Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File:                     aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier:          QXe6zVIkauujZIMtHV4+x50P5My/ddqqzTLRkCfc4Gw=
Subject key identifier:   5D:0F:A7:8E:B2:6B:B1:43:97:17:DE:92:57:14:E5:F8:DF:38:FE:D5
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer:       /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial:       01962F06B33A2634CFAE0BFA159073714E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number:          06F3
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: iGB2BsQeQp7hhdsOhkxLKmGPnO1xNzROjhHr8nP5Wuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b3:3a:26:34:cf:ae:0b:fa:15:90:73:71:4e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=5d0fa78eb26bb1439717de925714e5f8df38fed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:89:10:47:d7:0c:c8:cc:d1:05:d0:60:0f:
                    11:72:66:24:42:19:06:c8:32:f1:a7:e9:03:f0:01:
                    54:7b:8a:e6:c0:32:f1:31:2b:c7:99:5d:67:1f:34:
                    66:87:7c:46:9a:37:94:c6:80:97:ab:03:1b:dc:2a:
                    8b:a0:c5:b2:12:64:9a:83:6e:63:e2:42:7f:b4:57:
                    13:5b:c5:d1:b1:48:af:9d:19:09:88:88:3a:7c:4c:
                    08:66:9f:06:c2:9c:ce:1e:11:3a:ac:c4:8d:4b:59:
                    49:a2:c3:5d:51:8b:dd:11:9d:d6:5e:ae:02:52:da:
                    29:86:27:a9:21:b5:44:70:7c:4d:9b:8b:79:26:d8:
                    bf:f1:ea:36:a1:c9:f8:42:84:55:b2:7e:20:c2:75:
                    25:47:45:af:fd:78:ea:8f:23:e9:e1:b7:0f:ea:7e:
                    07:a6:7c:24:f2:84:33:08:5a:12:1e:a9:2b:ff:d3:
                    f6:2b:c9:11:61:ca:f4:dc:db:6c:7f:b3:30:26:ad:
                    71:e1:8a:75:94:2d:34:2c:f2:e3:e6:87:a9:1a:b2:
                    17:bb:6f:56:7b:32:35:dc:6c:91:66:de:f5:fa:c2:
                    20:8f:5c:26:45:78:07:1c:fe:a2:a7:01:a5:da:b1:
                    f1:23:5e:81:f1:7d:84:ba:06:be:e9:21:df:71:b4:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:A7:8E:B2:6B:B1:43:97:17:DE:92:57:14:E5:F8:DF:38:FE:D5
            X509v3 Authority Key Identifier:
                keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:c7:31:f6:46:1e:22:1f:9b:54:87:b0:e6:39:ff:83:82:
         fe:2e:a1:d0:69:b1:05:22:94:62:23:05:9f:0d:73:b0:12:02:
         3e:c4:a0:05:1d:87:3c:0c:1e:89:8e:19:ca:34:82:80:4b:27:
         1a:66:3d:dc:82:4c:ef:9c:1a:3c:7c:3d:d4:1e:b5:f3:f0:5f:
         60:5c:e2:e5:f2:b2:ea:72:20:fa:5b:7a:48:89:b4:08:80:7e:
         bb:4c:c3:3c:03:7c:e7:d1:4c:04:65:cd:22:a7:a1:de:d4:d3:
         92:07:a0:7d:e0:0c:8e:ef:0c:5e:4d:66:b7:2b:ed:e8:7b:f0:
         cd:65:0c:2a:81:09:64:21:d6:7b:14:91:34:c9:a2:e3:44:7e:
         5f:5f:3a:ce:49:57:80:ed:09:41:3a:3d:78:9b:04:c7:42:9d:
         19:49:c9:d1:3a:ff:f1:1a:f8:c2:26:1b:1a:f7:1b:62:2f:bd:
         61:2f:a4:e6:b9:04:19:e4:7a:91:15:75:22:63:d0:f7:9a:90:
         50:3b:10:68:12:bd:0e:ff:1c:60:da:cc:16:c7:1b:37:b5:1b:
         b6:7f:ce:14:43:45:86:72:e9:6c:eb:91:10:d8:fa:ac:31:e9:
         9b:d1:b7:0c:55:00:cd:67:64:84:f3:f7:32:b4:eb:36:d3:17:
         09:34:5b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrM6JjTPrgv6FZBzcU5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWExNTkzZDZhMTI4MmI2ZTg0YzJkMzMyNTExZWEyYTk5
YTg0MjAwHhcNMjUwNDEzMTIwMTMwWhcNMjUwNDE0MTIwMTMwWjAzMTEwLwYDVQQD
Eyg1ZDBmYTc4ZWIyNmJiMTQzOTcxN2RlOTI1NzE0ZTVmOGRmMzhmZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/2JEEfXDMjM0QXQYA8RcmYkQhkG
yDLxp+kD8AFUe4rmwDLxMSvHmV1nHzRmh3xGmjeUxoCXqwMb3CqLoMWyEmSag25j
4kJ/tFcTW8XRsUivnRkJiIg6fEwIZp8GwpzOHhE6rMSNS1lJosNdUYvdEZ3WXq4C
UtophiepIbVEcHxNm4t5Jti/8eo2ocn4QoRVsn4gwnUlR0Wv/XjqjyPp4bcP6n4H
pnwk8oQzCFoSHqkr/9P2K8kRYcr03Ntsf7MwJq1x4Yp1lC00LPLj5oepGrIXu29W
ezI13GyRZt71+sIgj1wmRXgHHP6ipwGl2rHxI16B8X2Euga+6SHfcbQSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0Pp46ya7FDlxfeklcU5fjfOP7VMB8GA1UdIwQY
MBaAFGnqFZPWoSgrboTC0zJRHqKpmoQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQt
Nzk2ZmJiNmFlOWJlLzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQtNzk2ZmJiNmFlOWJl
LzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMLHMfZG
HiIfm1SHsOY5/4OC/i6h0GmxBSKUYiMFnw1zsBICPsSgBR2HPAweiY4ZyjSCgEsn
GmY93IJM75waPHw91B618/BfYFzi5fKy6nIg+lt6SIm0CIB+u0zDPAN859FMBGXN
Iqeh3tTTkgegfeAMju8MXk1mtyvt6HvwzWUMKoEJZCHWexSRNMmi40R+X186zklX
gO0JQTo9eJsEx0KdGUnJ0Tr/8Rr4wiYbGvcbYi+9YS+k5rkEGeR6kRV1ImPQ95qQ
UDsQaBK9Dv8cYNrMFscbN7Ubtn/OFENFhnLpbOuRENj6rDHpm9G3DFUAzWdkhPP3
MrTrNtMXCTRbZw==
-----END CERTIFICATE-----