Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File:                     4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier:          XmU6/zkLdSiQPZYE1Ob7woBQwVqGdvsdimpbKWWQOj0=
Subject key identifier:   71:99:C8:02:7C:0F:D4:21:B1:14:6F:15:6A:1C:E9:F5:78:C2:F3:91
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer:       /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial:       01962E61F14471C68888A460F790A6AA223B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number:          0550
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: XZADFp9aCH4rVCmTfhIxquFRtpm0VDuXW6VoWu8KHfY=)
                          2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
                          3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f1:44:71:c6:88:88:a4:60:f7:90:a6:aa:22:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=7199c8027c0fd421b1146f156a1ce9f578c2f391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:1e:f9:7a:80:c7:08:14:de:8a:03:f0:00:
                    eb:b9:f9:04:3b:6c:15:94:d1:de:3d:cc:99:ed:1d:
                    2a:66:b1:50:7e:ce:b1:91:77:5e:2b:23:27:cb:95:
                    90:ca:2f:92:5c:97:37:0f:5d:85:2f:48:ef:bc:e4:
                    83:de:85:0f:a0:39:63:79:a5:69:d6:8f:b9:a3:68:
                    36:d4:31:2f:c5:d7:78:5d:2b:6c:7f:d4:a6:01:e7:
                    62:8c:9f:e7:6d:30:34:82:7d:43:d9:bb:f5:17:02:
                    fb:70:fd:bd:10:99:16:6b:60:da:f0:aa:38:8d:d0:
                    89:12:54:a9:d1:45:6e:63:d6:da:b0:28:1e:37:f1:
                    b3:a0:fd:3b:d1:8d:39:25:39:bc:87:98:28:72:63:
                    d5:fc:f5:7e:0c:1e:79:f1:a6:59:65:31:99:a8:f6:
                    0d:e7:85:5e:44:81:c6:6e:8d:ca:07:eb:ac:f9:88:
                    e4:4a:e3:bf:d6:87:07:7a:41:1e:d1:29:3d:c5:ff:
                    75:2b:45:89:35:e8:7d:82:bc:2c:7b:07:b9:bd:ff:
                    af:ed:de:f3:e3:b5:62:67:49:1c:6a:76:25:0e:16:
                    a7:7a:50:dd:6e:d8:f6:f5:5e:ff:c2:ed:78:41:f6:
                    09:4e:b3:03:27:01:7b:dd:53:97:a8:90:38:0f:0d:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:99:C8:02:7C:0F:D4:21:B1:14:6F:15:6A:1C:E9:F5:78:C2:F3:91
            X509v3 Authority Key Identifier:
                keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:79:fc:dd:e4:34:15:df:18:e8:ec:22:ee:27:98:24:d7:
         5b:5a:83:47:c3:f3:6a:19:fd:c4:cf:18:20:f8:f3:1a:d4:a6:
         b5:52:63:06:f6:83:72:2d:ec:d6:40:48:a3:96:e6:60:32:c3:
         bc:79:51:a4:27:56:c1:b8:0c:38:77:91:53:38:bf:ca:a6:d8:
         66:03:df:b1:31:10:33:4a:a7:c1:73:ba:83:71:e6:d0:ad:9c:
         9c:bc:3f:63:f0:bb:ee:14:d2:04:04:ca:1f:79:0d:8c:a8:d3:
         15:74:37:a0:24:41:65:99:e6:68:2b:8a:38:4d:e6:ad:47:57:
         70:37:d3:54:f8:3d:6a:2b:b4:b4:53:83:4f:47:02:9a:3a:b1:
         dd:b8:9c:1f:5b:27:ba:b1:29:d8:c7:15:44:f8:f0:b5:ea:58:
         bb:c2:72:63:9b:d5:74:05:4d:36:39:3e:31:00:2f:c5:55:d3:
         e2:09:c4:0f:ba:9a:c0:98:e8:3f:53:30:66:88:8f:55:05:d5:
         54:7a:8d:bf:fd:7f:88:62:d0:81:de:41:d4:71:a4:28:60:9d:
         95:68:67:a6:e7:15:c5:ef:48:8d:7a:e3:e9:3c:ed:9c:00:be:
         74:a0:20:01:fc:b5:50:60:00:b5:42:d0:a2:02:78:4c:65:77:
         60:e5:f6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfFEccaIiKRg95CmqiI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjUwNDEzMDkwMTMyWhcNMjUwNDE0MDkwMTMyWjAzMTEwLwYDVQQD
Eyg3MTk5YzgwMjdjMGZkNDIxYjExNDZmMTU2YTFjZTlmNTc4YzJmMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEke+XqAxwgU3ooD8ADrufkEO2wV
lNHePcyZ7R0qZrFQfs6xkXdeKyMny5WQyi+SXJc3D12FL0jvvOSD3oUPoDljeaVp
1o+5o2g21DEvxdd4XStsf9SmAedijJ/nbTA0gn1D2bv1FwL7cP29EJkWa2Da8Ko4
jdCJElSp0UVuY9basCgeN/GzoP070Y05JTm8h5gocmPV/PV+DB558aZZZTGZqPYN
54VeRIHGbo3KB+us+YjkSuO/1ocHekEe0Sk9xf91K0WJNeh9grwsewe5vf+v7d7z
47ViZ0kcanYlDhanelDdbtj29V7/wu14QfYJTrMDJwF73VOXqJA4Dw2N2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGZyAJ8D9QhsRRvFWoc6fV4wvORMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp915/N3k
NBXfGOjsIu4nmCTXW1qDR8Pzahn9xM8YIPjzGtSmtVJjBvaDci3s1kBIo5bmYDLD
vHlRpCdWwbgMOHeRUzi/yqbYZgPfsTEQM0qnwXO6g3Hm0K2cnLw/Y/C77hTSBATK
H3kNjKjTFXQ3oCRBZZnmaCuKOE3mrUdXcDfTVPg9aiu0tFODT0cCmjqx3bicH1sn
urEp2McVRPjwtepYu8JyY5vVdAVNNjk+MQAvxVXT4gnED7qawJjoP1MwZoiPVQXV
VHqNv/1/iGLQgd5B1HGkKGCdlWhnpucVxe9IjXrj6TztnAC+dKAgAfy1UGAAtULQ
ogJ4TGV3YOX2QA==
-----END CERTIFICATE-----