Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
File:                     I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft (raw, json)
Hash identifier:          fnUhEjwkiG0RtXAABGowoNAQML7j4UvOL07v/4lVFFg=
Subject key identifier:   F5:67:CE:74:EB:F7:54:34:1E:D9:DA:D7:4A:A4:9E:19:2D:57:4E:C6
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Certificate issuer:       /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial:       0195E0B460C9CAD4608FEB302D5BB9A436C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
Manifest number:          124D
Signing time:             Sat 29 Mar 2025 07:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:12 +0000
Files and hashes:         1: I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl (hash: C0lNS/+84WSZQcwFbBpkzjkscfeelAN7vpy2ZSvJ9d0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:60:c9:ca:d4:60:8f:eb:30:2d:5b:b9:a4:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
        Validity
            Not Before: Mar 29 07:01:12 2025 GMT
            Not After : Mar 30 07:01:12 2025 GMT
        Subject: CN=f567ce74ebf754341ed9dad74aa49e192d574ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:57:fc:0b:76:32:c7:e1:45:43:29:24:4d:
                    fe:e5:ef:59:80:84:07:f1:19:55:08:13:8a:d9:8b:
                    4e:1c:de:d4:51:3a:d8:d8:82:6d:84:ba:1d:41:4d:
                    be:e1:99:91:02:c3:46:d0:5d:c0:bc:1c:2c:4f:11:
                    1b:44:75:1c:06:ef:20:99:62:cf:e3:8e:34:97:6e:
                    b7:f3:46:b5:ab:0b:b4:2b:47:5b:a2:16:a5:b9:11:
                    8e:a7:46:0b:8f:b9:3f:15:b7:57:ea:9c:ac:83:33:
                    fc:0e:0f:9f:aa:06:99:f1:7b:88:a6:bb:5f:a4:c6:
                    93:15:2a:69:2d:e5:06:c9:e6:0d:6c:3c:29:a7:63:
                    d3:2d:0b:64:e8:80:51:ef:1b:f7:6c:56:ac:fd:1d:
                    0a:38:a7:3d:c6:a6:94:dc:6e:3d:27:b2:c1:47:99:
                    d0:15:be:4b:bb:ec:02:0f:70:2b:5b:ba:05:2d:81:
                    8a:b1:be:82:90:3b:df:3f:9f:67:83:3a:80:2a:dd:
                    e8:3d:90:3a:db:9c:c6:89:e3:10:54:59:a1:17:a3:
                    0b:12:e9:ee:7c:a2:34:82:83:4f:23:fe:67:31:a6:
                    60:5b:36:c2:ab:c1:f2:6a:d2:35:6d:60:91:de:e5:
                    5c:98:21:22:63:41:b5:a4:cc:30:31:7e:73:d2:0f:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:CE:74:EB:F7:54:34:1E:D9:DA:D7:4A:A4:9E:19:2D:57:4E:C6
            X509v3 Authority Key Identifier:
                keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:54:00:ae:d4:04:47:2f:34:ba:f9:7a:2e:78:b9:46:d0:55:
         d9:7d:27:25:76:a5:40:04:01:08:eb:de:8e:6e:16:ec:28:b9:
         0d:77:85:bb:40:60:45:cf:81:30:df:70:c3:77:a3:b6:21:44:
         f1:de:cb:ba:a4:ef:d4:fa:1a:5c:98:28:33:06:7d:99:a2:c8:
         a7:bd:59:d6:19:25:16:91:e2:06:e6:c0:f7:1b:20:2e:98:ab:
         0b:e4:db:bb:9e:70:ac:65:8d:7e:ad:bc:6f:22:ca:e6:67:e3:
         25:f1:56:5e:97:73:35:fa:f8:32:fd:10:67:2b:55:fd:3b:6f:
         26:76:87:0c:c3:ce:b9:f0:14:27:8f:20:21:01:b1:74:ba:66:
         de:5d:51:5b:bc:53:98:c7:a0:c1:b5:e8:e5:64:12:21:b9:eb:
         14:20:02:a4:c0:ac:94:ff:66:6b:4c:1a:6d:0d:38:11:c1:a6:
         5b:f8:72:f9:7d:eb:8d:6a:d9:a3:a0:9e:f1:ab:c9:8a:95:81:
         4e:1c:3d:b9:b1:35:ed:15:8e:39:84:1c:6a:dc:af:9c:2b:e1:
         dc:ed:14:b2:15:9d:47:c6:52:78:5d:74:0d:66:d1:00:fe:ba:
         e2:aa:3b:d3:97:e2:f2:1f:55:45:87:12:36:87:76:a5:21:2b:
         c2:36:14:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtGDJytRgj+swLVu5pDbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2JiZjkzNDhhZTU1OGM2ZWZhMGMwODZmMjRiZTA0Y2Iy
M2M2ZTkwHhcNMjUwMzI5MDcwMTEyWhcNMjUwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
EyhmNTY3Y2U3NGViZjc1NDM0MWVkOWRhZDc0YWE0OWUxOTJkNTc0ZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOJX/At2MsfhRUMpJE3+5e9ZgIQH
8RlVCBOK2YtOHN7UUTrY2IJthLodQU2+4ZmRAsNG0F3AvBwsTxEbRHUcBu8gmWLP
4440l26380a1qwu0K0dbohaluRGOp0YLj7k/FbdX6pysgzP8Dg+fqgaZ8XuIprtf
pMaTFSppLeUGyeYNbDwpp2PTLQtk6IBR7xv3bFas/R0KOKc9xqaU3G49J7LBR5nQ
Fb5Lu+wCD3ArW7oFLYGKsb6CkDvfP59ngzqAKt3oPZA625zGieMQVFmhF6MLEunu
fKI0goNPI/5nMaZgWzbCq8HyatI1bWCR3uVcmCEiY0G1pMwwMX5z0g9DbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVnznTr91Q0Htna10qknhktV07GMB8GA1UdIwQY
MBaAFCPLv5NIrlWMbvoMCG8kvgTLI8bpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMt
NjIxZWUwNTJhNmZjLzEvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZTkwZjktZThkMy00NTYyLWE1YjMtNjIxZWUwNTJhNmZj
LzEvSTh1X2swaXVWWXh1LWd3SWJ5Uy1CTXNqeHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVQArtQE
Ry80uvl6Lni5RtBV2X0nJXalQAQBCOvejm4W7Ci5DXeFu0BgRc+BMN9ww3ejtiFE
8d7LuqTv1PoaXJgoMwZ9maLIp71Z1hklFpHiBubA9xsgLpirC+Tbu55wrGWNfq28
byLK5mfjJfFWXpdzNfr4Mv0QZytV/TtvJnaHDMPOufAUJ48gIQGxdLpm3l1RW7xT
mMegwbXo5WQSIbnrFCACpMCslP9ma0wabQ04EcGmW/hy+X3rjWrZo6Ce8avJipWB
Thw9ubE17RWOOYQcatyvnCvh3O0UshWdR8ZSeF10DWbRAP664qo705fi8h9VRYcS
Nod2pSErwjYUpA==
-----END CERTIFICATE-----