Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File:                     aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier:          lxd8m12YTzZC3BKp/H8lLbwKZLEk01xy6kBCsaZTQi4=
Subject key identifier:   37:09:E9:0B:1F:9B:A2:9F:7E:F0:7C:84:1E:D5:1C:8B:7E:E0:28:AB
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer:       /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial:       01962E99A255457D88C8C8C5FA7720BFAD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: HR5lrifYq2UAgi7Ps9W+wlen8+BGaaPh2ZMjvLW8eA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a2:55:45:7d:88:c8:c8:c5:fa:77:20:bf:ad:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=3709e90b1f9ba29f7ef07c841ed51c8b7ee028ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:78:51:a8:12:ff:04:ca:9b:19:d7:c1:c2:
                    7a:86:b7:08:14:37:14:9e:f4:5d:a4:90:8c:c4:ac:
                    8d:9c:1f:e1:dc:dc:25:ec:70:59:af:88:a3:54:32:
                    57:7c:17:f0:76:14:c7:1d:d4:92:23:63:33:35:8b:
                    50:84:40:dd:f4:3c:46:aa:05:2e:61:da:7e:f0:64:
                    5b:8e:d0:64:17:cf:83:a2:4f:e4:ea:44:cd:67:9b:
                    77:c8:7f:5c:52:3e:42:49:c0:72:d5:4c:b2:e0:4d:
                    d6:bf:11:a2:c8:c3:5b:4b:fa:70:31:14:af:0a:30:
                    5c:5f:f8:ed:7c:10:0c:78:d3:d3:b7:b9:e7:1e:d2:
                    ce:ec:fe:ef:e9:7b:48:92:b7:c2:82:7c:6e:ee:a0:
                    f1:9f:67:b0:a1:eb:88:33:81:1a:be:de:d9:24:bd:
                    ad:12:ef:91:a1:36:70:37:7e:15:94:e3:c1:a8:43:
                    9a:e5:88:9d:78:48:0d:37:9b:99:b5:5d:15:ad:51:
                    5a:a3:ee:6c:bd:88:95:a7:ec:00:05:d0:bb:ed:f6:
                    32:3b:81:93:ab:50:63:3b:f1:37:45:38:67:37:83:
                    9b:ab:52:62:d7:08:e2:2a:0c:33:25:2c:72:08:cd:
                    97:08:fd:44:88:12:40:ae:ef:f1:a1:0d:e7:e9:7d:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:E9:0B:1F:9B:A2:9F:7E:F0:7C:84:1E:D5:1C:8B:7E:E0:28:AB
            X509v3 Authority Key Identifier:
                keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6b:97:7f:dd:6b:8e:a1:4c:55:7d:38:1d:4c:f0:9e:00:7b:
         92:8d:80:3a:c6:db:4c:37:57:cc:98:db:37:b4:8b:2f:f2:05:
         25:9f:f2:5a:9f:3f:ea:be:8a:ab:30:ef:34:55:4e:bd:a8:a2:
         5b:6b:95:4b:50:35:9b:da:16:50:90:93:05:c7:9d:9c:30:94:
         36:5f:27:f1:b6:4f:a3:32:b6:4b:af:bc:b4:b8:c2:91:3a:28:
         b0:2e:a2:8c:8c:02:76:ae:0d:b3:a5:99:56:e2:32:3c:00:2e:
         fe:b0:03:a7:78:e7:51:d0:f7:5e:b7:61:4a:36:68:f5:a6:0b:
         f3:8b:21:cb:25:ab:ec:d1:bb:70:28:ff:cf:8b:2b:95:b6:97:
         6b:bb:46:5c:cc:ca:06:13:00:8f:04:c4:da:a8:0a:f9:11:e0:
         e5:49:ea:e4:00:01:e2:a8:b5:96:0a:51:cd:1b:8b:2f:fb:3d:
         a7:40:c2:15:29:2b:a7:59:ec:a1:cf:42:b1:d1:63:92:2b:fe:
         57:18:85:ae:b7:5b:75:9d:b3:ca:f1:23:05:73:11:0d:54:b5:
         6e:f3:82:57:bd:99:da:9e:b8:df:91:14:c0:a6:a5:e6:7f:cf:
         65:dc:64:29:85:54:e7:03:32:bb:a5:57:87:88:2e:52:f2:d3:
         af:42:1e:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumaJVRX2IyMjF+ncgv61cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIwYTgwMWNmZGI0YjU4MDM1YTVkMDc1YTI5MDRiMmVh
YTVmOTEwHhcNMjUwNDEzMTAwMjIyWhcNMjUwNDE0MTAwMjIyWjAzMTEwLwYDVQQD
EygzNzA5ZTkwYjFmOWJhMjlmN2VmMDdjODQxZWQ1MWM4YjdlZTAyOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkd4UagS/wTKmxnXwcJ6hrcIFDcU
nvRdpJCMxKyNnB/h3Nwl7HBZr4ijVDJXfBfwdhTHHdSSI2MzNYtQhEDd9DxGqgUu
Ydp+8GRbjtBkF8+Dok/k6kTNZ5t3yH9cUj5CScBy1Uyy4E3WvxGiyMNbS/pwMRSv
CjBcX/jtfBAMeNPTt7nnHtLO7P7v6XtIkrfCgnxu7qDxn2ewoeuIM4Eavt7ZJL2t
Eu+RoTZwN34VlOPBqEOa5YideEgNN5uZtV0VrVFao+5svYiVp+wABdC77fYyO4GT
q1BjO/E3RThnN4Obq1Ji1wjiKgwzJSxyCM2XCP1EiBJAru/xoQ3n6X0/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcJ6Qsfm6KffvB8hB7VHIt+4CirMB8GA1UdIwQY
MBaAFGnrCoAc/bS1gDWl0HWikEsuql+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzkt
MDBmNTZmNDcyMWMyLzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zYmFiNTctZGIzYi00YmU4LWIyNzktMDBmNTZmNDcyMWMy
LzEvYWVzS2dCejl0TFdBTmFYUWRhS1FTeTZxWDVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWuXf91r
jqFMVX04HUzwngB7ko2AOsbbTDdXzJjbN7SLL/IFJZ/yWp8/6r6KqzDvNFVOvaii
W2uVS1A1m9oWUJCTBcednDCUNl8n8bZPozK2S6+8tLjCkToosC6ijIwCdq4Ns6WZ
VuIyPAAu/rADp3jnUdD3XrdhSjZo9aYL84shyyWr7NG7cCj/z4srlbaXa7tGXMzK
BhMAjwTE2qgK+RHg5Unq5AAB4qi1lgpRzRuLL/s9p0DCFSkrp1nsoc9CsdFjkiv+
VxiFrrdbdZ2zyvEjBXMRDVS1bvOCV72Z2p6435EUwKal5n/PZdxkKYVU5wMyu6VX
h4guUvLTr0IeAA==
-----END CERTIFICATE-----