Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File:                     50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier:          fsV5mvcZbB6FO3w5OxTnB3obccum+JWNFq7jQdhi1pI=
Subject key identifier:   26:E5:F4:5E:7E:5E:DD:39:5F:64:4A:F3:37:76:98:7D:E1:AC:C5:8B
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer:       /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial:       01962DF3D73A27B2CD88F34B591094207EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number:          0CAD
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: +l41LD5uHZaom6qn/2q7pSNIXbsspti+3PArS9rejys=)
                          2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
                          3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:3a:27:b2:cd:88:f3:4b:59:10:94:20:7e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=26e5f45e7e5edd395f644af33776987de1acc58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:a1:22:7a:98:98:60:6d:4f:50:99:95:a2:
                    3d:f5:f8:41:99:69:18:39:28:1f:8f:5f:67:65:79:
                    47:61:c8:6d:a6:40:d8:fe:cb:94:8b:1f:b5:63:ed:
                    6b:b1:63:46:fe:34:c7:8f:f6:5d:e7:aa:4b:8c:4a:
                    c3:da:4b:3e:55:37:b0:6f:cf:07:58:cb:55:f7:3c:
                    1d:e4:02:42:18:03:5e:2f:cb:ec:65:fd:13:a9:45:
                    df:24:97:2e:07:dc:31:eb:d7:ce:b5:55:3a:60:e3:
                    3c:15:82:49:16:c0:a3:7a:14:61:4c:c3:b8:54:95:
                    7f:20:98:23:65:fa:47:35:6c:eb:3b:a0:08:78:85:
                    df:4b:2f:71:20:61:a4:a3:e4:d3:cf:10:31:78:aa:
                    6d:be:dd:d7:42:b9:7c:82:92:98:0b:70:9e:fa:04:
                    0e:56:85:7b:ab:2e:a2:8d:67:0b:84:80:0e:fc:d6:
                    d7:45:d9:92:e8:48:a9:0a:ec:84:56:c5:9f:dc:99:
                    15:27:9b:f6:d4:6b:ed:30:da:7e:fa:29:60:37:77:
                    a4:bc:8a:18:8f:12:58:5b:56:9b:89:c6:e3:a3:0b:
                    29:96:a9:52:f9:f3:c0:b3:b9:ab:79:5c:4b:76:bc:
                    da:d0:17:20:d5:97:5a:5c:29:8b:1f:14:ec:39:37:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E5:F4:5E:7E:5E:DD:39:5F:64:4A:F3:37:76:98:7D:E1:AC:C5:8B
            X509v3 Authority Key Identifier:
                keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:d1:93:1a:97:e7:c4:2d:3e:a5:a8:bb:7b:ff:06:aa:ad:
         de:22:1d:33:f2:5c:75:31:63:1e:c1:db:ba:e4:20:7a:c3:80:
         f4:dc:15:7b:6a:1e:c5:c8:a2:a8:10:70:45:07:ce:9e:e7:cf:
         da:b7:61:87:8d:f7:10:09:0b:b3:8f:bf:7b:3c:24:1b:29:2f:
         e0:8b:0c:eb:38:af:9b:55:42:f7:34:80:40:e5:5d:1d:82:93:
         88:dd:ba:ae:74:1e:16:6c:3d:e1:dc:e9:7f:c0:3f:f1:3e:e3:
         43:58:0e:ea:d1:b5:f7:85:5f:65:1a:3b:5d:e6:a5:2b:76:1d:
         b2:3b:0d:0a:82:d4:57:5f:6d:be:51:7a:76:10:24:b9:e5:da:
         5e:4e:6d:e6:18:23:e5:f0:58:04:0c:21:ef:0e:4e:26:85:b1:
         e3:f4:0c:2c:2c:ca:a5:1b:98:42:ca:20:d3:ed:61:db:ab:5c:
         09:12:a6:b6:14:63:9c:1f:02:c3:f9:11:41:9d:f3:9c:ce:b2:
         11:1f:85:17:85:b1:ac:50:f1:ce:06:4d:5f:68:b0:29:ea:08:
         17:83:7c:b7:e5:cd:11:6a:01:83:e5:24:e2:35:fe:d4:1b:09:
         f3:69:4d:27:e7:02:f9:a3:ce:d1:c9:4a:0f:ac:13:00:90:53:
         8f:4e:3b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89c6J7LNiPNLWRCUIH7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy
NDYwYzEwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
EygyNmU1ZjQ1ZTdlNWVkZDM5NWY2NDRhZjMzNzc2OTg3ZGUxYWNjNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBahInqYmGBtT1CZlaI99fhBmWkY
OSgfj19nZXlHYchtpkDY/suUix+1Y+1rsWNG/jTHj/Zd56pLjErD2ks+VTewb88H
WMtV9zwd5AJCGANeL8vsZf0TqUXfJJcuB9wx69fOtVU6YOM8FYJJFsCjehRhTMO4
VJV/IJgjZfpHNWzrO6AIeIXfSy9xIGGko+TTzxAxeKptvt3XQrl8gpKYC3Ce+gQO
VoV7qy6ijWcLhIAO/NbXRdmS6EipCuyEVsWf3JkVJ5v21GvtMNp++ilgN3ekvIoY
jxJYW1abicbjowsplqlS+fPAs7mreVxLdrza0Bcg1ZdaXCmLHxTsOTeuqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbl9F5+Xt05X2RK8zd2mH3hrMWLMB8GA1UdIwQY
MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt
N2RhM2NkMjUzYmY2LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2
LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedjRkxqX
58QtPqWou3v/Bqqt3iIdM/JcdTFjHsHbuuQgesOA9NwVe2oexciiqBBwRQfOnufP
2rdhh433EAkLs4+/ezwkGykv4IsM6zivm1VC9zSAQOVdHYKTiN26rnQeFmw94dzp
f8A/8T7jQ1gO6tG194VfZRo7XealK3YdsjsNCoLUV19tvlF6dhAkueXaXk5t5hgj
5fBYBAwh7w5OJoWx4/QMLCzKpRuYQsog0+1h26tcCRKmthRjnB8Cw/kRQZ3znM6y
ER+FF4WxrFDxzgZNX2iwKeoIF4N8t+XNEWoBg+Uk4jX+1BsJ82lNJ+cC+aPO0clK
D6wTAJBTj047Wg==
-----END CERTIFICATE-----