Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          aAmjmTluHKrRhTcaTWgPa1k8AK7HiemtuEDC69r0uDk=
Subject key identifier:   FF:84:DD:B7:95:3D:2E:DF:7E:CD:8A:86:CB:82:87:68:26:0B:06:2B
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       01962DF44CABB0FC535F04D3BD88F888144E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: wWXZ0WcFRd8F8UbNP1UsC4GU5Mbv7hJFbwYxaGFUxK0=)
                          2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4c:ab:b0:fc:53:5f:04:d3:bd:88:f8:88:14:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=ff84ddb7953d2edf7ecd8a86cb828768260b062b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:8d:5a:9d:af:b4:87:2d:7c:a9:ec:d1:b2:
                    1f:e2:6c:dc:30:ba:a5:c8:27:aa:67:45:d6:75:0d:
                    75:9b:cf:72:4f:bb:54:10:8a:72:d1:73:e7:e3:4e:
                    aa:78:a9:39:f3:68:5b:61:c8:81:7b:44:ff:90:8b:
                    8b:98:39:62:f0:16:6e:2b:36:15:d8:a8:3c:c9:6a:
                    00:14:f6:54:e5:b9:bd:bc:02:0c:13:af:bb:79:af:
                    19:09:25:7e:b5:37:34:e0:1b:c5:60:f9:ae:a9:db:
                    1b:c7:fa:39:b3:c8:9a:7f:63:a5:e5:53:16:7a:48:
                    3e:f0:9f:86:3d:2b:93:38:7a:d0:d4:05:77:6a:e2:
                    f0:1a:8d:68:2b:33:e9:b6:df:67:e9:4e:d1:cc:56:
                    43:23:f7:4f:d1:34:14:f6:55:ee:0b:07:16:7a:31:
                    8b:10:08:15:fe:45:10:89:ce:2c:b7:51:64:08:b4:
                    e2:10:74:16:c1:37:b5:1a:08:d8:ec:c8:87:35:54:
                    5b:7e:fe:b0:b8:40:ee:d8:e7:eb:d6:0a:bf:8b:6b:
                    6f:6a:23:97:cd:a7:be:7f:a9:cb:a1:42:b5:73:4b:
                    e4:33:b2:07:b4:a6:91:bd:2a:be:ba:a6:31:40:dd:
                    25:f1:6f:7a:49:45:a5:ad:2b:e1:a5:f3:01:2a:22:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:DD:B7:95:3D:2E:DF:7E:CD:8A:86:CB:82:87:68:26:0B:06:2B
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:95:47:6e:7b:5d:ff:37:07:9d:15:01:13:1d:2b:4c:82:40:
         32:2e:2d:15:14:f6:00:b6:8a:e7:16:a2:de:6a:13:83:0a:e5:
         33:c4:2e:3f:10:d8:cd:f7:f8:89:26:10:82:86:63:43:a6:10:
         a4:02:e3:cb:5c:1f:58:7f:e1:de:f4:82:df:d3:73:cb:c7:a2:
         93:12:59:e8:e6:0d:a2:87:8a:c9:91:9b:7f:98:4e:fc:f9:3f:
         8c:93:a6:d1:87:06:57:68:38:1a:3a:70:47:93:5e:f1:f1:19:
         10:60:14:c3:72:83:9f:a0:2a:8e:04:1b:f1:6c:20:31:51:56:
         3d:e8:48:21:3f:eb:3c:5f:cb:7d:a1:fc:f9:f1:6c:5c:13:89:
         7a:c3:05:af:79:85:33:1c:4a:a5:6d:3b:be:7c:c6:05:06:9a:
         e8:07:bd:b1:5e:5a:3f:3e:7a:30:24:22:90:48:07:23:79:aa:
         71:96:e5:e3:aa:dc:ec:3e:0a:b3:41:23:ee:7b:c7:3d:f7:49:
         93:ce:28:58:df:20:a1:98:4c:83:5a:e9:75:13:f8:53:9a:f8:
         57:a8:55:8d:b8:99:82:2d:b4:75:03:f7:53:1c:50:6e:c7:80:
         79:21:42:08:50:f6:e4:84:7e:35:71:d1:50:e1:29:34:ac:45:
         63:ff:7c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EyrsPxTXwTTvYj4iBROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTg0YjUxMWQ5NmE0YWU2Yzk2MzAwMTk3Zjg0Zjk2YTNh
ZmMyNDYwHhcNMjUwNDEzMDcwMTQ3WhcNMjUwNDE0MDcwMTQ3WjAzMTEwLwYDVQQD
EyhmZjg0ZGRiNzk1M2QyZWRmN2VjZDhhODZjYjgyODc2ODI2MGIwNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZuNWp2vtIctfKns0bIf4mzcMLql
yCeqZ0XWdQ11m89yT7tUEIpy0XPn406qeKk582hbYciBe0T/kIuLmDli8BZuKzYV
2Kg8yWoAFPZU5bm9vAIME6+7ea8ZCSV+tTc04BvFYPmuqdsbx/o5s8iaf2Ol5VMW
ekg+8J+GPSuTOHrQ1AV3auLwGo1oKzPptt9n6U7RzFZDI/dP0TQU9lXuCwcWejGL
EAgV/kUQic4st1FkCLTiEHQWwTe1GgjY7MiHNVRbfv6wuEDu2Ofr1gq/i2tvaiOX
zae+f6nLoUK1c0vkM7IHtKaRvSq+uqYxQN0l8W96SUWlrSvhpfMBKiI1gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+E3beVPS7ffs2KhsuCh2gmCwYrMB8GA1UdIwQY
MBaAFO9YS1EdlqSubJYwAZf4T5ajr8JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMt
NDdlMzA0OTgzMGIwLzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84ZDZjYjAtMDM5Ni00ZjJiLWFlYzMtNDdlMzA0OTgzMGIw
LzEvNzFoTFVSMldwSzVzbGpBQmxfaFBscU92d2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZVHbntd
/zcHnRUBEx0rTIJAMi4tFRT2ALaK5xai3moTgwrlM8QuPxDYzff4iSYQgoZjQ6YQ
pALjy1wfWH/h3vSC39Nzy8eikxJZ6OYNooeKyZGbf5hO/Pk/jJOm0YcGV2g4Gjpw
R5Ne8fEZEGAUw3KDn6AqjgQb8WwgMVFWPehIIT/rPF/LfaH8+fFsXBOJesMFr3mF
MxxKpW07vnzGBQaa6Ae9sV5aPz56MCQikEgHI3mqcZbl46rc7D4Ks0Ej7nvHPfdJ
k84oWN8goZhMg1rpdRP4U5r4V6hVjbiZgi20dQP3UxxQbseAeSFCCFD25IR+NXHR
UOEpNKxFY/98sg==
-----END CERTIFICATE-----