Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File:                     A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier:          NiZcWXOhScv8WjtvlICApV9bop7sm1LnuDyKWo+/vyg=
Subject key identifier:   68:CB:39:D8:44:0C:CF:F4:76:9F:D9:17:D0:0C:06:34:4C:AF:6E:48
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer:       /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial:       01962E99BE6FD4DBCA29766AC7D97195BBD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: wAzteKHl3LSxbDYCCVUy6lsREJNUBOD6UD08T/rbkiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:6f:d4:db:ca:29:76:6a:c7:d9:71:95:bb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=68cb39d8440ccff4769fd917d00c06344caf6e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:78:aa:28:c6:09:ca:87:14:80:88:c5:77:
                    38:8e:4d:49:f6:3b:1c:40:b9:64:04:7d:85:41:8d:
                    71:00:4f:bc:55:1c:81:19:e2:e8:b2:ae:1b:72:ed:
                    9c:ac:d3:73:de:a9:38:24:f2:2e:29:91:c1:84:ba:
                    9f:69:0c:43:55:be:a3:1d:55:41:23:89:80:d5:1b:
                    f6:77:21:17:30:c2:c2:94:08:cc:fd:ea:c4:26:75:
                    82:31:43:02:4c:cb:16:01:fa:3f:86:74:1f:bc:08:
                    2b:fb:ae:76:a8:13:0f:50:ea:ad:13:76:7e:db:61:
                    12:2a:b8:9c:b9:3c:f3:3e:28:dc:6e:3b:88:09:09:
                    7a:f8:f4:ef:dd:be:45:e6:2d:cf:6e:04:cd:0e:3e:
                    2f:11:8a:4f:b3:7b:08:96:d8:25:2d:d7:95:aa:22:
                    99:b5:52:d6:22:39:7a:07:18:7a:ff:85:6f:f7:e3:
                    72:9b:b7:be:e8:d5:73:89:b7:84:ea:78:63:e3:22:
                    c4:79:0a:e8:1c:e3:bb:06:77:8a:22:62:70:a2:84:
                    66:d4:20:54:54:e5:e7:70:dd:8d:ca:03:32:58:c3:
                    45:96:51:12:77:1f:7f:a4:fe:de:9a:72:d6:19:0d:
                    59:d5:5e:91:d3:65:30:f8:d5:f6:04:3d:04:71:e6:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:39:D8:44:0C:CF:F4:76:9F:D9:17:D0:0C:06:34:4C:AF:6E:48
            X509v3 Authority Key Identifier:
                keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:56:cd:22:52:e3:3b:1d:dc:06:3f:4e:2f:b1:d0:49:ba:
         8d:f7:ae:97:ed:c9:27:ec:18:b8:95:7a:84:4a:c4:38:15:7e:
         e8:97:ee:f3:87:2b:47:a1:e7:82:4d:be:be:a9:08:44:38:5f:
         42:9f:af:20:40:a9:6f:04:d1:18:27:fd:bf:df:73:bb:92:d8:
         9f:54:27:70:dd:c7:79:23:e5:b1:ea:73:9e:f3:3f:e1:ac:a9:
         ff:6d:c0:2f:7e:ea:d7:6c:c9:ff:6b:81:cf:84:7e:b5:32:76:
         4b:28:77:c9:96:7f:32:ce:c6:93:bf:84:40:44:11:11:b7:57:
         fa:7e:98:c7:e8:7e:e0:c4:21:c5:a3:31:28:2c:0d:5b:9a:b2:
         c8:b5:1b:53:5a:a7:49:c1:34:c3:54:5a:7e:c6:24:b6:03:74:
         95:41:4c:d0:47:00:e4:f1:c7:f7:2c:7d:01:af:08:ca:9d:4b:
         db:d9:57:ff:e2:68:1d:ff:66:02:c8:d3:2c:d6:4b:c5:2e:2e:
         65:35:b6:96:1a:4b:64:53:65:b8:66:3b:20:2d:01:c9:89:c3:
         bc:a7:d1:56:18:37:9f:a3:b2:99:c8:39:9a:b1:7d:79:f5:2e:
         0b:fb:2b:c7:4a:6c:f4:48:f5:0e:fb:61:18:0a:bf:56:69:05:
         40:72:49:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumb5v1NvKKXZqx9lxlbvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYjBkNDUzYTFmY2U3NmRjMzQyZjE3NWVlZGNmN2EyMGFk
NWQ5MWEwHhcNMjUwNDEzMTAwMjI5WhcNMjUwNDE0MTAwMjI5WjAzMTEwLwYDVQQD
Eyg2OGNiMzlkODQ0MGNjZmY0NzY5ZmQ5MTdkMDBjMDYzNDRjYWY2ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CN4qijGCcqHFICIxXc4jk1J9jsc
QLlkBH2FQY1xAE+8VRyBGeLosq4bcu2crNNz3qk4JPIuKZHBhLqfaQxDVb6jHVVB
I4mA1Rv2dyEXMMLClAjM/erEJnWCMUMCTMsWAfo/hnQfvAgr+652qBMPUOqtE3Z+
22ESKricuTzzPijcbjuICQl6+PTv3b5F5i3PbgTNDj4vEYpPs3sIltglLdeVqiKZ
tVLWIjl6Bxh6/4Vv9+Nym7e+6NVzibeE6nhj4yLEeQroHOO7BneKImJwooRm1CBU
VOXncN2NygMyWMNFllESdx9/pP7emnLWGQ1Z1V6R02Uw+NX2BD0EceYfcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjLOdhEDM/0dp/ZF9AMBjRMr25IMB8GA1UdIwQY
MBaAFAOw1FOh/Odtw0Lxde7c96IK1dkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYt
YjQzMTJhNTg0NDBjLzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYtYjQzMTJhNTg0NDBj
LzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlxWzSJS
4zsd3AY/Ti+x0Em6jfeul+3JJ+wYuJV6hErEOBV+6Jfu84crR6Hngk2+vqkIRDhf
Qp+vIECpbwTRGCf9v99zu5LYn1QncN3HeSPlsepznvM/4ayp/23AL37q12zJ/2uB
z4R+tTJ2Syh3yZZ/Ms7Gk7+EQEQREbdX+n6Yx+h+4MQhxaMxKCwNW5qyyLUbU1qn
ScE0w1RafsYktgN0lUFM0EcA5PHH9yx9Aa8Iyp1L29lX/+JoHf9mAsjTLNZLxS4u
ZTW2lhpLZFNluGY7IC0ByYnDvKfRVhg3n6Oymcg5mrF9efUuC/srx0ps9Ej1Dvth
GAq/VmkFQHJJ1Q==
-----END CERTIFICATE-----