Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File:                     ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier:          oCKdrP0uFCxMgxovu3UFGngT2vDbZpwiLeDXZQN6yII=
Subject key identifier:   32:D5:E1:D1:6E:07:EF:2E:F3:E5:F8:86:36:42:F8:E9:D7:62:E8:18
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer:       /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial:       01962E9911C8FD8C834EA5342249A492EA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: YBwssULbc666SK/Yyb1xWub5PCJsrpVWQmBWs296x70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:11:c8:fd:8c:83:4e:a5:34:22:49:a4:92:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=32d5e1d16e07ef2ef3e5f8863642f8e9d762e818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:a3:b6:6d:0c:96:b1:fe:e6:bc:1c:90:3a:
                    6c:91:d5:d7:7a:8b:2b:3e:3b:e6:51:0e:35:ba:04:
                    05:0e:34:e8:ca:d1:3c:82:a9:29:ec:4c:3b:fe:0c:
                    b2:8b:e8:ee:75:42:47:b3:34:7b:41:73:72:c3:96:
                    9e:d4:6d:4c:98:4e:2b:0f:5e:f6:18:56:cd:3c:17:
                    6e:82:af:6c:e8:b9:b4:9c:c8:80:85:9e:30:01:ec:
                    69:1f:f0:59:ee:8b:39:c7:20:c5:41:67:b2:8f:2f:
                    75:f9:18:63:61:3d:33:b6:6b:e2:2c:82:a5:8b:d1:
                    9e:88:e6:05:dd:0f:42:81:cd:48:d8:42:6d:fd:1f:
                    1f:9a:bb:30:16:7b:52:e8:fc:10:a4:64:c8:c8:c8:
                    9d:1f:d0:b9:e9:d7:c0:91:a8:63:4c:e3:d8:a2:71:
                    a6:ea:c1:a8:17:e5:2b:32:bb:0d:17:4c:a7:5b:35:
                    6e:e3:1f:9a:21:3f:89:3e:93:e3:d7:d8:1b:4c:32:
                    3f:f3:30:76:4f:90:ee:1f:97:c0:48:c2:17:70:a9:
                    11:5a:76:b1:20:a1:59:4f:08:d4:ef:12:27:ac:76:
                    b1:03:95:6b:22:48:e8:24:4d:14:62:ec:6d:54:ff:
                    f8:42:cd:88:85:e7:2a:6d:98:3a:33:30:4d:03:26:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D5:E1:D1:6E:07:EF:2E:F3:E5:F8:86:36:42:F8:E9:D7:62:E8:18
            X509v3 Authority Key Identifier:
                keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:12:8c:40:e9:5c:dd:66:ec:45:f6:fb:af:ac:e3:70:1e:c4:
         80:62:49:b4:6d:a1:62:6a:1f:68:a6:c6:93:84:64:2f:30:85:
         85:32:4b:73:17:a6:be:ef:e0:4e:ec:64:01:3e:c4:99:5c:bf:
         fd:61:ee:9b:c4:23:75:40:e8:84:f6:27:a2:65:3a:10:17:d3:
         e3:c6:a5:ba:9d:15:88:e2:c3:7b:68:36:89:0e:a1:b1:4d:b8:
         04:fe:f5:61:14:42:41:d0:eb:6e:8f:a3:ed:eb:66:78:be:b8:
         77:3d:e8:66:46:ee:ac:03:5e:04:6d:01:a6:c4:68:2b:63:8f:
         bf:a4:1d:7e:14:c6:e3:cf:cf:02:87:16:7e:c4:fb:32:05:fb:
         51:25:77:b9:6b:9b:d6:1c:33:5a:77:7d:b8:3a:5b:95:a9:4d:
         a8:e0:15:43:d6:60:08:42:4f:9c:c9:34:7e:10:e4:f9:fc:a0:
         d8:dd:0d:81:d6:36:ae:c6:7b:8c:da:09:f3:00:7f:ad:37:db:
         5e:b4:d6:b7:a8:09:ff:ce:2d:bf:8b:25:8f:ec:a5:82:7d:55:
         a8:61:bc:30:b2:58:d0:5e:0d:f2:41:b2:5f:2d:55:73:be:b9:
         26:9f:5a:c8:e0:1a:b9:d0:87:eb:b8:63:89:03:3a:98:4a:f5:
         41:c9:40:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRHI/YyDTqU0IkmkkuqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMTcxMGQ5NWM4M2JlM2U3ODYwYjk3YjFkN2IzNmU0NjA3
MTczYTIwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
EygzMmQ1ZTFkMTZlMDdlZjJlZjNlNWY4ODYzNjQyZjhlOWQ3NjJlODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlejtm0MlrH+5rwckDpskdXXeosr
PjvmUQ41ugQFDjToytE8gqkp7Ew7/gyyi+judUJHszR7QXNyw5ae1G1MmE4rD172
GFbNPBdugq9s6Lm0nMiAhZ4wAexpH/BZ7os5xyDFQWeyjy91+RhjYT0ztmviLIKl
i9GeiOYF3Q9Cgc1I2EJt/R8fmrswFntS6PwQpGTIyMidH9C56dfAkahjTOPYonGm
6sGoF+UrMrsNF0ynWzVu4x+aIT+JPpPj19gbTDI/8zB2T5DuH5fASMIXcKkRWnax
IKFZTwjU7xInrHaxA5VrIkjoJE0UYuxtVP/4Qs2IhecqbZg6MzBNAyZLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLV4dFuB+8u8+X4hjZC+OnXYugYMB8GA1UdIwQY
MBaAFAEXENlcg74+eGC5ex17NuRgcXOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2Qt
M2FkNDAzMjUwM2MwLzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZDA0ZGUtNDQ3ZC00ZTJiLTk5N2QtM2FkNDAzMjUwM2Mw
LzEvQVJjUTJWeUR2ajU0WUxsN0hYczI1R0J4YzZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhKMQOlc
3WbsRfb7r6zjcB7EgGJJtG2hYmofaKbGk4RkLzCFhTJLcxemvu/gTuxkAT7EmVy/
/WHum8QjdUDohPYnomU6EBfT48alup0ViOLDe2g2iQ6hsU24BP71YRRCQdDrbo+j
7etmeL64dz3oZkburANeBG0BpsRoK2OPv6QdfhTG48/PAocWfsT7MgX7USV3uWub
1hwzWnd9uDpblalNqOAVQ9ZgCEJPnMk0fhDk+fyg2N0NgdY2rsZ7jNoJ8wB/rTfb
XrTWt6gJ/84tv4slj+ylgn1VqGG8MLJY0F4N8kGyXy1Vc765Jp9ayOAaudCH67hj
iQM6mEr1QclAEw==
-----END CERTIFICATE-----