Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File:                     9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier:          RxUjOwlANDRmH/y52z3dgrLPyvWzCJ8nBdK38Yzwfqc=
Subject key identifier:   CF:61:B8:DE:90:23:36:37:21:A9:71:F9:94:EA:20:47:0B:01:BA:5B
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer:       /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial:       01962E62028B147745B6CE1D3874236C29DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number:          0D
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: pNkxMQJ7YEH7f93eNQyJEkD6Adi8KXsP9I3/zxy1Ei8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:02:8b:14:77:45:b6:ce:1d:38:74:23:6c:29:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=cf61b8de9023363721a971f994ea20470b01ba5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:5d:47:f8:56:6e:62:ac:ea:c2:53:82:f0:
                    bd:fe:ef:48:51:75:b4:32:1f:ea:91:7f:04:b0:97:
                    9a:88:22:a4:e2:bb:cf:24:d0:b6:6c:f0:b9:10:6f:
                    4a:dc:7a:a4:bc:2a:d0:90:fb:39:15:f4:a0:d3:4b:
                    ec:4a:f8:06:96:80:d6:be:39:2f:b2:f8:84:fe:52:
                    d9:23:10:aa:fb:9e:f3:f7:48:94:fe:cd:af:31:c4:
                    62:c4:83:ad:a7:82:f2:13:51:f1:ae:2d:6d:a4:dd:
                    62:21:7d:a4:3f:dc:90:a2:f9:2a:da:81:30:25:7a:
                    c6:5e:80:44:ac:82:5c:a4:b9:f2:b2:9d:63:c6:af:
                    59:94:6b:7e:4b:24:38:e7:70:c8:00:5d:75:a2:89:
                    12:d6:28:3f:bc:f7:8f:33:cd:fd:cd:81:eb:51:22:
                    0a:a9:a0:46:95:44:43:42:ff:92:3e:60:57:6b:e6:
                    74:e8:8c:c5:04:7c:8c:55:bf:1d:ad:b9:d6:c4:02:
                    be:ea:6b:d5:d8:b0:61:54:e8:92:92:65:b8:61:8a:
                    3e:58:1d:5e:2d:42:41:57:63:6d:73:bb:27:1e:67:
                    ce:3c:c5:44:11:cf:a4:76:e4:46:8b:ad:b0:83:68:
                    da:b1:ec:a5:6c:6f:d0:fd:0b:3e:ad:63:9c:be:c7:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:B8:DE:90:23:36:37:21:A9:71:F9:94:EA:20:47:0B:01:BA:5B
            X509v3 Authority Key Identifier:
                keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:27:35:ed:74:ef:ec:8c:44:24:d5:17:4e:ed:1d:4d:f1:c9:
         19:ed:2f:4d:c5:db:80:bc:e4:23:11:f4:1c:c2:b9:f4:11:c3:
         e1:1b:89:53:66:21:6e:17:cb:b4:51:c0:87:af:f7:2d:59:86:
         e9:31:6e:3e:0c:b0:cc:73:f8:38:15:cd:ea:17:af:70:b0:44:
         2b:47:16:3b:81:f4:d7:c8:bf:5e:20:a8:c5:c0:d3:1f:14:55:
         9a:35:ee:0c:ab:b0:57:ee:cb:28:9a:6c:e6:be:dc:d6:5c:9c:
         dd:eb:d3:76:23:46:09:31:1a:a1:4b:dc:4e:0a:7c:28:f4:c1:
         09:f2:4a:6e:a2:12:a3:60:d8:a2:d3:7f:a4:96:05:32:36:86:
         d1:b4:f3:ba:a0:3d:14:44:ac:a9:d4:2d:ac:65:d3:e1:4f:85:
         cf:87:31:ec:2d:44:4c:74:f7:7f:ba:77:55:d0:4f:72:0f:c9:
         a7:2f:85:43:a3:d6:ed:a3:0d:ff:e5:7e:26:2f:05:e3:5e:6c:
         a7:a2:9d:4d:dc:3a:f2:85:46:c3:0d:78:6e:b1:8b:07:ea:61:
         41:61:be:03:c4:15:3d:b7:a5:9f:c7:4e:8b:44:99:c2:1c:1d:
         8e:9e:7e:1d:ad:ce:ae:ad:50:c2:5b:76:fa:f0:da:3d:e9:0d:
         84:60:69:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgKLFHdFts4dOHQjbCndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTg4NTQ4MjQzYjZlMjkwYTA2ZDI5YTJiMzcxMDRiNzdh
ZGU2ZmMwHhcNMjUwNDEzMDkwMTM3WhcNMjUwNDE0MDkwMTM3WjAzMTEwLwYDVQQD
EyhjZjYxYjhkZTkwMjMzNjM3MjFhOTcxZjk5NGVhMjA0NzBiMDFiYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcddR/hWbmKs6sJTgvC9/u9IUXW0
Mh/qkX8EsJeaiCKk4rvPJNC2bPC5EG9K3HqkvCrQkPs5FfSg00vsSvgGloDWvjkv
sviE/lLZIxCq+57z90iU/s2vMcRixIOtp4LyE1Hxri1tpN1iIX2kP9yQovkq2oEw
JXrGXoBErIJcpLnysp1jxq9ZlGt+SyQ453DIAF11ookS1ig/vPePM839zYHrUSIK
qaBGlURDQv+SPmBXa+Z06IzFBHyMVb8drbnWxAK+6mvV2LBhVOiSkmW4YYo+WB1e
LUJBV2Ntc7snHmfOPMVEEc+kduRGi62wg2jaseylbG/Q/Qs+rWOcvscVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9huN6QIzY3Ialx+ZTqIEcLAbpbMB8GA1UdIwQY
MBaAFPaohUgkO24pCgbSmis3EEt3reb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQt
OTRhZDQ4N2YyZTAxLzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hODRkYmEtZDdhMS00MjA5LWEyMGQtOTRhZDQ4N2YyZTAx
LzEvOXFpRlNDUTdiaWtLQnRLYUt6Y1FTM2V0NXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyc17XTv
7IxEJNUXTu0dTfHJGe0vTcXbgLzkIxH0HMK59BHD4RuJU2YhbhfLtFHAh6/3LVmG
6TFuPgywzHP4OBXN6hevcLBEK0cWO4H018i/XiCoxcDTHxRVmjXuDKuwV+7LKJps
5r7c1lyc3evTdiNGCTEaoUvcTgp8KPTBCfJKbqISo2DYotN/pJYFMjaG0bTzuqA9
FESsqdQtrGXT4U+Fz4cx7C1ETHT3f7p3VdBPcg/Jpy+FQ6PW7aMN/+V+Ji8F415s
p6KdTdw68oVGww14brGLB+phQWG+A8QVPbeln8dOi0SZwhwdjp5+Ha3Orq1Qwlt2
+vDaPekNhGBplQ==
-----END CERTIFICATE-----