Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft
File:                     4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft (raw, json)
Hash identifier:          PQWEkPqjdy5ROT/8js7h7rk5/YIb2IHiYOFeVlHoLF4=
Subject key identifier:   35:00:87:8B:45:45:81:FD:E5:11:E7:05:EA:EC:87:BC:57:94:36:C2
Authority key identifier: E1:1D:8A:A7:4B:87:6D:6B:94:FF:E5:09:E2:4E:3F:64:6D:96:95:DE
Certificate issuer:       /CN=e11d8aa74b876d6b94ffe509e24e3f646d9695de
Certificate serial:       01962DF4553DD10E591D67A6A757C98E8502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft
Manifest number:          10A3
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: 4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.crl (hash: B6pLJNEVXS67GW8xLvos/XRBmqdoetK1+c+TyBDTOJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:55:3d:d1:0e:59:1d:67:a6:a7:57:c9:8e:85:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11d8aa74b876d6b94ffe509e24e3f646d9695de
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=3500878b454581fde511e705eaec87bc579436c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:e0:81:8c:fb:1e:1e:53:58:ca:8a:95:df:
                    57:80:e8:26:44:d3:a8:31:a7:11:33:60:ee:d6:c9:
                    5c:56:cf:33:0b:fe:a2:5a:dd:ed:42:3a:62:01:dc:
                    47:0d:a7:06:5e:21:4c:de:d7:03:73:7c:1a:bf:c2:
                    b3:f9:5e:8d:2f:7a:fc:df:69:22:9f:c6:f1:dc:a3:
                    08:84:aa:0d:a1:e6:da:45:bc:ed:36:bb:8c:66:9d:
                    51:e9:44:10:c4:30:c5:19:a9:76:b0:25:a2:05:6c:
                    39:97:ce:ef:03:4a:b2:78:8b:a2:ca:1b:69:f1:65:
                    3e:75:0d:62:ec:ef:fa:10:cb:09:db:a7:84:4a:59:
                    0b:20:8d:79:0d:de:8a:97:42:4e:77:45:78:6e:67:
                    c3:96:8e:09:36:e0:b2:ed:7b:a3:6e:10:88:0d:2c:
                    62:eb:88:50:89:73:75:2b:ab:b7:13:31:8a:df:97:
                    2c:a3:e9:97:52:a6:cc:e7:53:0d:a7:be:02:21:b1:
                    60:49:9b:c1:d8:4c:1c:da:17:2a:0c:f8:49:0b:81:
                    7c:9e:18:bc:1b:1e:03:f2:a7:22:1c:b8:a2:a7:3b:
                    76:48:2f:22:dc:cd:c9:2d:e6:c8:6a:78:69:f9:14:
                    d3:55:08:82:a4:09:b7:14:72:fc:3d:32:d6:30:41:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:00:87:8B:45:45:81:FD:E5:11:E7:05:EA:EC:87:BC:57:94:36:C2
            X509v3 Authority Key Identifier:
                keyid:E1:1D:8A:A7:4B:87:6D:6B:94:FF:E5:09:E2:4E:3F:64:6D:96:95:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/90c150-0a02-4180-9c49-62645295ee1d/1/4R2Kp0uHbWuU_-UJ4k4_ZG2Wld4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:59:3b:d7:1c:2d:dd:10:a5:62:ce:4c:6e:e5:a6:ed:ac:
         c1:61:9d:37:62:7f:42:d7:62:1b:ef:c8:b8:8d:77:5f:5c:05:
         00:fa:eb:c9:65:fe:b4:14:88:d4:57:68:ce:67:58:a2:41:73:
         e7:78:4f:44:97:b4:3c:bd:ce:34:bb:58:36:ed:85:f4:55:9a:
         49:af:9b:8a:f6:08:91:e7:cf:83:38:91:be:4e:0e:62:c6:c4:
         c6:61:27:c3:ee:d1:51:e3:ec:47:0d:78:62:e2:1a:6e:dc:38:
         98:4b:b7:9f:5c:9f:74:a1:fa:f4:d0:0d:3c:5b:50:b2:5c:1c:
         33:1c:c3:0a:06:2b:f3:1d:f6:de:89:25:b6:93:c8:f1:2a:8a:
         8f:65:79:9e:d4:8e:4a:3a:2c:6f:42:90:1c:a5:7c:f8:c9:27:
         81:ad:93:70:a6:62:45:f2:39:cc:e1:a2:b3:67:79:f1:d9:ec:
         1e:b4:c8:c8:d0:90:54:7f:26:6b:24:23:74:44:f0:b0:2f:c4:
         c2:7c:9f:2d:3e:ba:38:96:a2:93:d8:44:65:45:b6:43:96:31:
         c3:d9:d5:6c:11:7e:c6:58:ee:e1:ba:04:c8:15:e5:41:76:33:
         ce:27:09:2f:d1:75:9c:e4:0d:24:5e:29:c3:1f:9d:66:23:a1:
         13:1e:d2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FU90Q5ZHWemp1fJjoUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWQ4YWE3NGI4NzZkNmI5NGZmZTUwOWUyNGUzZjY0NmQ5
Njk1ZGUwHhcNMjUwNDEzMDcwMTQ5WhcNMjUwNDE0MDcwMTQ5WjAzMTEwLwYDVQQD
EygzNTAwODc4YjQ1NDU4MWZkZTUxMWU3MDVlYWVjODdiYzU3OTQzNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IzggYz7Hh5TWMqKld9XgOgmRNOo
MacRM2Du1slcVs8zC/6iWt3tQjpiAdxHDacGXiFM3tcDc3wav8Kz+V6NL3r832ki
n8bx3KMIhKoNoebaRbztNruMZp1R6UQQxDDFGal2sCWiBWw5l87vA0qyeIuiyhtp
8WU+dQ1i7O/6EMsJ26eESlkLII15Dd6Kl0JOd0V4bmfDlo4JNuCy7XujbhCIDSxi
64hQiXN1K6u3EzGK35cso+mXUqbM51MNp74CIbFgSZvB2Ewc2hcqDPhJC4F8nhi8
Gx4D8qciHLiipzt2SC8i3M3JLebIanhp+RTTVQiCpAm3FHL8PTLWMEGX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUAh4tFRYH95RHnBersh7xXlDbCMB8GA1UdIwQY
MBaAFOEdiqdLh21rlP/lCeJOP2RtlpXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFIyS3AwdUhiV3VVXy1VSjRrNF9aRzJXbGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85MGMxNTAtMGEwMi00MTgwLTljNDkt
NjI2NDUyOTVlZTFkLzEvNFIyS3AwdUhiV3VVXy1VSjRrNF9aRzJXbGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85MGMxNTAtMGEwMi00MTgwLTljNDktNjI2NDUyOTVlZTFk
LzEvNFIyS3AwdUhiV3VVXy1VSjRrNF9aRzJXbGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkxZO9cc
Ld0QpWLOTG7lpu2swWGdN2J/QtdiG+/IuI13X1wFAPrryWX+tBSI1FdozmdYokFz
53hPRJe0PL3ONLtYNu2F9FWaSa+bivYIkefPgziRvk4OYsbExmEnw+7RUePsRw14
YuIabtw4mEu3n1yfdKH69NANPFtQslwcMxzDCgYr8x323okltpPI8SqKj2V5ntSO
Sjosb0KQHKV8+Mknga2TcKZiRfI5zOGis2d58dnsHrTIyNCQVH8mayQjdETwsC/E
wnyfLT66OJaik9hEZUW2Q5Yxw9nVbBF+xlju4boEyBXlQXYzzicJL9F1nOQNJF4p
wx+dZiOhEx7SRw==
-----END CERTIFICATE-----