Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          EFBt8i5Vc6XIF4ZGYbGHh20G5UzZ+XTSltvu/JYMNns=
Subject key identifier:   1E:13:48:86:A0:8D:E8:A6:C1:0F:EE:49:81:78:03:9B:60:D0:20:AF
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       01962F3D41600A4813CDDBFB40B5E3DE1445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: ioYsn/RPpljRIX2xdwFAB3Y+3rngg+TI2thYnHOHjyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:41:60:0a:48:13:cd:db:fb:40:b5:e3:de:14:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=1e134886a08de8a6c10fee498178039b60d020af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:e8:b7:6a:90:67:24:0a:bd:2e:f3:1d:09:
                    04:3a:65:87:25:5c:ba:47:c0:cc:f1:09:76:0a:aa:
                    a9:48:63:98:83:36:f5:1d:82:e6:70:77:ce:a7:00:
                    11:f1:5a:0a:0c:6e:3e:70:5e:72:b5:64:0e:13:55:
                    a3:4d:cb:00:2c:d7:4e:97:27:8a:4b:7d:8b:ae:cf:
                    e3:85:06:50:3c:bb:a1:94:cb:2c:b0:b6:e0:52:2c:
                    06:58:f7:2a:a6:b8:4f:80:3b:3b:99:55:22:ed:99:
                    ef:fc:11:01:50:6d:17:5c:c9:3c:e2:60:25:2a:d6:
                    9a:c1:f1:37:7f:43:47:70:52:a1:68:cc:fa:2e:35:
                    41:3e:f2:9b:db:75:12:cd:c4:d7:f1:dc:d2:46:01:
                    5a:5e:b0:e3:3d:62:63:57:10:51:f3:18:69:99:d1:
                    65:43:f6:e3:df:5f:2b:37:be:2e:74:4a:d0:38:6d:
                    ac:54:4a:2c:ba:5a:cc:5f:93:2c:b8:5e:7b:c0:0f:
                    b5:de:91:e3:19:7c:af:98:c6:f5:70:c1:fc:97:0d:
                    7c:f0:1c:c9:31:e5:6d:b8:63:ca:81:d8:73:b9:54:
                    0f:a9:74:30:5a:55:08:c4:d5:78:b8:6f:aa:dd:19:
                    77:64:5a:7f:d5:f7:a2:1e:27:79:b2:64:e1:f5:b9:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:48:86:A0:8D:E8:A6:C1:0F:EE:49:81:78:03:9B:60:D0:20:AF
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:08:ea:1b:96:8b:fc:47:71:57:09:a1:c2:ab:29:06:e4:
         a0:37:e5:dd:96:e5:8d:3a:8a:c4:11:4c:b0:d0:47:5d:18:3e:
         51:78:cf:a7:3f:37:fa:e1:e0:e5:f2:74:f4:4e:9d:69:3f:96:
         d6:a4:3d:88:36:5e:c1:fd:69:cc:27:c5:18:40:9b:95:6f:ef:
         6e:e9:53:26:a5:87:f7:b2:ce:6f:2d:c7:93:86:de:53:c7:12:
         90:3e:40:bc:dd:57:e3:5e:cd:48:16:fe:f7:e0:2d:50:a1:5f:
         ec:35:2f:c0:8c:76:0a:3f:a7:f5:85:6e:8e:52:b4:7e:8f:45:
         de:26:4f:83:2c:41:ae:e8:46:2d:3c:9d:78:46:bf:8f:40:50:
         79:e7:6e:68:26:39:cf:59:96:cf:9f:b1:19:08:1b:ca:f1:61:
         f5:bb:f1:8d:06:03:9e:55:fa:ff:cc:bd:7a:c3:1d:d6:f5:a9:
         06:6a:74:9f:ef:9f:41:da:79:9f:eb:47:74:fa:98:87:72:0d:
         59:cf:e6:61:3d:7e:ad:1d:c2:8c:2f:dd:7c:fa:b0:4d:88:cc:
         69:cf:8f:d5:2a:0c:ea:fb:e3:2b:7c:b3:42:91:a1:ee:13:06:
         8e:a6:39:62:de:4b:5b:d2:ab:f9:92:e2:a2:77:24:78:9f:b7:
         f8:74:b3:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUFgCkgTzdv7QLXj3hRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTUwYmExOWI0ZjE3YTM0NzMxMjdmZDA3N2E5YTIwMDJl
YmVhMzYwHhcNMjUwNDEzMTMwMTA1WhcNMjUwNDE0MTMwMTA1WjAzMTEwLwYDVQQD
EygxZTEzNDg4NmEwOGRlOGE2YzEwZmVlNDk4MTc4MDM5YjYwZDAyMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy7ot2qQZyQKvS7zHQkEOmWHJVy6
R8DM8Ql2CqqpSGOYgzb1HYLmcHfOpwAR8VoKDG4+cF5ytWQOE1WjTcsALNdOlyeK
S32Lrs/jhQZQPLuhlMsssLbgUiwGWPcqprhPgDs7mVUi7Znv/BEBUG0XXMk84mAl
KtaawfE3f0NHcFKhaMz6LjVBPvKb23USzcTX8dzSRgFaXrDjPWJjVxBR8xhpmdFl
Q/bj318rN74udErQOG2sVEosulrMX5MsuF57wA+13pHjGXyvmMb1cMH8lw188BzJ
MeVtuGPKgdhzuVQPqXQwWlUIxNV4uG+q3Rl3ZFp/1feiHid5smTh9blweQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4TSIagjeimwQ/uSYF4A5tg0CCvMB8GA1UdIwQY
MBaAFHiVC6GbTxejRzEn/Qd6miAC6+o2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAt
ZmQ1ZTQ0NjVkMTQ0LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MGZjYjktY2E4NC00NmEyLWIxYjAtZmQ1ZTQ0NjVkMTQ0
LzEvZUpVTG9adFBGNk5ITVNmOUIzcWFJQUxyNmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPcI6huW
i/xHcVcJocKrKQbkoDfl3ZbljTqKxBFMsNBHXRg+UXjPpz83+uHg5fJ09E6daT+W
1qQ9iDZewf1pzCfFGECblW/vbulTJqWH97LOby3Hk4beU8cSkD5AvN1X417NSBb+
9+AtUKFf7DUvwIx2Cj+n9YVujlK0fo9F3iZPgyxBruhGLTydeEa/j0BQeeduaCY5
z1mWz5+xGQgbyvFh9bvxjQYDnlX6/8y9esMd1vWpBmp0n++fQdp5n+tHdPqYh3IN
Wc/mYT1+rR3CjC/dfPqwTYjMac+P1SoM6vvjK3yzQpGh7hMGjqY5Yt5LW9Kr+ZLi
onckeJ+3+HSz5g==
-----END CERTIFICATE-----