Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File:                     Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier:          oEopIk58T3WF7Y4w4x2PgNWs5NO2B8tfEw792zUR2Wk=
Subject key identifier:   6E:AF:BF:FB:4B:FC:F8:CD:A6:04:86:5E:1C:64:0A:40:F1:36:87:11
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer:       /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial:       01962F7495DE425DEF247AD6B1D5730CC232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number:          14DD
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: s0L7wR5eX0yIegLYRWgizbJY56DQtA8nP7ONGbKGkbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:de:42:5d:ef:24:7a:d6:b1:d5:73:0c:c2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=6eafbffb4bfcf8cda604865e1c640a40f1368711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:75:23:2b:f2:79:bd:1c:b8:32:2f:58:c2:
                    aa:8c:cb:58:fe:41:7e:a0:13:67:d8:df:b1:14:ee:
                    36:69:98:6f:2c:96:39:32:1d:40:e6:0c:e8:20:24:
                    fb:b9:38:48:06:da:0b:7e:4d:9a:fe:59:3d:8d:f1:
                    2d:6c:1d:64:ac:a3:7d:f5:c2:13:6e:91:85:a1:a3:
                    c3:16:f1:7c:32:b7:82:d3:64:a6:02:0e:21:7e:a0:
                    63:97:17:53:fa:12:7b:fc:72:36:67:11:bb:8f:1d:
                    c8:68:95:5b:31:fd:b9:b2:cb:60:22:e4:13:b6:b7:
                    eb:38:d4:db:e8:24:d5:6d:31:22:2d:04:6c:4c:93:
                    13:60:17:aa:4f:1c:31:0d:93:35:e8:07:a7:3c:60:
                    aa:56:70:a8:94:06:ab:2d:7c:80:7f:b5:90:d1:bf:
                    48:f7:00:bb:bc:b9:48:da:9f:e5:3b:fe:e6:ff:07:
                    76:10:78:03:62:97:6c:03:29:f0:05:08:c6:7d:37:
                    ec:63:e6:ab:fd:0d:e5:a8:76:55:62:d0:49:f9:50:
                    74:92:95:ea:ea:d5:78:1c:c5:46:2b:60:4a:cf:25:
                    26:24:7f:75:9b:0c:65:0f:a3:2d:1e:16:3d:bd:9f:
                    4c:73:3c:85:b1:04:c7:6a:62:41:1c:b1:02:2a:2f:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:BF:FB:4B:FC:F8:CD:A6:04:86:5E:1C:64:0A:40:F1:36:87:11
            X509v3 Authority Key Identifier:
                keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:a9:9f:69:38:c9:6b:53:d4:01:81:34:09:11:fc:fe:b0:
         9d:5a:ec:4d:a3:a1:09:5d:68:30:23:4b:49:b5:22:d2:e2:e4:
         2d:ac:8f:4a:ad:25:6c:56:9a:aa:9f:25:1d:f4:44:25:1d:93:
         3d:ce:6c:4a:33:37:03:12:ec:45:97:5e:45:d2:7d:1d:0a:84:
         20:3a:16:c7:d4:25:49:27:d8:2f:9a:d6:67:83:8e:db:ed:04:
         5b:6a:b7:61:a5:d6:45:1e:c1:53:bd:ee:c4:a7:f4:88:23:f2:
         9a:ab:72:b5:f4:6d:77:d8:cf:e2:79:bf:63:f6:9d:dc:91:ed:
         11:67:c5:27:f5:1d:ac:ae:6f:0e:7a:fa:fb:27:13:e5:dc:3f:
         7d:4b:60:c1:a7:22:2a:d6:63:2f:1b:ea:99:54:6b:7d:4e:4f:
         61:67:e3:57:01:23:f3:8b:17:f4:dc:68:dc:b3:5d:4e:ed:2e:
         85:9d:81:35:4e:37:4e:48:2d:d8:d2:05:3d:b0:52:cc:09:54:
         8d:15:07:9e:bb:41:64:70:02:74:5d:57:92:7a:c9:63:0f:bd:
         a1:8a:91:47:50:0c:1c:78:a8:8a:23:1d:f9:6a:c1:e6:b1:d9:
         a0:8b:96:14:04:8d:9a:9b:7b:70:06:7e:14:40:4b:47:79:e1:
         ce:19:b3:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJXeQl3vJHrWsdVzDMIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYmYwYmRjZDkwMTYyMmIxNmZmZDQxNDRiNTg4ODcwNzMy
MmM1MzQwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
Eyg2ZWFmYmZmYjRiZmNmOGNkYTYwNDg2NWUxYzY0MGE0MGYxMzY4NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52V1Iyvyeb0cuDIvWMKqjMtY/kF+
oBNn2N+xFO42aZhvLJY5Mh1A5gzoICT7uThIBtoLfk2a/lk9jfEtbB1krKN99cIT
bpGFoaPDFvF8MreC02SmAg4hfqBjlxdT+hJ7/HI2ZxG7jx3IaJVbMf25sstgIuQT
trfrONTb6CTVbTEiLQRsTJMTYBeqTxwxDZM16AenPGCqVnColAarLXyAf7WQ0b9I
9wC7vLlI2p/lO/7m/wd2EHgDYpdsAynwBQjGfTfsY+ar/Q3lqHZVYtBJ+VB0kpXq
6tV4HMVGK2BKzyUmJH91mwxlD6MtHhY9vZ9MczyFsQTHamJBHLECKi+TLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6vv/tL/PjNpgSGXhxkCkDxNocRMB8GA1UdIwQY
MBaAFA6/C9zZAWIrFv/UFEtYiHBzIsU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTkt
YzQ0N2I0MTkzMjEwLzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTktYzQ0N2I0MTkzMjEw
LzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLipn2k4
yWtT1AGBNAkR/P6wnVrsTaOhCV1oMCNLSbUi0uLkLayPSq0lbFaaqp8lHfREJR2T
Pc5sSjM3AxLsRZdeRdJ9HQqEIDoWx9QlSSfYL5rWZ4OO2+0EW2q3YaXWRR7BU73u
xKf0iCPymqtytfRtd9jP4nm/Y/ad3JHtEWfFJ/UdrK5vDnr6+ycT5dw/fUtgwaci
KtZjLxvqmVRrfU5PYWfjVwEj84sX9Nxo3LNdTu0uhZ2BNU43Tkgt2NIFPbBSzAlU
jRUHnrtBZHACdF1XknrJYw+9oYqRR1AMHHioiiMd+WrB5rHZoIuWFASNmpt7cAZ+
FEBLR3nhzhmziA==
-----END CERTIFICATE-----