Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File:                     odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier:          7YyYfrmmDHgrUm86xZBhd6015oYjCfh8meWxoATfnV0=
Subject key identifier:   F2:AB:87:58:8E:30:A4:58:AB:5C:E3:E1:B6:E4:89:54:10:66:46:0E
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer:       /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial:       01962F3D2D54A9A56DB8BCC6DED7B9F3600E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number:          C9
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: f8eva6dTg0uueiPNQyu8lDD+eB0afCq0qsaXtz9p86o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2d:54:a9:a5:6d:b8:bc:c6:de:d7:b9:f3:60:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=f2ab87588e30a458ab5ce3e1b6e489541066460e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:aa:59:7b:12:19:36:99:5e:d5:54:25:98:
                    71:87:94:2f:01:e5:e8:28:2c:22:f2:0a:13:44:2f:
                    53:4c:20:c5:bc:9d:25:5e:46:fc:22:a0:26:79:7b:
                    97:df:f7:39:74:ce:97:da:4a:7b:a1:e8:a6:c2:e4:
                    d5:1e:6f:fc:b6:8d:ea:e6:c4:24:bd:41:98:8d:6d:
                    9d:08:3a:1a:9a:47:04:44:32:76:e2:4d:1f:dd:80:
                    2d:4c:84:a3:8a:fc:f4:f2:e7:f2:0c:32:fb:2e:67:
                    3a:e9:e4:6a:57:42:73:a7:d9:76:15:32:7b:c0:9a:
                    59:68:5e:b4:0d:b0:c5:e4:da:e8:98:33:c6:5f:f0:
                    c6:c2:de:24:40:99:77:25:f1:6b:a1:5a:7e:11:7f:
                    9b:79:44:65:ab:8f:db:73:03:1a:3c:9b:d6:5b:76:
                    82:3b:7d:7e:d8:ae:c6:7a:7d:0f:a9:3a:ac:2f:6b:
                    19:c2:a5:37:71:ad:ca:d0:91:6a:e6:e0:32:e2:55:
                    14:8c:85:f1:05:a0:2a:90:74:83:66:95:2e:aa:88:
                    94:02:c1:58:46:f4:6b:fb:6c:50:4b:f0:cf:59:65:
                    2c:29:11:63:94:7c:96:35:d5:f2:3a:0f:24:08:c6:
                    5c:9f:b0:c4:41:ed:8f:7e:4c:6a:28:5f:18:d2:af:
                    31:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:87:58:8E:30:A4:58:AB:5C:E3:E1:B6:E4:89:54:10:66:46:0E
            X509v3 Authority Key Identifier:
                keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:08:74:19:57:68:45:ee:87:40:de:de:99:84:51:11:9c:ff:
         5b:3a:94:d1:3b:39:d6:1b:59:bf:bc:05:9b:2a:40:01:80:3e:
         57:4b:67:64:16:43:cb:1a:48:c8:cf:11:40:49:17:64:a8:fc:
         5f:0e:d6:fd:7b:87:1d:6a:52:52:7f:dd:67:d2:cb:64:74:d5:
         77:ff:4e:de:74:fb:17:29:41:32:27:fc:2a:23:6b:7f:6e:c5:
         d5:c7:c9:89:f4:9c:9f:93:d5:12:d0:cc:66:51:bc:9a:91:95:
         1e:f2:4e:66:ab:ec:ca:fb:ed:46:1c:9d:81:15:9b:93:52:86:
         ae:e5:06:da:b1:43:54:a7:7a:1a:7a:ea:46:85:05:9a:1a:9f:
         d3:a0:59:5a:11:38:c3:71:84:d1:01:3f:97:b9:03:19:3f:d2:
         a9:be:61:fb:41:50:4f:6d:8a:31:25:a6:1f:85:33:14:8e:c6:
         e7:00:33:ce:1f:3a:6c:e1:08:d7:65:06:47:47:50:11:81:b1:
         59:01:78:a8:2e:92:fb:ba:47:63:7d:c1:9f:89:e3:18:ed:5a:
         b7:42:d2:45:b6:50:60:26:16:97:ea:9a:7f:53:ae:86:80:de:
         aa:ed:36:15:ee:65:44:1d:77:78:3d:1e:d6:9d:a3:f4:b0:c9:
         44:ba:3e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPS1UqaVtuLzG3te582AOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDE1NTI5YTQ1MWM5NWNjZDkzNGFjNTZlYzA5ZDUxODc1
MDY2Y2IwHhcNMjUwNDEzMTMwMTAwWhcNMjUwNDE0MTMwMTAwWjAzMTEwLwYDVQQD
EyhmMmFiODc1ODhlMzBhNDU4YWI1Y2UzZTFiNmU0ODk1NDEwNjY0NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1SqWXsSGTaZXtVUJZhxh5QvAeXo
KCwi8goTRC9TTCDFvJ0lXkb8IqAmeXuX3/c5dM6X2kp7oeimwuTVHm/8to3q5sQk
vUGYjW2dCDoamkcERDJ24k0f3YAtTISjivz08ufyDDL7Lmc66eRqV0Jzp9l2FTJ7
wJpZaF60DbDF5NromDPGX/DGwt4kQJl3JfFroVp+EX+beURlq4/bcwMaPJvWW3aC
O31+2K7Gen0PqTqsL2sZwqU3ca3K0JFq5uAy4lUUjIXxBaAqkHSDZpUuqoiUAsFY
RvRr+2xQS/DPWWUsKRFjlHyWNdXyOg8kCMZcn7DEQe2PfkxqKF8Y0q8xEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKrh1iOMKRYq1zj4bbkiVQQZkYOMB8GA1UdIwQY
MBaAFKHRVSmkUclczZNKxW7AnVGHUGbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjkt
ZDZkZGFjZjZhM2VjLzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjktZDZkZGFjZjZhM2Vj
LzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQh0GVdo
Re6HQN7emYRREZz/WzqU0Ts51htZv7wFmypAAYA+V0tnZBZDyxpIyM8RQEkXZKj8
Xw7W/XuHHWpSUn/dZ9LLZHTVd/9O3nT7FylBMif8KiNrf27F1cfJifScn5PVEtDM
ZlG8mpGVHvJOZqvsyvvtRhydgRWbk1KGruUG2rFDVKd6GnrqRoUFmhqf06BZWhE4
w3GE0QE/l7kDGT/Sqb5h+0FQT22KMSWmH4UzFI7G5wAzzh86bOEI12UGR0dQEYGx
WQF4qC6S+7pHY33Bn4njGO1at0LSRbZQYCYWl+qaf1OuhoDequ02Fe5lRB13eD0e
1p2j9LDJRLo+EQ==
-----END CERTIFICATE-----