Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          VZ93BiWA7pzsAdkDTmuPt+BGGHrkjDQI5g5dmRzY8C0=
Subject key identifier:   43:64:3A:B0:7D:C7:BF:CA:95:48:AD:3B:CB:51:87:0C:8A:8B:6F:25
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       01962E98E46CC0EE27FBF98076CF8D506329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: vdwfUfxQdLawSFDmeblMuc8x3ZjtsqL0FE5TXOQzxJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:6c:c0:ee:27:fb:f9:80:76:cf:8d:50:63:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=43643ab07dc7bfca9548ad3bcb51870c8a8b6f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:60:20:4a:6a:e9:f9:8a:1a:71:13:13:73:
                    44:e9:46:e3:b8:b4:6b:84:f1:81:09:11:8d:15:f1:
                    35:68:57:c2:fa:1c:87:50:c9:64:b6:df:5e:3e:7d:
                    d3:e0:a7:bc:ba:56:6f:17:98:de:9a:db:60:03:16:
                    41:49:14:b0:27:e3:aa:d0:65:fe:84:90:ba:3b:67:
                    8a:52:99:11:69:2b:56:7c:07:23:8e:77:93:80:b2:
                    b5:22:bf:a0:43:30:3c:ec:2a:e8:b4:98:ed:44:38:
                    30:e5:98:a7:a5:10:cd:da:a5:aa:76:82:ce:a7:73:
                    8a:fc:fd:81:cd:9f:55:f4:34:ae:16:f6:5c:c1:70:
                    5a:c0:83:fb:58:62:a2:47:57:8e:ae:76:f4:bc:8e:
                    ca:b8:5a:cf:63:72:41:2f:5c:e3:f5:c8:13:8b:53:
                    36:76:d4:ba:c7:d3:18:17:81:8b:f4:8c:41:a5:85:
                    05:ea:66:af:3b:74:bd:b8:b0:8a:b9:de:7f:78:ee:
                    47:84:9b:1a:73:c7:ff:ee:ff:a7:74:fb:6f:5a:c1:
                    28:f9:e0:4d:83:d8:98:ac:c4:fc:c3:81:84:8b:f0:
                    ff:74:04:c9:7f:98:23:95:95:a5:7e:67:5d:75:78:
                    38:c8:bc:77:33:60:42:da:cc:b2:4b:31:6f:69:f5:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:64:3A:B0:7D:C7:BF:CA:95:48:AD:3B:CB:51:87:0C:8A:8B:6F:25
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:f2:86:82:09:fc:84:8a:d5:3a:d2:6b:80:ad:b0:9b:36:
         e4:b1:49:89:58:de:6d:66:06:93:eb:6a:0c:8a:08:88:9e:12:
         5f:a9:a2:59:ea:aa:38:0f:e1:54:f1:90:81:91:e1:b2:7f:b6:
         a4:30:5e:2d:dc:f8:af:a7:cd:8d:a5:63:e9:fa:63:08:1e:a1:
         aa:b6:b0:f2:a3:d3:ed:0d:c4:4c:06:0d:26:ca:e4:59:75:bc:
         1c:84:5f:1f:ea:48:37:aa:9b:a3:0c:11:a0:98:a6:a9:9f:6a:
         b4:bd:79:43:90:f1:3b:ab:07:a1:f3:89:8d:02:0b:3b:df:60:
         23:26:43:da:04:a7:ef:d7:97:a9:1a:7d:23:5c:f3:d3:6b:17:
         4e:c3:a4:fa:9e:25:2d:f8:53:5e:e1:c8:61:c4:e8:2d:96:2f:
         b8:c6:88:4a:52:2d:2f:0a:b0:90:d2:b2:30:ad:7e:2b:93:82:
         aa:b3:69:29:a3:c9:14:d4:80:1a:03:61:a6:60:30:ba:4b:23:
         89:48:82:21:f9:50:6b:2d:f1:af:42:f8:68:f0:86:88:9a:75:
         5e:55:63:27:1e:bb:27:72:7c:2d:9f:2b:17:3b:a1:74:12:07:
         ed:ec:db:87:2f:2f:78:13:f9:cf:62:fc:7e:f5:70:d4:08:06:
         74:e6:8a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumORswO4n+/mAds+NUGMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi
ZmU2MDEwHhcNMjUwNDEzMTAwMTMzWhcNMjUwNDE0MTAwMTMzWjAzMTEwLwYDVQQD
Eyg0MzY0M2FiMDdkYzdiZmNhOTU0OGFkM2JjYjUxODcwYzhhOGI2ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK9gIEpq6fmKGnETE3NE6UbjuLRr
hPGBCRGNFfE1aFfC+hyHUMlktt9ePn3T4Ke8ulZvF5jemttgAxZBSRSwJ+Oq0GX+
hJC6O2eKUpkRaStWfAcjjneTgLK1Ir+gQzA87CrotJjtRDgw5ZinpRDN2qWqdoLO
p3OK/P2BzZ9V9DSuFvZcwXBawIP7WGKiR1eOrnb0vI7KuFrPY3JBL1zj9cgTi1M2
dtS6x9MYF4GL9IxBpYUF6mavO3S9uLCKud5/eO5HhJsac8f/7v+ndPtvWsEo+eBN
g9iYrMT8w4GEi/D/dATJf5gjlZWlfmdddXg4yLx3M2BC2syySzFvafXQ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENkOrB9x7/KlUitO8tRhwyKi28lMB8GA1UdIwQY
MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt
MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5
LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDPyhoIJ
/ISK1TrSa4CtsJs25LFJiVjebWYGk+tqDIoIiJ4SX6miWeqqOA/hVPGQgZHhsn+2
pDBeLdz4r6fNjaVj6fpjCB6hqraw8qPT7Q3ETAYNJsrkWXW8HIRfH+pIN6qbowwR
oJimqZ9qtL15Q5DxO6sHofOJjQILO99gIyZD2gSn79eXqRp9I1zz02sXTsOk+p4l
LfhTXuHIYcToLZYvuMaISlItLwqwkNKyMK1+K5OCqrNpKaPJFNSAGgNhpmAwuksj
iUiCIflQay3xr0L4aPCGiJp1XlVjJx67J3J8LZ8rFzuhdBIH7ezbhy8veBP5z2L8
fvVw1AgGdOaKvA==
-----END CERTIFICATE-----