Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File:                     cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier:          0DnRzDneiDS6e7mZrYtLyMYi4F0uoC+26shfNub3TJo=
Subject key identifier:   B4:E0:0D:8D:D1:15:D5:74:AF:F9:3C:B3:80:32:EB:1C:82:4C:DF:F3
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer:       /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial:       01962F3DB5EC0B07CF013B48917393083FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: 8JuiGf52Ylqn9JaokPo5GnQHuIR+CpGfbbpR8LnTThY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:ec:0b:07:cf:01:3b:48:91:73:93:08:3f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=b4e00d8dd115d574aff93cb38032eb1c824cdff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:0c:2e:3f:22:41:34:9a:15:a7:19:d2:d3:
                    d0:14:e8:28:04:c0:fa:82:8d:ce:1f:0b:a6:5f:3c:
                    ca:09:33:33:71:3f:a6:14:d8:35:34:39:18:56:04:
                    75:f0:8a:ad:cb:9e:d1:22:a5:84:50:c5:1d:56:c6:
                    c9:8b:c9:0d:08:86:8f:0a:ca:7c:05:8c:54:09:bb:
                    94:47:c1:a4:c8:de:09:60:07:01:1b:45:37:cf:5a:
                    7d:06:51:5b:01:16:c7:99:11:10:de:37:d4:55:f1:
                    a1:1e:84:d6:06:84:25:6c:37:5d:92:15:b9:b4:10:
                    fc:ad:8f:2d:21:8a:bb:bb:0e:3b:ec:ee:7b:cf:a8:
                    39:06:13:76:87:c4:91:f2:aa:69:22:8b:f9:51:5e:
                    c1:98:c7:b6:c2:f9:aa:bc:c9:08:a1:f1:8d:af:3b:
                    c4:43:8d:4c:31:6b:fc:a0:35:92:57:1f:c2:9d:e4:
                    d6:8c:e4:66:d1:8a:11:39:70:51:55:23:ac:19:2f:
                    82:ae:4e:5a:58:de:0e:2b:bb:20:fd:c5:aa:e0:87:
                    bd:fc:63:e0:56:54:5c:3f:d6:16:16:d7:57:93:f0:
                    98:1d:62:23:1a:05:b1:c6:43:6a:da:54:f2:7a:a0:
                    ec:60:03:94:64:bb:1c:e9:d2:00:34:81:0c:7d:c8:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E0:0D:8D:D1:15:D5:74:AF:F9:3C:B3:80:32:EB:1C:82:4C:DF:F3
            X509v3 Authority Key Identifier:
                keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:24:8d:80:71:cb:37:06:51:a6:68:83:91:c5:d9:63:6f:
         71:da:28:d2:e9:20:cb:56:15:ab:7a:9f:b5:ef:ca:6e:f8:9f:
         89:95:88:7d:30:b3:92:49:49:e6:87:24:1f:db:14:2d:32:6c:
         2a:3c:27:fc:68:62:1a:59:74:24:a9:fe:ec:7c:7e:b7:5e:f1:
         29:0b:9e:34:4e:d3:37:2a:dd:8f:fb:03:d1:c9:03:3d:8c:80:
         a1:3d:b5:e1:2b:d6:0a:ed:a0:91:e1:60:f6:a0:71:7d:9a:06:
         c2:37:61:0a:1e:e7:71:0c:df:be:98:a5:8b:75:eb:6f:03:b0:
         76:b9:27:80:bc:4b:89:75:3d:63:40:eb:4c:82:b7:51:45:12:
         2a:c9:e3:95:6c:94:eb:3d:69:09:e8:f3:2b:92:4e:ff:d8:17:
         5a:bb:66:32:00:25:cf:5e:03:d8:a4:19:9f:4a:b6:d1:6e:c3:
         ff:92:a8:b2:b2:78:24:ed:5e:ea:ce:9e:8f:0d:24:cc:74:2a:
         cb:25:c0:a3:31:17:cd:e4:bb:58:d5:de:35:71:e0:7a:6b:0d:
         ef:7f:2e:c7:96:37:67:c7:a3:8b:98:11:73:ff:68:dc:36:fd:
         8d:b2:31:08:fe:b7:d9:81:a5:c2:d4:61:d3:87:b3:82:7d:b6:
         74:e9:f3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbXsCwfPATtIkXOTCD/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2
M2IyOWEwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EyhiNGUwMGQ4ZGQxMTVkNTc0YWZmOTNjYjM4MDMyZWIxYzgyNGNkZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NAMLj8iQTSaFacZ0tPQFOgoBMD6
go3OHwumXzzKCTMzcT+mFNg1NDkYVgR18Iqty57RIqWEUMUdVsbJi8kNCIaPCsp8
BYxUCbuUR8GkyN4JYAcBG0U3z1p9BlFbARbHmREQ3jfUVfGhHoTWBoQlbDddkhW5
tBD8rY8tIYq7uw477O57z6g5BhN2h8SR8qppIov5UV7BmMe2wvmqvMkIofGNrzvE
Q41MMWv8oDWSVx/CneTWjORm0YoROXBRVSOsGS+Crk5aWN4OK7sg/cWq4Ie9/GPg
VlRcP9YWFtdXk/CYHWIjGgWxxkNq2lTyeqDsYAOUZLsc6dIANIEMfcghJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTgDY3RFdV0r/k8s4Ay6xyCTN/zMB8GA1UdIwQY
MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt
ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5
LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkYkjYBx
yzcGUaZog5HF2WNvcdoo0ukgy1YVq3qfte/KbvifiZWIfTCzkklJ5ockH9sULTJs
Kjwn/GhiGll0JKn+7Hx+t17xKQueNE7TNyrdj/sD0ckDPYyAoT214SvWCu2gkeFg
9qBxfZoGwjdhCh7ncQzfvpili3XrbwOwdrkngLxLiXU9Y0DrTIK3UUUSKsnjlWyU
6z1pCejzK5JO/9gXWrtmMgAlz14D2KQZn0q20W7D/5KosrJ4JO1e6s6ejw0kzHQq
yyXAozEXzeS7WNXeNXHgemsN738ux5Y3Z8eji5gRc/9o3Db9jbIxCP632YGlwtRh
04ezgn22dOnz0Q==
-----END CERTIFICATE-----