Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          JCZg3v45xp0qczmJ0NyMe/3T4x9nbuX5hax5DKs7Glo=
Subject key identifier:   98:5B:F0:D4:1D:C3:99:9E:72:09:DD:7D:0E:86:7D:75:93:19:E7:FD
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       01962ECFB8224C272695FC0508C929B8294B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          0239
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: 4hiif0GyjyiXz4/zpn8HzUMEpb2CY4EuO8rDjIEOW4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:22:4c:27:26:95:fc:05:08:c9:29:b8:29:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=985bf0d41dc3999e7209dd7d0e867d759319e7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:d7:89:93:44:52:8a:a0:22:72:52:2a:b7:
                    b3:37:de:24:fc:3a:f2:6e:4a:36:b4:c8:03:0e:b9:
                    aa:53:79:4b:14:80:eb:da:0d:ed:76:23:1d:ff:e3:
                    7e:7d:16:8e:38:d8:59:b8:8f:3a:be:eb:5c:d1:12:
                    3e:9d:9a:1b:88:3b:bb:b0:57:1a:9c:ff:70:2f:7e:
                    98:63:3e:32:73:b1:c7:73:be:c5:2d:75:4f:5b:c6:
                    52:6c:54:aa:69:9c:7f:a0:5c:0a:fe:d8:b5:75:b4:
                    69:23:2a:af:84:66:d0:e8:4e:12:87:b1:35:02:2e:
                    b4:b5:ba:73:9f:8c:af:17:c0:ea:6f:fe:44:1f:d8:
                    72:bd:6c:8f:9b:ae:0a:8b:e8:a6:47:b9:5e:33:68:
                    04:55:19:fa:d7:fe:54:22:f3:89:5d:2f:ce:31:7a:
                    22:c1:d5:e4:31:94:83:72:6a:03:aa:9d:70:c5:08:
                    55:36:b4:a9:18:60:34:d8:dc:51:35:89:36:67:d5:
                    7f:a9:05:c8:64:a0:c6:a9:01:8d:2b:24:b1:ee:10:
                    17:f8:f9:51:b1:e9:81:09:bf:6a:76:64:ee:f7:35:
                    95:cb:38:86:ad:a3:49:46:00:41:cb:ff:34:7e:41:
                    c7:b4:c9:ee:2a:ee:a0:c1:94:87:a0:e3:29:b3:0c:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:F0:D4:1D:C3:99:9E:72:09:DD:7D:0E:86:7D:75:93:19:E7:FD
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:1e:ea:cb:49:18:0b:65:1c:85:2b:e1:95:e0:a0:9b:de:
         65:cd:80:3d:bd:88:48:c7:94:cd:20:5f:54:93:41:fe:c8:6a:
         50:47:02:97:e7:fc:00:c7:16:4b:12:8f:92:1f:c7:5c:0d:03:
         94:42:ea:85:72:00:a1:6d:69:cf:74:cb:f2:1b:13:da:c7:32:
         44:c9:38:26:09:e0:13:d3:6a:ef:9e:f4:a8:62:00:20:4a:63:
         b9:0d:d2:15:59:48:20:19:1c:2b:86:23:2d:79:22:3f:a0:7f:
         0a:56:fe:60:4f:d2:ce:fe:e8:fd:95:9e:eb:61:b7:1e:86:d3:
         f8:3d:8a:b6:8d:89:80:5a:47:85:0b:54:a4:bd:db:9f:fa:79:
         c6:34:f2:eb:09:5b:0c:e9:54:f0:c3:2d:90:98:b7:80:d9:d3:
         f7:bf:a7:e9:56:56:00:27:9c:93:1c:d1:a2:55:4c:4f:f7:8d:
         38:95:9f:13:43:7c:57:de:5b:40:21:cf:6e:40:e5:c0:64:7a:
         25:4b:44:cb:09:b7:7a:f1:f9:bf:8f:12:1d:30:e3:83:8a:41:
         8f:d7:57:4a:bd:b2:ba:14:1f:66:9c:f0:24:fe:38:f5:43:ed:
         fe:4f:6f:9d:fb:dc:17:df:38:04:b2:da:af:c8:0f:90:c2:e6:
         69:ce:4f:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7giTCcmlfwFCMkpuClLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWFkYzJhNjI3MDI3MDhiMWEwZWUwZGYzYjRjZjkyMjg5
NmRjZDYwHhcNMjUwNDEzMTEwMTI3WhcNMjUwNDE0MTEwMTI3WjAzMTEwLwYDVQQD
Eyg5ODViZjBkNDFkYzM5OTllNzIwOWRkN2QwZTg2N2Q3NTkzMTllN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqHXiZNEUoqgInJSKrezN94k/Dry
bko2tMgDDrmqU3lLFIDr2g3tdiMd/+N+fRaOONhZuI86vutc0RI+nZobiDu7sFca
nP9wL36YYz4yc7HHc77FLXVPW8ZSbFSqaZx/oFwK/ti1dbRpIyqvhGbQ6E4Sh7E1
Ai60tbpzn4yvF8Dqb/5EH9hyvWyPm64Ki+imR7leM2gEVRn61/5UIvOJXS/OMXoi
wdXkMZSDcmoDqp1wxQhVNrSpGGA02NxRNYk2Z9V/qQXIZKDGqQGNKySx7hAX+PlR
semBCb9qdmTu9zWVyziGraNJRgBBy/80fkHHtMnuKu6gwZSHoOMpswzF0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhb8NQdw5mecgndfQ6GfXWTGef9MB8GA1UdIwQY
MBaAFOea3CpicCcIsaDuDfO0z5IoltzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQt
MzYzYzFiNDMxOTYzLzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQtMzYzYzFiNDMxOTYz
LzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbAe6stJ
GAtlHIUr4ZXgoJveZc2APb2ISMeUzSBfVJNB/shqUEcCl+f8AMcWSxKPkh/HXA0D
lELqhXIAoW1pz3TL8hsT2scyRMk4JgngE9Nq7570qGIAIEpjuQ3SFVlIIBkcK4Yj
LXkiP6B/Clb+YE/Szv7o/ZWe62G3HobT+D2Kto2JgFpHhQtUpL3bn/p5xjTy6wlb
DOlU8MMtkJi3gNnT97+n6VZWACeckxzRolVMT/eNOJWfE0N8V95bQCHPbkDlwGR6
JUtEywm3evH5v48SHTDjg4pBj9dXSr2yuhQfZpzwJP449UPt/k9vnfvcF984BLLa
r8gPkMLmac5Pqw==
-----END CERTIFICATE-----