Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File:                     5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier:          /0VSU/yQ9nxk2L/xc1m3nkFxIvbf1IkKvT3mSFUa+EQ=
Subject key identifier:   FC:0E:7D:AD:AA:58:BA:27:A7:60:4A:BD:84:D7:E4:00:0F:64:A7:E7
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer:       /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial:       01962F06FACAD7D412588D608D4E2F67EED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number:          1339
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: eN2Tsgy16ZskLQEYZ4TStJYdl8GjRNRoYTjHBqqO4RA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:ca:d7:d4:12:58:8d:60:8d:4e:2f:67:ee:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=fc0e7dadaa58ba27a7604abd84d7e4000f64a7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:6d:50:20:4c:cd:3a:35:6f:62:bf:a0:e6:
                    6a:2d:10:ad:c1:5c:a1:22:e5:13:52:73:6d:d0:cb:
                    af:42:cf:86:00:66:2f:9c:a5:8a:40:d7:53:95:e7:
                    79:ad:95:69:14:68:77:8b:6f:ff:09:c1:b9:2c:7b:
                    82:73:16:5a:f8:67:07:71:14:dd:42:e6:0c:42:ed:
                    8b:d3:03:75:04:d8:31:e5:a3:7a:75:0c:82:03:e6:
                    7b:f8:62:93:b7:e8:ec:67:62:9c:1a:56:2e:ff:7d:
                    83:6d:fd:cb:de:e7:42:7a:15:b2:94:e3:fd:b3:7e:
                    af:b4:b8:71:1f:9c:a2:d1:dc:9f:e0:0c:ea:7e:e1:
                    8f:5e:03:e4:38:0c:c4:f5:d8:7a:ad:a5:f0:2d:90:
                    7f:fe:3e:8d:fe:eb:32:e9:0a:29:21:52:b1:78:f5:
                    6d:62:db:af:3d:5a:85:d6:60:fa:64:7f:9a:d2:cf:
                    88:65:b9:9e:3a:43:37:7c:c8:ee:cc:8a:3e:7d:d8:
                    cc:7c:3b:f2:b8:54:36:48:60:d6:75:95:5d:b6:c4:
                    2e:20:ab:43:f7:f8:40:b8:9e:b5:95:87:8b:31:7d:
                    16:dd:08:90:f4:e4:27:7e:6b:d7:00:9f:41:bd:65:
                    59:6a:93:c4:82:93:52:9c:f8:70:b7:c3:82:20:7f:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0E:7D:AD:AA:58:BA:27:A7:60:4A:BD:84:D7:E4:00:0F:64:A7:E7
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:bc:66:50:81:4c:79:43:92:9a:89:c2:22:c3:db:8f:43:
         cc:3c:f5:e1:29:d2:42:11:0b:c0:9c:84:18:e0:b8:cf:cb:24:
         08:45:9f:60:b9:3d:88:52:7e:45:e0:8a:0b:d1:dc:a4:5b:85:
         a6:09:26:2e:fb:12:67:f6:4c:7c:aa:5b:57:96:b3:61:bc:41:
         14:56:c6:8a:ee:56:a7:40:01:27:68:8f:43:6f:04:3f:cf:57:
         44:74:3a:fa:1a:73:e9:59:8c:b9:6d:2b:70:e6:25:0a:4c:c5:
         4b:21:81:bb:45:3a:52:a5:c1:31:ac:42:54:ea:07:75:4f:f8:
         6b:e6:b2:7b:ee:ec:f8:98:9a:3f:5a:c3:79:8b:e1:9a:77:13:
         3a:82:ae:c6:c0:1d:fc:79:06:ad:45:59:84:32:07:47:b2:de:
         e3:ab:80:a7:f3:3c:bd:4d:0b:98:b4:a0:40:c8:52:9e:a3:af:
         54:7f:d9:04:d9:60:05:ab:e1:11:55:0d:7f:5e:55:69:9d:a3:
         da:08:59:bc:fd:c1:2f:8a:18:e2:74:86:21:37:c4:f9:04:37:
         2a:74:5e:a2:72:07:7b:87:5d:6a:ed:7c:81:f9:89:3c:ee:8d:
         f9:51:89:db:10:08:54:67:50:1c:b8:ba:1b:8a:f8:c5:98:c5:
         3d:90:c4:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvrK19QSWI1gjU4vZ+7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjEzZDk5MDc5Y2E3MGZjMjk3OTg4ZGQ3OWVhYzQz
YTlmYTkwHhcNMjUwNDEzMTIwMTQ4WhcNMjUwNDE0MTIwMTQ4WjAzMTEwLwYDVQQD
EyhmYzBlN2RhZGFhNThiYTI3YTc2MDRhYmQ4NGQ3ZTQwMDBmNjRhN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBptUCBMzTo1b2K/oOZqLRCtwVyh
IuUTUnNt0MuvQs+GAGYvnKWKQNdTled5rZVpFGh3i2//CcG5LHuCcxZa+GcHcRTd
QuYMQu2L0wN1BNgx5aN6dQyCA+Z7+GKTt+jsZ2KcGlYu/32Dbf3L3udCehWylOP9
s36vtLhxH5yi0dyf4AzqfuGPXgPkOAzE9dh6raXwLZB//j6N/usy6QopIVKxePVt
YtuvPVqF1mD6ZH+a0s+IZbmeOkM3fMjuzIo+fdjMfDvyuFQ2SGDWdZVdtsQuIKtD
9/hAuJ61lYeLMX0W3QiQ9OQnfmvXAJ9BvWVZapPEgpNSnPhwt8OCIH+KYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwOfa2qWLonp2BKvYTX5AAPZKfnMB8GA1UdIwQY
MBaAFOR2exPZkHnKcPwpeYjdeerEOp+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgt
NGIxZDk3ZGZlY2NmLzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgtNGIxZDk3ZGZlY2Nm
LzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU+8ZlCB
THlDkpqJwiLD249DzDz14SnSQhELwJyEGOC4z8skCEWfYLk9iFJ+ReCKC9HcpFuF
pgkmLvsSZ/ZMfKpbV5azYbxBFFbGiu5Wp0ABJ2iPQ28EP89XRHQ6+hpz6VmMuW0r
cOYlCkzFSyGBu0U6UqXBMaxCVOoHdU/4a+aye+7s+JiaP1rDeYvhmncTOoKuxsAd
/HkGrUVZhDIHR7Le46uAp/M8vU0LmLSgQMhSnqOvVH/ZBNlgBavhEVUNf15VaZ2j
2ghZvP3BL4oY4nSGITfE+QQ3KnReonIHe4ddau18gfmJPO6N+VGJ2xAIVGdQHLi6
G4r4xZjFPZDEjg==
-----END CERTIFICATE-----