Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File:                     Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier:          I86AzcRvfbg4wdCRnuNLRHupjKblx9O5OKN6hVQ/eZY=
Subject key identifier:   00:2D:60:63:BC:BC:6B:F0:D7:7F:F7:5A:69:16:B7:CD:04:E6:C2:D2
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer:       /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial:       01962E98CB6B98BD586483E36B43626C459D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number:          0E0F
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: bqxIgFmk4++RYB9H8xNhNAE/k5RayCcs8H9vD+K5w4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cb:6b:98:bd:58:64:83:e3:6b:43:62:6c:45:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=002d6063bcbc6bf0d77ff75a6916b7cd04e6c2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:a0:02:05:6e:d7:12:fa:42:bc:d5:a5:f7:
                    d3:85:e2:ed:b6:59:53:e5:41:51:a3:ec:be:49:43:
                    a7:56:25:19:a7:05:58:e2:98:77:35:97:f7:4a:2c:
                    ad:39:fc:61:8d:ea:07:c3:3a:96:f9:86:1d:f9:79:
                    80:c1:c5:64:09:2f:e6:23:8e:b4:51:a3:84:05:44:
                    7f:ad:25:e9:c3:93:4b:dc:5b:ea:70:3b:4b:7c:1b:
                    f7:00:64:51:4a:f0:d1:fb:93:69:d2:01:27:a1:93:
                    5e:ec:d9:6e:60:75:3f:9d:e0:14:8f:39:ce:5a:cb:
                    0d:b1:5a:6b:3f:ed:3b:76:ec:74:88:49:73:14:ce:
                    67:c7:e0:64:4d:c0:44:c7:07:8e:a6:48:2e:c7:e6:
                    b4:47:27:04:5e:23:42:53:9f:dc:38:db:bb:db:24:
                    98:c2:1c:e1:51:cc:48:d2:36:a9:e3:c9:8c:0b:0c:
                    0c:f2:f4:17:6b:19:03:30:5d:ee:b9:4a:04:b8:70:
                    58:cc:c5:da:57:8c:5f:23:89:d0:f9:dc:10:16:1d:
                    ad:fd:cb:e0:d7:3a:d2:6a:63:1a:3b:8a:33:f7:66:
                    c5:e1:fe:b4:29:c2:6c:1c:36:24:c2:13:df:d4:97:
                    15:7c:c0:44:15:73:30:73:fe:91:a3:fb:5e:f5:f6:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:60:63:BC:BC:6B:F0:D7:7F:F7:5A:69:16:B7:CD:04:E6:C2:D2
            X509v3 Authority Key Identifier:
                keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:05:a1:73:33:23:57:d8:2d:4c:3d:8c:28:8f:6f:4f:87:f9:
         5f:e9:83:d8:c8:57:ab:9d:54:ab:d6:6f:f1:b2:61:1a:51:ee:
         18:83:b7:c3:5c:74:7e:2f:99:a0:22:7c:6f:74:f6:9c:b7:a6:
         5d:56:86:74:18:62:65:38:ff:72:12:0c:04:84:0a:43:1a:b8:
         77:c4:d1:17:bc:b0:6d:b5:98:a5:f8:22:44:8c:22:64:5f:57:
         80:43:2b:9a:0d:7a:0a:ba:78:9b:fe:d8:5c:fc:5d:2a:84:e4:
         26:fa:f3:43:20:9d:d9:85:11:59:fa:49:16:aa:b1:1a:f9:e6:
         3d:60:04:78:9d:95:25:4e:86:95:88:c9:9b:ec:fd:50:bb:32:
         32:20:d3:dd:d2:ac:58:16:0f:37:93:d3:8c:6e:9a:60:33:ce:
         82:40:93:5c:30:30:c2:5a:3f:49:06:b2:6a:0e:8f:6b:28:06:
         57:40:6b:a5:e7:36:8a:b7:70:41:72:8f:46:bf:11:f7:a5:31:
         62:31:ee:52:06:94:37:fb:31:76:63:6e:44:a9:d3:05:fa:8c:
         4c:7a:1b:e5:70:9f:4c:f8:13:31:10:bb:e2:2f:12:09:01:92:
         e2:e8:57:d9:b3:04:bd:29:db:e9:73:86:96:47:ef:5c:fd:5a:
         cb:86:a7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMtrmL1YZIPja0NibEWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNTdiYTc2Y2I3ZDZkMmFlYzA1MjAzY2Y0MWI4ZTY3MTZl
ZTdlYTAwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
EygwMDJkNjA2M2JjYmM2YmYwZDc3ZmY3NWE2OTE2YjdjZDA0ZTZjMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lKgAgVu1xL6QrzVpffTheLttllT
5UFRo+y+SUOnViUZpwVY4ph3NZf3SiytOfxhjeoHwzqW+YYd+XmAwcVkCS/mI460
UaOEBUR/rSXpw5NL3FvqcDtLfBv3AGRRSvDR+5Np0gEnoZNe7NluYHU/neAUjznO
WssNsVprP+07dux0iElzFM5nx+BkTcBExweOpkgux+a0RycEXiNCU5/cONu72ySY
whzhUcxI0jap48mMCwwM8vQXaxkDMF3uuUoEuHBYzMXaV4xfI4nQ+dwQFh2t/cvg
1zrSamMaO4oz92bF4f60KcJsHDYkwhPf1JcVfMBEFXMwc/6Ro/te9faS/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAtYGO8vGvw13/3WmkWt80E5sLSMB8GA1UdIwQY
MBaAFE5XunbLfW0q7AUgPPQbjmcW7n6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGxlNmRzdDliU3JzQlNBODlCdU9aeGJ1ZnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82OWU3ZmUtNDBjMC00NWMyLWIyYjEt
YjcyZDdhZGJmYjk2LzEvVGxlNmRzdDliU3JzQlNBODlCdU9aeGJ1ZnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82OWU3ZmUtNDBjMC00NWMyLWIyYjEtYjcyZDdhZGJmYjk2
LzEvVGxlNmRzdDliU3JzQlNBODlCdU9aeGJ1ZnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowWhczMj
V9gtTD2MKI9vT4f5X+mD2MhXq51Uq9Zv8bJhGlHuGIO3w1x0fi+ZoCJ8b3T2nLem
XVaGdBhiZTj/chIMBIQKQxq4d8TRF7ywbbWYpfgiRIwiZF9XgEMrmg16Crp4m/7Y
XPxdKoTkJvrzQyCd2YURWfpJFqqxGvnmPWAEeJ2VJU6GlYjJm+z9ULsyMiDT3dKs
WBYPN5PTjG6aYDPOgkCTXDAwwlo/SQayag6PaygGV0Brpec2irdwQXKPRr8R96Ux
YjHuUgaUN/sxdmNuRKnTBfqMTHob5XCfTPgTMRC74i8SCQGS4uhX2bMEvSnb6XOG
lkfvXP1ay4anmQ==
-----END CERTIFICATE-----