Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
File:                     P591E-0Eyp_o96RU6CeY0E8agKg.mft (raw, json)
Hash identifier:          gHEUubEcRP0on/VXKthhIO99a+NUcciBZ2ntNnHvhjI=
Subject key identifier:   67:E6:9E:A9:A7:31:53:A0:86:22:01:FF:0A:7F:05:E4:C8:57:FC:49
Authority key identifier: 3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8
Certificate issuer:       /CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
Certificate serial:       01962E6190E5E5F8CF57D1240D2E59529AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft
Manifest number:          040B
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: P591E-0Eyp_o96RU6CeY0E8agKg.crl (hash: iV4msav+zfha514dKlaccPEkDjoMivlxQNiwBct/CoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:90:e5:e5:f8:cf:57:d1:24:0d:2e:59:52:9a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f9f7513ed04ca9fe8f7a454e82798d04f1a80a8
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=67e69ea9a73153a0862201ff0a7f05e4c857fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:b6:15:6a:eb:ba:c0:04:ae:e2:55:a7:49:
                    9d:21:17:c2:bb:0f:a4:4b:c2:df:ff:8e:14:a7:42:
                    30:49:6c:b3:87:72:15:a8:da:1f:9b:ab:06:7f:dc:
                    a6:98:f5:0c:9d:d2:22:36:f2:3f:ba:4e:d5:9b:28:
                    14:47:81:a9:8f:eb:dd:7d:c8:01:eb:fe:91:cf:32:
                    66:d8:d2:2f:71:66:a3:4f:38:f3:71:6f:89:b0:f0:
                    96:1a:d4:a9:55:1e:cf:8e:5f:45:32:d6:52:60:92:
                    07:13:99:0d:74:96:2d:b6:c9:ad:80:27:2c:eb:4c:
                    f6:02:3f:a7:ec:1b:b8:17:65:94:e8:df:1b:00:f3:
                    94:40:6a:da:99:00:1d:72:34:4c:f9:82:38:2e:7e:
                    fa:14:06:f4:30:c7:9d:70:6f:1a:f6:66:5c:21:c4:
                    59:8c:a3:f5:3c:62:51:49:ac:cb:76:99:51:7b:80:
                    78:7e:b8:23:11:61:c1:e2:60:ea:d5:84:6c:c6:0a:
                    68:c1:77:e8:af:d3:23:d1:93:ec:e9:ac:33:8d:85:
                    58:58:d6:24:36:fd:c2:ed:1d:f6:30:a6:6d:11:a9:
                    8d:a2:ce:e0:03:64:1f:97:5d:50:cb:b9:db:f3:32:
                    c5:11:d0:e8:24:7a:23:4a:c0:83:ab:e1:2d:44:90:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:9E:A9:A7:31:53:A0:86:22:01:FF:0A:7F:05:E4:C8:57:FC:49
            X509v3 Authority Key Identifier:
                keyid:3F:9F:75:13:ED:04:CA:9F:E8:F7:A4:54:E8:27:98:D0:4F:1A:80:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P591E-0Eyp_o96RU6CeY0E8agKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0df30e-b0bf-4d10-a066-6917cb4c99bc/1/P591E-0Eyp_o96RU6CeY0E8agKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:ca:27:bf:e6:f1:21:60:0b:c8:58:7c:07:e8:c5:84:26:
         0c:ae:c5:4d:cb:bd:0a:b5:7d:e1:c0:33:ef:b4:a1:a6:70:79:
         68:91:b8:e3:2f:01:73:5d:fa:5e:27:d5:94:6f:c9:06:bb:bc:
         93:7d:af:f1:13:4a:ea:5b:d9:e4:43:5b:eb:41:7d:52:4e:0a:
         e6:af:13:92:4f:d9:87:35:a4:58:16:9c:4b:a7:4c:ed:ed:ec:
         13:50:1f:18:02:59:61:c3:84:de:19:e2:c4:5f:ab:94:cc:ee:
         69:a0:15:85:a0:b2:eb:30:ec:3a:1a:48:08:0e:3f:0d:72:25:
         50:e5:21:aa:df:e9:52:a5:78:1f:0a:12:2c:09:23:a7:52:29:
         22:b7:1f:0f:2d:68:d8:9a:90:fb:98:a8:8c:4d:86:7c:b0:dd:
         75:a8:eb:82:e6:91:01:9d:37:d2:09:79:52:c4:1b:91:3c:c9:
         ec:93:11:2b:2d:fb:2c:6b:e5:26:56:78:17:21:e1:c2:c6:14:
         0e:5b:23:05:49:b4:e2:c0:02:0c:c2:2f:fe:b0:0b:2e:e0:3c:
         de:e7:49:17:36:99:da:a9:64:d6:40:d3:f2:75:bc:84:8e:87:
         69:a4:36:1c:ce:eb:85:43:3f:4c:8f:a0:8f:e3:08:56:8a:61:
         b4:ef:a4:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZDl5fjPV9EkDS5ZUpq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWY3NTEzZWQwNGNhOWZlOGY3YTQ1NGU4Mjc5OGQwNGYx
YTgwYTgwHhcNMjUwNDEzMDkwMTA3WhcNMjUwNDE0MDkwMTA3WjAzMTEwLwYDVQQD
Eyg2N2U2OWVhOWE3MzE1M2EwODYyMjAxZmYwYTdmMDVlNGM4NTdmYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzu2FWrrusAEruJVp0mdIRfCuw+k
S8Lf/44Up0IwSWyzh3IVqNofm6sGf9ymmPUMndIiNvI/uk7VmygUR4Gpj+vdfcgB
6/6RzzJm2NIvcWajTzjzcW+JsPCWGtSpVR7Pjl9FMtZSYJIHE5kNdJYttsmtgCcs
60z2Aj+n7Bu4F2WU6N8bAPOUQGramQAdcjRM+YI4Ln76FAb0MMedcG8a9mZcIcRZ
jKP1PGJRSazLdplRe4B4frgjEWHB4mDq1YRsxgpowXfor9Mj0ZPs6awzjYVYWNYk
Nv3C7R32MKZtEamNos7gA2Qfl11Qy7nb8zLFEdDoJHojSsCDq+EtRJAlXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfmnqmnMVOghiIB/wp/BeTIV/xJMB8GA1UdIwQY
MBaAFD+fdRPtBMqf6PekVOgnmNBPGoCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYt
NjkxN2NiNGM5OWJjLzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wZGYzMGUtYjBiZi00ZDEwLWEwNjYtNjkxN2NiNGM5OWJj
LzEvUDU5MUUtMEV5cF9vOTZSVTZDZVkwRThhZ0tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZDKJ7/m
8SFgC8hYfAfoxYQmDK7FTcu9CrV94cAz77ShpnB5aJG44y8Bc136XifVlG/JBru8
k32v8RNK6lvZ5ENb60F9Uk4K5q8Tkk/ZhzWkWBacS6dM7e3sE1AfGAJZYcOE3hni
xF+rlMzuaaAVhaCy6zDsOhpICA4/DXIlUOUhqt/pUqV4HwoSLAkjp1IpIrcfDy1o
2JqQ+5iojE2GfLDddajrguaRAZ030gl5UsQbkTzJ7JMRKy37LGvlJlZ4FyHhwsYU
DlsjBUm04sACDMIv/rALLuA83udJFzaZ2qlk1kDT8nW8hI6HaaQ2HM7rhUM/TI+g
j+MIVophtO+k5g==
-----END CERTIFICATE-----