Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File:                     aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier:          uRrwZIqiP72xNnjAiUoGcC2VkJj3gMBTQ7zbzSvg0hE=
Subject key identifier:   FE:70:50:97:03:31:56:BE:CF:00:30:9D:7C:6D:3D:34:D3:4E:DC:F5
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer:       /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial:       01962E98B2F1A9F5232BC16CFD7344AA86C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: bk5/+t0RiOypHv09G35upt1GpZTclMXKi2MRGxskZnw=)
                          2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:f1:a9:f5:23:2b:c1:6c:fd:73:44:aa:86:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=fe705097033156becf00309d7c6d3d34d34edcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:3e:c1:e3:4f:0a:63:3a:79:36:aa:d7:7f:
                    94:cc:1d:e7:c5:2a:0f:c1:de:2e:e4:a2:58:6a:41:
                    2e:7b:36:c8:9f:d2:fb:fe:d4:fa:88:a0:fc:13:da:
                    15:96:b8:1f:58:51:77:c9:36:5b:71:43:35:38:df:
                    2f:6e:77:8c:33:a5:56:50:23:51:20:88:8d:af:72:
                    54:9a:27:52:43:58:99:40:22:33:62:b7:77:47:65:
                    8e:60:29:e7:b2:04:7e:29:6e:6f:3a:b1:5e:ae:cd:
                    4e:98:21:84:dc:98:07:58:9d:a8:df:d7:4b:16:e3:
                    8c:06:c5:f8:22:68:95:7c:b1:6d:af:66:ac:82:44:
                    5e:36:45:ed:3d:15:0a:fb:42:29:31:5f:ff:b5:36:
                    fa:67:e1:86:51:f1:2f:11:b6:69:cf:c9:b8:e1:26:
                    42:f6:6b:e1:04:8a:61:f2:eb:8d:c2:1f:59:6e:e4:
                    9e:dc:9b:e5:9b:f4:ee:b3:bf:3c:b8:b1:2e:ad:f5:
                    c6:81:15:ca:20:0d:86:10:52:2f:6b:bf:ce:c8:bf:
                    cf:17:f4:d5:6f:71:1d:4e:7f:83:13:af:7a:43:9b:
                    46:cd:5b:97:fa:f3:e7:7d:b2:e4:6e:5e:5d:f6:9a:
                    a6:92:00:37:da:62:07:ae:ec:aa:9b:e3:41:1b:82:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:50:97:03:31:56:BE:CF:00:30:9D:7C:6D:3D:34:D3:4E:DC:F5
            X509v3 Authority Key Identifier:
                keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:06:01:50:d9:7a:f2:52:d3:19:4c:36:88:ec:a5:7f:b2:
         8f:da:ed:f6:9a:de:45:a1:78:c2:80:ec:66:41:d0:bb:2e:37:
         f9:4f:79:3d:e6:44:93:91:17:72:c7:da:ba:9f:47:3e:50:aa:
         19:82:30:cc:89:d4:63:2e:59:45:23:cd:ee:d1:ce:28:a2:68:
         58:34:c2:70:dc:34:60:13:f6:eb:0f:80:52:1b:bc:18:10:4e:
         62:4c:51:dc:4a:40:93:5d:86:10:92:e9:68:bf:32:14:27:d5:
         b2:68:55:9d:c8:89:4a:fc:7e:0f:32:0d:64:24:65:a4:6f:53:
         22:d8:d1:ba:6e:45:1d:85:1c:68:1d:3e:8c:3e:a7:b3:a4:9d:
         77:9a:85:7a:3b:df:4a:85:ad:5b:fb:c6:a9:b2:07:f6:ad:d2:
         e2:61:55:7d:fd:47:45:e5:89:8c:56:c3:ee:5d:04:fa:82:04:
         b6:79:86:50:e2:99:d3:19:69:da:b0:cc:0f:6f:2f:ce:c9:28:
         55:6f:0d:c5:60:ef:53:6c:d5:8d:c2:ac:73:4d:cd:f2:0e:7a:
         0e:6c:32:bd:5d:5b:d8:48:28:47:0b:eb:ec:aa:21:4c:91:00:
         aa:9a:0e:3c:8e:ce:3d:14:93:0e:a0:fe:14:13:20:67:14:16:
         19:60:da:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLLxqfUjK8Fs/XNEqobHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTEyNDVhZTIwMjUxNTVjMDliZWMyNWE4OTkxZDU2N2Fm
MTg0MWQwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EyhmZTcwNTA5NzAzMzE1NmJlY2YwMDMwOWQ3YzZkM2QzNGQzNGVkY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3I+weNPCmM6eTaq13+UzB3nxSoP
wd4u5KJYakEuezbIn9L7/tT6iKD8E9oVlrgfWFF3yTZbcUM1ON8vbneMM6VWUCNR
IIiNr3JUmidSQ1iZQCIzYrd3R2WOYCnnsgR+KW5vOrFers1OmCGE3JgHWJ2o39dL
FuOMBsX4ImiVfLFtr2asgkReNkXtPRUK+0IpMV//tTb6Z+GGUfEvEbZpz8m44SZC
9mvhBIph8uuNwh9ZbuSe3Jvlm/Tus788uLEurfXGgRXKIA2GEFIva7/OyL/PF/TV
b3EdTn+DE696Q5tGzVuX+vPnfbLkbl5d9pqmkgA32mIHruyqm+NBG4KVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5wUJcDMVa+zwAwnXxtPTTTTtz1MB8GA1UdIwQY
MBaAFGkRJFriAlFVwJvsJaiZHVZ68YQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDct
MWUxZTljYmY0N2RhLzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZTRkZDUtOWM4Zi00ODU2LTkwZDctMWUxZTljYmY0N2Rh
LzEvYVJFa1d1SUNVVlhBbS13bHFKa2RWbnJ4aEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLgGAVDZ
evJS0xlMNojspX+yj9rt9preRaF4woDsZkHQuy43+U95PeZEk5EXcsfaup9HPlCq
GYIwzInUYy5ZRSPN7tHOKKJoWDTCcNw0YBP26w+AUhu8GBBOYkxR3EpAk12GEJLp
aL8yFCfVsmhVnciJSvx+DzINZCRlpG9TItjRum5FHYUcaB0+jD6ns6Sdd5qFejvf
SoWtW/vGqbIH9q3S4mFVff1HReWJjFbD7l0E+oIEtnmGUOKZ0xlp2rDMD28vzsko
VW8NxWDvU2zVjcKsc03N8g56DmwyvV1b2EgoRwvr7KohTJEAqpoOPI7OPRSTDqD+
FBMgZxQWGWDaSg==
-----END CERTIFICATE-----