Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File:                     xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier:          7We59+FxwXJo7A81zwEuZE67AUknY6AVUtpA/G6mabg=
Subject key identifier:   52:88:94:67:7B:C3:71:93:81:8D:C2:FE:B4:8B:74:0D:19:0E:38:3E
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer:       /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial:       01962DF3CE4ACA376EAFEB2290103A87B8C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: CPnXffPk4TRvs6c1rmYP2E5whjSwF6hhBwuQMt+MNOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:4a:ca:37:6e:af:eb:22:90:10:3a:87:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=528894677bc37193818dc2feb48b740d190e383e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:b1:37:71:cb:46:24:89:9c:07:ab:82:59:
                    4d:4f:9c:ca:12:9f:5e:e6:e7:03:df:9d:97:8d:af:
                    ec:53:d5:61:61:f9:0d:6a:5c:60:2d:8e:cb:df:a9:
                    b6:75:ce:54:4f:a3:df:e5:14:61:f0:9a:9b:b8:77:
                    91:f0:61:7d:79:1a:4a:0c:08:98:34:a9:3f:87:f6:
                    39:97:62:3b:47:c4:75:7b:f5:ba:ab:39:af:26:a6:
                    14:a4:21:4e:56:1f:07:2e:e1:c0:dd:26:7f:57:3d:
                    33:6e:b9:ef:b5:79:4a:35:92:86:95:c1:65:11:5a:
                    8b:aa:df:fe:75:e9:e7:31:2c:e9:77:05:94:7a:8d:
                    61:6c:d3:cd:c0:ce:d3:f6:54:9a:f0:7e:69:34:69:
                    68:59:00:98:68:0b:f8:88:83:65:77:49:e3:81:9e:
                    3c:38:72:0d:13:31:0a:e8:db:60:ef:6a:25:60:52:
                    33:69:69:b4:3b:86:c8:8e:6d:7c:3d:32:36:c6:e3:
                    96:c6:a9:e5:11:17:7a:f6:e1:da:5a:55:6a:d8:e0:
                    8a:54:f1:2e:4b:bb:90:27:ed:ea:20:dd:93:26:60:
                    67:c3:49:2b:aa:ed:57:0f:d7:11:62:ef:da:0c:5d:
                    6e:94:06:1a:69:03:97:f3:26:23:7b:23:92:c4:b1:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:94:67:7B:C3:71:93:81:8D:C2:FE:B4:8B:74:0D:19:0E:38:3E
            X509v3 Authority Key Identifier:
                keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:47:0e:b2:9f:07:d8:85:5d:84:a8:cc:e1:2c:12:2b:95:9a:
         b3:da:21:9d:4f:c4:8c:3f:d9:84:67:c3:98:60:e3:bc:02:aa:
         d4:51:0d:4c:86:fe:6c:50:d6:29:3a:59:19:53:8e:b0:c0:09:
         ed:a7:a9:7b:86:65:6c:19:6e:7f:0d:2d:03:fb:3a:a2:31:9f:
         f6:c0:cd:b5:db:57:73:8b:13:b0:97:92:56:04:b3:5a:63:4a:
         af:a5:50:22:24:99:62:07:b4:0f:f0:68:cc:76:55:9f:7c:34:
         2f:c0:ac:cf:8d:be:e8:5e:61:cb:10:7c:f4:13:3e:7b:5a:78:
         ae:39:37:a2:5d:e6:e4:ed:34:ee:8b:a4:4f:d7:8e:f7:fa:3d:
         51:fe:02:13:78:9e:fb:b6:b4:c1:f8:bc:57:48:3d:e9:b3:50:
         04:3e:eb:59:03:d7:1c:4f:4b:c4:54:b3:f1:9c:a2:9a:e2:22:
         47:c8:f4:cd:d3:69:29:10:b8:4b:32:f1:53:e1:bb:a7:86:92:
         22:8e:57:1e:78:7e:ee:14:1c:e4:23:cc:f5:25:49:02:00:56:
         4b:4a:2c:8a:b2:4a:48:5f:3d:9e:9f:b5:82:93:db:df:2d:38:
         0b:69:85:72:fc:d7:4a:a2:c6:e8:0e:0b:b3:7d:34:01:a2:d8:
         40:7c:f8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt885Kyjdur+sikBA6h7jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj
ZGM4NzgwHhcNMjUwNDEzMDcwMTE0WhcNMjUwNDE0MDcwMTE0WjAzMTEwLwYDVQQD
Eyg1Mjg4OTQ2NzdiYzM3MTkzODE4ZGMyZmViNDhiNzQwZDE5MGUzODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVuxN3HLRiSJnAergllNT5zKEp9e
5ucD352Xja/sU9VhYfkNalxgLY7L36m2dc5UT6Pf5RRh8JqbuHeR8GF9eRpKDAiY
NKk/h/Y5l2I7R8R1e/W6qzmvJqYUpCFOVh8HLuHA3SZ/Vz0zbrnvtXlKNZKGlcFl
EVqLqt/+dennMSzpdwWUeo1hbNPNwM7T9lSa8H5pNGloWQCYaAv4iINld0njgZ48
OHINEzEK6Ntg72olYFIzaWm0O4bIjm18PTI2xuOWxqnlERd69uHaWlVq2OCKVPEu
S7uQJ+3qIN2TJmBnw0krqu1XD9cRYu/aDF1ulAYaaQOX8yYjeyOSxLGWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKIlGd7w3GTgY3C/rSLdA0ZDjg+MB8GA1UdIwQY
MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt
YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5
LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0cOsp8H
2IVdhKjM4SwSK5Was9ohnU/EjD/ZhGfDmGDjvAKq1FENTIb+bFDWKTpZGVOOsMAJ
7aepe4ZlbBlufw0tA/s6ojGf9sDNtdtXc4sTsJeSVgSzWmNKr6VQIiSZYge0D/Bo
zHZVn3w0L8Csz42+6F5hyxB89BM+e1p4rjk3ol3m5O007oukT9eO9/o9Uf4CE3ie
+7a0wfi8V0g96bNQBD7rWQPXHE9LxFSz8ZyimuIiR8j0zdNpKRC4SzLxU+G7p4aS
Io5XHnh+7hQc5CPM9SVJAgBWS0osirJKSF89np+1gpPb3y04C2mFcvzXSqLG6A4L
s300AaLYQHz42A==
-----END CERTIFICATE-----