Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File:                     rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier:          Yw9gwl/nXpWdWcOrSJf8OejMiSDa5SWmZlHOPcoMUpY=
Subject key identifier:   EF:1D:E8:2C:3C:64:D5:D8:86:7C:37:D4:6C:4B:CE:82:57:CD:13:69
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer:       /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial:       01962FAB152A8561F293284C1F0901AB2DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number:          13E6
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: GZHPv72sWurS07SpOxkxXzPHdZv6gWtVv4BGIran2LE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:2a:85:61:f2:93:28:4c:1f:09:01:ab:2d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=ef1de82c3c64d5d8867c37d46c4bce8257cd1369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:0e:a2:63:f3:c6:e6:e2:ac:26:95:31:62:
                    ee:1f:01:2e:d0:cb:e7:4b:74:5e:ca:82:8d:bd:6c:
                    95:e3:9a:d7:4f:05:3e:03:ad:4f:7c:73:8b:ad:97:
                    17:a3:a5:c3:c6:2d:56:5d:c3:ac:88:cf:b6:6e:17:
                    0e:0a:4b:de:8b:63:1a:d0:c3:91:6e:57:ab:67:32:
                    d2:ff:54:20:4d:aa:69:c6:ba:fd:c8:6c:9a:10:c1:
                    83:2e:66:ce:17:8f:b6:80:28:71:cd:f8:59:d0:38:
                    d1:76:a4:a7:24:4c:0b:44:b7:3c:5a:78:c2:3c:0a:
                    d4:46:24:94:e4:7b:df:15:a0:5e:80:75:60:5b:64:
                    39:bd:cc:13:30:9e:79:6f:7f:1f:92:3c:b3:ca:b5:
                    5f:a3:07:a9:bc:e7:11:ae:23:8a:5d:42:1e:d8:f9:
                    0c:de:f9:3c:74:d9:14:55:32:f5:c9:d0:22:81:75:
                    99:f4:64:75:0e:55:5f:dd:b3:c9:95:4e:39:7c:81:
                    8f:4e:41:44:d0:af:a8:09:3c:b1:04:3a:29:9d:fc:
                    2a:b6:f2:40:19:f4:4d:22:bd:e8:f3:03:81:0a:bd:
                    15:86:c3:23:04:52:f0:19:e6:94:ad:86:d1:84:7b:
                    52:28:b6:bb:51:64:bf:e0:bb:d8:ba:bb:69:19:80:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:E8:2C:3C:64:D5:D8:86:7C:37:D4:6C:4B:CE:82:57:CD:13:69
            X509v3 Authority Key Identifier:
                keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:08:b5:e9:ec:f2:8d:92:c3:2a:c9:5b:6e:fa:63:a3:84:
         0f:1a:0d:99:62:55:eb:ac:b4:b7:0f:26:7d:f4:fa:36:76:a2:
         b6:de:df:e8:76:0a:d2:c0:6c:8c:d3:86:3e:83:db:5b:34:b8:
         19:e4:38:6b:40:15:0f:8a:c1:cf:d0:39:f8:64:95:86:e2:94:
         db:02:aa:5e:7a:24:8d:eb:8d:48:da:1b:dc:1b:32:40:a4:e7:
         02:de:69:7d:3b:35:af:c5:71:7c:42:04:d0:26:4f:aa:0b:e7:
         c7:13:96:58:5f:a2:4c:9d:9c:25:ed:fd:0a:53:fc:da:0e:df:
         98:1c:ea:20:25:db:06:06:84:95:ee:b7:07:55:84:be:c5:1d:
         70:d2:a6:66:06:0a:ae:d7:d6:0e:66:1b:f4:fe:ac:16:92:98:
         cc:32:3c:e5:a5:4a:06:ea:92:be:b6:32:48:f3:d3:57:b3:fa:
         e1:b9:19:03:14:d1:14:02:4f:57:29:d8:a6:6d:5a:d9:80:78:
         49:0b:16:26:d6:02:00:c9:f7:ab:e2:7d:95:b0:96:b3:3a:d4:
         e4:f9:80:b5:51:9f:df:1c:0c:ea:bb:87:ab:95:b2:d2:7f:fc:
         10:be:f6:74:40:a7:ff:81:6a:e1:e1:2b:02:bc:da:58:b3:8d:
         f2:14:48:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxUqhWHykyhMHwkBqy3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjUwNDEzMTUwMTAzWhcNMjUwNDE0MTUwMTAzWjAzMTEwLwYDVQQD
EyhlZjFkZTgyYzNjNjRkNWQ4ODY3YzM3ZDQ2YzRiY2U4MjU3Y2QxMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbwOomPzxubirCaVMWLuHwEu0Mvn
S3ReyoKNvWyV45rXTwU+A61PfHOLrZcXo6XDxi1WXcOsiM+2bhcOCkvei2Ma0MOR
blerZzLS/1QgTappxrr9yGyaEMGDLmbOF4+2gChxzfhZ0DjRdqSnJEwLRLc8WnjC
PArURiSU5HvfFaBegHVgW2Q5vcwTMJ55b38fkjyzyrVfowepvOcRriOKXUIe2PkM
3vk8dNkUVTL1ydAigXWZ9GR1DlVf3bPJlU45fIGPTkFE0K+oCTyxBDopnfwqtvJA
GfRNIr3o8wOBCr0VhsMjBFLwGeaUrYbRhHtSKLa7UWS/4LvYurtpGYAmOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8d6Cw8ZNXYhnw31GxLzoJXzRNpMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW78Itens
8o2SwyrJW276Y6OEDxoNmWJV66y0tw8mffT6Nnaitt7f6HYK0sBsjNOGPoPbWzS4
GeQ4a0AVD4rBz9A5+GSVhuKU2wKqXnokjeuNSNob3BsyQKTnAt5pfTs1r8VxfEIE
0CZPqgvnxxOWWF+iTJ2cJe39ClP82g7fmBzqICXbBgaEle63B1WEvsUdcNKmZgYK
rtfWDmYb9P6sFpKYzDI85aVKBuqSvrYySPPTV7P64bkZAxTRFAJPVynYpm1a2YB4
SQsWJtYCAMn3q+J9lbCWszrU5PmAtVGf3xwM6ruHq5Wy0n/8EL72dECn/4Fq4eEr
ArzaWLON8hRIVw==
-----END CERTIFICATE-----