Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File:                     Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier:          zyIVwJdpeWMXMG/W+gxRKg10uZK4suDtiHqySDps+dU=
Subject key identifier:   F7:6B:41:75:0F:31:C6:E7:81:C7:5C:0C:24:F9:84:AD:87:EC:58:4A
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer:       /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial:       01962DF412A97F973597FF4B1DE8B5F0235F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number:          13BC
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: bRDYrEKWCei7XFZNjR4E/fWGkv8duNaE+KboGQbiQtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:12:a9:7f:97:35:97:ff:4b:1d:e8:b5:f0:23:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=f76b41750f31c6e781c75c0c24f984ad87ec584a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:21:bb:fc:f8:37:76:2d:24:ac:2e:25:3f:
                    37:73:67:68:54:fa:35:00:93:43:39:cf:17:91:46:
                    22:88:74:a1:f4:e8:4f:2e:2f:bf:34:e7:89:8a:4a:
                    c8:97:22:5c:95:f3:8a:e2:79:60:40:4e:4a:63:21:
                    50:f1:32:f7:6a:9c:54:7a:a6:25:2c:f0:92:28:9a:
                    3c:5e:f3:48:03:cf:50:8f:ae:a2:c2:33:fe:9d:0d:
                    ea:ad:b9:c6:bc:85:71:3c:22:88:7a:67:b0:c6:eb:
                    39:b0:f2:2c:8f:73:26:e2:70:94:ae:28:c6:0d:ef:
                    4b:e1:71:e1:f5:bb:3d:cc:58:04:19:02:2d:37:1d:
                    56:1a:c7:e2:b4:0f:00:15:f0:4c:06:a7:e5:14:31:
                    68:5f:74:66:15:04:26:92:49:6d:59:0e:a1:02:1b:
                    0a:6a:58:1a:c0:c7:30:15:ae:a6:ee:eb:4a:7d:32:
                    12:0a:21:1a:dd:ea:65:ec:30:5d:73:75:ef:15:4f:
                    cc:8b:ba:95:9e:4a:5f:47:3b:0c:88:a5:3c:e4:6c:
                    82:9b:f6:b7:57:73:8c:f5:41:89:9f:c8:be:85:bf:
                    f2:10:2b:34:90:d9:97:58:89:be:e9:2d:ad:63:4e:
                    32:51:36:a8:be:06:f9:07:a5:31:fa:6b:d6:12:c4:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:41:75:0F:31:C6:E7:81:C7:5C:0C:24:F9:84:AD:87:EC:58:4A
            X509v3 Authority Key Identifier:
                keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:47:e6:f4:bc:55:ee:62:1e:8a:ce:a1:42:67:f2:e3:9e:
         9a:7e:2f:57:cd:cd:c1:cc:c3:e5:e3:57:99:f4:6d:5f:0a:b0:
         26:34:87:1b:5d:31:52:c3:09:f8:b0:f3:c3:81:49:36:6d:9c:
         bb:33:a0:05:fa:79:fc:d2:67:05:b2:27:04:b6:df:ab:74:65:
         75:aa:0f:b5:de:eb:9b:08:1c:18:31:91:3f:75:86:e9:4d:6e:
         39:da:6c:cc:a6:98:55:f8:c6:a0:59:55:8e:85:fa:a1:85:33:
         f6:f6:e2:a9:00:95:19:67:f1:8b:db:54:5c:a9:5d:d5:7b:5f:
         a0:d3:93:08:0a:83:7e:14:2e:43:ff:95:55:fa:f5:ec:48:9c:
         ec:85:01:7a:b5:eb:4f:99:b8:b3:18:51:2a:e5:e0:d6:c6:fb:
         5c:7a:3a:29:59:7e:54:15:e1:c6:e4:0b:93:d4:9f:11:37:48:
         99:44:95:0b:2a:6d:02:e3:ea:fb:76:3e:76:69:4e:f6:7b:b9:
         94:86:d9:54:c2:32:dc:10:62:1a:af:4e:44:ba:56:67:ab:f7:
         2e:e0:08:4b:e8:bc:08:84:7e:aa:06:c9:ab:a1:c6:ca:10:e2:
         a0:4c:ed:ea:a5:ba:66:ff:01:bf:dd:b3:ca:15:d1:ac:40:83:
         c0:0a:ae:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BKpf5c1l/9LHei18CNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzhiN2JhYWRkYzlkNjVhZTMyYzgxN2ZlNjc5N2VmMzc5
OTY5YTMwHhcNMjUwNDEzMDcwMTMyWhcNMjUwNDE0MDcwMTMyWjAzMTEwLwYDVQQD
EyhmNzZiNDE3NTBmMzFjNmU3ODFjNzVjMGMyNGY5ODRhZDg3ZWM1ODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G8hu/z4N3YtJKwuJT83c2doVPo1
AJNDOc8XkUYiiHSh9OhPLi+/NOeJikrIlyJclfOK4nlgQE5KYyFQ8TL3apxUeqYl
LPCSKJo8XvNIA89Qj66iwjP+nQ3qrbnGvIVxPCKIemewxus5sPIsj3Mm4nCUrijG
De9L4XHh9bs9zFgEGQItNx1WGsfitA8AFfBMBqflFDFoX3RmFQQmkkltWQ6hAhsK
algawMcwFa6m7utKfTISCiEa3epl7DBdc3XvFU/Mi7qVnkpfRzsMiKU85GyCm/a3
V3OM9UGJn8i+hb/yECs0kNmXWIm+6S2tY04yUTaovgb5B6Ux+mvWEsTYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdrQXUPMcbngcdcDCT5hK2H7FhKMB8GA1UdIwQY
MBaAFEY4t7qt3J1lrjLIF/5nl+83mWmjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmppM3VxM2NuV1d1TXNnWF9tZVg3emVaYWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80M2NhNGMtYjI2OC00ZjAzLTgxNTMt
MWRmNzU4ZDYyMzc1LzEvUmppM3VxM2NuV1d1TXNnWF9tZVg3emVaYWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80M2NhNGMtYjI2OC00ZjAzLTgxNTMtMWRmNzU4ZDYyMzc1
LzEvUmppM3VxM2NuV1d1TXNnWF9tZVg3emVaYWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo61H5vS8
Ve5iHorOoUJn8uOemn4vV83NwczD5eNXmfRtXwqwJjSHG10xUsMJ+LDzw4FJNm2c
uzOgBfp5/NJnBbInBLbfq3RldaoPtd7rmwgcGDGRP3WG6U1uOdpszKaYVfjGoFlV
joX6oYUz9vbiqQCVGWfxi9tUXKld1XtfoNOTCAqDfhQuQ/+VVfr17Eic7IUBerXr
T5m4sxhRKuXg1sb7XHo6KVl+VBXhxuQLk9SfETdImUSVCyptAuPq+3Y+dmlO9nu5
lIbZVMIy3BBiGq9ORLpWZ6v3LuAIS+i8CIR+qgbJq6HGyhDioEzt6qW6Zv8Bv92z
yhXRrECDwAqukQ==
-----END CERTIFICATE-----