Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File:                     PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier:          St3agxP7oOqocQAZ9QSM0IWlrWvqSWgkrFPnvAi13LY=
Subject key identifier:   CF:67:60:96:8A:D9:A4:C3:74:26:19:F8:BF:94:3F:3F:B4:4D:C0:97
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer:       /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial:       01962E99697A940861BE121B81FBB9C352BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number:          09D8
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: ZzKgZAaRLVec+GAMwd5wFnmRpUnedBcrEi28B9jUF/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:69:7a:94:08:61:be:12:1b:81:fb:b9:c3:52:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=cf6760968ad9a4c3742619f8bf943f3fb44dc097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0c:3c:cb:91:3b:3a:4a:e5:41:16:04:a0:26:
                    d9:e2:34:4f:ce:e1:a4:c7:35:52:c5:61:a8:3c:44:
                    a2:26:fc:95:86:12:cf:d7:35:0c:31:55:8a:f4:0d:
                    bf:d9:31:49:dc:71:ce:6e:b7:94:95:57:2e:b4:27:
                    a1:ab:9b:27:dc:00:44:8c:78:fa:0d:fe:99:da:26:
                    06:c8:99:21:73:f1:15:d4:44:19:7d:85:9f:bf:76:
                    5a:1a:d9:c7:15:ea:49:35:1d:85:a2:0d:68:37:35:
                    82:ce:b6:a3:5e:fc:2f:5c:79:c1:26:ad:f4:84:1c:
                    c5:44:11:dd:cc:93:5d:4a:51:9f:ca:a3:0e:58:8d:
                    82:e9:d6:f2:2e:a5:24:aa:e6:7c:99:4b:e6:40:93:
                    90:b8:47:87:b7:88:82:b9:ed:b0:d4:75:e9:b0:59:
                    ba:03:24:cd:b0:82:02:60:3c:48:5e:2c:01:5a:d1:
                    07:4e:48:c4:60:54:6e:35:16:58:65:75:03:c3:ab:
                    75:81:d1:ee:00:99:94:4f:de:d0:ee:eb:0e:da:86:
                    03:e2:df:0e:e5:a1:c8:10:02:56:c8:55:c8:6b:2c:
                    3d:da:f1:bc:78:a1:77:ee:ac:1a:50:9f:85:fd:d5:
                    0f:3c:54:e1:bf:0f:89:3c:c5:c9:eb:9f:cd:42:36:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:60:96:8A:D9:A4:C3:74:26:19:F8:BF:94:3F:3F:B4:4D:C0:97
            X509v3 Authority Key Identifier:
                keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:df:78:88:ce:a1:da:42:e2:36:b6:39:97:88:d4:7f:86:f6:
         eb:6c:61:11:8b:a3:88:a7:04:de:ca:51:11:8e:3f:00:7a:23:
         d9:66:fb:b2:ed:b0:07:5d:d3:4c:c2:ee:59:1b:20:0b:57:2d:
         84:d6:ae:83:1d:bf:60:de:0d:0c:5f:f4:ba:75:23:3f:ae:e6:
         7b:78:b8:6b:73:9d:96:28:13:95:e8:d8:57:14:d6:b7:87:4e:
         e2:51:db:e8:94:27:48:e9:fd:f2:37:1d:24:d2:79:aa:f2:d8:
         1b:1d:0e:b6:46:b7:44:82:b5:f8:5b:57:c9:e5:63:e8:65:dd:
         f8:ae:17:5c:38:50:e2:82:51:7e:44:b9:32:4a:98:a7:08:8a:
         20:cf:7a:6e:f5:78:0d:b5:02:d0:de:43:34:57:fc:f8:20:b4:
         c3:6d:5c:1e:28:fe:f0:e3:3c:5c:71:bd:1a:6a:da:d1:f3:88:
         d4:cf:24:00:0a:15:63:33:47:eb:c7:db:a5:17:4b:59:25:29:
         15:4e:62:37:8f:66:af:62:00:b3:48:a7:30:17:65:22:74:0a:
         20:2b:84:be:f3:f9:95:a2:dc:b8:13:3d:72:12:3b:28:79:21:
         46:a9:76:b8:d6:2a:d9:80:c4:90:b3:cf:80:83:25:ae:66:57:
         dd:5c:9f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWl6lAhhvhIbgfu5w1K8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTdmNDZhZmYzZDhiMjFmMDBmZWU4ZjYzNWVhZTM0YTdm
NGE0ZDcwHhcNMjUwNDEzMTAwMjA3WhcNMjUwNDE0MTAwMjA3WjAzMTEwLwYDVQQD
EyhjZjY3NjA5NjhhZDlhNGMzNzQyNjE5ZjhiZjk0M2YzZmI0NGRjMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gw8y5E7OkrlQRYEoCbZ4jRPzuGk
xzVSxWGoPESiJvyVhhLP1zUMMVWK9A2/2TFJ3HHObreUlVcutCehq5sn3ABEjHj6
Df6Z2iYGyJkhc/EV1EQZfYWfv3ZaGtnHFepJNR2Fog1oNzWCzrajXvwvXHnBJq30
hBzFRBHdzJNdSlGfyqMOWI2C6dbyLqUkquZ8mUvmQJOQuEeHt4iCue2w1HXpsFm6
AyTNsIICYDxIXiwBWtEHTkjEYFRuNRZYZXUDw6t1gdHuAJmUT97Q7usO2oYD4t8O
5aHIEAJWyFXIayw92vG8eKF37qwaUJ+F/dUPPFThvw+JPMXJ65/NQjbJVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9nYJaK2aTDdCYZ+L+UPz+0TcCXMB8GA1UdIwQY
MBaAFD0X9Gr/PYsh8A/uj2NerjSn9KTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEt
ODUxZWQ1MjlmMjIyLzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEtODUxZWQ1MjlmMjIy
LzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd94iM6h
2kLiNrY5l4jUf4b262xhEYujiKcE3spREY4/AHoj2Wb7su2wB13TTMLuWRsgC1ct
hNaugx2/YN4NDF/0unUjP67me3i4a3OdligTlejYVxTWt4dO4lHb6JQnSOn98jcd
JNJ5qvLYGx0Otka3RIK1+FtXyeVj6GXd+K4XXDhQ4oJRfkS5MkqYpwiKIM96bvV4
DbUC0N5DNFf8+CC0w21cHij+8OM8XHG9Gmra0fOI1M8kAAoVYzNH68fbpRdLWSUp
FU5iN49mr2IAs0inMBdlInQKICuEvvP5laLcuBM9chI7KHkhRql2uNYq2YDEkLPP
gIMlrmZX3VyfIQ==
-----END CERTIFICATE-----