Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File:                     SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier:          D6ZRBSdV566casMLzUu7zhpfcqtCcKf8y/48V/Bc3XQ=
Subject key identifier:   8D:5B:63:6A:8B:32:3A:78:9F:C3:03:1E:0F:9D:85:05:FA:B6:8C:ED
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer:       /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial:       01962F067060E4DCD142260025D9CD4FD948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number:          05D4
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: gCDsKQpp+rcoMaR2mI5cRU04jDczrZCMBV71BttX1Rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:60:e4:dc:d1:42:26:00:25:d9:cd:4f:d9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=8d5b636a8b323a789fc3031e0f9d8505fab68ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:e2:5f:c2:a8:76:76:03:79:0c:e6:cc:54:
                    74:f3:17:c0:aa:da:65:c0:df:db:d3:4f:f2:13:f7:
                    b2:09:4a:99:ad:7c:e5:22:0f:56:d3:ea:62:7b:de:
                    7c:be:db:ed:4b:8d:d7:b9:ca:fb:ce:fc:0c:f5:60:
                    f7:27:35:d4:a2:60:f5:23:c2:81:97:c2:e8:f4:95:
                    fd:f9:6a:49:56:9c:19:3b:d0:88:ee:c8:29:3b:af:
                    b6:05:69:35:73:94:ae:e8:67:4b:c3:30:15:ac:9a:
                    67:c9:0f:e3:e7:07:c0:5d:5f:ce:0e:7d:f6:09:2a:
                    c1:d9:02:28:52:32:37:2d:b3:96:e9:4c:ff:56:94:
                    9c:f0:62:69:8a:f7:f4:41:cb:59:fe:3e:a7:85:0d:
                    a1:94:e9:36:95:c1:9c:50:ea:f0:28:c4:66:bf:92:
                    10:5b:de:51:fa:fd:21:58:01:73:20:bd:c3:e5:84:
                    ad:83:67:69:ac:30:a6:6b:d3:fa:07:5f:32:bf:53:
                    74:47:7e:cc:df:bc:af:5a:91:a3:88:dc:da:fd:e5:
                    a8:e5:dc:4b:0b:b7:1f:26:14:a3:65:4d:4c:85:98:
                    66:42:8c:8f:a2:ff:81:8e:2c:0d:ec:fe:83:d5:bd:
                    60:94:b2:5b:4f:e6:0a:68:6b:44:ba:27:38:0f:38:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:63:6A:8B:32:3A:78:9F:C3:03:1E:0F:9D:85:05:FA:B6:8C:ED
            X509v3 Authority Key Identifier:
                keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:d1:b0:f4:ba:f3:69:87:81:6e:14:89:48:11:06:27:de:
         4f:55:6b:fd:10:4e:53:47:55:24:36:a5:77:1f:b2:4e:91:b1:
         86:17:53:9e:59:0e:38:8d:fe:21:a6:75:a3:c4:f5:62:61:68:
         00:75:97:bd:ad:b1:3e:c0:93:58:1f:f0:cb:8e:3b:b8:0f:df:
         24:25:e0:a2:7e:27:7e:a1:61:bf:53:be:c2:39:f1:d1:ed:ca:
         f0:95:fb:18:d9:42:ef:a3:08:ad:89:3c:a0:b0:7c:93:f3:b5:
         79:bc:68:3b:3b:9b:4a:c9:dc:05:00:1a:66:eb:b5:8c:7d:4f:
         c1:f9:7b:72:c8:1d:64:36:fe:3e:d9:97:9b:6c:9a:d7:9e:5e:
         1b:cb:6e:a6:0d:a0:d8:53:cb:f0:08:98:0c:a3:86:4d:10:e5:
         27:e8:52:5d:d2:97:8b:5d:43:49:c8:46:b5:2b:6c:3a:61:99:
         3a:11:13:d3:ce:15:7d:d6:1a:cc:17:4b:33:31:72:73:1c:d8:
         aa:2d:5c:f3:03:04:ea:f1:85:8c:71:2a:b5:44:63:22:31:34:
         16:bc:cb:5d:4f:6b:42:f5:65:3f:e4:1c:98:d6:5d:93:4f:a1:
         8d:2d:65:d3:60:05:1d:1e:d6:3a:75:3e:87:a8:c1:1b:fd:ee:
         f6:40:89:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnBg5NzRQiYAJdnNT9lIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy
MzQyMmEwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg4ZDViNjM2YThiMzIzYTc4OWZjMzAzMWUwZjlkODUwNWZhYjY4Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZfiX8KodnYDeQzmzFR08xfAqtpl
wN/b00/yE/eyCUqZrXzlIg9W0+pie958vtvtS43Xucr7zvwM9WD3JzXUomD1I8KB
l8Lo9JX9+WpJVpwZO9CI7sgpO6+2BWk1c5Su6GdLwzAVrJpnyQ/j5wfAXV/ODn32
CSrB2QIoUjI3LbOW6Uz/VpSc8GJpivf0QctZ/j6nhQ2hlOk2lcGcUOrwKMRmv5IQ
W95R+v0hWAFzIL3D5YStg2dprDCma9P6B18yv1N0R37M37yvWpGjiNza/eWo5dxL
C7cfJhSjZU1MhZhmQoyPov+BjiwN7P6D1b1glLJbT+YKaGtEuic4DzjyTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1bY2qLMjp4n8MDHg+dhQX6toztMB8GA1UdIwQY
MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt
N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5
LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm97RsPS6
82mHgW4UiUgRBifeT1Vr/RBOU0dVJDaldx+yTpGxhhdTnlkOOI3+IaZ1o8T1YmFo
AHWXva2xPsCTWB/wy447uA/fJCXgon4nfqFhv1O+wjnx0e3K8JX7GNlC76MIrYk8
oLB8k/O1ebxoOzubSsncBQAaZuu1jH1Pwfl7csgdZDb+PtmXm2ya155eG8tupg2g
2FPL8AiYDKOGTRDlJ+hSXdKXi11DSchGtStsOmGZOhET084VfdYazBdLMzFycxzY
qi1c8wME6vGFjHEqtURjIjE0FrzLXU9rQvVlP+QcmNZdk0+hjS1l02AFHR7WOnU+
h6jBG/3u9kCJFg==
-----END CERTIFICATE-----