Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File:                     oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier:          kSw6ZBQLyIoHyaWcZH4fyr8dtu+hULPyCR6m0zmGsTo=
Subject key identifier:   10:32:80:EA:4A:D6:C7:DC:33:D0:0E:BB:08:FB:DF:FC:DB:EB:8C:74
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer:       /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial:       01962FAB0AFBF9F2F3767FCB8363D2C42987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: 4cQ750E3aRQP5EliOhYqhc3xtuTnIibVdys2rRz+AKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0a:fb:f9:f2:f3:76:7f:cb:83:63:d2:c4:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=103280ea4ad6c7dc33d00ebb08fbdffcdbeb8c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:00:99:e4:97:e4:f3:9a:44:7c:06:d7:a9:
                    fb:26:c5:ab:a2:1f:3f:0e:13:1e:b8:5d:fd:a9:bc:
                    f3:17:49:cb:25:d1:99:87:81:40:f5:9f:76:21:e8:
                    67:6e:40:a2:2c:52:fd:73:81:d1:7f:7b:d5:de:b7:
                    33:ff:b9:fe:f9:fd:93:27:7f:35:c0:2d:6a:4c:39:
                    ca:8e:98:22:b8:d2:40:82:10:2e:50:63:67:24:94:
                    9c:8b:e5:bd:cf:e5:48:ed:42:a5:8d:5b:18:b6:bf:
                    a3:a6:f4:71:1b:60:9e:f9:12:b6:e8:04:97:f9:6a:
                    76:c7:a4:ca:c0:4a:4e:27:86:13:fe:b6:03:d0:5a:
                    7b:9d:7f:28:06:03:e3:21:11:c7:25:16:14:39:9c:
                    e8:b2:ad:01:dd:a7:27:e8:0b:b2:f0:31:e3:b2:ee:
                    62:fd:b3:f4:6b:d1:8f:72:8d:d3:ff:fe:b9:7d:ce:
                    d6:96:0f:bf:39:36:ac:06:3d:19:17:5e:d9:04:b9:
                    6c:3d:b1:0d:6a:c9:89:63:f4:24:ed:d6:1e:ae:17:
                    2a:02:3e:22:b5:3b:74:f7:e4:23:16:49:46:26:e2:
                    6e:74:de:72:47:d5:e4:df:ea:cf:a6:6a:01:49:6c:
                    44:17:1d:5f:e0:22:23:17:3e:cc:b9:14:a9:c9:ff:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:80:EA:4A:D6:C7:DC:33:D0:0E:BB:08:FB:DF:FC:DB:EB:8C:74
            X509v3 Authority Key Identifier:
                keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:04:91:b4:45:8b:e7:c2:c0:48:7c:c5:98:6a:b5:7e:02:
         2d:cf:b5:12:4c:62:4c:c1:90:a8:b0:49:9a:2c:c0:12:3e:6a:
         0f:0c:bc:a5:91:f1:e2:f1:25:cf:36:54:ca:1f:6a:77:78:f2:
         72:a3:78:6b:28:55:25:5a:0c:a2:68:4b:3f:d5:1d:fc:93:03:
         ee:89:88:58:10:b9:b9:31:27:cd:cc:1e:7f:c3:64:63:4f:38:
         43:fa:68:b0:b7:6b:22:93:02:e4:f1:d3:cd:95:3b:24:7c:36:
         af:45:b0:59:95:21:88:a6:44:21:8b:e1:08:ec:49:a3:e5:f5:
         3d:cc:3c:d6:81:5c:e1:06:ec:b9:bb:b6:3f:a7:15:62:d0:4c:
         a3:0a:20:1a:e2:36:8f:47:55:9e:34:61:1a:c7:2f:99:e7:e0:
         d8:ae:fb:36:d3:9f:3b:d5:5c:e1:71:6b:e2:56:1e:c5:02:c9:
         e5:47:bd:e1:96:05:34:19:9e:b4:c5:2d:fb:56:72:ce:e2:9e:
         90:7d:36:87:15:82:90:0b:2e:0d:b0:f4:35:50:47:d2:31:17:
         33:0d:1a:95:c5:62:9e:cf:cd:ae:8f:85:bc:f6:ad:67:0e:4c:
         e2:88:d4:2d:1b:01:35:97:04:22:fa:b7:f9:4c:62:32:c8:96:
         0b:61:01:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwr7+fLzdn/Lg2PSxCmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx
YTJiM2QwHhcNMjUwNDEzMTUwMTAwWhcNMjUwNDE0MTUwMTAwWjAzMTEwLwYDVQQD
EygxMDMyODBlYTRhZDZjN2RjMzNkMDBlYmIwOGZiZGZmY2RiZWI4Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P4AmeSX5POaRHwG16n7JsWroh8/
DhMeuF39qbzzF0nLJdGZh4FA9Z92IehnbkCiLFL9c4HRf3vV3rcz/7n++f2TJ381
wC1qTDnKjpgiuNJAghAuUGNnJJSci+W9z+VI7UKljVsYtr+jpvRxG2Ce+RK26ASX
+Wp2x6TKwEpOJ4YT/rYD0Fp7nX8oBgPjIRHHJRYUOZzosq0B3acn6Auy8DHjsu5i
/bP0a9GPco3T//65fc7Wlg+/OTasBj0ZF17ZBLlsPbENasmJY/Qk7dYerhcqAj4i
tTt09+QjFklGJuJudN5yR9Xk3+rPpmoBSWxEFx1f4CIjFz7MuRSpyf9qVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAygOpK1sfcM9AOuwj73/zb64x0MB8GA1UdIwQY
MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt
NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh
LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEAEkbRF
i+fCwEh8xZhqtX4CLc+1EkxiTMGQqLBJmizAEj5qDwy8pZHx4vElzzZUyh9qd3jy
cqN4ayhVJVoMomhLP9Ud/JMD7omIWBC5uTEnzcwef8NkY084Q/posLdrIpMC5PHT
zZU7JHw2r0WwWZUhiKZEIYvhCOxJo+X1Pcw81oFc4Qbsubu2P6cVYtBMowogGuI2
j0dVnjRhGscvmefg2K77NtOfO9Vc4XFr4lYexQLJ5Ue94ZYFNBmetMUt+1ZyzuKe
kH02hxWCkAsuDbD0NVBH0jEXMw0alcVins/Nro+FvPatZw5M4ojULRsBNZcEIvq3
+UxiMsiWC2EBhg==
-----END CERTIFICATE-----