Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          ePIftk+vIK1of42Vy9QZXvvtIXj9BFKFe/i17BMalE4=
Subject key identifier:   AE:C0:C0:95:A6:D9:7D:2B:81:AA:21:9A:94:92:7D:C2:07:2C:6B:AF
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       01962E98E85D0156C59D9B9DFD4D933B0E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: HupCslfcuD2ejPIrFJ6isImArk13MG59zukNlzy9XOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e8:5d:01:56:c5:9d:9b:9d:fd:4d:93:3b:0e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=aec0c095a6d97d2b81aa219a94927dc2072c6baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:9e:d8:f9:59:bb:41:69:60:db:9f:37:2f:
                    d5:6f:71:7f:52:18:2e:9a:1e:28:e1:bb:aa:3b:5d:
                    be:cf:85:f4:51:b9:e4:cf:c0:dd:8c:5e:48:c4:6e:
                    b0:89:36:c4:40:fc:c9:0a:05:c2:cb:e7:62:b5:b8:
                    26:d4:9c:1e:2e:1c:64:33:ef:2b:18:17:b4:7b:26:
                    ea:90:de:2f:30:ea:67:fb:b4:79:e3:43:3a:e5:c0:
                    12:e3:a7:74:3a:b2:cd:7e:71:89:fe:de:bd:29:3c:
                    ed:e3:aa:c4:dd:48:32:b8:50:c9:35:6e:06:34:c4:
                    03:1a:81:75:52:02:df:c9:88:9a:bd:5d:f9:a8:8a:
                    f2:94:af:e0:c7:8c:ef:f4:c4:bf:55:27:a2:7a:71:
                    c9:03:78:d8:8b:2a:d0:12:49:02:e0:ea:8f:30:b4:
                    75:16:9e:2b:58:ff:e2:f3:34:a4:c9:01:f9:0a:54:
                    d8:91:59:c1:a5:2e:b2:25:53:09:8f:63:df:c1:32:
                    f9:61:e0:94:69:21:75:7f:9f:61:dc:25:fc:f1:80:
                    6d:45:7f:48:d2:8d:0c:7f:a2:7e:1a:ee:a4:f9:01:
                    c3:60:94:65:5f:fa:d5:35:4b:98:37:d4:e9:7d:7a:
                    7c:06:36:f1:ab:73:f3:b2:9d:5a:b6:a0:8c:66:f0:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C0:C0:95:A6:D9:7D:2B:81:AA:21:9A:94:92:7D:C2:07:2C:6B:AF
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:00:72:26:ba:7b:7f:ee:6a:67:d0:b8:f5:0c:04:11:fa:53:
         32:75:df:be:14:cf:0c:0c:a3:d2:18:31:50:b4:f3:0e:95:af:
         17:1a:59:fb:31:98:26:fa:eb:bf:5f:ae:b0:f2:6b:fd:29:07:
         01:a8:37:60:81:7f:47:44:d7:3d:57:be:6c:0f:91:52:a4:2c:
         d3:05:3e:76:52:e8:f8:6a:97:d5:b0:db:0c:7e:58:dd:64:2f:
         61:41:38:2f:e4:4c:98:18:cc:d2:5a:d5:86:23:73:09:a0:48:
         12:c2:0b:88:4e:3f:04:76:85:8b:9f:cb:74:2e:68:27:67:8c:
         c3:55:2c:5d:80:ca:0b:15:a9:92:ac:fb:3c:ea:d1:d8:7b:30:
         a4:47:65:c1:44:44:6e:a5:b3:bf:08:fc:8c:09:0a:3c:52:2d:
         c4:a5:f1:80:54:4d:0a:55:c6:02:f3:41:84:00:2f:23:88:91:
         0d:bf:1f:83:e9:4c:53:43:67:80:76:57:ed:81:be:b8:5c:27:
         13:91:b3:86:46:dc:27:38:84:11:fc:86:20:26:ec:19:ab:a4:
         42:47:0c:5c:a1:1e:e6:00:cd:c1:af:91:52:47:b2:d7:8a:39:
         8c:7b:a8:9f:29:ef:1e:22:86:7d:f6:ff:39:7b:88:3f:ea:cc:
         1e:5d:15:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOhdAVbFnZud/U2TOw5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5N2Y0YTdhNzczMzFlZDVmN2NlN2VlODA2OGMyZWRiZDJk
MGQzN2UwHhcNMjUwNDEzMTAwMTM0WhcNMjUwNDE0MTAwMTM0WjAzMTEwLwYDVQQD
EyhhZWMwYzA5NWE2ZDk3ZDJiODFhYTIxOWE5NDkyN2RjMjA3MmM2YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulqe2PlZu0FpYNufNy/Vb3F/Uhgu
mh4o4buqO12+z4X0Ubnkz8DdjF5IxG6wiTbEQPzJCgXCy+ditbgm1JweLhxkM+8r
GBe0eybqkN4vMOpn+7R540M65cAS46d0OrLNfnGJ/t69KTzt46rE3UgyuFDJNW4G
NMQDGoF1UgLfyYiavV35qIrylK/gx4zv9MS/VSeienHJA3jYiyrQEkkC4OqPMLR1
Fp4rWP/i8zSkyQH5ClTYkVnBpS6yJVMJj2PfwTL5YeCUaSF1f59h3CX88YBtRX9I
0o0Mf6J+Gu6k+QHDYJRlX/rVNUuYN9TpfXp8Bjbxq3Pzsp1atqCMZvCAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7AwJWm2X0rgaohmpSSfcIHLGuvMB8GA1UdIwQY
MBaAFOl/Snp3Mx7V985+6AaMLtvS0NN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgt
M2FiMjFiNTIzMDAwLzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgtM2FiMjFiNTIzMDAw
LzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQByJrp7
f+5qZ9C49QwEEfpTMnXfvhTPDAyj0hgxULTzDpWvFxpZ+zGYJvrrv1+usPJr/SkH
Aag3YIF/R0TXPVe+bA+RUqQs0wU+dlLo+GqX1bDbDH5Y3WQvYUE4L+RMmBjM0lrV
hiNzCaBIEsILiE4/BHaFi5/LdC5oJ2eMw1UsXYDKCxWpkqz7POrR2HswpEdlwURE
bqWzvwj8jAkKPFItxKXxgFRNClXGAvNBhAAvI4iRDb8fg+lMU0NngHZX7YG+uFwn
E5GzhkbcJziEEfyGICbsGaukQkcMXKEe5gDNwa+RUkey14o5jHuonynvHiKGffb/
OXuIP+rMHl0Vdg==
-----END CERTIFICATE-----