Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft
File:                     RzrT6YeegYYjFqEICLtcQhKVTLo.mft (raw, json)
Hash identifier:          l7fBzT86pF6buuN5GkqOaKW7D1WaE5PhKZzsn/I+yxM=
Subject key identifier:   EE:57:E5:F9:6F:6F:E8:E1:C3:FD:A7:99:EC:E5:D7:3B:6F:A1:8D:DC
Authority key identifier: 47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA
Certificate issuer:       /CN=473ad3e9879e81862316a10808bb5c4212954cba
Certificate serial:       01962E98A8578510FD9A19FC30AEBB4540DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzrT6YeegYYjFqEICLtcQhKVTLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft
Manifest number:          0D97
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: RzrT6YeegYYjFqEICLtcQhKVTLo.crl (hash: 9FhcI7MhmuQYxENBE3faqhIJLxfT2ZOe14w4zl/VR28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a8:57:85:10:fd:9a:19:fc:30:ae:bb:45:40:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473ad3e9879e81862316a10808bb5c4212954cba
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=ee57e5f96f6fe8e1c3fda799ece5d73b6fa18ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:31:94:20:8f:0b:3b:aa:61:52:89:e3:49:
                    a6:c4:a8:6b:cf:19:8c:f8:52:0c:8f:00:23:27:07:
                    49:f7:54:d3:b7:0c:12:7e:df:70:82:76:77:a4:b0:
                    5f:e2:6d:b3:a7:d7:81:fe:9e:18:6e:6b:7b:6f:d0:
                    f3:0d:28:1a:8f:a6:2f:ee:42:b5:e0:99:90:e5:64:
                    1b:ed:ba:bf:50:54:76:96:85:34:6f:8a:f4:79:f8:
                    c1:d8:3f:bd:9b:aa:0c:f8:f2:51:c8:fb:2f:17:16:
                    8f:46:e7:fa:bb:ce:ce:1e:fb:72:21:0d:08:fb:4e:
                    1b:05:60:ab:eb:a8:8d:5d:79:21:98:26:b7:24:a8:
                    ac:50:6c:54:db:fc:c4:4e:87:60:46:2e:71:e8:95:
                    7b:d2:a9:d8:37:7e:7a:37:23:7e:e9:c5:58:58:4b:
                    6d:8c:5e:90:9b:75:60:1c:37:26:42:44:65:33:33:
                    98:dc:20:36:3c:7a:e8:1d:b9:06:2a:fa:bb:9f:aa:
                    7b:3b:9b:3b:1a:cd:18:80:72:c5:cb:20:dc:e4:17:
                    9e:b3:7d:4f:ce:79:17:1a:d8:30:e4:f6:dd:60:5b:
                    4c:7e:c1:f3:ed:f0:38:d4:51:cb:d6:5e:41:65:29:
                    03:8a:c6:15:e3:8f:93:57:ed:f7:f0:fc:10:06:9f:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:57:E5:F9:6F:6F:E8:E1:C3:FD:A7:99:EC:E5:D7:3B:6F:A1:8D:DC
            X509v3 Authority Key Identifier:
                keyid:47:3A:D3:E9:87:9E:81:86:23:16:A1:08:08:BB:5C:42:12:95:4C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzrT6YeegYYjFqEICLtcQhKVTLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1d27da-b39f-42a9-949f-b6c39ad983dd/1/RzrT6YeegYYjFqEICLtcQhKVTLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:ed:9e:30:08:7d:8f:12:47:4a:68:65:12:86:7c:69:56:
         ca:e4:8a:f3:6e:c7:57:65:96:fc:33:5f:c6:2b:06:9f:81:f1:
         73:28:b9:33:b5:69:9a:f7:c4:e2:5f:3e:f6:0e:b9:4b:d7:6f:
         41:42:28:f6:43:b4:bb:81:ef:8e:8d:29:84:bf:5d:f5:53:29:
         05:f1:1a:75:9d:11:a9:63:09:8d:b0:7a:59:09:50:d2:32:94:
         24:27:d9:22:07:cb:ce:87:16:5f:e5:a7:19:9b:d0:37:85:db:
         63:09:08:7c:26:99:61:ca:26:88:72:3b:e9:47:b4:d7:8b:be:
         ae:44:8a:f2:88:ab:91:9b:a7:f6:c0:17:b9:cd:1e:58:80:9b:
         d5:aa:e3:01:fe:43:8c:fe:59:8a:a8:1e:c7:71:89:f7:32:5c:
         99:d1:ef:c0:4a:33:35:c7:d0:f7:0c:04:4a:e7:b2:d3:2f:66:
         af:79:5c:92:64:ee:2e:17:f0:e5:fe:a4:49:30:63:12:09:20:
         10:83:d9:1c:94:e7:04:63:de:61:6c:c5:6a:28:5a:4d:54:50:
         7b:cc:2e:05:55:8d:95:cb:d4:aa:05:bc:57:82:8f:20:b5:ca:
         57:2f:32:7e:16:f2:da:72:71:aa:83:90:99:0a:ff:73:7b:4e:
         15:26:87:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKhXhRD9mhn8MK67RUDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3M2FkM2U5ODc5ZTgxODYyMzE2YTEwODA4YmI1YzQyMTI5
NTRjYmEwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
EyhlZTU3ZTVmOTZmNmZlOGUxYzNmZGE3OTllY2U1ZDczYjZmYTE4ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cQxlCCPCzuqYVKJ40mmxKhrzxmM
+FIMjwAjJwdJ91TTtwwSft9wgnZ3pLBf4m2zp9eB/p4Ybmt7b9DzDSgaj6Yv7kK1
4JmQ5WQb7bq/UFR2loU0b4r0efjB2D+9m6oM+PJRyPsvFxaPRuf6u87OHvtyIQ0I
+04bBWCr66iNXXkhmCa3JKisUGxU2/zETodgRi5x6JV70qnYN356NyN+6cVYWEtt
jF6Qm3VgHDcmQkRlMzOY3CA2PHroHbkGKvq7n6p7O5s7Gs0YgHLFyyDc5Bees31P
znkXGtgw5PbdYFtMfsHz7fA41FHL1l5BZSkDisYV44+TV+338PwQBp9QvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5X5flvb+jhw/2nmezl1ztvoY3cMB8GA1UdIwQY
MBaAFEc60+mHnoGGIxahCAi7XEISlUy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpyVDZZZWVnWVlqRnFFSUNMdGNRaEtWVExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xZDI3ZGEtYjM5Zi00MmE5LTk0OWYt
YjZjMzlhZDk4M2RkLzEvUnpyVDZZZWVnWVlqRnFFSUNMdGNRaEtWVExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xZDI3ZGEtYjM5Zi00MmE5LTk0OWYtYjZjMzlhZDk4M2Rk
LzEvUnpyVDZZZWVnWVlqRnFFSUNMdGNRaEtWVExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltbtnjAI
fY8SR0poZRKGfGlWyuSK827HV2WW/DNfxisGn4Hxcyi5M7VpmvfE4l8+9g65S9dv
QUIo9kO0u4Hvjo0phL9d9VMpBfEadZ0RqWMJjbB6WQlQ0jKUJCfZIgfLzocWX+Wn
GZvQN4XbYwkIfCaZYcomiHI76Ue014u+rkSK8oirkZun9sAXuc0eWICb1arjAf5D
jP5Ziqgex3GJ9zJcmdHvwEozNcfQ9wwESuey0y9mr3lckmTuLhfw5f6kSTBjEgkg
EIPZHJTnBGPeYWzFaihaTVRQe8wuBVWNlcvUqgW8V4KPILXKVy8yfhby2nJxqoOQ
mQr/c3tOFSaHng==
-----END CERTIFICATE-----