Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File:                     D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier:          dROolBowHiCIENhY51A9aHbCla9fSJ1I1VsITG5WzSs=
Subject key identifier:   BD:88:C3:47:5F:26:24:B0:65:BB:6F:87:85:60:57:D9:C9:34:31:C2
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer:       /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial:       01962F3D88BDD42D7C6986562CF03802DAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: wovSqNh4LlaTv2kcNdROag6diQmmO9iar62Zr9kYPL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:bd:d4:2d:7c:69:86:56:2c:f0:38:02:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=bd88c3475f2624b065bb6f87856057d9c93431c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:78:51:93:82:6a:6c:d0:ee:09:f1:e3:49:
                    7a:ae:78:f0:cc:67:7a:ab:c4:fa:33:98:ce:84:d8:
                    73:f2:20:31:49:73:b3:28:2a:a9:17:50:aa:25:4b:
                    a8:72:95:be:57:75:fd:50:c9:ad:7e:f0:3c:ec:ed:
                    51:38:84:76:4a:5b:32:3d:c0:93:0e:41:e7:8a:5e:
                    e4:19:51:e2:36:25:3c:4c:0a:03:95:89:18:71:68:
                    28:0e:76:5f:ae:5d:9b:0f:63:c8:b9:c6:f6:07:4f:
                    7f:93:3e:cc:86:6a:58:a2:1a:aa:36:f0:2d:77:da:
                    4c:51:7b:e1:81:18:d4:0e:ec:93:cf:b0:a6:37:ba:
                    8e:ee:50:21:3c:bf:74:62:56:08:29:80:17:66:11:
                    cb:b8:16:12:a3:11:91:fb:da:09:12:5e:b1:d6:67:
                    32:b9:bf:52:f2:1e:0c:e0:94:a2:7a:02:42:18:01:
                    ba:64:9f:df:b1:72:d5:77:fa:9e:4b:23:08:ad:b8:
                    c8:84:9f:46:fd:ca:72:a2:d2:bb:c4:af:72:60:e5:
                    b1:63:c2:63:7f:3a:07:52:ab:2a:38:4f:51:fb:2d:
                    85:1b:97:e9:0d:28:86:a7:43:34:f1:6a:8a:1e:81:
                    20:a6:63:c0:89:08:88:bc:e9:1d:f0:47:ed:90:22:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:C3:47:5F:26:24:B0:65:BB:6F:87:85:60:57:D9:C9:34:31:C2
            X509v3 Authority Key Identifier:
                keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:52:38:27:4b:60:ca:35:e0:71:da:ad:73:9f:d2:31:f7:ce:
         c5:57:74:66:4e:a7:55:21:38:4b:6c:55:b2:6d:34:02:1a:38:
         6d:bb:88:d9:15:82:9a:fe:db:e9:8f:41:ce:cd:58:c0:b8:b4:
         79:c5:91:a1:86:cd:b5:22:fd:c1:d3:96:b5:1a:ab:a7:0e:fc:
         04:b4:59:0c:59:b1:f9:52:01:0e:f0:73:d0:8b:f1:51:cb:21:
         26:c9:17:45:27:a4:a6:6d:a0:e4:65:6f:65:dd:70:84:0f:49:
         34:bf:53:4a:9d:cf:b6:ad:e7:06:b5:21:16:70:66:30:7d:37:
         02:cd:c3:7f:33:87:b3:56:d1:22:66:08:30:cb:44:81:7c:3e:
         79:86:6d:2b:7e:01:89:de:5e:de:98:95:9f:2e:01:ec:8b:18:
         eb:e2:b1:8e:c1:d2:ca:e8:67:63:46:ae:08:29:2a:c3:81:15:
         c5:e4:06:19:8d:bb:b5:59:6f:00:4f:84:d9:b1:e6:ae:69:b6:
         d6:41:8d:01:18:b6:83:6d:d0:79:9b:09:1e:f9:1e:0a:fd:c2:
         84:60:d2:aa:7c:5a:c9:d7:83:2d:72:37:b6:d0:70:4b:9a:e7:
         d0:70:78:e2:b0:dd:e3:69:81:f1:67:4e:49:b9:1a:ff:81:35:
         90:4f:51:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYi91C18aYZWLPA4AtqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzk2NzRlZDU1ZjBhNzY1Y2E1ZGExYzZmYWZhNGRkMjVl
MmExNzgwHhcNMjUwNDEzMTMwMTIzWhcNMjUwNDE0MTMwMTIzWjAzMTEwLwYDVQQD
EyhiZDg4YzM0NzVmMjYyNGIwNjViYjZmODc4NTYwNTdkOWM5MzQzMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcN4UZOCamzQ7gnx40l6rnjwzGd6
q8T6M5jOhNhz8iAxSXOzKCqpF1CqJUuocpW+V3X9UMmtfvA87O1ROIR2SlsyPcCT
DkHnil7kGVHiNiU8TAoDlYkYcWgoDnZfrl2bD2PIucb2B09/kz7MhmpYohqqNvAt
d9pMUXvhgRjUDuyTz7CmN7qO7lAhPL90YlYIKYAXZhHLuBYSoxGR+9oJEl6x1mcy
ub9S8h4M4JSiegJCGAG6ZJ/fsXLVd/qeSyMIrbjIhJ9G/cpyotK7xK9yYOWxY8Jj
fzoHUqsqOE9R+y2FG5fpDSiGp0M08WqKHoEgpmPAiQiIvOkd8EftkCJytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2Iw0dfJiSwZbtvh4VgV9nJNDHCMB8GA1UdIwQY
MBaAFA/JZ07VXwp2XKXaHG+vpN0l4qF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEt
NGE5NDZjNTJmYmMyLzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84YWIyYTMtMDg4ZS00ZTBjLWJlOWEtNGE5NDZjNTJmYmMy
LzEvRDhsblR0VmZDblpjcGRvY2I2LWszU1hpb1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlI4J0tg
yjXgcdqtc5/SMffOxVd0Zk6nVSE4S2xVsm00Aho4bbuI2RWCmv7b6Y9Bzs1YwLi0
ecWRoYbNtSL9wdOWtRqrpw78BLRZDFmx+VIBDvBz0IvxUcshJskXRSekpm2g5GVv
Zd1whA9JNL9TSp3Ptq3nBrUhFnBmMH03As3DfzOHs1bRImYIMMtEgXw+eYZtK34B
id5e3piVny4B7IsY6+KxjsHSyuhnY0auCCkqw4EVxeQGGY27tVlvAE+E2bHmrmm2
1kGNARi2g23QeZsJHvkeCv3ChGDSqnxaydeDLXI3ttBwS5rn0HB44rDd42mB8WdO
Sbka/4E1kE9Rhg==
-----END CERTIFICATE-----