Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
File:                     CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json)
Hash identifier:          jpxg4et1Lttq3+fG2v0XqYn4R5AgrpNpSA6Uylu77Bk=
Subject key identifier:   A9:D7:37:37:59:90:FF:55:64:4F:CE:7F:EC:2B:BB:45:37:9E:B1:8B
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Certificate issuer:       /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial:       01962F3D2E32772E8BA3002F87A8515B7257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
Manifest number:          0310
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: Pea61EN+2SBsTTvISArIywaqCqLR2jDZDXhhGZBtd1A=)
                          2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=)
                          3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2e:32:77:2e:8b:a3:00:2f:87:a8:51:5b:72:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=a9d737375990ff55644fce7fec2bbb45379eb18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:8b:e2:f6:57:27:51:97:e5:ba:11:76:4a:
                    1e:68:d9:85:3e:ed:db:66:bf:8f:21:f2:b2:bb:fa:
                    1d:74:3c:7f:31:7d:e9:e2:42:06:52:55:6a:6c:ea:
                    82:62:cf:76:6f:d4:f1:c1:57:ab:61:72:79:76:30:
                    bf:d6:a3:27:b8:3b:ee:af:e5:97:42:de:3b:fb:da:
                    83:c4:27:1b:65:34:29:1e:39:91:af:ec:ba:1c:e8:
                    18:36:44:11:c2:dc:68:ea:88:2d:2c:5d:eb:9b:0b:
                    83:10:79:a7:4c:ba:79:2b:2f:14:aa:56:b2:6c:dc:
                    56:9c:07:6b:54:c3:07:8b:70:ce:c3:59:26:4f:d8:
                    8b:59:3d:cf:72:66:b7:d3:df:4a:02:0e:cf:11:68:
                    25:da:1d:2e:27:4f:fa:6d:50:da:d8:ca:09:cf:79:
                    d1:f0:ee:5a:d5:09:1a:3c:16:6c:c9:32:02:09:ef:
                    05:fd:37:8e:5b:ed:6b:12:ee:0c:97:58:dd:17:a2:
                    ca:4e:ca:fb:7c:57:87:89:dd:30:7f:c9:f3:28:fa:
                    84:fe:5f:a1:17:e6:d4:77:ae:69:ff:99:36:ed:76:
                    a7:fa:5a:0d:bb:03:af:49:94:ba:19:8b:c6:c1:1b:
                    9f:3a:b1:0f:8a:ee:a4:ad:cf:96:02:09:32:ce:aa:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:37:37:59:90:FF:55:64:4F:CE:7F:EC:2B:BB:45:37:9E:B1:8B
            X509v3 Authority Key Identifier:
                keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:87:5d:aa:56:2b:af:d1:09:73:77:69:81:40:a2:0b:42:
         34:61:97:9c:b3:33:56:57:ca:5f:0f:ed:88:d5:88:17:ad:69:
         10:aa:fb:67:50:da:ee:c8:97:29:f0:89:c7:cb:28:75:84:9e:
         b9:70:54:51:59:fd:fb:2f:d2:94:65:7f:c1:87:3b:ba:75:4a:
         ae:2f:35:ca:51:2e:e7:9e:16:b7:12:54:4c:c8:41:47:b3:93:
         c7:b4:07:cf:a5:3d:86:1d:8f:f9:99:a0:9a:28:a2:08:de:02:
         40:f4:18:c4:f7:58:03:86:fb:b6:8a:32:3b:72:34:ba:d0:b4:
         64:94:75:19:05:f5:94:6a:97:49:66:6e:c3:6b:7d:6e:c1:a7:
         03:b6:c1:be:4d:4a:5e:ca:21:2a:2e:c6:35:23:3f:86:fc:a1:
         8c:7d:cb:3c:6f:5a:b9:95:97:36:cd:0c:2f:0a:c1:d8:3a:49:
         03:32:f3:af:77:09:77:5d:c1:9d:36:14:be:a0:44:94:85:6c:
         34:80:d6:68:8c:24:95:4a:9b:1f:40:93:c7:11:41:e8:7b:94:
         20:c1:e8:aa:02:6b:a2:be:87:aa:ab:82:05:4c:21:52:01:57:
         48:b0:f9:aa:05:20:24:47:d9:29:b4:35:48:02:c5:aa:4f:9c:
         7d:71:58:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPS4ydy6LowAvh6hRW3JXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjUwNDEzMTMwMTAwWhcNMjUwNDE0MTMwMTAwWjAzMTEwLwYDVQQD
EyhhOWQ3MzczNzU5OTBmZjU1NjQ0ZmNlN2ZlYzJiYmI0NTM3OWViMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8iL4vZXJ1GX5boRdkoeaNmFPu3b
Zr+PIfKyu/oddDx/MX3p4kIGUlVqbOqCYs92b9TxwVerYXJ5djC/1qMnuDvur+WX
Qt47+9qDxCcbZTQpHjmRr+y6HOgYNkQRwtxo6ogtLF3rmwuDEHmnTLp5Ky8Uqlay
bNxWnAdrVMMHi3DOw1kmT9iLWT3Pcma3099KAg7PEWgl2h0uJ0/6bVDa2MoJz3nR
8O5a1QkaPBZsyTICCe8F/TeOW+1rEu4Ml1jdF6LKTsr7fFeHid0wf8nzKPqE/l+h
F+bUd65p/5k27Xan+loNuwOvSZS6GYvGwRufOrEPiu6krc+WAgkyzqqhHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnXNzdZkP9VZE/Of+wru0U3nrGLMB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGeHXapW
K6/RCXN3aYFAogtCNGGXnLMzVlfKXw/tiNWIF61pEKr7Z1Da7siXKfCJx8sodYSe
uXBUUVn9+y/SlGV/wYc7unVKri81ylEu554WtxJUTMhBR7OTx7QHz6U9hh2P+Zmg
miiiCN4CQPQYxPdYA4b7tooyO3I0utC0ZJR1GQX1lGqXSWZuw2t9bsGnA7bBvk1K
XsohKi7GNSM/hvyhjH3LPG9auZWXNs0MLwrB2DpJAzLzr3cJd13BnTYUvqBElIVs
NIDWaIwklUqbH0CTxxFB6HuUIMHoqgJror6HqquCBUwhUgFXSLD5qgUgJEfZKbQ1
SALFqk+cfXFYWg==
-----END CERTIFICATE-----