Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File:                     X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier:          G3xEyiXLFAHRC/ZF8w7he7GKetJzWGStlHDsZci4anc=
Subject key identifier:   24:BC:DB:0D:AB:57:F9:4A:43:D3:DF:DA:83:FF:B3:2E:E8:CE:4A:96
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer:       /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial:       01962F749F3C0291594DDCE06329D0D53A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: E2J9bpFT2k42ySFOrABGIez/GtfITw8uaduNrQvopXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9f:3c:02:91:59:4d:dc:e0:63:29:d0:d5:3a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=24bcdb0dab57f94a43d3dfda83ffb32ee8ce4a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:b6:dd:1d:a2:e0:94:1a:d9:40:d1:8d:76:
                    a2:b3:04:b8:0b:df:9d:94:7c:1a:6b:a8:2d:90:60:
                    e2:62:e2:9e:ac:97:04:f7:df:84:fe:32:4a:f2:6a:
                    fc:94:93:9d:a7:f1:28:c5:30:d0:d7:bb:db:5f:e2:
                    be:b6:29:c1:fb:9c:4d:4a:15:12:31:20:d4:2f:ef:
                    02:74:c3:ad:e0:7a:67:a4:32:53:b8:cb:1e:b4:51:
                    2e:d2:07:dc:9f:f9:0b:76:db:5b:28:e3:f9:27:3c:
                    7e:0d:0f:56:6b:a8:09:2a:01:14:40:ce:99:c1:f6:
                    54:2e:43:c5:f1:87:6d:bf:67:06:c1:46:40:c5:9d:
                    5a:85:d6:b1:25:22:45:56:a6:1c:42:f4:5c:c0:9a:
                    d3:5a:b8:69:81:eb:8f:57:25:fa:da:62:83:46:ad:
                    9d:a4:32:3f:66:2b:ab:f3:35:57:a8:b4:bc:c5:0e:
                    07:5a:62:87:86:20:0e:bc:86:59:4e:a9:d5:50:e2:
                    51:fb:b2:10:14:86:5a:3c:ed:aa:af:f0:c6:0b:c2:
                    d1:f7:c4:e1:f3:e8:a0:48:f9:04:d5:1b:bd:7c:05:
                    e5:bd:ef:49:ff:2d:6f:30:ad:bd:50:ea:e5:84:6b:
                    75:ff:84:ad:44:c8:91:2c:e4:2b:9f:7c:50:69:10:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:DB:0D:AB:57:F9:4A:43:D3:DF:DA:83:FF:B3:2E:E8:CE:4A:96
            X509v3 Authority Key Identifier:
                keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:bd:e4:63:54:a5:1a:88:4f:c2:50:69:03:ac:58:64:dc:
         8f:60:c0:54:94:97:41:ba:e7:9c:a1:f8:73:65:83:45:de:5c:
         5d:45:33:33:3e:ae:e8:6c:03:2d:4e:12:58:5f:f6:a1:c9:f8:
         63:73:64:c8:91:65:9b:ce:5d:3d:d4:e3:df:e1:86:64:f4:4b:
         87:ad:04:14:eb:1e:53:8c:30:33:b4:95:e2:ca:91:63:08:71:
         43:e0:a8:cd:fc:35:d7:57:94:08:ed:74:8a:4b:9d:47:8c:3b:
         09:30:ce:22:c6:9d:aa:5a:f6:c8:1f:76:eb:c4:12:40:23:50:
         aa:de:06:e4:af:2b:d2:30:ff:2d:52:6c:14:25:44:81:ae:98:
         cd:ca:f0:82:ef:b7:62:d0:d6:c9:13:53:63:1d:a4:b2:92:2e:
         a5:3f:05:b2:ec:0a:41:ae:b4:05:8a:8b:8d:ab:3d:f1:b6:a4:
         26:bc:c6:ed:04:e7:e8:a9:cb:dd:04:cc:9c:84:1f:7b:93:48:
         d5:66:73:38:3a:ff:d7:63:c0:99:7f:cb:90:bb:f5:c3:d1:af:
         6b:49:38:c4:bb:20:e8:a9:63:46:9f:d1:8b:95:2e:21:69:be:
         b4:f4:7b:d7:93:fb:05:37:3b:9a:76:97:3b:e5:e1:c1:b9:14:
         ed:bd:f5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJ88ApFZTdzgYynQ1TopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmYxMDBmMjBlNzllMmI4Mjc4N2ZlNjQ1YTUzZjRjMjg2
NDJhZjYwHhcNMjUwNDEzMTQwMTM0WhcNMjUwNDE0MTQwMTM0WjAzMTEwLwYDVQQD
EygyNGJjZGIwZGFiNTdmOTRhNDNkM2RmZGE4M2ZmYjMyZWU4Y2U0YTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhm23R2i4JQa2UDRjXaiswS4C9+d
lHwaa6gtkGDiYuKerJcE99+E/jJK8mr8lJOdp/EoxTDQ17vbX+K+tinB+5xNShUS
MSDUL+8CdMOt4HpnpDJTuMsetFEu0gfcn/kLdttbKOP5Jzx+DQ9Wa6gJKgEUQM6Z
wfZULkPF8Ydtv2cGwUZAxZ1ahdaxJSJFVqYcQvRcwJrTWrhpgeuPVyX62mKDRq2d
pDI/Ziur8zVXqLS8xQ4HWmKHhiAOvIZZTqnVUOJR+7IQFIZaPO2qr/DGC8LR98Th
8+igSPkE1Ru9fAXlve9J/y1vMK29UOrlhGt1/4StRMiRLOQrn3xQaRCO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS82w2rV/lKQ9Pf2oP/sy7ozkqWMB8GA1UdIwQY
MBaAFF+/EA8g554rgnh/5kWlP0woZCr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEt
MzNmM2M2YjM0NjAyLzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEtMzNmM2M2YjM0NjAy
LzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1O95GNU
pRqIT8JQaQOsWGTcj2DAVJSXQbrnnKH4c2WDRd5cXUUzMz6u6GwDLU4SWF/2ocn4
Y3NkyJFlm85dPdTj3+GGZPRLh60EFOseU4wwM7SV4sqRYwhxQ+Cozfw111eUCO10
ikudR4w7CTDOIsadqlr2yB9268QSQCNQqt4G5K8r0jD/LVJsFCVEga6Yzcrwgu+3
YtDWyRNTYx2kspIupT8FsuwKQa60BYqLjas98bakJrzG7QTn6KnL3QTMnIQfe5NI
1WZzODr/12PAmX/LkLv1w9Gva0k4xLsg6KljRp/Ri5UuIWm+tPR715P7BTc7mnaX
O+XhwbkU7b31/w==
-----END CERTIFICATE-----