Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File:                     mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier:          LuwTr3CIBJQPx5LYLSZ7J9kZJHk8s8AS7fSAeBRrtMc=
Subject key identifier:   D9:56:F7:1B:EF:4F:E6:53:15:7D:4D:19:5D:37:80:D7:6D:62:4D:D0
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer:       /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial:       01962E99676A801F3B004B85B42EEB002D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number:          0F8C
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: sFIGWaDDlGzpGMPUhx7RBmWPDZkcRI2MI2CYsnC9Kfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:6a:80:1f:3b:00:4b:85:b4:2e:eb:00:2d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=d956f71bef4fe653157d4d195d3780d76d624dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:f7:93:71:33:80:0f:ab:21:75:2f:c9:52:
                    2d:66:0a:6e:39:f8:61:c8:55:75:5c:cc:c1:ff:3d:
                    8c:9f:8c:7e:58:30:82:a9:7e:e4:7c:13:1c:89:9f:
                    62:24:d1:02:d2:e6:49:64:5f:91:ae:45:05:be:9b:
                    4e:66:98:15:40:78:67:e1:2e:a5:66:5d:b1:c7:53:
                    de:c7:31:3c:ff:d7:4c:06:85:72:b2:4c:02:34:60:
                    4d:51:75:9e:ef:af:61:d9:50:d0:b1:95:54:3e:34:
                    0f:2d:58:29:e4:75:3c:1e:c6:b8:3c:0b:47:81:80:
                    d6:36:87:c5:00:a2:15:1d:74:ee:0c:d5:e8:9b:fd:
                    04:50:af:87:4a:21:7d:72:c4:c5:28:f4:e5:7a:7d:
                    ea:4c:4b:fb:be:c4:24:89:93:03:2f:4a:a9:2b:fb:
                    74:a6:95:78:53:4b:4f:35:cf:3d:80:58:d2:e1:eb:
                    e9:12:c8:85:61:f2:9a:bc:76:be:d2:d3:b6:0e:f5:
                    f9:cf:44:4d:49:df:10:ca:4e:28:5b:82:66:d0:64:
                    a4:3f:f8:82:96:44:12:ac:2f:28:bf:d0:ac:ba:61:
                    75:7c:05:4c:22:80:69:85:cc:70:2d:33:ef:ce:b6:
                    2e:1a:0d:87:09:4b:fb:b2:cf:dc:88:d9:ca:09:46:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:F7:1B:EF:4F:E6:53:15:7D:4D:19:5D:37:80:D7:6D:62:4D:D0
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4c:0f:17:e9:3c:a5:ff:3c:10:f8:77:20:e8:23:bb:3e:e8:
         e8:aa:33:a0:00:7a:84:c0:fe:04:c9:a8:07:5a:40:7a:1b:46:
         ff:ce:ba:f5:f9:cd:c0:95:d6:e8:11:e5:78:54:1a:b8:c0:b0:
         9a:53:0c:26:13:51:4d:55:e1:34:42:47:49:ea:67:e5:19:f5:
         b8:23:12:69:e9:67:cc:88:a4:ac:77:45:ca:fd:02:8f:a4:d2:
         8b:2a:87:db:a1:98:69:0a:d8:3b:29:f3:77:b6:8f:39:8c:27:
         6c:c4:64:03:0f:ed:db:a2:2a:c7:1e:a3:8e:2b:fd:e8:f9:c6:
         b6:f8:a6:98:5c:b8:88:00:4d:8b:1c:ec:d4:b4:7d:16:60:6d:
         44:b1:6a:9c:81:4b:96:af:bc:03:5d:9a:cf:17:c9:75:5a:70:
         87:97:5f:aa:71:52:f0:7a:3e:c9:6a:97:cb:b5:ee:fb:37:41:
         80:fc:21:9d:b7:a3:a2:2d:15:6a:de:5d:b3:fb:42:d0:05:67:
         8e:f4:55:0c:ba:54:52:c9:88:50:33:0f:fb:af:09:14:90:ce:
         5a:ad:50:07:f3:4d:9b:fb:9d:c6:92:3c:68:28:e4:6e:41:dd:
         75:1d:bf:81:32:28:21:5a:6d:df:b5:d2:b3:27:b4:67:86:be:
         cd:2c:d4:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWdqgB87AEuFtC7rAC0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMWU1NWY0M2U0ZmRkNmQyNGZiNGIwZWRhNmU5ZDEy
OGFhNTEwHhcNMjUwNDEzMTAwMjA3WhcNMjUwNDE0MTAwMjA3WjAzMTEwLwYDVQQD
EyhkOTU2ZjcxYmVmNGZlNjUzMTU3ZDRkMTk1ZDM3ODBkNzZkNjI0ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYv3k3EzgA+rIXUvyVItZgpuOfhh
yFV1XMzB/z2Mn4x+WDCCqX7kfBMciZ9iJNEC0uZJZF+RrkUFvptOZpgVQHhn4S6l
Zl2xx1PexzE8/9dMBoVyskwCNGBNUXWe769h2VDQsZVUPjQPLVgp5HU8Hsa4PAtH
gYDWNofFAKIVHXTuDNXom/0EUK+HSiF9csTFKPTlen3qTEv7vsQkiZMDL0qpK/t0
ppV4U0tPNc89gFjS4evpEsiFYfKavHa+0tO2DvX5z0RNSd8Qyk4oW4Jm0GSkP/iC
lkQSrC8ov9CsumF1fAVMIoBphcxwLTPvzrYuGg2HCUv7ss/ciNnKCUb16wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlW9xvvT+ZTFX1NGV03gNdtYk3QMB8GA1UdIwQY
MBaAFJr50eVfQ+T91tJPtLDtpunRKKpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMt
MjkxYTMxNjRhMGI4LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMtMjkxYTMxNjRhMGI4
LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUwPF+k8
pf88EPh3IOgjuz7o6KozoAB6hMD+BMmoB1pAehtG/8669fnNwJXW6BHleFQauMCw
mlMMJhNRTVXhNEJHSepn5Rn1uCMSaelnzIikrHdFyv0Cj6TSiyqH26GYaQrYOynz
d7aPOYwnbMRkAw/t26Iqxx6jjiv96PnGtvimmFy4iABNixzs1LR9FmBtRLFqnIFL
lq+8A12azxfJdVpwh5dfqnFS8Ho+yWqXy7Xu+zdBgPwhnbejoi0Vat5ds/tC0AVn
jvRVDLpUUsmIUDMP+68JFJDOWq1QB/NNm/udxpI8aCjkbkHddR2/gTIoIVpt37XS
sye0Z4a+zSzUQA==
-----END CERTIFICATE-----