Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File:                     1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier:          /min526NR44ZQ8Wv8evfdmW9RR8hrYCYIAYZk6T5lW4=
Subject key identifier:   8C:80:E4:13:55:85:12:78:0F:75:43:DE:29:58:88:55:40:B7:E7:BC
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer:       /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial:       01962E99558B953A0D4027379F6A1CF53373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: 6qVybdMzg5sQqqMw73/24EAsXVxWgnehgQ2dRLQMfm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:55:8b:95:3a:0d:40:27:37:9f:6a:1c:f5:33:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=8c80e413558512780f7543de2958885540b7e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:06:a4:e6:a7:c5:d6:cd:b3:46:bb:22:43:
                    1d:00:6c:9e:dc:3a:76:42:77:ff:cc:6a:63:b8:14:
                    d6:f2:e6:86:13:53:27:44:3b:10:f4:9c:26:91:a1:
                    d4:03:84:f4:86:a0:04:50:e8:d8:85:d5:d7:88:43:
                    8b:87:7e:e6:13:8f:d7:e4:1e:aa:f0:32:a9:00:8b:
                    f3:c0:2f:8a:61:ef:24:27:d1:ee:41:d8:be:f3:34:
                    8e:21:89:ca:79:b3:81:e3:8e:5c:57:76:cd:28:d0:
                    14:ab:29:ae:c6:f3:15:de:8c:cb:90:ed:a1:be:ef:
                    2e:bf:ef:c4:fa:57:f3:09:3a:0b:cd:f7:32:34:c6:
                    4f:e4:ad:99:85:08:2e:f3:92:0d:c2:61:35:32:e6:
                    a9:1f:b6:d8:a6:07:4b:bf:49:c3:93:9e:1e:c6:2b:
                    72:e1:50:97:9b:59:67:1a:b4:33:36:ad:0f:a2:4b:
                    0e:97:43:5f:03:40:22:f5:23:80:08:34:27:5b:a8:
                    2c:dd:07:4e:4e:ed:d7:d0:c6:57:ff:c3:8d:79:ac:
                    bb:44:9a:f8:b3:48:98:af:c8:db:51:3c:53:e0:7d:
                    a3:e9:68:3f:b4:1a:98:5d:0b:ce:5c:3d:7e:55:22:
                    e6:71:96:d7:e1:37:3b:27:2f:d6:0a:3b:49:2b:28:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:80:E4:13:55:85:12:78:0F:75:43:DE:29:58:88:55:40:B7:E7:BC
            X509v3 Authority Key Identifier:
                keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:04:a2:a6:86:b9:12:3b:83:b5:46:4f:2b:08:5f:bc:38:13:
         a9:15:fa:b3:60:fe:e1:7c:e5:ae:45:fe:f7:99:c3:b7:ef:fb:
         e5:33:57:64:5b:29:9b:c7:dd:dd:c8:00:eb:ff:b6:61:7e:1f:
         e1:65:bf:b9:f6:60:af:51:65:04:3c:6d:f1:f1:14:8a:40:3e:
         69:11:ba:f3:fa:ad:d9:0c:da:d0:a8:35:5a:b4:4c:22:3b:fb:
         7b:41:f6:74:eb:d7:e6:6f:79:cf:5b:f7:42:75:15:32:48:cc:
         da:f1:3b:58:6c:51:e5:0a:1a:76:31:5c:21:d6:9a:0d:bc:ed:
         86:75:2a:c5:81:af:19:a8:6c:92:c1:a4:6c:db:e4:e5:69:f9:
         2c:6a:67:d1:26:31:c1:c4:87:08:2b:39:78:f5:d5:5c:e3:dc:
         15:83:fa:68:06:ce:eb:68:07:5a:5a:44:c5:bf:51:1a:da:4e:
         94:c6:46:4d:64:fc:04:9e:7b:af:61:ba:67:e8:be:28:b9:53:
         e3:4f:68:15:ed:ca:c9:1f:2c:72:6f:71:32:d1:3f:e7:a6:e9:
         b9:45:3d:fb:79:8e:24:dd:28:94:46:59:68:19:9a:41:6a:65:
         83:f6:08:d1:53:eb:15:00:ad:29:10:23:d2:97:08:ad:71:59:
         cb:ca:ea:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVWLlToNQCc3n2oc9TNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjUwNDEzMTAwMjAyWhcNMjUwNDE0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg4YzgwZTQxMzU1ODUxMjc4MGY3NTQzZGUyOTU4ODg1NTQwYjdlN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuwGpOanxdbNs0a7IkMdAGye3Dp2
Qnf/zGpjuBTW8uaGE1MnRDsQ9JwmkaHUA4T0hqAEUOjYhdXXiEOLh37mE4/X5B6q
8DKpAIvzwC+KYe8kJ9HuQdi+8zSOIYnKebOB445cV3bNKNAUqymuxvMV3ozLkO2h
vu8uv+/E+lfzCToLzfcyNMZP5K2ZhQgu85INwmE1MuapH7bYpgdLv0nDk54exity
4VCXm1lnGrQzNq0PoksOl0NfA0Ai9SOACDQnW6gs3QdOTu3X0MZX/8ONeay7RJr4
s0iYr8jbUTxT4H2j6Wg/tBqYXQvOXD1+VSLmcZbX4Tc7Jy/WCjtJKyimmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyA5BNVhRJ4D3VD3ilYiFVAt+e8MB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggSipoa5
EjuDtUZPKwhfvDgTqRX6s2D+4XzlrkX+95nDt+/75TNXZFspm8fd3cgA6/+2YX4f
4WW/ufZgr1FlBDxt8fEUikA+aRG68/qt2Qza0Kg1WrRMIjv7e0H2dOvX5m95z1v3
QnUVMkjM2vE7WGxR5QoadjFcIdaaDbzthnUqxYGvGahsksGkbNvk5Wn5LGpn0SYx
wcSHCCs5ePXVXOPcFYP6aAbO62gHWlpExb9RGtpOlMZGTWT8BJ57r2G6Z+i+KLlT
409oFe3KyR8scm9xMtE/56bpuUU9+3mOJN0olEZZaBmaQWplg/YI0VPrFQCtKRAj
0pcIrXFZy8rqRA==
-----END CERTIFICATE-----