Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          R99rEz+gokzUL3eqhz/R0ZOToxZcAHYmKN3OFvEhmFo=
Subject key identifier:   94:28:63:B2:1E:8B:3B:E1:69:40:B4:49:A9:FD:F8:4B:93:29:8F:63
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       01962E99B34108F84D13E31479D1479D963B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: B3oHSBm352hUGVaPIK9u2NdF9Vpbru17doYHOI8Qnk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b3:41:08:f8:4d:13:e3:14:79:d1:47:9d:96:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=942863b21e8b3be16940b449a9fdf84b93298f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:46:2b:e0:cf:98:57:0a:33:29:63:03:fd:
                    56:27:92:04:43:35:f7:ef:ce:de:04:77:1c:6a:d8:
                    0e:5a:d4:f4:0d:16:33:dd:5f:fc:e4:d6:6b:24:08:
                    7c:97:bf:99:27:f2:2b:ea:9b:a6:73:48:49:f4:b8:
                    33:e6:cd:57:a7:29:15:a4:f3:b2:38:9a:43:bb:37:
                    b0:49:70:73:8d:cc:f9:f0:6d:61:8e:60:dd:0a:ed:
                    ea:76:12:af:68:a5:63:e0:4c:31:b1:53:9c:92:17:
                    a6:90:f0:a4:7a:ae:04:c5:8b:30:86:98:2c:80:41:
                    94:cd:be:14:fa:82:a5:3c:92:90:16:b2:25:e2:c3:
                    16:23:cc:a4:65:69:63:65:b4:4c:fb:78:96:e0:96:
                    48:5b:62:c0:20:37:56:0f:db:e6:c8:ee:97:bb:6b:
                    e6:02:f3:1f:78:db:ea:be:1a:0b:05:bf:24:c0:94:
                    a4:eb:04:cf:ff:f8:19:66:d0:22:ad:b6:35:33:04:
                    b6:84:7a:d8:a1:33:a9:fa:db:b0:79:47:34:e9:25:
                    b5:65:2b:a4:ed:ee:8e:bc:23:5c:c6:6f:b7:d6:46:
                    27:d6:37:10:fd:9a:54:7b:72:d2:46:7e:e0:04:a1:
                    6e:71:85:0e:54:90:c9:02:2f:90:2b:3e:f5:9f:4e:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:28:63:B2:1E:8B:3B:E1:69:40:B4:49:A9:FD:F8:4B:93:29:8F:63
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:63:c4:5d:15:3b:29:61:9e:7e:68:65:a4:77:e5:c8:fe:b0:
         4c:5b:ba:ae:fd:df:d8:80:e8:e3:9b:ae:ec:09:e3:97:5d:06:
         9f:49:a4:ae:fa:11:31:be:93:90:e7:26:f5:9d:8c:76:09:ea:
         f8:ff:a5:85:8e:93:e5:35:0a:45:cf:c4:00:b7:5a:90:b7:cb:
         05:3c:86:6c:f0:50:c8:46:5a:b8:7d:6c:ad:05:b7:59:2f:ad:
         d3:78:28:6a:e5:dd:35:e9:ae:91:e5:9b:86:45:b3:9c:94:5c:
         2a:d0:52:34:4e:3a:b6:0f:3e:ec:45:1b:32:d6:f8:d4:60:f4:
         3d:53:99:58:d8:c3:84:1f:ba:8e:a4:6e:b3:c2:d6:83:9e:c2:
         d9:23:7d:74:32:98:6f:a3:fa:a7:54:75:b3:d5:2e:73:67:88:
         06:38:4b:05:fa:97:4c:2e:bc:05:ec:01:32:ef:67:29:7a:ba:
         f0:31:ae:92:c5:60:15:e7:d6:13:bb:d1:47:10:69:45:09:52:
         e8:bf:5e:94:3b:6c:bb:45:61:34:ff:78:95:2b:78:0b:c7:d9:
         14:4d:77:df:bf:ea:91:b9:e5:1f:1a:61:d1:c9:22:90:29:87:
         e6:5a:9e:57:d5:86:80:d3:30:2d:93:e4:c7:e4:a7:65:52:2b:
         8f:18:33:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbNBCPhNE+MUedFHnZY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjUwNDEzMTAwMjI2WhcNMjUwNDE0MTAwMjI2WjAzMTEwLwYDVQQD
Eyg5NDI4NjNiMjFlOGIzYmUxNjk0MGI0NDlhOWZkZjg0YjkzMjk4ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vNGK+DPmFcKMyljA/1WJ5IEQzX3
787eBHccatgOWtT0DRYz3V/85NZrJAh8l7+ZJ/Ir6pumc0hJ9Lgz5s1XpykVpPOy
OJpDuzewSXBzjcz58G1hjmDdCu3qdhKvaKVj4EwxsVOckhemkPCkeq4ExYswhpgs
gEGUzb4U+oKlPJKQFrIl4sMWI8ykZWljZbRM+3iW4JZIW2LAIDdWD9vmyO6Xu2vm
AvMfeNvqvhoLBb8kwJSk6wTP//gZZtAirbY1MwS2hHrYoTOp+tuweUc06SW1ZSuk
7e6OvCNcxm+31kYn1jcQ/ZpUe3LSRn7gBKFucYUOVJDJAi+QKz71n077TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQoY7IeizvhaUC0San9+EuTKY9jMB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGPEXRU7
KWGefmhlpHflyP6wTFu6rv3f2IDo45uu7Anjl10Gn0mkrvoRMb6TkOcm9Z2Mdgnq
+P+lhY6T5TUKRc/EALdakLfLBTyGbPBQyEZauH1srQW3WS+t03goauXdNemukeWb
hkWznJRcKtBSNE46tg8+7EUbMtb41GD0PVOZWNjDhB+6jqRus8LWg57C2SN9dDKY
b6P6p1R1s9Uuc2eIBjhLBfqXTC68BewBMu9nKXq68DGuksVgFefWE7vRRxBpRQlS
6L9elDtsu0VhNP94lSt4C8fZFE1337/qkbnlHxph0ckikCmH5lqeV9WGgNMwLZPk
x+SnZVIrjxgzWA==
-----END CERTIFICATE-----