Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
File:                     6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft (raw, json)
Hash identifier:          vH3Xbqs+Pd/33+aWIMDTppHmcgJOiAF2gNj2Hh55EUk=
Subject key identifier:   93:81:CF:A7:AA:97:B1:F1:48:DD:83:77:66:83:41:DC:E3:9D:94:D7
Authority key identifier: E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4
Certificate issuer:       /CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
Certificate serial:       01962E993B1C1E8ABBAB09C4D2E99C7A02D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: 6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl (hash: 7r6o7lUnoVHaQ9gBWBDEj7nKh+loECGl6cGYM1+dqEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:1c:1e:8a:bb:ab:09:c4:d2:e9:9c:7a:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b912b4a5a0c7703b5ca58b186741e0d5335b4
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=9381cfa7aa97b1f148dd8377668341dce39d94d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:04:87:6a:cd:cf:40:48:35:4c:7f:71:e4:
                    04:8b:34:78:8b:b2:f3:7b:3b:d6:c3:bf:7e:13:96:
                    7d:62:f6:78:03:82:0d:bb:b4:e5:bf:f2:6d:29:49:
                    2a:e6:59:aa:ad:65:0c:20:0b:0c:f2:99:3f:88:79:
                    fe:5d:eb:6f:c1:27:16:d0:e8:9d:42:98:7e:21:60:
                    41:e3:3b:f4:36:f6:0b:22:a2:8b:ab:e7:a2:ec:a7:
                    12:76:86:dc:a6:76:21:09:5c:e3:de:0f:85:4e:02:
                    b3:8d:fa:8a:8e:2c:8d:c0:31:76:7c:d9:2c:6a:02:
                    7f:c9:3b:e2:a6:d3:01:7e:94:04:e0:50:f0:5a:10:
                    bd:40:3a:f4:41:3c:05:34:d6:82:7d:dc:43:fe:b9:
                    a6:91:34:33:23:06:ee:e5:a4:ce:56:d8:b8:7b:6d:
                    fa:c5:33:09:56:ec:fc:3f:c3:5d:ba:10:e1:70:ed:
                    09:96:0b:32:72:24:d0:75:99:50:b2:5b:0a:c5:f7:
                    46:b7:97:0b:ca:8a:e8:45:ef:a0:99:a4:bf:bc:ec:
                    f5:ee:5a:fb:a9:65:2b:2d:ef:6b:20:e5:fd:e6:2a:
                    be:d1:c7:07:e4:90:05:d8:f8:92:1f:85:f8:b9:55:
                    2b:eb:28:f6:dd:71:21:ff:e7:95:7d:4a:54:85:e4:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:CF:A7:AA:97:B1:F1:48:DD:83:77:66:83:41:DC:E3:9D:94:D7
            X509v3 Authority Key Identifier:
                keyid:E9:6B:91:2B:4A:5A:0C:77:03:B5:CA:58:B1:86:74:1E:0D:53:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2f3383-db79-44c6-bb6b-b546150fdc04/1/6WuRK0paDHcDtcpYsYZ0Hg1TNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5c:28:2c:7a:b2:93:d9:e7:01:16:ad:f2:5d:61:a3:a7:6d:
         ec:bb:be:7a:af:88:1e:6f:ef:6c:ff:c3:91:bd:65:8b:36:3e:
         5d:40:d8:29:c1:f7:1d:c9:d6:14:d3:e0:12:1e:fb:4b:d2:3e:
         2e:ed:75:6a:5b:24:87:cb:86:f5:2c:ae:5f:bf:0e:e9:93:67:
         45:95:61:b6:59:97:00:b9:fa:57:8b:b2:82:e4:d5:4c:8a:85:
         b7:b0:bb:47:2f:f5:c1:26:98:d1:50:a0:71:eb:e6:08:6f:91:
         7e:32:43:61:61:af:2b:c3:01:4b:1c:87:2c:e6:a0:44:68:78:
         64:f3:ab:e1:ba:36:e0:05:9a:9a:12:b7:fb:ed:8b:0e:9a:ef:
         bd:42:0b:f1:88:3e:2a:78:1d:7f:76:2c:4d:e7:17:72:f2:15:
         15:23:a2:3b:8d:4c:27:a1:c1:17:7b:53:7a:9b:13:ef:7b:6c:
         d0:ed:b4:cf:0f:42:d5:98:46:ce:eb:8e:eb:ff:85:68:f3:9e:
         29:27:78:9f:5f:21:87:04:d9:ac:76:a0:32:81:9b:7e:87:88:
         81:ce:0c:a2:b7:b1:fe:cb:be:7a:4c:ed:94:c2:d7:53:9a:aa:
         53:7e:42:70:47:d1:1e:3e:e5:ed:0b:01:45:ec:bd:0c:49:56:
         b7:25:da:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTscHoq7qwnE0umcegLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NmI5MTJiNGE1YTBjNzcwM2I1Y2E1OGIxODY3NDFlMGQ1
MzM1YjQwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
Eyg5MzgxY2ZhN2FhOTdiMWYxNDhkZDgzNzc2NjgzNDFkY2UzOWQ5NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8wEh2rNz0BINUx/ceQEizR4i7Lz
ezvWw79+E5Z9YvZ4A4INu7Tlv/JtKUkq5lmqrWUMIAsM8pk/iHn+XetvwScW0Oid
Qph+IWBB4zv0NvYLIqKLq+ei7KcSdobcpnYhCVzj3g+FTgKzjfqKjiyNwDF2fNks
agJ/yTviptMBfpQE4FDwWhC9QDr0QTwFNNaCfdxD/rmmkTQzIwbu5aTOVti4e236
xTMJVuz8P8NduhDhcO0JlgsyciTQdZlQslsKxfdGt5cLyoroRe+gmaS/vOz17lr7
qWUrLe9rIOX95iq+0ccH5JAF2PiSH4X4uVUr6yj23XEh/+eVfUpUheTfvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOBz6eql7HxSN2Dd2aDQdzjnZTXMB8GA1UdIwQY
MBaAFOlrkStKWgx3A7XKWLGGdB4NUzW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmIt
YjU0NjE1MGZkYzA0LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yZjMzODMtZGI3OS00NGM2LWJiNmItYjU0NjE1MGZkYzA0
LzEvNld1UkswcGFESGNEdGNwWXNZWjBIZzFUTmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1woLHqy
k9nnARat8l1ho6dt7Lu+eq+IHm/vbP/Dkb1lizY+XUDYKcH3HcnWFNPgEh77S9I+
Lu11alskh8uG9SyuX78O6ZNnRZVhtlmXALn6V4uyguTVTIqFt7C7Ry/1wSaY0VCg
cevmCG+RfjJDYWGvK8MBSxyHLOagRGh4ZPOr4bo24AWamhK3++2LDprvvUIL8Yg+
Kngdf3YsTecXcvIVFSOiO41MJ6HBF3tTepsT73ts0O20zw9C1ZhGzuuO6/+FaPOe
KSd4n18hhwTZrHagMoGbfoeIgc4Morex/su+ekztlMLXU5qqU35CcEfRHj7l7QsB
Rey9DElWtyXaRA==
-----END CERTIFICATE-----