Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File:                     3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier:          vY8CH6E7BLNRHK6dxTBDuum6RH0lcspdnfFchsT/G4Y=
Subject key identifier:   33:19:0D:49:FC:3A:0B:B2:BD:16:AA:9B:4D:91:16:8D:CD:76:63:1E
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer:       /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial:       01962F07275893E5EE94E92FA8F247E9B18B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: MHJTwPQCvepLsmYjKKZ02SX+faWPtoP4K9IXBBAeDiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:27:58:93:e5:ee:94:e9:2f:a8:f2:47:e9:b1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=33190d49fc3a0bb2bd16aa9b4d91168dcd76631e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:0d:94:3c:8b:39:0e:0b:6f:cd:7a:08:4d:
                    1e:92:65:45:c9:5d:7c:8e:e9:0c:6a:9d:21:4f:56:
                    e4:8f:ba:2a:13:32:4b:5b:e2:0f:94:c5:49:d3:f0:
                    29:ca:ba:45:59:bb:2d:a6:09:94:17:a7:25:55:73:
                    64:5d:6c:ea:3f:53:d7:b8:f4:a1:5a:5b:fc:d3:9f:
                    e7:e6:c8:c2:af:08:39:7f:55:df:61:39:ae:18:b6:
                    33:b6:89:d4:1a:ef:02:91:17:3f:a1:a6:f2:79:02:
                    97:cc:33:a0:ee:c2:1f:ee:54:18:12:a3:a1:c3:0c:
                    0a:84:75:a3:be:9c:76:b9:9c:9d:0f:78:48:34:74:
                    e1:65:db:f2:71:0e:82:1d:74:a7:70:08:3f:78:8d:
                    c5:43:1c:0a:ea:d1:87:23:4f:3c:2e:36:9e:d5:d5:
                    e8:9c:d6:52:3c:44:3a:64:91:13:4c:02:99:73:c2:
                    7e:ee:c7:a3:e2:2d:1c:67:cb:3c:44:91:8a:12:3e:
                    ea:76:d5:c1:87:91:1a:25:e6:8c:9c:d9:64:42:2d:
                    99:dc:18:50:79:42:69:51:99:45:5e:2f:62:58:73:
                    95:04:1f:c2:21:cd:6f:c3:6e:7e:52:8f:2c:9b:51:
                    e5:83:c5:67:70:9f:96:ad:be:b1:c3:01:38:4f:12:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:0D:49:FC:3A:0B:B2:BD:16:AA:9B:4D:91:16:8D:CD:76:63:1E
            X509v3 Authority Key Identifier:
                keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:08:25:2d:db:3a:05:c1:f4:a9:f0:c6:63:12:a1:e5:9b:66:
         9d:b7:49:8b:3a:f9:9f:73:bb:9b:cc:ed:11:d5:46:e5:36:5e:
         c9:bc:33:4c:86:48:dd:49:4c:4f:05:bf:a7:ad:03:2d:45:66:
         ef:4a:90:f3:b0:38:15:95:82:22:84:3c:18:c3:eb:b3:e8:e0:
         a5:42:38:7c:7e:b6:f1:31:6a:60:74:5c:59:44:2d:c3:6c:50:
         bc:15:ec:a6:cc:27:c5:27:b3:1f:51:90:7d:0f:ee:6b:eb:c3:
         3c:d6:73:75:ce:45:47:05:16:db:41:1a:6f:14:aa:ba:c8:65:
         28:ed:03:ca:2a:f3:d0:64:8c:8a:57:82:23:b9:b0:63:5a:0b:
         c9:61:02:39:e6:83:8f:17:b3:20:a8:d3:4d:ab:36:28:e8:a8:
         e6:de:88:96:5a:83:f9:fd:84:d7:96:3e:19:8f:94:a8:5a:ef:
         87:b4:4d:56:2d:3d:59:63:c4:cf:14:4c:5a:ab:23:81:7e:4e:
         62:d0:f1:aa:fc:99:76:2d:87:a4:5e:2a:0e:56:1e:f4:1d:60:
         ad:11:a5:94:23:b0:23:2e:c1:74:4c:88:f6:69:87:f7:b0:e1:
         56:9a:25:dc:a4:76:9b:f4:55:9d:45:e5:2b:ba:4c:95:ab:ea:
         6a:f4:1c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBydYk+XulOkvqPJH6bGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjdiMDAxOWUxOWYxMTJmNGQyYmNmZDZlYTEyZDkwODFm
YzU4N2UwHhcNMjUwNDEzMTIwMjAwWhcNMjUwNDE0MTIwMjAwWjAzMTEwLwYDVQQD
EygzMzE5MGQ0OWZjM2EwYmIyYmQxNmFhOWI0ZDkxMTY4ZGNkNzY2MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdwNlDyLOQ4Lb816CE0ekmVFyV18
jukMap0hT1bkj7oqEzJLW+IPlMVJ0/ApyrpFWbstpgmUF6clVXNkXWzqP1PXuPSh
Wlv805/n5sjCrwg5f1XfYTmuGLYztonUGu8CkRc/oabyeQKXzDOg7sIf7lQYEqOh
wwwKhHWjvpx2uZydD3hINHThZdvycQ6CHXSncAg/eI3FQxwK6tGHI088Ljae1dXo
nNZSPEQ6ZJETTAKZc8J+7sej4i0cZ8s8RJGKEj7qdtXBh5EaJeaMnNlkQi2Z3BhQ
eUJpUZlFXi9iWHOVBB/CIc1vw25+Uo8sm1Hlg8VncJ+Wrb6xwwE4TxLpQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMZDUn8OguyvRaqm02RFo3NdmMeMB8GA1UdIwQY
MBaAFN23sAGeGfES9NK8/W6hLZCB/Fh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEt
YTg2ZGY5ODNhNzRjLzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEtYTg2ZGY5ODNhNzRj
LzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQglLds6
BcH0qfDGYxKh5ZtmnbdJizr5n3O7m8ztEdVG5TZeybwzTIZI3UlMTwW/p60DLUVm
70qQ87A4FZWCIoQ8GMPrs+jgpUI4fH628TFqYHRcWUQtw2xQvBXspswnxSezH1GQ
fQ/ua+vDPNZzdc5FRwUW20EabxSqushlKO0Dyirz0GSMileCI7mwY1oLyWECOeaD
jxezIKjTTas2KOio5t6IllqD+f2E15Y+GY+UqFrvh7RNVi09WWPEzxRMWqsjgX5O
YtDxqvyZdi2HpF4qDlYe9B1grRGllCOwIy7BdEyI9mmH97DhVpol3KR2m/RVnUXl
K7pMlavqavQcwA==
-----END CERTIFICATE-----