Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File:                     lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier:          YjWaz+71w8Lsjk1rG5OuA6XfXIzFsUqstQdKfi6PoUo=
Subject key identifier:   8A:D1:A2:24:50:C8:E6:C0:81:3F:A6:6B:F7:37:22:11:57:B9:8E:88
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer:       /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial:       01962F745DCB241BFA98D623094427A3E334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number:          036C
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: YkN7/cq4f8H3lMl72uo5eVTzBIqLdErxAmo5PIHs2VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5d:cb:24:1b:fa:98:d6:23:09:44:27:a3:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=8ad1a22450c8e6c0813fa66bf737221157b98e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:17:91:b9:e1:51:a8:3a:f9:cb:da:57:b4:
                    a7:52:cf:bd:72:b0:16:58:d1:b7:b0:2c:53:54:7e:
                    89:0e:e0:fd:d6:52:82:67:51:38:e6:8e:73:fb:10:
                    12:35:d7:84:de:e6:c2:9f:53:82:50:58:d6:a3:ff:
                    51:91:b1:fc:61:88:62:cb:24:ac:e5:11:d2:6b:af:
                    b5:91:b1:6a:56:07:6b:fe:03:96:cf:c4:51:b6:1e:
                    09:18:05:89:f3:3c:6e:15:f4:6b:25:ad:80:a0:3f:
                    1b:4e:fc:ce:09:a5:f3:00:aa:8c:3e:6a:9f:9e:d0:
                    df:15:46:96:a4:19:9d:df:1c:86:d0:63:4b:d0:ab:
                    2c:39:63:08:1f:94:6e:5a:d8:c5:cf:48:f1:08:53:
                    c9:bf:93:30:a4:d9:63:d5:83:83:5f:d0:e8:e8:61:
                    72:2f:d5:5c:2f:31:02:da:af:01:c0:9a:08:80:6f:
                    ce:a8:32:d0:21:b7:14:87:eb:54:56:f6:a3:63:29:
                    34:56:cf:44:dd:79:4c:a0:83:76:eb:3f:1d:03:d5:
                    38:a7:5c:d1:48:ef:58:37:51:e3:99:59:1f:f6:03:
                    37:5b:63:f4:e8:38:a4:6e:dc:76:e6:59:b4:8d:cd:
                    e4:9d:65:36:3c:e6:ac:d4:a6:b7:84:84:b1:37:d9:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D1:A2:24:50:C8:E6:C0:81:3F:A6:6B:F7:37:22:11:57:B9:8E:88
            X509v3 Authority Key Identifier:
                keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8b:a8:2d:76:4f:bb:7c:59:68:0e:8d:f0:35:29:40:7a:6b:
         31:db:1e:83:41:6e:b0:f2:9f:d2:67:ee:4d:77:66:ea:f8:e4:
         ff:8e:df:93:30:2b:11:cf:08:e4:8b:4c:44:e5:e9:02:75:a8:
         ac:a1:a6:89:cf:c2:99:dd:d8:8b:2f:4d:1b:82:69:f1:ba:29:
         9e:6a:d9:84:91:27:9d:c0:86:38:42:62:f5:56:ff:39:2f:ae:
         23:95:c5:6f:db:d2:21:ad:3e:7f:cb:c1:d1:f7:e7:e8:59:d9:
         e5:37:7f:94:9f:5a:b7:65:61:57:3d:6c:2e:ef:54:10:c7:6b:
         8e:e4:30:89:bb:b2:ac:70:82:39:c4:6e:03:47:fe:4b:4f:7f:
         59:f6:70:5e:0d:02:13:31:1e:1b:fd:f3:f8:9b:5d:01:ee:59:
         51:7e:7d:55:d8:fe:67:a2:1c:0e:cb:4c:e5:72:b0:f8:f3:02:
         f6:e0:eb:26:ae:a0:5b:ac:ab:24:52:18:08:5c:06:36:ce:a6:
         0c:f8:18:89:71:fc:36:e6:12:76:56:3b:74:8f:47:f5:14:ff:
         6e:ea:0c:3d:93:3a:32:55:ad:c6:0d:90:80:50:41:b8:81:88:
         e6:4b:f2:a4:f9:d5:17:74:41:08:9c:4b:34:03:33:14:d3:6c:
         b9:f9:99:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdF3LJBv6mNYjCUQno+M0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjEwYzg3NTBjMzM3ZGYwNDc5YzVhMGViNWI3OGI0OWEx
N2ZmM2UwHhcNMjUwNDEzMTQwMTE3WhcNMjUwNDE0MTQwMTE3WjAzMTEwLwYDVQQD
Eyg4YWQxYTIyNDUwYzhlNmMwODEzZmE2NmJmNzM3MjIxMTU3Yjk4ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0koXkbnhUag6+cvaV7SnUs+9crAW
WNG3sCxTVH6JDuD91lKCZ1E45o5z+xASNdeE3ubCn1OCUFjWo/9RkbH8YYhiyySs
5RHSa6+1kbFqVgdr/gOWz8RRth4JGAWJ8zxuFfRrJa2AoD8bTvzOCaXzAKqMPmqf
ntDfFUaWpBmd3xyG0GNL0KssOWMIH5RuWtjFz0jxCFPJv5MwpNlj1YODX9Do6GFy
L9VcLzEC2q8BwJoIgG/OqDLQIbcUh+tUVvajYyk0Vs9E3XlMoIN26z8dA9U4p1zR
SO9YN1HjmVkf9gM3W2P06Dikbtx25lm0jc3knWU2POas1Ka3hISxN9m22wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrRoiRQyObAgT+ma/c3IhFXuY6IMB8GA1UdIwQY
MBaAFJRhDIdQwzffBHnFoOtbeLSaF/8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUt
YTJlZmYzZjFhY2Q1LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xZWI4MDMtMjc4YS00NmY0LWI0YmUtYTJlZmYzZjFhY2Q1
LzEvbEdFTWgxREROOThFZWNXZzYxdDR0Sm9YX3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4uoLXZP
u3xZaA6N8DUpQHprMdseg0FusPKf0mfuTXdm6vjk/47fkzArEc8I5ItMROXpAnWo
rKGmic/Cmd3Yiy9NG4Jp8bopnmrZhJEnncCGOEJi9Vb/OS+uI5XFb9vSIa0+f8vB
0ffn6FnZ5Td/lJ9at2VhVz1sLu9UEMdrjuQwibuyrHCCOcRuA0f+S09/WfZwXg0C
EzEeG/3z+JtdAe5ZUX59Vdj+Z6IcDstM5XKw+PMC9uDrJq6gW6yrJFIYCFwGNs6m
DPgYiXH8NuYSdlY7dI9H9RT/buoMPZM6MlWtxg2QgFBBuIGI5kvypPnVF3RBCJxL
NAMzFNNsufmZlA==
-----END CERTIFICATE-----