Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
File:                     RoWpxIcmUu55Z7pfSieCDGcVKNY.mft (raw, json)
Hash identifier:          14XCcPRptd63mr0OCfzeuI5fm/UX3X0pcqIsVJp6XPg=
Subject key identifier:   61:D0:0B:24:88:0A:83:22:5D:D1:7C:D4:F3:0B:E0:FA:7F:40:42:C5
Authority key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Certificate issuer:       /CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Certificate serial:       01962F0690CB4D83B80038EC102556FEEE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
Manifest number:          03E4
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: RoWpxIcmUu55Z7pfSieCDGcVKNY.crl (hash: ovH+Z5eF0vwHhYBbk1Cr+jT1oXFNaFVtfpple6whOCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:cb:4d:83:b8:00:38:ec:10:25:56:fe:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=61d00b24880a83225dd17cd4f30be0fa7f4042c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:a0:e5:77:da:34:0d:25:8a:ae:ce:0b:5e:
                    69:2e:64:cd:1f:fe:a7:21:59:ec:4e:46:80:b3:f0:
                    c8:98:62:9e:b8:ef:59:91:f5:55:9e:f1:10:44:de:
                    69:9b:88:57:37:34:9c:d5:93:6f:a0:ab:19:97:41:
                    e6:1a:08:a1:05:f3:0b:9d:bb:ce:26:15:ae:74:b7:
                    ea:34:63:74:02:a6:85:7c:5c:52:da:3a:c3:52:e8:
                    2c:14:16:07:45:b2:5d:45:60:a1:49:3e:0e:28:aa:
                    99:00:fe:65:c3:6a:02:34:da:08:a6:f3:16:c9:39:
                    91:0a:bb:be:10:3a:1d:45:7f:f3:f7:ca:40:d9:df:
                    bd:07:14:a8:8d:ce:37:3e:be:41:68:b1:cf:4a:29:
                    e6:a1:1b:1a:05:96:77:b8:a6:24:d7:b0:61:1c:29:
                    e3:bb:b9:e7:d8:f0:ab:35:8f:cb:0d:15:ad:65:14:
                    9f:da:2a:a2:3d:f9:be:e0:28:20:9f:dd:24:ff:3a:
                    2f:5b:76:b8:be:35:58:79:9a:52:08:3b:23:6d:06:
                    5f:aa:cb:89:d7:ff:47:cf:69:29:f5:f5:d5:a9:d9:
                    2c:88:0f:7e:54:18:f5:bf:44:9d:83:ef:16:ac:30:
                    4e:5b:7e:7f:6c:85:5f:01:14:f6:3c:2b:ba:0a:2d:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:0B:24:88:0A:83:22:5D:D1:7C:D4:F3:0B:E0:FA:7F:40:42:C5
            X509v3 Authority Key Identifier:
                keyid:46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:61:f3:fa:5b:02:04:4d:ff:41:11:2a:e0:b3:a7:09:66:b8:
         ac:99:83:d5:86:02:ef:07:38:b7:b7:fd:88:d6:6d:22:f0:d5:
         a8:64:be:3f:d6:85:b4:17:25:64:13:87:8b:7b:9d:40:10:d5:
         58:8b:e5:7f:39:40:11:72:3d:42:6a:85:ba:ad:a9:69:72:ec:
         d1:b8:27:4d:ce:aa:3e:3d:b1:09:e0:0c:f3:c0:2d:92:04:13:
         16:f7:74:15:87:14:e3:22:c7:b5:e5:6e:dc:f0:67:10:1d:01:
         f9:66:f7:28:74:1c:f4:5f:8b:dd:10:9b:b8:eb:a7:a8:8c:69:
         82:5e:d9:9a:ca:c2:ef:c2:a8:ae:78:7d:5a:55:03:10:96:e0:
         38:52:26:2e:59:4e:b1:ab:a0:38:e9:bb:30:39:b1:5e:c0:6f:
         cd:c8:e2:20:c1:b1:07:7f:0b:2a:ae:b1:cb:de:85:21:fc:0c:
         f8:d4:bb:7e:89:15:c1:6e:24:03:25:33:3e:d1:b9:ca:8a:28:
         65:4e:13:fd:6d:da:54:c3:51:4b:cd:40:2a:86:97:9b:de:16:
         c6:fe:a5:64:cd:c3:cf:8d:16:46:f5:eb:e6:14:6c:37:84:90:
         8d:89:12:23:92:8b:ee:ad:45:98:45:19:0c:0b:90:37:e3:25:
         6f:02:ea:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpDLTYO4ADjsECVW/u44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODVhOWM0ODcyNjUyZWU3OTY3YmE1ZjRhMjc4MjBjNjcx
NTI4ZDYwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg2MWQwMGIyNDg4MGE4MzIyNWRkMTdjZDRmMzBiZTBmYTdmNDA0MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkag5XfaNA0liq7OC15pLmTNH/6n
IVnsTkaAs/DImGKeuO9ZkfVVnvEQRN5pm4hXNzSc1ZNvoKsZl0HmGgihBfMLnbvO
JhWudLfqNGN0AqaFfFxS2jrDUugsFBYHRbJdRWChST4OKKqZAP5lw2oCNNoIpvMW
yTmRCru+EDodRX/z98pA2d+9BxSojc43Pr5BaLHPSinmoRsaBZZ3uKYk17BhHCnj
u7nn2PCrNY/LDRWtZRSf2iqiPfm+4Cggn90k/zovW3a4vjVYeZpSCDsjbQZfqsuJ
1/9Hz2kp9fXVqdksiA9+VBj1v0Sdg+8WrDBOW35/bIVfART2PCu6Ci2KCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHQCySICoMiXdF81PML4Pp/QELFMB8GA1UdIwQY
MBaAFEaFqcSHJlLueWe6X0onggxnFSjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2NjMDgtZGQzNS00MDUxLWExODUt
YTM1ZTJiZmVkNjA4LzEvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8wY2NjMDgtZGQzNS00MDUxLWExODUtYTM1ZTJiZmVkNjA4
LzEvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWHz+lsC
BE3/QREq4LOnCWa4rJmD1YYC7wc4t7f9iNZtIvDVqGS+P9aFtBclZBOHi3udQBDV
WIvlfzlAEXI9QmqFuq2paXLs0bgnTc6qPj2xCeAM88AtkgQTFvd0FYcU4yLHteVu
3PBnEB0B+Wb3KHQc9F+L3RCbuOunqIxpgl7ZmsrC78Kornh9WlUDEJbgOFImLllO
saugOOm7MDmxXsBvzcjiIMGxB38LKq6xy96FIfwM+NS7fokVwW4kAyUzPtG5yooo
ZU4T/W3aVMNRS81AKoaXm94Wxv6lZM3Dz40WRvXr5hRsN4SQjYkSI5KL7q1FmEUZ
DAuQN+MlbwLqXg==
-----END CERTIFICATE-----