Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File:                     4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier:          LXczCzNikxJ6ZPA6jhchCgjH3He3gfo2sfSK8QufgyQ=
Subject key identifier:   A3:C7:AC:7B:56:78:2D:8D:E2:72:A8:01:4A:AA:10:79:69:F9:77:7E
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer:       /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial:       01962E9886846AED1A8F2221D2A3788BA0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: RtDtnmxbFvZtjVCtUY81qlTFUfzqpp/LnzTqrVCceJs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:86:84:6a:ed:1a:8f:22:21:d2:a3:78:8b:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=a3c7ac7b56782d8de272a8014aaa107969f9777e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:80:c8:93:b3:19:fd:98:12:7b:b2:e4:27:
                    12:1b:15:87:24:53:4b:ca:15:86:25:9e:34:96:a7:
                    ce:3c:db:3c:9f:ce:b5:e9:22:b4:84:23:56:30:3d:
                    dd:60:41:e9:47:6e:88:6e:f0:c2:8d:27:da:6a:67:
                    b2:a5:25:a1:62:c5:28:03:e5:be:d1:9a:b0:61:08:
                    82:d3:46:ab:3d:71:86:e1:75:9e:2b:05:07:50:78:
                    71:c9:6e:e6:1c:af:20:c1:ae:e0:a9:ee:5f:4e:44:
                    9e:ba:28:50:6b:b7:a5:2d:91:4c:2f:16:94:c9:8f:
                    3a:60:a7:cc:34:d8:5e:12:ce:05:03:03:3c:21:ba:
                    48:a3:96:c7:91:da:5a:11:be:56:58:25:07:d3:95:
                    3d:55:e3:0c:e7:af:63:a4:ce:87:1d:12:55:80:74:
                    c2:1d:41:23:e9:29:c1:ad:4b:85:e7:31:40:e0:c0:
                    59:7d:34:99:a2:e2:3a:c3:8d:ee:c6:62:08:5e:66:
                    62:9d:3e:48:8a:37:95:4e:9a:29:57:e3:16:7b:2d:
                    d3:64:6e:b2:b6:7c:46:43:18:f3:03:fa:ea:d3:00:
                    0b:54:91:d8:81:d4:52:07:67:88:ff:f8:c0:c5:45:
                    ae:98:dc:c7:3f:6c:96:0c:44:c8:8b:63:29:73:dc:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:AC:7B:56:78:2D:8D:E2:72:A8:01:4A:AA:10:79:69:F9:77:7E
            X509v3 Authority Key Identifier:
                keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:b2:bb:7d:7e:0f:3b:dd:28:db:4d:8c:e1:57:1a:d9:44:
         8d:ca:74:67:51:b6:41:23:0c:9c:c7:2b:7a:75:6c:ca:00:19:
         c1:82:aa:51:4c:6b:a6:ab:82:8f:d1:2d:c9:b6:2c:7b:ac:57:
         0d:71:ee:92:9d:bd:aa:28:07:9b:71:76:60:a9:66:98:47:b7:
         4d:4a:03:c8:9b:ae:6e:b6:ed:47:04:d9:ae:8c:dd:83:00:b1:
         6a:c2:db:9b:0b:69:2a:af:69:33:07:58:27:28:1c:28:96:ea:
         ce:88:09:48:5b:be:15:3a:77:83:ef:84:28:4a:a3:5d:dc:b6:
         4d:8a:7a:c5:2e:92:ed:0a:2d:46:b9:4d:63:86:b8:02:97:1a:
         1b:fd:59:56:a4:3a:d3:26:cd:03:3a:5a:df:31:65:bb:3f:c6:
         4f:ba:70:23:c1:88:7d:30:eb:55:a7:bc:a2:69:2a:57:57:c4:
         9d:b0:d5:97:0c:dc:f6:2c:7f:4f:cb:d7:12:31:c1:6a:fe:82:
         0c:92:93:34:da:5c:b5:5a:4c:97:35:c2:25:c3:c5:c7:23:9b:
         50:eb:bd:9b:39:2e:a5:7d:d8:71:df:00:38:d3:88:f1:25:d2:
         34:3e:59:14:c0:9f:1a:d8:f1:de:73:ad:31:7d:15:d5:bc:11:
         60:a8:7e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIaEau0ajyIh0qN4i6CyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh
OTk1ZmIwHhcNMjUwNDEzMTAwMTA5WhcNMjUwNDE0MTAwMTA5WjAzMTEwLwYDVQQD
EyhhM2M3YWM3YjU2NzgyZDhkZTI3MmE4MDE0YWFhMTA3OTY5Zjk3NzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSqAyJOzGf2YEnuy5CcSGxWHJFNL
yhWGJZ40lqfOPNs8n8616SK0hCNWMD3dYEHpR26IbvDCjSfaameypSWhYsUoA+W+
0ZqwYQiC00arPXGG4XWeKwUHUHhxyW7mHK8gwa7gqe5fTkSeuihQa7elLZFMLxaU
yY86YKfMNNheEs4FAwM8IbpIo5bHkdpaEb5WWCUH05U9VeMM569jpM6HHRJVgHTC
HUEj6SnBrUuF5zFA4MBZfTSZouI6w43uxmIIXmZinT5IijeVTpopV+MWey3TZG6y
tnxGQxjzA/rq0wALVJHYgdRSB2eI//jAxUWumNzHP2yWDETIi2Mpc9wUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPHrHtWeC2N4nKoAUqqEHlp+Xd+MB8GA1UdIwQY
MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt
YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk
LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3+yu31+
DzvdKNtNjOFXGtlEjcp0Z1G2QSMMnMcrenVsygAZwYKqUUxrpquCj9EtybYse6xX
DXHukp29qigHm3F2YKlmmEe3TUoDyJuubrbtRwTZrozdgwCxasLbmwtpKq9pMwdY
JygcKJbqzogJSFu+FTp3g++EKEqjXdy2TYp6xS6S7QotRrlNY4a4ApcaG/1ZVqQ6
0ybNAzpa3zFluz/GT7pwI8GIfTDrVae8omkqV1fEnbDVlwzc9ix/T8vXEjHBav6C
DJKTNNpctVpMlzXCJcPFxyObUOu9mzkupX3Ycd8AONOI8SXSND5ZFMCfGtjx3nOt
MX0V1bwRYKh+mw==
-----END CERTIFICATE-----