Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          mHO0lF4oVf27aRYdS+f+XLzkfP4ahqz5JJh4qr/kfTI=
Subject key identifier:   C9:E0:E3:26:84:2D:68:B0:03:E6:7B:5B:40:BA:ED:1E:23:81:ED:DB
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       01962E993758D120C1FCCD420982A8950868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: p8JTMPrX2hA5fgcWMI/Iti71xu8Zp3EtXqhc2S8YXdk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:58:d1:20:c1:fc:cd:42:09:82:a8:95:08:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=c9e0e326842d68b003e67b5b40baed1e2381eddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:18:78:de:26:b8:9a:a8:c8:c0:7b:97:47:
                    07:b7:5a:1c:4e:cc:d4:2c:a4:5c:1a:6a:60:82:e3:
                    f9:ad:a4:fa:7b:24:ba:21:e7:a5:de:46:66:58:76:
                    e5:b5:43:83:94:b2:9d:76:8a:8c:a7:61:3f:31:a1:
                    18:04:04:78:28:47:39:f4:2a:e8:6f:f4:16:39:9f:
                    00:dc:0d:aa:6e:cd:f9:9b:4f:db:ba:18:33:a9:f1:
                    ef:b4:f7:94:78:87:d3:63:5f:54:45:21:d4:30:06:
                    db:a7:f3:70:0c:54:24:f2:3d:5a:91:0b:af:3a:c3:
                    e6:b4:58:15:04:e2:d4:1f:69:7b:f8:72:c3:5e:ab:
                    96:dc:06:e4:2a:75:07:cf:a7:56:a1:c3:cc:9a:e0:
                    11:a5:4b:09:ef:d5:19:5b:55:76:32:d9:36:bd:3e:
                    40:32:78:ba:3c:dc:c8:f8:a0:a6:8a:e9:95:0d:f8:
                    65:dc:5e:04:8c:58:5e:11:ab:a3:c3:3c:6b:0f:b3:
                    d9:d7:17:2c:d6:fa:eb:1a:46:44:0e:53:83:d8:ad:
                    20:3a:95:21:00:98:70:fb:93:45:58:c9:16:8a:a5:
                    cd:05:07:f8:59:66:d2:85:2c:c7:13:62:20:dd:16:
                    49:f5:7d:fa:08:9a:19:61:f5:ad:51:f6:97:e0:8d:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:E3:26:84:2D:68:B0:03:E6:7B:5B:40:BA:ED:1E:23:81:ED:DB
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:13:53:f5:c1:bf:3c:c0:8a:7a:1b:cb:ba:d4:b1:ee:45:
         9d:64:0c:31:1f:b8:91:df:e8:94:17:24:d5:21:01:ef:88:73:
         6e:99:db:68:13:60:97:df:78:80:a5:fa:86:31:a3:8a:2f:14:
         33:9d:f8:1f:f3:0c:0c:1f:fa:52:6b:0c:c4:a5:48:cf:fd:d5:
         e9:23:9d:ed:3e:b9:19:aa:85:5d:ac:cc:b3:da:cb:73:cf:ff:
         4a:a8:30:6b:1c:0b:62:3d:5f:bd:59:89:46:bd:3b:dc:cf:10:
         d8:c4:5f:ce:6a:cd:f4:3d:86:b2:a2:22:62:c9:e8:8d:72:0c:
         1c:7e:85:55:d2:d3:a8:84:32:e1:cd:c3:61:63:6f:f9:e4:12:
         b1:b2:59:d5:01:99:3a:b9:d0:7c:c0:a3:d6:f3:11:04:9d:6c:
         38:38:dc:83:61:61:8d:29:d2:58:73:64:0b:5f:ec:b6:5b:01:
         7f:de:b6:33:5a:44:f4:79:b6:a0:0f:9e:ff:ba:ff:5c:0c:22:
         fb:8c:29:52:58:89:1d:93:70:e1:d9:bd:f8:05:14:ea:99:bc:
         20:e6:d9:76:e5:82:9e:34:33:93:e7:44:7e:86:7d:a8:79:69:
         78:22:28:e6:45:be:25:4a:7e:9f:68:25:d0:4f:1a:78:41:02:
         f5:a0:b0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTdY0SDB/M1CCYKolQhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjlmZTY3N2Y0N2RmMGZkN2NjMzQ5NWYxNzJkOTNiM2Ni
YTBlMDAwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
EyhjOWUwZTMyNjg0MmQ2OGIwMDNlNjdiNWI0MGJhZWQxZTIzODFlZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/UYeN4muJqoyMB7l0cHt1ocTszU
LKRcGmpgguP5raT6eyS6Ieel3kZmWHbltUODlLKddoqMp2E/MaEYBAR4KEc59Cro
b/QWOZ8A3A2qbs35m0/buhgzqfHvtPeUeIfTY19URSHUMAbbp/NwDFQk8j1akQuv
OsPmtFgVBOLUH2l7+HLDXquW3AbkKnUHz6dWocPMmuARpUsJ79UZW1V2Mtk2vT5A
Mni6PNzI+KCmiumVDfhl3F4EjFheEaujwzxrD7PZ1xcs1vrrGkZEDlOD2K0gOpUh
AJhw+5NFWMkWiqXNBQf4WWbShSzHE2Ig3RZJ9X36CJoZYfWtUfaX4I3diwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMng4yaELWiwA+Z7W0C67R4jge3bMB8GA1UdIwQY
MBaAFBIp/md/R98P18w0lfFy2Ts8ug4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDIt
M2FiNjZiZjQ3YmQzLzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kYzhlMDctOThiNS00M2VmLWEyNDItM2FiNjZiZjQ3YmQz
LzEvRWluLVozOUgzd19YekRTVjhYTFpPenk2RGdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkwTU/XB
vzzAinoby7rUse5FnWQMMR+4kd/olBck1SEB74hzbpnbaBNgl994gKX6hjGjii8U
M534H/MMDB/6UmsMxKVIz/3V6SOd7T65GaqFXazMs9rLc8//SqgwaxwLYj1fvVmJ
Rr073M8Q2MRfzmrN9D2GsqIiYsnojXIMHH6FVdLTqIQy4c3DYWNv+eQSsbJZ1QGZ
OrnQfMCj1vMRBJ1sODjcg2FhjSnSWHNkC1/stlsBf962M1pE9Hm2oA+e/7r/XAwi
+4wpUliJHZNw4dm9+AUU6pm8IObZduWCnjQzk+dEfoZ9qHlpeCIo5kW+JUp+n2gl
0E8aeEEC9aCwVw==
-----END CERTIFICATE-----