Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          EHabrZpf5opT+Rv2dGHFi/VVAQyjKl3tbSHpazy6/+U=
Subject key identifier:   53:73:6B:33:57:C9:86:8F:E7:E1:73:D9:21:4E:8B:AC:CE:7F:74:C3
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       01962E99B8F9D290BA281F85C684A71F6EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: DKgbAt6BB0XtwMQD09obD8gWwc0OHqwl9H5nSn1poGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b8:f9:d2:90:ba:28:1f:85:c6:84:a7:1f:6e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=53736b3357c9868fe7e173d9214e8bacce7f74c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:41:95:ec:2b:7a:f3:24:57:1a:7c:c0:94:
                    08:a5:85:7f:ad:d4:67:46:2f:54:9e:ef:4f:92:aa:
                    c2:11:64:f2:d6:e5:29:7e:26:b6:a3:ae:82:41:49:
                    42:50:08:04:5f:c9:93:2f:7c:e7:ec:7a:1c:65:fb:
                    db:38:b2:a7:01:e9:4a:42:25:b4:d4:9b:ea:38:34:
                    3a:8d:aa:0a:35:9d:70:b4:21:25:f8:18:38:d9:98:
                    79:06:e6:d1:9a:02:08:2e:d8:4d:39:16:40:f4:67:
                    5b:a7:d1:4c:4f:74:94:13:97:1d:90:63:6f:37:3c:
                    6e:60:a9:ae:bf:37:74:1e:5b:d3:e1:02:c2:12:ac:
                    27:03:36:75:a5:17:50:77:55:d8:09:65:04:8f:3a:
                    be:92:61:1b:83:6d:63:4e:6f:cf:cb:36:74:d9:72:
                    67:dc:b1:f6:01:41:18:15:2c:ea:47:77:f9:a9:7c:
                    86:10:ce:48:c9:48:6e:1d:e3:7a:db:3c:27:ed:7c:
                    4f:31:a0:2d:c7:39:82:af:8b:19:4c:ee:3e:d4:2a:
                    31:09:b4:85:52:12:59:83:c4:58:bd:45:c6:87:d1:
                    8d:43:36:0c:05:8e:42:13:47:22:9e:03:75:34:23:
                    50:21:d7:dc:2d:ba:4b:ea:e6:6b:d0:92:a0:ab:b3:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:6B:33:57:C9:86:8F:E7:E1:73:D9:21:4E:8B:AC:CE:7F:74:C3
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:16:10:50:d6:35:96:9b:85:2d:ce:57:57:b1:ac:e1:27:
         a9:90:6a:85:20:2f:c6:16:b3:d0:31:36:54:13:1e:18:94:b1:
         7e:95:7d:a1:8e:76:a5:58:79:b7:a1:9e:8c:28:ed:53:68:8b:
         fc:12:ad:2e:5a:b8:cc:92:3a:7a:63:30:2c:34:f5:b4:12:1d:
         80:0a:a3:02:a6:80:aa:a7:05:9d:38:76:d0:77:b8:35:29:a6:
         d3:66:75:ae:e4:10:06:d9:b6:d7:6c:07:4e:ee:a8:02:c1:9c:
         57:d4:3a:ac:b5:e5:24:85:50:e7:64:e4:e0:70:85:5b:5a:34:
         f5:6f:66:d5:60:98:48:b0:bd:eb:64:9c:0e:6f:99:c7:74:03:
         f4:6e:3e:5c:d0:00:b1:e1:11:41:81:75:7f:32:ee:1e:ce:3d:
         7f:a2:53:80:b8:88:e2:1e:01:fa:ff:ab:f5:0c:b2:82:b2:7a:
         98:dc:50:4b:b8:c8:82:0c:a6:dc:51:88:39:f5:fd:64:5e:ab:
         e6:36:f0:29:f9:e0:af:4a:f8:bb:af:62:8a:38:31:b7:a3:a5:
         62:fd:36:15:5d:eb:6a:8c:46:1c:34:b0:0c:91:1c:e9:ef:e8:
         54:1c:03:a8:7e:47:9e:da:7e:88:95:4d:a6:2d:89:f2:c9:a9:
         4e:93:9c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbj50pC6KB+FxoSnH278MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3
NmUwMDEwHhcNMjUwNDEzMTAwMjI4WhcNMjUwNDE0MTAwMjI4WjAzMTEwLwYDVQQD
Eyg1MzczNmIzMzU3Yzk4NjhmZTdlMTczZDkyMTRlOGJhY2NlN2Y3NGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7khBlewrevMkVxp8wJQIpYV/rdRn
Ri9Unu9PkqrCEWTy1uUpfia2o66CQUlCUAgEX8mTL3zn7HocZfvbOLKnAelKQiW0
1JvqODQ6jaoKNZ1wtCEl+Bg42Zh5BubRmgIILthNORZA9Gdbp9FMT3SUE5cdkGNv
NzxuYKmuvzd0HlvT4QLCEqwnAzZ1pRdQd1XYCWUEjzq+kmEbg21jTm/PyzZ02XJn
3LH2AUEYFSzqR3f5qXyGEM5IyUhuHeN62zwn7XxPMaAtxzmCr4sZTO4+1CoxCbSF
UhJZg8RYvUXGh9GNQzYMBY5CE0cingN1NCNQIdfcLbpL6uZr0JKgq7Pa7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNzazNXyYaP5+Fz2SFOi6zOf3TDMB8GA1UdIwQY
MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt
OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw
LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp4WEFDW
NZabhS3OV1exrOEnqZBqhSAvxhaz0DE2VBMeGJSxfpV9oY52pVh5t6GejCjtU2iL
/BKtLlq4zJI6emMwLDT1tBIdgAqjAqaAqqcFnTh20He4NSmm02Z1ruQQBtm212wH
Tu6oAsGcV9Q6rLXlJIVQ52Tk4HCFW1o09W9m1WCYSLC962ScDm+Zx3QD9G4+XNAA
seERQYF1fzLuHs49f6JTgLiI4h4B+v+r9QyygrJ6mNxQS7jIggym3FGIOfX9ZF6r
5jbwKfngr0r4u69iijgxt6OlYv02FV3raoxGHDSwDJEc6e/oVBwDqH5Hntp+iJVN
pi2J8smpTpOcdA==
-----END CERTIFICATE-----