Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
File:                     DtBp69i6c1aNl9ixv7Q84upNqd4.mft (raw, json)
Hash identifier:          Ne6cEbCh/lbmgfofJjDqOsati2PPcO/inCiN7XzEGlo=
Subject key identifier:   88:E9:75:B5:6C:36:B9:65:D9:C2:F3:2E:59:D4:2D:FA:A2:4A:76:B1
Authority key identifier: 0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE
Certificate issuer:       /CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
Certificate serial:       0195474795A3ABC81B2D187D0758DDDF7136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft
Manifest number:          146E
Signing time:             Thu 27 Feb 2025 12:00:28 +0000
Manifest this update:     Thu 27 Feb 2025 12:00:28 +0000
Manifest next update:     Fri 28 Feb 2025 12:00:28 +0000
Files and hashes:         1: DtBp69i6c1aNl9ixv7Q84upNqd4.crl (hash: n5ABPiiFwqWMdIZNzUS/BYYQlsgsg96rAOj4ugNvdlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:47:95:a3:ab:c8:1b:2d:18:7d:07:58:dd:df:71:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed069ebd8ba73568d97d8b1bfb43ce2ea4da9de
        Validity
            Not Before: Feb 27 12:00:28 2025 GMT
            Not After : Feb 28 12:00:28 2025 GMT
        Subject: CN=88e975b56c36b965d9c2f32e59d42dfaa24a76b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:15:71:63:37:e8:6e:30:c2:40:b7:e7:00:
                    20:e9:73:0c:23:55:7a:75:ec:aa:60:2d:b1:e7:01:
                    5f:69:fb:43:7b:dd:59:81:c7:2d:08:c4:99:00:7a:
                    5b:7b:5d:9d:9c:3f:3d:96:3d:ea:f5:b6:b3:3d:72:
                    92:08:f2:95:23:56:85:78:51:d4:a6:35:f0:7b:2b:
                    44:ba:6a:e6:2e:a7:57:2f:3d:f3:91:a0:fe:9a:61:
                    d3:41:84:ac:c1:0a:76:dd:af:ae:63:34:51:7d:ec:
                    75:3a:bc:16:8a:0b:63:63:62:e2:76:24:58:68:88:
                    8c:5a:f0:a4:99:28:44:9f:10:49:ac:0e:a6:cd:12:
                    c2:14:2b:b1:80:af:09:87:15:91:de:81:cb:f4:aa:
                    b5:3a:ec:cb:34:3a:7f:b4:fa:a7:b5:08:58:65:a9:
                    eb:67:69:8f:99:bd:e8:3d:30:cc:96:b5:58:2c:ed:
                    fc:73:fd:9c:b9:93:8d:4d:94:17:90:65:38:e3:a0:
                    63:fe:d3:39:f2:6e:11:39:b9:cc:3e:3d:63:e7:ef:
                    e9:6d:66:ff:21:c0:ae:72:56:17:ac:a5:d3:96:1e:
                    5d:9c:3b:10:51:ff:70:7d:45:c7:d4:91:f1:1d:5f:
                    f8:11:a6:9c:ed:28:7b:fd:4c:dc:bd:22:fb:9e:99:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E9:75:B5:6C:36:B9:65:D9:C2:F3:2E:59:D4:2D:FA:A2:4A:76:B1
            X509v3 Authority Key Identifier:
                keyid:0E:D0:69:EB:D8:BA:73:56:8D:97:D8:B1:BF:B4:3C:E2:EA:4D:A9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtBp69i6c1aNl9ixv7Q84upNqd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ede658-7003-4a4d-8741-6aead5568568/1/DtBp69i6c1aNl9ixv7Q84upNqd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:a6:14:02:18:20:e4:cc:0d:a4:44:b6:f1:b4:4e:7c:9d:
         f6:43:ec:b8:ed:7d:b1:f0:34:5b:32:e5:28:a2:99:48:71:6f:
         9d:f2:7a:ee:e1:b6:90:0b:c4:a8:4c:db:b2:91:76:5b:99:e2:
         9a:07:99:db:03:ef:3f:27:ad:5b:5b:02:1e:8f:09:ed:12:15:
         75:52:37:f2:19:17:eb:b1:d9:93:87:84:5e:21:c4:71:42:3b:
         5d:ad:45:26:91:70:bb:e9:d1:ef:6f:27:b2:9a:16:2f:4a:18:
         ad:31:14:36:bf:4c:ff:cf:f6:43:4a:38:2e:b4:3a:c1:4c:c2:
         39:12:38:fc:c4:69:c9:d9:35:7d:cb:49:d2:57:23:b0:37:d8:
         f3:f5:52:ea:ff:44:19:72:f2:ad:26:86:10:cc:1f:a7:c2:ed:
         5e:c4:c3:58:3f:d1:69:8d:bf:b7:9d:6f:2b:da:82:08:98:21:
         78:a2:11:50:12:84:9a:5d:40:a1:a0:e4:3e:4b:5b:42:89:3b:
         ff:f9:4e:0c:a1:c9:d2:91:2d:23:fc:fa:93:7b:41:13:f2:15:
         e1:1f:c5:32:0a:13:c8:49:fc:10:f3:d8:a7:b1:34:f5:2b:d2:
         db:a4:d9:23:b6:47:90:64:71:b4:1f:dd:9e:12:ee:e4:ea:93:
         fb:06:d7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVHR5Wjq8gbLRh9B1jd33E2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDA2OWViZDhiYTczNTY4ZDk3ZDhiMWJmYjQzY2UyZWE0
ZGE5ZGUwHhcNMjUwMjI3MTIwMDI4WhcNMjUwMjI4MTIwMDI4WjAzMTEwLwYDVQQD
Eyg4OGU5NzViNTZjMzZiOTY1ZDljMmYzMmU1OWQ0MmRmYWEyNGE3NmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbYVcWM36G4wwkC35wAg6XMMI1V6
deyqYC2x5wFfaftDe91ZgcctCMSZAHpbe12dnD89lj3q9bazPXKSCPKVI1aFeFHU
pjXweytEumrmLqdXLz3zkaD+mmHTQYSswQp23a+uYzRRfex1OrwWigtjY2LidiRY
aIiMWvCkmShEnxBJrA6mzRLCFCuxgK8JhxWR3oHL9Kq1OuzLNDp/tPqntQhYZanr
Z2mPmb3oPTDMlrVYLO38c/2cuZONTZQXkGU446Bj/tM58m4RObnMPj1j5+/pbWb/
IcCuclYXrKXTlh5dnDsQUf9wfUXH1JHxHV/4Eaac7Sh7/UzcvSL7npkhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjpdbVsNrll2cLzLlnULfqiSnaxMB8GA1UdIwQY
MBaAFA7QaevYunNWjZfYsb+0POLqTaneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRCcDY5aTZjMWFObDlpeHY3UTg0dXBOcWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZGU2NTgtNzAwMy00YTRkLTg3NDEt
NmFlYWQ1NTY4NTY4LzEvRHRCcDY5aTZjMWFObDlpeHY3UTg0dXBOcWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lZGU2NTgtNzAwMy00YTRkLTg3NDEtNmFlYWQ1NTY4NTY4
LzEvRHRCcDY5aTZjMWFObDlpeHY3UTg0dXBOcWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlymFAIY
IOTMDaREtvG0Tnyd9kPsuO19sfA0WzLlKKKZSHFvnfJ67uG2kAvEqEzbspF2W5ni
mgeZ2wPvPyetW1sCHo8J7RIVdVI38hkX67HZk4eEXiHEcUI7Xa1FJpFwu+nR728n
spoWL0oYrTEUNr9M/8/2Q0o4LrQ6wUzCORI4/MRpydk1fctJ0lcjsDfY8/VS6v9E
GXLyrSaGEMwfp8LtXsTDWD/RaY2/t51vK9qCCJgheKIRUBKEml1AoaDkPktbQok7
//lODKHJ0pEtI/z6k3tBE/IV4R/FMgoTyEn8EPPYp7E09SvS26TZI7ZHkGRxtB/d
nhLu5OqT+wbXzQ==
-----END CERTIFICATE-----