Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File:                     LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier:          yA9ljhxnOuQct+CvvKy8q5m/SPKVoSv8/h9MR07yNyM=
Subject key identifier:   A3:E4:69:1C:59:1F:C3:19:D4:0B:B7:4F:AA:ED:4B:EB:17:A0:10:E4
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer:       /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial:       01962F743FBE48C7DCAE4409A832BD214422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: wrGEIYLe72FQmBSMErC36EDLLvvzJfQCobxQEWFI8nA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3f:be:48:c7:dc:ae:44:09:a8:32:bd:21:44:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=a3e4691c591fc319d40bb74faaed4beb17a010e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:53:7d:bc:24:55:08:36:34:6b:6a:68:68:
                    97:d3:34:3c:39:1b:bd:ac:3c:f7:fd:5b:ce:7a:5e:
                    93:c8:4e:22:0e:28:0f:3d:b8:61:ba:ef:76:ca:7a:
                    77:b9:39:d8:7b:97:4e:37:33:46:b0:69:f9:02:25:
                    a2:eb:58:d8:3e:8a:73:09:f7:55:f1:dc:2f:e0:3c:
                    7b:a3:fb:82:01:11:06:65:1d:f5:de:76:66:3f:db:
                    96:b2:47:03:df:42:5f:16:82:c6:66:6e:09:a6:37:
                    5a:46:00:3e:6e:ad:69:91:b3:25:bc:cf:ae:23:d2:
                    ca:6d:43:2a:7d:b8:bd:2e:aa:7e:86:7e:f1:8e:21:
                    d6:7e:2b:a6:08:b1:ed:ef:9a:91:d1:27:62:c3:0f:
                    f9:b0:9b:c5:10:51:23:4e:20:99:e2:4c:1a:cf:bd:
                    bd:fa:f8:e0:6c:a3:70:9a:b6:94:47:e3:db:e6:30:
                    04:2d:a1:b8:1e:4d:62:1e:95:22:1a:24:42:1c:80:
                    47:62:bb:69:6d:9c:45:a2:63:8c:42:e5:65:15:a2:
                    57:65:3f:55:9f:59:2d:e0:36:ef:99:61:2f:3d:99:
                    e3:7f:03:d7:ba:6d:2a:cd:49:c0:4f:76:6c:35:83:
                    ce:c5:f6:be:6e:26:c9:bd:4b:f4:36:76:2c:05:00:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E4:69:1C:59:1F:C3:19:D4:0B:B7:4F:AA:ED:4B:EB:17:A0:10:E4
            X509v3 Authority Key Identifier:
                keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:79:e4:bd:44:0f:fa:0d:a9:24:07:08:8b:23:d5:e3:48:5e:
         8a:3e:b0:64:5d:7d:fd:58:9c:07:16:cb:4c:58:ce:40:c7:3a:
         eb:bb:55:83:58:85:1c:1c:4c:0f:5c:93:6d:a9:f2:40:ad:73:
         63:58:00:fa:cc:d3:a2:84:b9:45:23:9d:f8:ce:86:8a:48:7c:
         ca:0d:44:b2:14:7b:37:12:06:24:31:30:75:33:f5:e6:81:2e:
         a2:81:89:c0:7f:de:66:d9:ac:5c:0e:c2:0c:c8:2a:bb:c7:06:
         99:15:5a:f7:aa:28:97:b7:39:fb:ed:be:67:8a:5f:2b:c7:5f:
         79:f4:58:69:d9:f4:37:ff:93:40:a1:b2:e8:1f:c9:f5:59:7f:
         6e:51:10:97:06:3a:87:ba:0b:da:70:69:1f:39:aa:e8:bf:6a:
         3c:de:f5:31:c3:3a:60:8b:a7:5f:b3:f4:55:ec:eb:51:ef:64:
         7a:68:ab:33:41:8e:bf:9d:08:ab:f1:92:16:ce:03:6c:04:84:
         a5:19:75:a6:5b:9e:8a:ef:08:8e:0d:08:7a:18:f8:da:e3:e0:
         89:01:57:ec:65:71:d9:e1:d4:2a:87:56:e1:46:25:5b:fa:7a:
         2d:7c:e6:96:ec:82:87:a1:41:7d:84:a6:3d:fe:9f:7c:af:03:
         0f:8a:dd:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdD++SMfcrkQJqDK9IUQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl
ZGFmOTgwHhcNMjUwNDEzMTQwMTA5WhcNMjUwNDE0MTQwMTA5WjAzMTEwLwYDVQQD
EyhhM2U0NjkxYzU5MWZjMzE5ZDQwYmI3NGZhYWVkNGJlYjE3YTAxMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTBTfbwkVQg2NGtqaGiX0zQ8ORu9
rDz3/VvOel6TyE4iDigPPbhhuu92ynp3uTnYe5dONzNGsGn5AiWi61jYPopzCfdV
8dwv4Dx7o/uCAREGZR313nZmP9uWskcD30JfFoLGZm4JpjdaRgA+bq1pkbMlvM+u
I9LKbUMqfbi9Lqp+hn7xjiHWfiumCLHt75qR0Sdiww/5sJvFEFEjTiCZ4kwaz729
+vjgbKNwmraUR+Pb5jAELaG4Hk1iHpUiGiRCHIBHYrtpbZxFomOMQuVlFaJXZT9V
n1kt4DbvmWEvPZnjfwPXum0qzUnAT3ZsNYPOxfa+bibJvUv0NnYsBQCedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPkaRxZH8MZ1Au3T6rtS+sXoBDkMB8GA1UdIwQY
MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt
Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4
LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInnkvUQP
+g2pJAcIiyPV40heij6wZF19/VicBxbLTFjOQMc667tVg1iFHBxMD1yTbanyQK1z
Y1gA+szTooS5RSOd+M6Gikh8yg1EshR7NxIGJDEwdTP15oEuooGJwH/eZtmsXA7C
DMgqu8cGmRVa96ool7c5++2+Z4pfK8dfefRYadn0N/+TQKGy6B/J9Vl/blEQlwY6
h7oL2nBpHzmq6L9qPN71McM6YIunX7P0VezrUe9kemirM0GOv50Iq/GSFs4DbASE
pRl1plueiu8Ijg0Iehj42uPgiQFX7GVx2eHUKodW4UYlW/p6LXzmluyCh6FBfYSm
Pf6ffK8DD4rduQ==
-----END CERTIFICATE-----