Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File:                     cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier:          8OhX6ejgSxJzZPzu3N11+QUm1P8SUy+C1Z0PVh6ao1Y=
Subject key identifier:   82:75:E1:1C:B4:EA:30:38:38:F4:AC:A6:CF:E7:0B:54:74:C0:E4:4E
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer:       /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial:       01962E99409593F462C5918C502D67DE5FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number:          14E4
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: vrnfzyijKy7sIynJZngIlOW23yvbGlEn4XEKI6Xfwpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:95:93:f4:62:c5:91:8c:50:2d:67:de:5f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=8275e11cb4ea303838f4aca6cfe70b5474c0e44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:f5:25:cc:c9:a9:d3:8d:78:c8:89:0f:6e:
                    4e:ad:d8:35:77:8f:f8:4c:2d:dd:03:71:34:a7:5c:
                    d1:4d:fb:9a:44:3d:3c:c3:ee:ba:99:41:a4:f6:c5:
                    c0:84:7a:98:1f:5d:b6:7a:b0:6d:78:8f:cf:e0:2b:
                    08:4c:81:f6:76:d9:05:dc:c1:3c:86:f1:ad:87:73:
                    4f:72:3e:c7:3a:e9:7e:b6:f6:bf:ae:1b:78:e0:23:
                    69:6c:dc:f3:f0:35:b6:63:7d:9f:04:c0:ca:fd:a5:
                    4f:c1:53:f9:14:f9:4c:7d:f1:fd:cf:ef:05:53:99:
                    16:b9:09:8b:98:c1:60:d3:73:8c:95:08:9b:2f:56:
                    80:18:3d:d6:f6:2f:38:0d:e0:b9:67:f7:be:0d:83:
                    ff:ab:62:5d:c7:bf:2f:66:e7:55:4d:59:9b:75:f0:
                    58:c5:d0:14:7b:d7:8a:45:f3:f8:a5:b2:75:ef:4c:
                    48:76:1e:ad:3d:4b:fc:a6:6a:0d:36:d9:e8:c7:9a:
                    ff:11:4d:87:0e:e6:0a:02:21:9b:0c:05:57:78:b5:
                    65:56:10:02:e6:0d:f6:0d:00:e3:c7:6c:26:ad:26:
                    55:f5:b0:1e:94:21:c6:77:ac:e5:35:d3:3a:31:2f:
                    d1:04:69:30:3c:65:ea:0f:f8:0e:4e:3d:97:e4:86:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:75:E1:1C:B4:EA:30:38:38:F4:AC:A6:CF:E7:0B:54:74:C0:E4:4E
            X509v3 Authority Key Identifier:
                keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:a2:b2:12:60:78:63:77:a0:c3:df:ae:57:2f:c5:40:f7:
         77:0f:bb:1d:4e:1b:8c:1d:0f:f4:2d:0e:ea:bd:9c:33:c5:60:
         a1:da:ee:de:a0:10:25:4a:60:ef:67:f1:f7:6d:72:da:17:57:
         83:00:11:31:a0:dd:78:61:41:83:32:6d:52:c2:f2:90:5e:c1:
         0e:de:1f:3f:4d:e6:fe:7f:a3:e4:94:88:f9:b8:03:a2:b5:ee:
         41:42:4d:c8:55:3d:f8:03:de:5a:ae:b0:96:3b:f2:8a:6d:b9:
         d8:4a:25:48:c7:42:d0:dd:e2:3e:b1:78:95:1c:c4:cd:af:68:
         db:86:a8:c4:e5:b3:40:93:01:65:66:46:19:0e:ba:5b:cc:ba:
         b5:4f:21:38:83:a4:aa:7e:2e:7c:57:e3:e5:a4:dd:b0:e6:10:
         91:7b:af:ee:36:7e:91:9f:f9:50:33:9e:3e:e8:86:b8:ba:c9:
         8f:2d:d8:ac:df:e1:67:93:46:a6:d7:fe:2f:ad:63:7d:94:cb:
         83:e2:6e:81:b5:27:05:d7:d1:19:3e:3b:9b:a7:18:13:d0:91:
         70:6a:88:7a:13:ae:ad:18:22:f4:66:91:de:cf:7f:e9:56:bf:
         4f:61:b5:f7:3b:5d:dc:ee:78:55:d1:50:45:8d:20:15:5c:58:
         09:76:ca:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUCVk/RixZGMUC1n3l/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmFiMzI2ODA4NTMwOGExZjhkNTcwODRiOWRhYTFlYmY5
NWUwZGMwHhcNMjUwNDEzMTAwMTU3WhcNMjUwNDE0MTAwMTU3WjAzMTEwLwYDVQQD
Eyg4Mjc1ZTExY2I0ZWEzMDM4MzhmNGFjYTZjZmU3MGI1NDc0YzBlNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukf1JczJqdONeMiJD25Ordg1d4/4
TC3dA3E0p1zRTfuaRD08w+66mUGk9sXAhHqYH122erBteI/P4CsITIH2dtkF3ME8
hvGth3NPcj7HOul+tva/rht44CNpbNzz8DW2Y32fBMDK/aVPwVP5FPlMffH9z+8F
U5kWuQmLmMFg03OMlQibL1aAGD3W9i84DeC5Z/e+DYP/q2Jdx78vZudVTVmbdfBY
xdAUe9eKRfP4pbJ170xIdh6tPUv8pmoNNtnox5r/EU2HDuYKAiGbDAVXeLVlVhAC
5g32DQDjx2wmrSZV9bAelCHGd6zlNdM6MS/RBGkwPGXqD/gOTj2X5Ia2PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ14Ry06jA4OPSsps/nC1R0wOROMB8GA1UdIwQY
MBaAFHC6syaAhTCKH41XCEudqh6/leDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZmQzZWYtZDU1OC00ZTcwLWEyMTQt
NTJhZWZiNjU2OGFlLzEvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZmQzZWYtZDU1OC00ZTcwLWEyMTQtNTJhZWZiNjU2OGFl
LzEvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfqishJg
eGN3oMPfrlcvxUD3dw+7HU4bjB0P9C0O6r2cM8Vgodru3qAQJUpg72fx921y2hdX
gwARMaDdeGFBgzJtUsLykF7BDt4fP03m/n+j5JSI+bgDorXuQUJNyFU9+APeWq6w
ljvyim252EolSMdC0N3iPrF4lRzEza9o24aoxOWzQJMBZWZGGQ66W8y6tU8hOIOk
qn4ufFfj5aTdsOYQkXuv7jZ+kZ/5UDOePuiGuLrJjy3YrN/hZ5NGptf+L61jfZTL
g+JugbUnBdfRGT47m6cYE9CRcGqIehOurRgi9GaR3s9/6Va/T2G19ztd3O54VdFQ
RY0gFVxYCXbKSA==
-----END CERTIFICATE-----