Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File:                     LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier:          geChuhWRXBtjLXtvtLZlCGEzypYGdfFFR7zNGxTH/pI=
Subject key identifier:   BE:17:CB:25:60:53:3B:BA:9C:92:FB:87:DA:AF:29:82:84:FD:DC:FD
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer:       /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial:       01962DF447924BA3D1A83035D08CA2E1D422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number:          1424
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: wBt4BydmlIzpmBzxRef4A4ChpbRoG2xgnLZnP3pvq9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:47:92:4b:a3:d1:a8:30:35:d0:8c:a2:e1:d4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=be17cb2560533bba9c92fb87daaf298284fddcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:71:c1:48:be:4a:d3:40:d7:5b:c9:6d:f2:
                    3d:73:10:98:a5:0c:3e:67:d7:aa:bc:45:a6:0f:a3:
                    fb:82:d6:00:f6:46:84:05:b7:c2:cf:5e:72:45:12:
                    0c:37:09:12:50:8f:6c:c3:cb:bb:ad:7b:4a:1d:81:
                    88:b3:8c:0d:34:f2:b3:fc:e1:eb:7e:c8:f6:dc:86:
                    a2:b0:1c:68:83:00:bd:90:c4:8d:36:ad:83:c7:d9:
                    59:7d:bb:b9:a4:5b:79:f3:b2:f7:d7:8a:ba:30:1b:
                    2a:9a:6e:95:bd:6a:0b:51:e1:df:c8:3b:0a:0f:8e:
                    15:07:48:da:1a:34:0f:20:bb:ba:a0:ed:94:01:cd:
                    67:19:82:f5:da:20:ea:f6:67:5e:f0:34:45:ea:42:
                    80:d4:1e:34:5e:a9:3e:fc:e2:f8:92:b1:37:52:f5:
                    0b:f0:48:d9:8c:7b:9a:58:75:b8:8d:0a:4a:fa:bf:
                    eb:21:7c:5d:4c:dc:b6:49:a9:26:51:46:26:98:ad:
                    73:73:8e:f5:92:e2:8c:9a:ee:df:1f:b7:c3:7a:60:
                    b6:20:8f:cf:59:af:3c:81:4d:0c:5a:86:d1:10:bd:
                    b8:2f:eb:b0:d1:c8:7a:e4:2c:50:c5:6c:11:6b:3d:
                    ee:34:57:38:23:59:a0:9a:20:07:b5:19:20:b9:0d:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:CB:25:60:53:3B:BA:9C:92:FB:87:DA:AF:29:82:84:FD:DC:FD
            X509v3 Authority Key Identifier:
                keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b5:00:26:cc:ac:96:7a:a1:cf:69:e7:36:f4:74:0e:9f:4a:
         06:14:5f:59:43:7d:bb:f5:fc:26:03:72:11:4d:87:61:97:11:
         fb:34:96:15:c5:77:1a:d7:3f:ae:9c:68:e7:46:fa:d4:e9:e9:
         8a:2f:45:ef:bf:61:bc:59:e4:28:6a:ed:9b:dd:5d:0f:94:a0:
         3f:64:ad:b6:c8:8e:23:76:78:3a:71:59:88:7e:b2:aa:c1:75:
         30:8e:8f:45:78:39:17:bb:dd:1c:99:90:a9:33:5a:a4:dc:ed:
         3e:39:19:5b:60:1b:1b:7e:7c:2e:68:6a:84:ab:30:63:20:c0:
         d3:a6:48:c8:17:46:66:7f:fa:6a:d2:df:46:4a:01:22:17:f8:
         1a:b5:58:c0:d0:cf:a6:75:fe:f0:39:8f:2c:c4:ce:9e:e8:81:
         de:5d:c8:af:27:9a:9b:d8:ee:0b:a0:b2:59:4d:cc:8b:8b:a5:
         f6:9e:dc:16:71:f9:29:f2:81:19:6b:f3:35:63:b1:88:fc:9f:
         cf:d3:a4:82:f3:1c:67:48:27:e1:d4:f0:db:e0:de:d0:c4:b9:
         f9:56:8a:8f:33:d0:66:1e:ed:21:2a:22:a1:65:0e:1a:f9:32:
         04:9b:92:d0:18:64:22:01:31:73:ba:ef:a3:4a:32:5f:f8:de:
         9d:bc:82:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EeSS6PRqDA10Iyi4dQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZTM0ZTI2YmI2NTYzMGI4NjkzNmY0OTY5MzUzZWQ3Yzg2
OTk1YzgwHhcNMjUwNDEzMDcwMTQ1WhcNMjUwNDE0MDcwMTQ1WjAzMTEwLwYDVQQD
EyhiZTE3Y2IyNTYwNTMzYmJhOWM5MmZiODdkYWFmMjk4Mjg0ZmRkY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxxxwUi+StNA11vJbfI9cxCYpQw+
Z9eqvEWmD6P7gtYA9kaEBbfCz15yRRIMNwkSUI9sw8u7rXtKHYGIs4wNNPKz/OHr
fsj23IaisBxogwC9kMSNNq2Dx9lZfbu5pFt587L314q6MBsqmm6VvWoLUeHfyDsK
D44VB0jaGjQPILu6oO2UAc1nGYL12iDq9mde8DRF6kKA1B40Xqk+/OL4krE3UvUL
8EjZjHuaWHW4jQpK+r/rIXxdTNy2SakmUUYmmK1zc471kuKMmu7fH7fDemC2II/P
Wa88gU0MWobREL24L+uw0ch65CxQxWwRaz3uNFc4I1mgmiAHtRkguQ1/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4XyyVgUzu6nJL7h9qvKYKE/dz9MB8GA1UdIwQY
MBaAFCzjTia7ZWMLhpNvSWk1PtfIaZXIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xZTAxODAtZGIzYS00NmE1LWIzMWIt
YjU5OTcyM2ZjMDUzLzEvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xZTAxODAtZGIzYS00NmE1LWIzMWItYjU5OTcyM2ZjMDUz
LzEvTE9OT0pydGxZd3VHazI5SmFUVS0xOGhwbGNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLUAJsys
lnqhz2nnNvR0Dp9KBhRfWUN9u/X8JgNyEU2HYZcR+zSWFcV3Gtc/rpxo50b61Onp
ii9F779hvFnkKGrtm91dD5SgP2SttsiOI3Z4OnFZiH6yqsF1MI6PRXg5F7vdHJmQ
qTNapNztPjkZW2AbG358LmhqhKswYyDA06ZIyBdGZn/6atLfRkoBIhf4GrVYwNDP
pnX+8DmPLMTOnuiB3l3Iryeam9juC6CyWU3Mi4ul9p7cFnH5KfKBGWvzNWOxiPyf
z9OkgvMcZ0gn4dTw2+De0MS5+VaKjzPQZh7tISoioWUOGvkyBJuS0BhkIgExc7rv
o0oyX/jenbyCKg==
-----END CERTIFICATE-----