Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
File:                     e4jNrtKWszDz3e1AaNVTJLNQPhE.mft (raw, json)
Hash identifier:          8F0shp6APT5I8ogMEKFni6jMWAXxINLfTNAmpRQ72Ks=
Subject key identifier:   9E:DD:D3:A4:2A:1B:96:42:3D:66:1A:FF:98:56:76:81:33:5F:81:5E
Authority key identifier: 7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11
Certificate issuer:       /CN=7b88cdaed296b330f3dded4068d55324b3503e11
Certificate serial:       01962E9898242381F917EFD844B9DC21C898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: e4jNrtKWszDz3e1AaNVTJLNQPhE.crl (hash: tLfgzG3BQRu+veDpNvZuNM/qbXMQVyci9RHiQlCHZM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:98:24:23:81:f9:17:ef:d8:44:b9:dc:21:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b88cdaed296b330f3dded4068d55324b3503e11
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=9eddd3a42a1b96423d661aff98567681335f815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:c2:68:55:d6:6c:dd:29:8b:f2:71:00:38:
                    8d:e1:c7:54:90:4e:9c:bc:52:fb:b1:ed:45:9a:6c:
                    ee:44:c2:4e:d0:02:eb:e7:18:2d:73:75:39:2d:c7:
                    66:d0:66:b5:61:83:05:36:9e:04:a2:47:3f:e1:f0:
                    e3:82:aa:50:d1:42:fe:86:0c:95:cc:0e:07:a0:29:
                    60:85:45:17:c4:9c:e0:55:25:8c:4b:e6:fb:6f:78:
                    80:80:e4:ff:6b:f6:4a:f5:1e:eb:09:26:6d:df:42:
                    ab:bf:2e:1c:3d:12:fb:92:77:74:e2:32:78:4a:ac:
                    da:82:7f:e6:a1:4d:57:c0:30:62:e5:41:ec:24:fb:
                    6b:ef:1a:43:cf:cb:a8:b7:11:02:5e:12:55:87:dd:
                    20:bd:71:8b:a7:36:27:86:5e:52:be:83:dc:2c:98:
                    9c:38:d4:9f:3a:73:df:1e:01:fc:dc:43:f9:a7:53:
                    60:72:0c:38:d5:19:fe:19:db:7b:c0:ff:75:69:0c:
                    78:c1:8d:e2:ef:58:4d:f1:8d:5d:51:97:5f:3d:d2:
                    38:bf:7e:6d:b9:60:fc:39:c8:f4:67:34:31:41:8b:
                    3c:ae:59:9b:9f:d2:9d:58:f6:03:3c:bb:b1:4e:c8:
                    fe:ca:80:53:70:78:14:32:c7:0c:91:ff:90:34:5f:
                    46:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DD:D3:A4:2A:1B:96:42:3D:66:1A:FF:98:56:76:81:33:5F:81:5E
            X509v3 Authority Key Identifier:
                keyid:7B:88:CD:AE:D2:96:B3:30:F3:DD:ED:40:68:D5:53:24:B3:50:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jNrtKWszDz3e1AaNVTJLNQPhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/7c99de-02b1-46ef-b9b1-89a5f12fa019/1/e4jNrtKWszDz3e1AaNVTJLNQPhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:75:69:7f:e7:be:13:8b:7e:a6:00:f4:bb:09:c6:1f:fb:
         43:d8:dc:d9:4e:19:b2:e6:b8:6e:d9:13:60:8a:ab:1a:f0:df:
         ae:0a:21:be:c9:85:8e:64:40:bf:07:41:8a:eb:b5:c7:19:f4:
         32:fd:84:60:bf:c4:52:67:38:29:5f:74:30:c4:18:13:04:e1:
         3a:d8:95:5d:b0:57:80:2f:23:14:63:86:d8:d7:db:8f:5c:47:
         5b:44:b0:0a:38:6c:48:31:7d:a8:ec:ea:b6:98:79:ba:aa:08:
         a4:05:af:6e:21:c9:4c:85:05:16:3f:d8:e1:fd:05:d9:b6:a1:
         b1:90:f2:00:72:a3:fe:25:8c:03:ac:89:90:0c:f3:91:b3:9c:
         41:25:d1:66:68:a8:22:c1:16:ac:9f:07:1f:d8:b6:cd:67:c3:
         37:16:72:81:e6:15:f3:0f:d9:54:1f:ed:bf:49:c4:74:21:ef:
         d8:3e:fc:6b:63:ff:51:7f:84:f8:cb:ee:3d:6b:52:19:73:48:
         25:51:4c:0f:1a:5a:69:19:bf:3e:2e:61:fc:93:ad:a2:f5:fc:
         16:11:eb:60:09:6b:f2:07:8c:a1:1d:ba:6c:de:03:30:a9:a8:
         4a:99:a0:f5:c3:0a:50:e5:67:a1:30:98:01:f9:1b:8d:3d:f7:
         d8:1c:9b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJgkI4H5F+/YRLncIciYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhjZGFlZDI5NmIzMzBmM2RkZWQ0MDY4ZDU1MzI0YjM1
MDNlMTEwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg5ZWRkZDNhNDJhMWI5NjQyM2Q2NjFhZmY5ODU2NzY4MTMzNWY4MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlXCaFXWbN0pi/JxADiN4cdUkE6c
vFL7se1FmmzuRMJO0ALr5xgtc3U5Lcdm0Ga1YYMFNp4Eokc/4fDjgqpQ0UL+hgyV
zA4HoClghUUXxJzgVSWMS+b7b3iAgOT/a/ZK9R7rCSZt30Krvy4cPRL7knd04jJ4
Sqzagn/moU1XwDBi5UHsJPtr7xpDz8uotxECXhJVh90gvXGLpzYnhl5SvoPcLJic
ONSfOnPfHgH83EP5p1Ngcgw41Rn+Gdt7wP91aQx4wY3i71hN8Y1dUZdfPdI4v35t
uWD8Ocj0ZzQxQYs8rlmbn9KdWPYDPLuxTsj+yoBTcHgUMscMkf+QNF9GmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7d06QqG5ZCPWYa/5hWdoEzX4FeMB8GA1UdIwQY
MBaAFHuIza7SlrMw893tQGjVUySzUD4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEt
ODlhNWYxMmZhMDE5LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83Yzk5ZGUtMDJiMS00NmVmLWI5YjEtODlhNWYxMmZhMDE5
LzEvZTRqTnJ0S1dzekR6M2UxQWFOVlRKTE5RUGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASql1aX/n
vhOLfqYA9LsJxh/7Q9jc2U4Zsua4btkTYIqrGvDfrgohvsmFjmRAvwdBiuu1xxn0
Mv2EYL/EUmc4KV90MMQYEwThOtiVXbBXgC8jFGOG2Nfbj1xHW0SwCjhsSDF9qOzq
tph5uqoIpAWvbiHJTIUFFj/Y4f0F2bahsZDyAHKj/iWMA6yJkAzzkbOcQSXRZmio
IsEWrJ8HH9i2zWfDNxZygeYV8w/ZVB/tv0nEdCHv2D78a2P/UX+E+MvuPWtSGXNI
JVFMDxpaaRm/Pi5h/JOtovX8FhHrYAlr8geMoR26bN4DMKmoSpmg9cMKUOVnoTCY
AfkbjT332BybSg==
-----END CERTIFICATE-----