Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File:                     4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier:          OKdcOQldKF3y4tzzSafhtjqaaYWiMXDUhhlKmRQXS3Y=
Subject key identifier:   D1:33:F5:85:73:2D:38:39:82:56:4D:56:52:A8:8C:4E:C5:1D:E2:7E
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer:       /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial:       01962E990F72A114B2189D1E91431CA775A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: UrjWtiTtAfQMaCUpg/dTw3lIfXeRumESAJOXvK5WbUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:72:a1:14:b2:18:9d:1e:91:43:1c:a7:75:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=d133f585732d383982564d5652a88c4ec51de27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:40:41:11:f6:87:f8:a4:71:99:b1:df:fa:
                    eb:58:14:75:c8:82:1b:13:f6:46:f1:bd:f3:f2:6e:
                    fc:72:9a:1f:d0:ef:05:4b:74:aa:30:cf:da:0a:02:
                    f6:cb:00:89:06:55:b0:23:bb:db:d1:c1:ce:d2:88:
                    d8:bb:fc:36:99:71:1e:b1:a3:fd:df:32:44:4e:2d:
                    68:25:4c:d1:95:4f:05:2a:86:6f:0a:91:b4:54:18:
                    a8:a8:22:96:12:a5:a6:0d:4f:5c:c9:e1:1e:c2:9f:
                    0f:78:37:79:d0:56:f6:d0:6e:45:7d:3f:97:1e:a9:
                    3d:d8:ae:2d:83:8c:fb:5c:f6:39:2f:73:d6:98:a1:
                    18:1c:e7:5a:f0:e6:b9:52:85:a2:37:a2:94:40:13:
                    f0:04:87:95:f4:3d:47:0d:6a:8e:ed:3b:19:b3:f1:
                    64:00:8a:f7:1f:3c:fd:f3:90:6a:85:72:80:f4:69:
                    e4:8b:3f:27:1e:09:6c:e4:9f:91:b2:9d:ee:f5:9d:
                    65:53:76:46:ca:20:eb:a5:99:a6:df:86:86:d8:36:
                    1b:fd:37:a4:cd:56:c9:1b:d6:b3:c3:3f:87:1c:58:
                    61:6a:ab:5b:f7:83:b7:a2:fe:69:de:73:1c:97:a8:
                    6d:2a:20:7e:29:16:79:c7:63:4b:c5:a6:06:14:1b:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:33:F5:85:73:2D:38:39:82:56:4D:56:52:A8:8C:4E:C5:1D:E2:7E
            X509v3 Authority Key Identifier:
                keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:7e:a8:6b:49:62:1b:f3:2e:41:4f:f6:da:fc:8a:2f:f9:
         ac:e8:cc:61:50:ea:95:9b:a9:3c:35:b4:a6:ca:70:84:7a:46:
         98:77:75:b7:c0:3c:1b:22:5e:bf:b9:0d:2f:0b:fe:23:2f:ee:
         39:d2:c4:b4:4d:a9:ef:24:c4:76:7c:02:a9:a8:fe:e2:8b:74:
         61:ca:03:d8:d9:31:fe:dd:e7:d1:24:44:06:84:b7:bc:2e:fa:
         78:93:9e:6b:90:47:2f:47:ad:3d:c4:1d:f0:a6:59:5d:4a:f4:
         f3:de:88:e0:ce:44:fd:26:a0:c0:22:ca:67:af:e7:14:48:92:
         cf:d3:d9:25:03:c3:e4:d6:41:c1:cf:9c:f1:a3:a8:af:c7:ff:
         11:ea:d6:b3:a4:93:e5:ec:02:03:84:07:81:06:25:8a:a4:ec:
         b8:12:80:a5:22:c4:30:3e:8f:73:3d:f8:fa:ec:38:bd:d5:2c:
         18:94:75:03:47:e5:76:db:c7:df:df:49:ae:65:d2:15:0e:25:
         74:67:23:07:b7:de:2e:81:29:83:76:c5:96:e9:9c:89:f1:88:
         b9:7b:21:e4:8f:fc:3c:a7:a5:56:38:5c:dc:f0:d1:f6:ee:74:
         6b:b0:ec:40:4c:0d:12:00:18:f8:57:38:8f:65:3f:a0:82:01:
         9b:f6:9a:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQ9yoRSyGJ0ekUMcp3WiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzc3OWI4Mzg4ZDAwMWZkY2JkZGM0OGFjZTIyN2YwMDk4
NTA2NjAwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
EyhkMTMzZjU4NTczMmQzODM5ODI1NjRkNTY1MmE4OGM0ZWM1MWRlMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqdAQRH2h/ikcZmx3/rrWBR1yIIb
E/ZG8b3z8m78cpof0O8FS3SqMM/aCgL2ywCJBlWwI7vb0cHO0ojYu/w2mXEesaP9
3zJETi1oJUzRlU8FKoZvCpG0VBioqCKWEqWmDU9cyeEewp8PeDd50Fb20G5FfT+X
Hqk92K4tg4z7XPY5L3PWmKEYHOda8Oa5UoWiN6KUQBPwBIeV9D1HDWqO7TsZs/Fk
AIr3Hzz985BqhXKA9Gnkiz8nHgls5J+Rsp3u9Z1lU3ZGyiDrpZmm34aG2DYb/Tek
zVbJG9azwz+HHFhhaqtb94O3ov5p3nMcl6htKiB+KRZ5x2NLxaYGFBvWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEz9YVzLTg5glZNVlKojE7FHeJ+MB8GA1UdIwQY
MBaAFOM3ebg4jQAf3L3cSKziJ/AJhQZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85ZGIzMjYtMTE4OS00YWM5LWI0MTIt
ZjI5NGQzYjEyY2ZkLzEvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85ZGIzMjYtMTE4OS00YWM5LWI0MTItZjI5NGQzYjEyY2Zk
LzEvNHpkNXVEaU5BQl9jdmR4SXJPSW44QW1GQm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKR+qGtJ
YhvzLkFP9tr8ii/5rOjMYVDqlZupPDW0pspwhHpGmHd1t8A8GyJev7kNLwv+Iy/u
OdLEtE2p7yTEdnwCqaj+4ot0YcoD2Nkx/t3n0SREBoS3vC76eJOea5BHL0etPcQd
8KZZXUr0896I4M5E/SagwCLKZ6/nFEiSz9PZJQPD5NZBwc+c8aOor8f/EerWs6ST
5ewCA4QHgQYliqTsuBKApSLEMD6Pcz34+uw4vdUsGJR1A0fldtvH399JrmXSFQ4l
dGcjB7feLoEpg3bFlumcifGIuXsh5I/8PKelVjhc3PDR9u50a7DsQEwNEgAY+Fc4
j2U/oIIBm/aaeA==
-----END CERTIFICATE-----