Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File:                     cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier:          p/wZ6GvZlwJ3CGtoZh3HGD84LpduXSDT5CJ5fbxBc8c=
Subject key identifier:   50:10:64:62:53:50:49:BC:3B:A7:59:0D:02:FF:F7:F5:36:F3:00:6B
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer:       /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial:       01962F3D5E92DFFB27E7829D1DC5AAC70117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number:          0439
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: 719EAD+OPmct97/1simrAumAV/m53+kl+uS5GWJP9u0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5e:92:df:fb:27:e7:82:9d:1d:c5:aa:c7:01:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=50106462535049bc3ba7590d02fff7f536f3006b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:ea:87:bd:2b:26:48:74:a4:df:0a:73:c6:
                    c5:fa:7e:a2:59:b8:27:c4:08:56:bc:c9:7b:5f:17:
                    6d:14:68:cd:e2:08:28:61:35:d9:80:bb:df:8d:9d:
                    1a:72:30:0e:65:db:0b:59:2f:b4:b2:3f:79:5e:a2:
                    5f:8d:c5:2b:ab:fb:4f:35:6d:d4:c0:c6:0d:3a:4e:
                    54:f2:69:bf:44:e4:4a:51:27:c6:4a:04:ea:35:a0:
                    6a:7d:56:bf:2b:93:bc:ba:eb:34:3b:13:1d:83:e1:
                    64:fa:5a:98:e2:3a:e3:87:0e:f5:9c:17:eb:d0:b3:
                    07:d7:b1:7b:dd:65:b9:67:69:6c:ba:38:28:f5:ba:
                    9a:1d:94:96:09:2f:fc:57:6d:75:51:b0:ed:00:69:
                    b6:77:12:67:71:3d:80:63:11:22:4d:58:68:42:0a:
                    bc:be:9f:40:f5:64:8c:a4:6e:d7:87:71:ba:ba:1a:
                    fc:f3:67:3d:58:41:cd:35:50:dc:4a:1f:83:13:1b:
                    0a:ec:24:7b:9f:85:e3:f9:4b:33:09:80:02:a6:75:
                    88:20:9e:e0:47:3c:fd:b7:65:d8:11:87:94:f0:bc:
                    a9:80:6d:f2:3d:06:29:4a:6d:ff:27:1c:89:96:1d:
                    18:e1:8f:fb:d6:00:68:d2:29:92:2c:2a:fd:5f:58:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:64:62:53:50:49:BC:3B:A7:59:0D:02:FF:F7:F5:36:F3:00:6B
            X509v3 Authority Key Identifier:
                keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:cf:5e:9f:51:d4:ab:c9:c4:2e:1d:ff:f7:4c:17:cd:c8:
         77:a1:dc:ce:04:e0:53:5f:00:61:f3:95:9d:66:15:d0:75:c2:
         2d:e0:30:b4:db:cc:19:4d:fb:07:fc:bf:c1:04:3f:b4:cf:d6:
         ba:80:b9:9a:9d:a6:ca:b1:03:3e:97:fc:37:08:19:7a:52:ed:
         c5:c6:5f:e4:84:c1:0e:4e:1c:c8:ca:42:a5:67:e1:4b:70:24:
         e3:a4:c6:b4:88:9f:ee:d9:de:8b:87:d3:f0:c4:b9:7e:e9:f9:
         62:95:99:d4:c7:40:3f:69:8c:2c:ce:84:c1:b4:47:8f:1c:f1:
         ff:f9:a1:c1:c7:2f:01:04:88:3a:36:84:f1:3b:97:3f:87:46:
         7b:14:98:c2:13:5c:54:59:14:ed:34:00:13:fc:69:f5:45:c0:
         b6:2b:d7:81:5e:45:04:35:17:15:fa:ad:04:1f:c1:ae:01:c1:
         fc:f6:25:6f:81:54:8d:79:72:fa:9a:af:95:f4:8a:89:b5:3a:
         6f:bf:eb:ff:dc:15:6a:2e:f6:cc:6c:30:11:8a:62:74:04:0b:
         60:02:9a:04:1c:26:96:da:68:f4:ae:b6:22:60:e4:60:f0:c4:
         f0:23:d0:ca:43:e1:c0:32:97:85:d4:6b:f6:60:fc:2b:2c:e9:
         e3:aa:06:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPV6S3/sn54KdHcWqxwEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTgwYmMyOWNmOWYyYjQwYWMzMDI0ZTBmNzIzNWRiYTJk
NTdhNTQwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg1MDEwNjQ2MjUzNTA0OWJjM2JhNzU5MGQwMmZmZjdmNTM2ZjMwMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vvqh70rJkh0pN8Kc8bF+n6iWbgn
xAhWvMl7XxdtFGjN4ggoYTXZgLvfjZ0acjAOZdsLWS+0sj95XqJfjcUrq/tPNW3U
wMYNOk5U8mm/RORKUSfGSgTqNaBqfVa/K5O8uus0OxMdg+Fk+lqY4jrjhw71nBfr
0LMH17F73WW5Z2lsujgo9bqaHZSWCS/8V211UbDtAGm2dxJncT2AYxEiTVhoQgq8
vp9A9WSMpG7Xh3G6uhr882c9WEHNNVDcSh+DExsK7CR7n4Xj+UszCYACpnWIIJ7g
Rzz9t2XYEYeU8LypgG3yPQYpSm3/JxyJlh0Y4Y/71gBo0imSLCr9X1i4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAQZGJTUEm8O6dZDQL/9/U28wBrMB8GA1UdIwQY
MBaAFHHoC8Kc+fK0CsMCTg9yNdui1XpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNTAzNTMtZjRlOC00ZjYwLWFlMTYt
NzI0NzMwNGZiMTVmLzEvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNTAzNTMtZjRlOC00ZjYwLWFlMTYtNzI0NzMwNGZiMTVm
LzEvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINfPXp9R
1KvJxC4d//dMF83Id6HczgTgU18AYfOVnWYV0HXCLeAwtNvMGU37B/y/wQQ/tM/W
uoC5mp2myrEDPpf8NwgZelLtxcZf5ITBDk4cyMpCpWfhS3Ak46TGtIif7tnei4fT
8MS5fun5YpWZ1MdAP2mMLM6EwbRHjxzx//mhwccvAQSIOjaE8TuXP4dGexSYwhNc
VFkU7TQAE/xp9UXAtivXgV5FBDUXFfqtBB/BrgHB/PYlb4FUjXly+pqvlfSKibU6
b7/r/9wVai72zGwwEYpidAQLYAKaBBwmltpo9K62ImDkYPDE8CPQykPhwDKXhdRr
9mD8Kyzp46oGnw==
-----END CERTIFICATE-----