Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
File:                     dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft (raw, json)
Hash identifier:          cFBMwEl/PbFxFx9BRfkoLTc00CEwAGN7vUgL3Cj5gXU=
Subject key identifier:   69:95:90:BD:0A:D1:C4:D2:3F:6A:A1:48:8A:3A:6A:88:77:61:2B:71
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Certificate issuer:       /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial:       01962F3D70EF38FC54CB1EB434C84FE17F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl (hash: gTy72lSOD2fzH+b9pPkKC8QBEwDfdvra5PkTDZ8QQ+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:ef:38:fc:54:cb:1e:b4:34:c8:4f:e1:7f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=699590bd0ad1c4d23f6aa1488a3a6a8877612b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:c6:e1:cd:ea:b4:e9:07:a8:4c:ca:bb:dd:
                    c9:f9:4d:80:c9:54:2b:86:62:bb:ea:4f:6e:5b:3b:
                    59:3c:01:1e:be:8f:2f:3d:8e:72:b1:f2:35:9b:8a:
                    50:cc:96:93:e4:d4:8b:d9:7a:f6:86:51:5e:ca:c1:
                    db:c7:59:a2:8a:9c:be:3c:04:18:eb:e1:b8:c3:94:
                    d6:4f:1b:5f:55:99:76:f8:17:71:96:ad:a3:45:14:
                    ef:8c:3a:15:d3:d5:21:de:7c:33:fc:3c:c6:7e:ef:
                    2b:f5:67:34:d1:07:cb:96:eb:e4:79:82:6e:4b:59:
                    f3:83:2f:61:46:2d:3e:df:3e:45:ec:cb:f4:52:77:
                    76:bc:3f:14:44:00:dd:f6:6d:c3:77:e5:63:55:1a:
                    53:90:1c:78:af:61:13:12:8d:d6:ba:66:8c:17:16:
                    fd:77:26:ae:92:73:dc:44:04:b6:52:6e:e8:68:f6:
                    af:ec:ea:cb:51:02:1a:bc:8a:f1:eb:bc:f4:6c:9b:
                    f1:a6:7d:2a:86:ab:88:d8:bc:ce:d6:07:36:b2:91:
                    ac:41:4e:79:c1:61:00:f0:fe:13:e8:50:6a:17:2d:
                    47:d6:78:c2:44:7a:c6:96:c5:12:f3:b7:1e:13:11:
                    9f:2a:3c:3b:00:60:87:fb:c4:fd:26:79:10:f2:fc:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:95:90:BD:0A:D1:C4:D2:3F:6A:A1:48:8A:3A:6A:88:77:61:2B:71
            X509v3 Authority Key Identifier:
                keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:86:7f:27:3a:99:f0:b7:d2:46:b8:80:29:17:b0:f4:34:
         2b:1c:33:75:a9:37:0c:12:0c:1b:8e:70:3f:06:e8:97:96:34:
         8a:93:fc:fd:e1:17:f6:22:07:2a:ec:9f:8e:8c:da:6e:bf:a6:
         56:46:cb:5a:5f:3f:ab:b5:17:6a:f3:10:bc:0c:58:bf:76:31:
         45:44:fc:f1:39:39:54:8c:32:03:3b:08:22:17:4f:a6:31:de:
         dc:a7:8a:38:70:d3:39:21:0f:c6:62:c1:fd:9d:e3:b6:1b:a4:
         26:8b:0d:d0:97:c2:5c:94:09:c4:90:68:bc:eb:c0:89:03:c9:
         68:ee:e5:f2:f2:43:c2:65:44:5e:1c:f7:10:7c:5f:09:17:aa:
         35:d6:1a:97:29:0f:b5:f2:a1:92:41:e8:60:17:a0:13:87:93:
         a5:ba:f7:6f:97:c8:e5:ea:bf:46:a5:d0:74:49:e3:1a:08:96:
         c1:6a:bd:8f:35:05:fb:20:c7:76:83:97:4d:62:52:6b:e9:dd:
         06:70:cf:3f:fe:7b:79:e2:b8:2d:64:3b:f6:2e:e6:6f:86:b3:
         48:3d:9f:55:3e:8e:e7:15:da:ff:77:5b:d6:b8:06:c7:7d:cf:
         60:2a:29:3f:4f:2b:3b:b2:40:14:01:6c:54:65:43:89:d1:da:
         23:4c:c8:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXDvOPxUyx60NMhP4X8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDQ3YzIzNGE4YjkyZjMxZDM5ODljYzQyMjE5ZjgwYzk0
N2RhMTkwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
Eyg2OTk1OTBiZDBhZDFjNGQyM2Y2YWExNDg4YTNhNmE4ODc3NjEyYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA007G4c3qtOkHqEzKu93J+U2AyVQr
hmK76k9uWztZPAEevo8vPY5ysfI1m4pQzJaT5NSL2Xr2hlFeysHbx1miipy+PAQY
6+G4w5TWTxtfVZl2+Bdxlq2jRRTvjDoV09Uh3nwz/DzGfu8r9Wc00QfLluvkeYJu
S1nzgy9hRi0+3z5F7Mv0Und2vD8URADd9m3Dd+VjVRpTkBx4r2ETEo3WumaMFxb9
dyauknPcRAS2Um7oaPav7OrLUQIavIrx67z0bJvxpn0qhquI2LzO1gc2spGsQU55
wWEA8P4T6FBqFy1H1njCRHrGlsUS87ceExGfKjw7AGCH+8T9JnkQ8vztpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmVkL0K0cTSP2qhSIo6aoh3YStxMB8GA1UdIwQY
MBaAFHbUfCNKi5LzHTmJzEIhn4DJR9oZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zNTUwZDktMzAyMi00ZGJhLWE3NWEt
MWMwZDRhMjFjYjIzLzEvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zNTUwZDktMzAyMi00ZGJhLWE3NWEtMWMwZDRhMjFjYjIz
LzEvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPyGfyc6
mfC30ka4gCkXsPQ0Kxwzdak3DBIMG45wPwbol5Y0ipP8/eEX9iIHKuyfjozabr+m
VkbLWl8/q7UXavMQvAxYv3YxRUT88Tk5VIwyAzsIIhdPpjHe3KeKOHDTOSEPxmLB
/Z3jthukJosN0JfCXJQJxJBovOvAiQPJaO7l8vJDwmVEXhz3EHxfCReqNdYalykP
tfKhkkHoYBegE4eTpbr3b5fI5eq/RqXQdEnjGgiWwWq9jzUF+yDHdoOXTWJSa+nd
BnDPP/57eeK4LWQ79i7mb4azSD2fVT6O5xXa/3db1rgGx33PYCopP08rO7JAFAFs
VGVDidHaI0zI5g==
-----END CERTIFICATE-----