Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File:                     5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier:          fO1V6fgaqGucHmrCv/Uz1JKWP74X7Z7buaCZZ7TVunE=
Subject key identifier:   4F:04:B7:16:7B:C0:9C:D3:BF:62:CE:A3:39:E0:FF:10:F1:CF:89:62
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer:       /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial:       01962F3DAA104B9ED2E875649EE85C2787B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: 0lRqVHEakhVsYu7GfAYBSHjp1lo6ghXeIKSQNP9XxSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:10:4b:9e:d2:e8:75:64:9e:e8:5c:27:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=4f04b7167bc09cd3bf62cea339e0ff10f1cf8962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:0e:b3:58:26:7a:fe:d0:90:65:7e:52:94:
                    72:a3:c6:69:49:97:08:ec:51:a2:e5:a2:b4:af:98:
                    fa:2a:8d:23:70:e6:44:84:db:f1:21:06:48:7c:ea:
                    2f:56:29:06:3d:ea:58:87:b0:2b:72:52:52:48:5d:
                    35:c0:1f:f9:e1:b5:d2:b7:a9:4d:ec:31:1b:ea:c9:
                    34:08:89:e6:8d:3e:db:d8:91:bb:7b:8c:b2:9b:b9:
                    09:e7:5c:86:3e:57:38:8c:f4:44:26:2e:6e:eb:aa:
                    04:8b:77:14:00:98:c3:b6:3d:51:a6:a1:c8:4e:68:
                    e2:87:48:2b:d5:a7:c2:30:0f:fc:02:49:4a:fa:51:
                    4d:fd:49:18:dc:a8:67:08:96:c8:8c:b7:5a:37:c8:
                    88:41:90:18:0c:d6:37:b6:80:2f:c1:d1:6a:9a:11:
                    62:bf:da:58:89:82:a3:3e:66:d3:12:42:5e:aa:b0:
                    a0:d1:bc:54:72:e0:d3:de:f5:eb:b8:cd:3f:86:3a:
                    f9:9c:55:33:27:23:c0:d1:e8:1d:6f:1c:d2:16:60:
                    1d:d7:4d:13:fb:86:14:ee:02:9e:d1:4c:e0:23:fe:
                    4f:97:e9:35:1c:8f:e9:ca:96:2c:96:ed:fc:6d:7f:
                    92:61:a2:69:2e:19:f7:98:49:f6:77:76:d7:36:f0:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:B7:16:7B:C0:9C:D3:BF:62:CE:A3:39:E0:FF:10:F1:CF:89:62
            X509v3 Authority Key Identifier:
                keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:19:9f:90:8c:3b:61:06:95:52:77:f0:2d:8c:86:6f:14:
         46:d1:95:25:4f:b9:31:f2:37:07:39:df:a1:d1:01:da:5c:61:
         7c:79:24:47:bb:ef:1f:73:b9:37:6b:12:50:07:25:a6:97:ce:
         e2:4a:aa:5c:16:a5:1f:22:10:fc:2c:72:85:44:39:f9:de:6b:
         49:87:12:d0:6f:7a:77:df:b8:c0:43:89:28:1a:9e:74:34:76:
         90:ba:f3:65:81:d6:96:04:91:68:a5:cb:fb:ff:8f:79:98:b2:
         92:bd:44:28:0d:21:82:72:37:15:72:86:7b:c2:7d:ef:c9:ee:
         06:c5:d8:df:e8:4b:7d:df:e2:9a:da:21:55:da:f8:a8:98:09:
         a9:28:d9:9e:1b:8c:8c:f5:92:8d:18:5e:3e:1f:17:94:40:51:
         9e:d4:08:f9:18:c5:32:cf:bd:cf:b8:93:b0:e6:04:b2:e7:f2:
         fb:5d:4b:75:5a:b5:7e:81:a5:c5:6b:3e:0a:ad:d6:53:24:64:
         14:5f:d6:27:22:e0:33:a9:4f:a3:42:eb:8e:45:93:06:c6:2f:
         eb:12:05:ea:60:3c:24:ea:61:0d:64:55:61:af:93:94:e8:e0:
         60:23:e3:95:ca:09:2e:b4:b9:b7:d6:69:d6:c7:a1:7d:b0:c8:
         20:74:0f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaoQS57S6HVknuhcJ4e0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy
ZGZjYmEwHhcNMjUwNDEzMTMwMTMyWhcNMjUwNDE0MTMwMTMyWjAzMTEwLwYDVQQD
Eyg0ZjA0YjcxNjdiYzA5Y2QzYmY2MmNlYTMzOWUwZmYxMGYxY2Y4OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWMOs1gmev7QkGV+UpRyo8ZpSZcI
7FGi5aK0r5j6Ko0jcOZEhNvxIQZIfOovVikGPepYh7ArclJSSF01wB/54bXSt6lN
7DEb6sk0CInmjT7b2JG7e4yym7kJ51yGPlc4jPREJi5u66oEi3cUAJjDtj1RpqHI
Tmjih0gr1afCMA/8AklK+lFN/UkY3KhnCJbIjLdaN8iIQZAYDNY3toAvwdFqmhFi
v9pYiYKjPmbTEkJeqrCg0bxUcuDT3vXruM0/hjr5nFUzJyPA0egdbxzSFmAd100T
+4YU7gKe0UzgI/5Pl+k1HI/pypYslu38bX+SYaJpLhn3mEn2d3bXNvDpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8EtxZ7wJzTv2LOozng/xDxz4liMB8GA1UdIwQY
MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt
YWM0NGJjNTY5YTc4LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4
LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNYZn5CM
O2EGlVJ38C2Mhm8URtGVJU+5MfI3BznfodEB2lxhfHkkR7vvH3O5N2sSUAclppfO
4kqqXBalHyIQ/CxyhUQ5+d5rSYcS0G96d9+4wEOJKBqedDR2kLrzZYHWlgSRaKXL
+/+PeZiykr1EKA0hgnI3FXKGe8J978nuBsXY3+hLfd/imtohVdr4qJgJqSjZnhuM
jPWSjRhePh8XlEBRntQI+RjFMs+9z7iTsOYEsufy+11LdVq1foGlxWs+Cq3WUyRk
FF/WJyLgM6lPo0LrjkWTBsYv6xIF6mA8JOphDWRVYa+TlOjgYCPjlcoJLrS5t9Zp
1sehfbDIIHQPXQ==
-----END CERTIFICATE-----