Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File:                     EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier:          SjKsuoNYmfoNG+cLgPeSW0m1ZO+9UePZfWJ4DhhafzY=
Subject key identifier:   CC:55:4D:40:14:60:10:18:4A:D3:E1:95:97:FF:23:EE:8E:D6:B6:93
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer:       /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial:       01962E98AABCA7260CF244786B78872918E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number:          1082
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: 1XA0YiH50EV42kVggrZ0EldxxxLC4OvHPZHvhem/XIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:bc:a7:26:0c:f2:44:78:6b:78:87:29:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=cc554d40146010184ad3e19597ff23ee8ed6b693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:81:e0:fb:18:82:d9:13:f9:eb:56:ae:83:
                    d4:75:92:9e:a3:b2:9f:9c:58:4a:8a:b1:2e:65:1d:
                    b6:fd:32:d3:60:44:a4:af:1d:e9:eb:c9:80:0f:29:
                    09:d0:f4:60:92:10:39:c8:ad:71:b5:ef:61:11:b2:
                    2d:cb:b0:f5:62:68:ec:d1:f6:63:59:b3:1b:ec:93:
                    51:9b:2c:d9:2c:e1:61:0d:87:80:63:37:48:c4:0d:
                    ea:d7:79:de:0d:f3:a6:c6:35:3b:7c:8a:47:06:b3:
                    5e:21:b2:c6:71:7c:ef:0a:22:eb:80:af:6f:62:30:
                    ed:eb:80:25:d4:ab:53:65:e0:35:48:fe:d1:6d:a2:
                    cd:5d:53:98:23:f3:39:55:be:ea:c7:91:e4:72:6c:
                    a4:9c:43:b3:82:c6:0c:6b:a0:bf:b9:59:c4:b5:3c:
                    d0:77:f6:bf:59:ce:13:6c:3a:9c:9e:2e:1c:59:ba:
                    8a:cd:ef:7a:ea:54:dd:05:c6:3a:49:45:cf:9a:df:
                    88:11:dc:f0:e6:12:48:14:70:2e:b4:b3:85:77:f3:
                    c8:3b:a0:fa:62:a0:a4:e9:77:72:78:0e:fc:f8:9f:
                    a9:c3:24:b0:69:b2:28:c7:7c:2c:a8:d4:37:ad:e9:
                    aa:aa:5f:d3:eb:b8:d1:ea:f2:97:e3:b1:4d:38:bd:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:4D:40:14:60:10:18:4A:D3:E1:95:97:FF:23:EE:8E:D6:B6:93
            X509v3 Authority Key Identifier:
                keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:80:00:a8:bd:fb:1f:fa:12:30:33:a1:9c:b2:51:f4:78:55:
         26:25:27:fe:fc:48:4d:e7:76:56:7a:bc:af:7f:ba:d7:b0:a0:
         00:a7:c3:98:b8:e9:04:d7:fc:1f:24:a8:48:7e:87:7a:db:f4:
         4f:54:0b:15:39:a2:d7:c4:57:91:57:d1:a0:56:e4:b7:dc:33:
         b3:93:49:6f:3f:38:e0:f1:2f:7b:91:4a:2a:2c:7c:31:62:6e:
         86:50:73:a6:b0:7b:e7:90:f7:85:f2:74:23:36:04:fa:25:61:
         6e:24:13:a6:56:da:96:9b:29:18:15:35:14:0f:76:c7:ad:7e:
         64:e3:40:71:6a:53:d9:43:1a:b0:98:73:79:f9:d7:14:8a:cf:
         3d:bf:08:ae:6c:8d:e1:0c:ad:dd:a9:f4:1e:f7:3c:f3:f0:c3:
         52:41:97:cc:c5:af:10:76:6a:23:d7:90:47:da:02:0b:57:c8:
         2c:ea:4c:c0:8b:46:a9:e3:60:75:4e:f8:b7:3d:71:97:14:03:
         71:91:02:67:7f:e4:b8:db:f5:2c:47:3b:31:39:75:8d:64:b5:
         a2:70:37:9d:e8:3c:72:b2:c5:01:15:8f:d2:3a:5f:ff:a1:b6:
         2b:79:d3:c6:1a:cf:16:9e:fc:02:fb:44:bd:a2:d5:04:6d:27:
         a6:9d:6d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKq8pyYM8kR4a3iHKRjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjg2ODY0NDU3OWU2ZWI2MWY0NzcxZDY3YjQwNjY0ZjUw
MTE2ZmEwHhcNMjUwNDEzMTAwMTE5WhcNMjUwNDE0MTAwMTE5WjAzMTEwLwYDVQQD
EyhjYzU1NGQ0MDE0NjAxMDE4NGFkM2UxOTU5N2ZmMjNlZThlZDZiNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXqB4PsYgtkT+etWroPUdZKeo7Kf
nFhKirEuZR22/TLTYESkrx3p68mADykJ0PRgkhA5yK1xte9hEbIty7D1Ymjs0fZj
WbMb7JNRmyzZLOFhDYeAYzdIxA3q13neDfOmxjU7fIpHBrNeIbLGcXzvCiLrgK9v
YjDt64Al1KtTZeA1SP7RbaLNXVOYI/M5Vb7qx5HkcmyknEOzgsYMa6C/uVnEtTzQ
d/a/Wc4TbDqcni4cWbqKze966lTdBcY6SUXPmt+IEdzw5hJIFHAutLOFd/PIO6D6
YqCk6XdyeA78+J+pwySwabIox3wsqNQ3remqql/T67jR6vKX47FNOL2aPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxVTUAUYBAYStPhlZf/I+6O1raTMB8GA1UdIwQY
MBaAFBMoaGRFeebrYfR3HWe0BmT1ARb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUt
ZjJkOGRmOGVhYWQ5LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUtZjJkOGRmOGVhYWQ5
LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4AAqL37
H/oSMDOhnLJR9HhVJiUn/vxITed2Vnq8r3+617CgAKfDmLjpBNf8HySoSH6Hetv0
T1QLFTmi18RXkVfRoFbkt9wzs5NJbz844PEve5FKKix8MWJuhlBzprB755D3hfJ0
IzYE+iVhbiQTplbalpspGBU1FA92x61+ZONAcWpT2UMasJhzefnXFIrPPb8IrmyN
4Qyt3an0Hvc88/DDUkGXzMWvEHZqI9eQR9oCC1fILOpMwItGqeNgdU74tz1xlxQD
cZECZ3/kuNv1LEc7MTl1jWS1onA3neg8crLFARWP0jpf/6G2K3nTxhrPFp78AvtE
vaLVBG0npp1tCw==
-----END CERTIFICATE-----