Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File:                     L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier:          Pnm2DR/mRa38gr5LFKvckILN605KghV8qxBLILBU/2U=
Subject key identifier:   5D:20:81:58:37:01:36:2C:B3:96:6A:95:B3:FE:03:16:9D:CE:1E:57
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer:       /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial:       01962F063DA870385E73A0B56AB8EF4D3218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: j06nJwjjTKLSNpHeWqGalPkaIYJe3ZdALfwuLH6GFP8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3d:a8:70:38:5e:73:a0:b5:6a:b8:ef:4d:32:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=5d2081583701362cb3966a95b3fe03169dce1e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:75:28:50:59:02:22:a9:b7:fc:78:e0:93:
                    77:79:96:ae:ee:a4:86:2f:4e:04:97:7e:88:77:d7:
                    13:55:c3:1f:ae:d7:02:eb:09:91:c1:fb:02:1a:60:
                    3f:4d:58:42:03:56:9a:f6:c1:9b:b7:74:9b:47:ef:
                    70:be:b8:b1:82:f4:d3:f0:19:1c:0f:a2:a3:0a:23:
                    26:f2:82:9c:3f:c2:1a:29:a4:b1:6e:6e:dd:37:f7:
                    d1:bd:27:d1:ae:bb:49:d9:82:9e:67:14:fa:58:62:
                    96:34:1f:06:d7:cc:07:d8:5c:d4:76:a7:20:c0:50:
                    e6:93:0b:39:a0:5a:2e:d2:6b:ba:07:91:42:e5:66:
                    08:70:3f:45:5b:f4:b5:56:38:1d:74:e5:e7:2a:ef:
                    39:b2:0f:5c:57:0a:f3:f5:98:3b:a0:74:b7:82:08:
                    be:9c:d6:5d:6d:75:85:96:42:e6:18:b3:57:7b:f6:
                    77:da:b0:e5:38:56:eb:64:f1:cc:6f:1a:ec:ab:2d:
                    1d:71:f6:c1:44:91:db:6f:80:c5:cb:b4:36:c3:9d:
                    88:57:7c:c1:42:9a:15:24:51:40:ed:1f:a5:9c:0b:
                    f7:28:b5:1e:12:49:50:40:b4:ef:27:a5:fe:cf:2c:
                    c8:35:39:f2:a3:38:ed:a5:ad:7b:4a:83:71:ec:c1:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:20:81:58:37:01:36:2C:B3:96:6A:95:B3:FE:03:16:9D:CE:1E:57
            X509v3 Authority Key Identifier:
                keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f5:1c:24:da:53:22:89:b1:e8:39:6b:ca:77:d8:d5:33:ee:
         c1:7d:1e:8e:e5:7e:d3:a6:f7:89:d2:31:15:1d:11:eb:bd:a7:
         42:01:1b:80:4f:1d:6d:c7:02:91:14:24:3a:df:ab:4e:ab:e3:
         ce:29:68:aa:2d:e0:bf:42:3c:a6:f2:89:34:70:c8:14:8b:65:
         b9:dc:1a:66:b6:c3:2e:a2:37:59:48:79:ec:7d:a3:31:6c:46:
         c6:84:29:6b:7b:46:c8:f7:2f:31:42:c6:32:20:11:d7:e1:76:
         37:22:bc:53:e8:7f:2f:1e:6a:51:58:61:0e:d3:b3:9a:ef:93:
         97:66:89:fe:cd:d7:3c:12:4e:96:5a:71:7d:1b:45:5e:5b:63:
         4b:ac:aa:bf:a0:52:27:a6:42:b9:9a:65:00:d2:d6:ff:d0:e4:
         42:8d:49:ae:56:8c:b9:a0:40:aa:0a:46:c9:4a:57:36:e9:43:
         68:04:81:d7:30:8e:0b:cf:66:17:af:69:1f:38:65:66:2c:53:
         f0:52:44:34:77:02:13:f7:ae:8e:90:4f:18:ef:39:36:e3:8d:
         f9:ed:a5:fe:b2:00:85:69:33:f5:05:2e:b7:e1:e1:7b:ef:7f:
         ba:dd:55:f5:fe:35:0d:ac:f4:db:a1:d6:4b:07:10:4a:aa:8f:
         59:29:a9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBj2ocDhec6C1arjvTTIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZGVjNjcwYjc4MGMzYmY5NDAxZWYxYzExNWExZDg3ZmU4
ZjdjN2EwHhcNMjUwNDEzMTIwMTAwWhcNMjUwNDE0MTIwMTAwWjAzMTEwLwYDVQQD
Eyg1ZDIwODE1ODM3MDEzNjJjYjM5NjZhOTViM2ZlMDMxNjlkY2UxZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEJ1KFBZAiKpt/x44JN3eZau7qSG
L04El36Id9cTVcMfrtcC6wmRwfsCGmA/TVhCA1aa9sGbt3SbR+9wvrixgvTT8Bkc
D6KjCiMm8oKcP8IaKaSxbm7dN/fRvSfRrrtJ2YKeZxT6WGKWNB8G18wH2FzUdqcg
wFDmkws5oFou0mu6B5FC5WYIcD9FW/S1VjgddOXnKu85sg9cVwrz9Zg7oHS3ggi+
nNZdbXWFlkLmGLNXe/Z32rDlOFbrZPHMbxrsqy0dcfbBRJHbb4DFy7Q2w52IV3zB
QpoVJFFA7R+lnAv3KLUeEklQQLTvJ6X+zyzINTnyozjtpa17SoNx7MFmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0ggVg3ATYss5ZqlbP+Axadzh5XMB8GA1UdIwQY
MBaAFC/exnC3gMO/lAHvHBFaHYf+j3x6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQt
YWIxZDhlOTg0NGFmLzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTE5YzUtMDA4Mi00ODQ0LWI2YmQtYWIxZDhlOTg0NGFm
LzEvTDk3R2NMZUF3Ny1VQWU4Y0VWb2RoXzZQZkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPUcJNpT
Iomx6DlrynfY1TPuwX0ejuV+06b3idIxFR0R672nQgEbgE8dbccCkRQkOt+rTqvj
ziloqi3gv0I8pvKJNHDIFItludwaZrbDLqI3WUh57H2jMWxGxoQpa3tGyPcvMULG
MiAR1+F2NyK8U+h/Lx5qUVhhDtOzmu+Tl2aJ/s3XPBJOllpxfRtFXltjS6yqv6BS
J6ZCuZplANLW/9DkQo1JrlaMuaBAqgpGyUpXNulDaASB1zCOC89mF69pHzhlZixT
8FJENHcCE/eujpBPGO85NuON+e2l/rIAhWkz9QUut+Hhe+9/ut1V9f41Daz026HW
SwcQSqqPWSmpdQ==
-----END CERTIFICATE-----