Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File:                     R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier:          oAho/c3SYwf3Qws3Kk0OEgha4hK3qoJ8uQYIp4HkpJI=
Subject key identifier:   48:7C:E6:48:37:BD:AA:B5:27:63:54:60:F0:AD:7B:0D:0C:16:EC:6D
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer:       /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial:       01962E9974B9FEBE189DA83CE9FDCE925D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number:          0EA0
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: gF7/FMdXCHSSY/wB9l9YHz2WaSJddjl0PplDth3kaI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:b9:fe:be:18:9d:a8:3c:e9:fd:ce:92:5d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=487ce64837bdaab527635460f0ad7b0d0c16ec6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:6b:54:08:7e:85:52:c9:ed:de:16:8a:d7:
                    f4:c1:e8:9c:86:75:b0:fa:4c:65:e3:f0:24:df:86:
                    f8:b0:f7:4d:8e:30:d9:d4:d7:04:2b:73:6a:5b:32:
                    7b:89:3a:4d:8e:4c:28:ff:02:4c:c7:eb:10:eb:86:
                    c3:30:6a:fd:97:ee:db:81:1d:51:c1:fa:a9:54:46:
                    6a:0e:00:0e:82:fe:df:a0:b4:f8:3b:bf:f4:98:79:
                    b7:86:7d:71:b8:e4:fb:8b:4c:78:ba:53:33:73:91:
                    ec:bd:f6:ba:5f:b1:fe:61:6c:c8:59:de:a0:af:5d:
                    ca:ca:e1:e5:0e:41:39:85:b3:7f:d1:68:3c:3f:19:
                    d6:c7:65:04:a3:f8:15:1c:4a:43:3e:e6:ec:ed:b5:
                    71:5c:fc:5d:3a:ca:3f:02:f8:f6:b7:ad:54:a9:12:
                    20:7d:66:d3:35:c0:09:90:69:dc:42:0b:1d:40:79:
                    0c:9a:89:3b:d3:d4:d9:86:6e:a4:99:51:9b:3a:d8:
                    8e:8b:e8:7a:a4:72:c9:cd:8a:f0:ef:76:dd:06:19:
                    e9:91:e6:36:c4:57:35:22:d3:09:b6:68:4d:ae:11:
                    e2:3c:89:7d:21:88:7b:f8:3b:e1:b7:40:ce:2c:db:
                    d9:ac:4d:5a:57:17:89:95:ba:57:0d:62:c7:b0:63:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:E6:48:37:BD:AA:B5:27:63:54:60:F0:AD:7B:0D:0C:16:EC:6D
            X509v3 Authority Key Identifier:
                keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:93:a4:74:f4:15:5c:bc:51:39:23:fd:03:78:1a:a7:33:
         39:3c:09:d4:84:6a:01:ea:08:d4:b9:67:b1:6a:aa:61:1f:76:
         92:4c:66:a8:3c:68:06:88:a4:53:c2:4b:80:fe:cc:bc:ba:21:
         ed:48:36:cb:87:13:b2:16:87:70:25:c6:f5:d4:cc:47:50:e9:
         e8:c6:5a:96:98:da:7b:45:90:c1:38:e1:39:30:d3:cb:91:9d:
         a8:8a:03:12:ad:00:a2:02:f5:25:d2:5a:52:05:39:45:47:74:
         c6:74:21:bb:09:d7:20:77:ac:e8:ab:dd:b3:61:0a:f3:8c:a9:
         a9:ae:b2:23:cc:99:e5:82:25:b0:af:ff:49:8f:c2:89:1b:f3:
         44:ef:3a:50:23:cc:74:29:9f:a0:2b:2d:da:78:5c:eb:1c:82:
         db:2b:ea:96:52:9f:12:12:99:8b:45:2a:7e:19:fa:2e:86:c0:
         b5:55:df:9b:db:6a:0b:9a:e8:3a:d0:e2:f1:bf:e7:a7:60:71:
         dd:c2:66:52:df:1e:d2:9c:a0:fd:ec:da:2e:4f:68:ac:41:83:
         1d:bc:15:24:5a:41:dc:97:55:69:83:07:70:f4:2c:7b:5b:c3:
         8e:f4:b4:d1:8e:f4:b8:5c:45:a3:6b:62:62:ce:0c:a8:73:11:
         17:f8:c3:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXS5/r4Ynag86f3Okl1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzA0NjVhZjRjNzIzNjQ3MDAwNTllNzk2NWQzYzg5ZWE0
NjNjZDcwHhcNMjUwNDEzMTAwMjEwWhcNMjUwNDE0MTAwMjEwWjAzMTEwLwYDVQQD
Eyg0ODdjZTY0ODM3YmRhYWI1Mjc2MzU0NjBmMGFkN2IwZDBjMTZlYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75drVAh+hVLJ7d4Witf0weichnWw
+kxl4/Ak34b4sPdNjjDZ1NcEK3NqWzJ7iTpNjkwo/wJMx+sQ64bDMGr9l+7bgR1R
wfqpVEZqDgAOgv7foLT4O7/0mHm3hn1xuOT7i0x4ulMzc5Hsvfa6X7H+YWzIWd6g
r13KyuHlDkE5hbN/0Wg8PxnWx2UEo/gVHEpDPubs7bVxXPxdOso/Avj2t61UqRIg
fWbTNcAJkGncQgsdQHkMmok709TZhm6kmVGbOtiOi+h6pHLJzYrw73bdBhnpkeY2
xFc1ItMJtmhNrhHiPIl9IYh7+Dvht0DOLNvZrE1aVxeJlbpXDWLHsGNabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh85kg3vaq1J2NUYPCtew0MFuxtMB8GA1UdIwQY
MBaAFEdwRlr0xyNkcABZ55ZdPInqRjzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYt
OGE5MmUwOWJmZTFiLzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYtOGE5MmUwOWJmZTFi
LzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcqTpHT0
FVy8UTkj/QN4GqczOTwJ1IRqAeoI1LlnsWqqYR92kkxmqDxoBoikU8JLgP7MvLoh
7Ug2y4cTshaHcCXG9dTMR1Dp6MZalpjae0WQwTjhOTDTy5GdqIoDEq0AogL1JdJa
UgU5RUd0xnQhuwnXIHes6Kvds2EK84ypqa6yI8yZ5YIlsK//SY/CiRvzRO86UCPM
dCmfoCst2nhc6xyC2yvqllKfEhKZi0Uqfhn6LobAtVXfm9tqC5roOtDi8b/np2Bx
3cJmUt8e0pyg/ezaLk9orEGDHbwVJFpB3JdVaYMHcPQse1vDjvS00Y70uFxFo2ti
Ys4MqHMRF/jDlQ==
-----END CERTIFICATE-----