Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File:                     C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier:          shoPlHpqoJqIbwdzczd3gxlVLr843TIjjfgMYyCIJnM=
Subject key identifier:   3C:C8:89:62:48:D8:1E:A4:3B:7A:26:98:B4:C2:98:9C:6A:C1:BC:58
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer:       /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial:       01962E9980AA778CD68C124AE12A2B3F9926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: 85Q1Spps/Ibb9ig4ggdIFsi50uZPLqcXH6q8gDokMi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:aa:77:8c:d6:8c:12:4a:e1:2a:2b:3f:99:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=3cc8896248d81ea43b7a2698b4c2989c6ac1bc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:05:35:91:fc:7e:d6:e4:e4:b3:c6:cf:42:
                    b6:9b:26:fd:88:6b:89:4b:92:1d:0c:3b:c4:15:72:
                    1e:c5:a6:ba:85:b9:b9:28:40:aa:9a:4e:21:85:6a:
                    92:53:62:34:d9:7f:b3:65:d0:6f:5d:15:bd:bc:90:
                    44:c5:de:cf:f3:bf:6a:89:93:41:c9:8e:52:a1:87:
                    c1:e5:74:2a:37:6a:c2:af:55:83:89:30:04:33:b9:
                    16:13:59:0f:59:a2:00:e3:30:b7:56:19:e8:fa:63:
                    0e:18:c5:78:b6:3f:89:fd:98:60:51:ae:c0:c1:f5:
                    e0:4b:58:b1:80:b3:f8:1c:8e:31:66:48:d4:92:79:
                    d6:08:4c:da:05:92:cf:61:68:58:49:50:f6:d8:70:
                    c0:50:d0:b6:4b:5c:2d:87:2a:e0:17:e6:41:38:77:
                    91:be:ab:56:d4:95:35:6f:0c:b2:a7:e5:6f:e1:99:
                    d1:80:c4:78:26:d0:59:2e:0a:49:25:c5:af:c4:3e:
                    20:5d:36:44:b8:cd:49:97:c6:21:2b:45:6b:1c:15:
                    af:67:cf:c1:b9:2a:bf:c1:3a:8a:23:2e:62:c4:69:
                    50:1e:98:b1:85:c5:a2:29:bf:bb:d7:8f:65:fa:08:
                    41:b7:89:87:c4:82:49:9b:c3:2d:d6:b2:1e:d8:6e:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C8:89:62:48:D8:1E:A4:3B:7A:26:98:B4:C2:98:9C:6A:C1:BC:58
            X509v3 Authority Key Identifier:
                keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:65:8b:da:7b:ae:db:1d:8f:72:7f:b5:d5:1b:ea:6e:63:
         c1:3f:80:f0:48:a5:b2:e5:e5:e6:f1:3f:28:76:89:6c:d3:5b:
         d6:de:be:50:f9:fc:fa:7b:29:11:6d:60:c1:cf:6e:9a:14:50:
         15:70:85:7e:2f:6e:6a:87:b9:59:07:0d:e3:59:5f:a2:9c:f1:
         0f:31:b1:be:f5:c7:9a:93:ad:a5:ed:37:5f:29:9a:84:1b:97:
         a8:5f:5e:00:fb:b9:c3:41:ed:15:48:0f:cb:38:5e:27:d1:9b:
         0c:cc:44:18:19:ce:1b:68:13:1e:cc:f5:02:90:fd:46:ee:98:
         a9:f2:30:cc:b9:02:0a:65:9d:63:c0:94:10:79:df:03:a4:26:
         9e:6e:6e:53:2a:01:f2:52:4a:91:93:52:32:be:9a:9f:8a:23:
         0a:7b:b4:86:71:17:09:c5:bf:a3:21:e8:08:89:a3:9b:0c:82:
         04:58:e1:d6:36:f1:1a:d2:29:1b:6d:47:c8:f6:69:4b:eb:f5:
         a0:7f:8e:20:d6:8f:8f:a5:dc:da:42:4f:d1:63:55:44:d1:21:
         6a:32:70:a9:a7:51:d0:85:e2:e9:9e:82:b5:60:f0:07:06:99:
         8f:80:c6:bc:e9:b6:89:30:b6:22:15:be:4d:ef:cc:5f:2b:5e:
         eb:02:3f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYCqd4zWjBJK4SorP5kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODJiZDg4YmJhMWExN2QyYzhhZWY2MWRlYzFkYWM2NjE1
ZWVmOTAwHhcNMjUwNDEzMTAwMjEzWhcNMjUwNDE0MTAwMjEzWjAzMTEwLwYDVQQD
EygzY2M4ODk2MjQ4ZDgxZWE0M2I3YTI2OThiNGMyOTg5YzZhYzFiYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqQFNZH8ftbk5LPGz0K2myb9iGuJ
S5IdDDvEFXIexaa6hbm5KECqmk4hhWqSU2I02X+zZdBvXRW9vJBExd7P879qiZNB
yY5SoYfB5XQqN2rCr1WDiTAEM7kWE1kPWaIA4zC3Vhno+mMOGMV4tj+J/ZhgUa7A
wfXgS1ixgLP4HI4xZkjUknnWCEzaBZLPYWhYSVD22HDAUNC2S1wthyrgF+ZBOHeR
vqtW1JU1bwyyp+Vv4ZnRgMR4JtBZLgpJJcWvxD4gXTZEuM1Jl8YhK0VrHBWvZ8/B
uSq/wTqKIy5ixGlQHpixhcWiKb+7149l+ghBt4mHxIJJm8Mt1rIe2G509wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzIiWJI2B6kO3ommLTCmJxqwbxYMB8GA1UdIwQY
MBaAFAuCvYi7oaF9LIrvYd7B2sZhXu+QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgt
MTU4ODFjN2RmMGI4LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgtMTU4ODFjN2RmMGI4
LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7Fli9p7
rtsdj3J/tdUb6m5jwT+A8EilsuXl5vE/KHaJbNNb1t6+UPn8+nspEW1gwc9umhRQ
FXCFfi9uaoe5WQcN41lfopzxDzGxvvXHmpOtpe03XymahBuXqF9eAPu5w0HtFUgP
yzheJ9GbDMxEGBnOG2gTHsz1ApD9Ru6YqfIwzLkCCmWdY8CUEHnfA6Qmnm5uUyoB
8lJKkZNSMr6an4ojCnu0hnEXCcW/oyHoCImjmwyCBFjh1jbxGtIpG21HyPZpS+v1
oH+OINaPj6Xc2kJP0WNVRNEhajJwqadR0IXi6Z6CtWDwBwaZj4DGvOm2iTC2IhW+
Te/MXyte6wI/mw==
-----END CERTIFICATE-----