:c9:02:ed:5d:57:b1:f5:98:
                    48:cd:2b:66:2f:43:1b:9f:d6:10:f6:2f:44:85:33:
                    24:60:4e:d3:a9:ef:aa:2b:82:7b:50:47:37:ab:8f:
                    84:56:f5:6d:3b:fd:68:a3:96:f4:2d:a6:87:b5:d3:
                    5f:d5:ab:a0:32:02:2b:a2:ea:5f:56:70:77:49:fa:
                    73:c2:de:c4:78:fb:03:41:66:6a:39:f2:b7:6f:07:
                    c3:0d:f4:02:f0:98:44:a5:2e:d1:45:42:3f:ad:34:
                    0d:40:ed:20:12:b9:5a:99:4f:ed:ef:43:7f:b2:16:
                    82:05:e5:48:56:ba:5f:8a:46:1c:d2:0c:15:0a:af:
                    7b:13:a1:af:9c:93:dd:9d:ed:12:c1:7c:c7:b7:53:
                    2a:ee:99:6d:a7:50:a1:17:dd:a9:30:4a:50:3d:26:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:46:7B:B1:8D:71:9A:3E:E8:B0:F0:A0:86:3E:23:15:B5:53:69
            X509v3 Authority Key Identifier:
                keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:96:17:bb:32:11:cc:ed:2b:cc:b6:ee:11:e9:f8:e2:03:
         44:e1:ea:b2:b9:80:d5:96:6d:72:d7:39:b4:89:46:de:fb:85:
         ca:48:64:13:a1:08:15:c7:cf:b0:02:ad:ff:58:fd:1e:aa:61:
         79:ac:61:e2:6a:13:57:e0:45:15:e2:96:ad:34:23:29:31:11:
         37:64:7a:9b:b8:b5:66:d0:ae:f1:18:e4:84:94:a9:21:b6:14:
         c7:26:05:0d:4c:52:20:36:e4:f4:10:21:5a:dd:90:1c:fc:42:
         c4:7f:e5:56:c0:3a:fc:8c:28:8e:40:8b:2d:11:6f:f1:70:37:
         68:aa:7a:d0:a9:c5:3c:d7:11:e4:cf:fb:fd:43:45:57:9d:32:
         9c:35:69:5a:78:d9:b1:a0:e1:a6:bf:dc:e9:f0:75:b3:ed:d7:
         bf:0d:5b:f2:ce:7c:6f:68:a1:9b:b7:18:03:18:11:3e:aa:26:
         c2:5b:a8:eb:18:67:a7:84:b7:45:27:60:bb:32:97:88:ed:1c:
         46:d8:2e:53:9b:cc:f3:f9:3c:30:ff:90:33:1c:38:c8:c8:fc:
         8f:ee:92:1c:7a:af:dd:bd:53:40:ab:14:a8:0a:b1:0a:9c:2a:
         e0:e1:f0:d0:46:01:ec:ec:35:73:9a:e5:60:e3:7c:7f:d2:c8:
         b2:34:a8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8bk9whvpdP1/Jw/GFNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1
MzRiMGEwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
Eyg5MmU5NDY3YmIxOGQ3MTlhM2VlOGIwZjBhMDg2M2UyMzE1YjU1MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt9FjpBmgVhrvPfRCb1IdMjZsAFs
hWGr40tQjb2TaU2WS5Jbo6V49owoYbtUtnBjkcmGYYLyv84PHGzA/I8KTpTlF8fg
y27U61NX1P7ky3kSN57H8okc+opoEnNMU7eJyQLtXVex9ZhIzStmL0Mbn9YQ9i9E
hTMkYE7Tqe+qK4J7UEc3q4+EVvVtO/1oo5b0LaaHtdNf1augMgIroupfVnB3Sfpz
wt7EePsDQWZqOfK3bwfDDfQC8JhEpS7RRUI/rTQNQO0gErlamU/t70N/shaCBeVI
VrpfikYc0gwVCq97E6GvnJPdne0SwXzHt1Mq7pltp1ChF92pMEpQPSbfiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLpRnuxjXGaPuiw8KCGPiMVtVNpMB8GA1UdIwQY
MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt
NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy
LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV+WF7sy
EcztK8y27hHp+OIDROHqsrmA1ZZtctc5tIlG3vuFykhkE6EIFcfPsAKt/1j9Hqph
eaxh4moTV+BFFeKWrTQjKTERN2R6m7i1ZtCu8RjkhJSpIbYUxyYFDUxSIDbk9BAh
Wt2QHPxCxH/lVsA6/IwojkCLLRFv8XA3aKp60KnFPNcR5M/7/UNFV50ynDVpWnjZ
saDhpr/c6fB1s+3Xvw1b8s58b2ihm7cYAxgRPqomwluo6xhnp4S3RSdguzKXiO0c
RtguU5vM8/k8MP+QMxw4yMj8j+6SHHqv3b1TQKsUqAqxCpwq4OHw0EYB7Ow1c5rl
YON8f9LIsjSohg==
-----END CERTIFICATE-----