Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
File:                     TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json)
Hash identifier:          SZtPGYKQs5PzNoumRwUrmurZvQLaoEwpNCc7qoUqH9k=
Subject key identifier:   A2:6E:80:3C:ED:26:E7:2C:D7:2F:E2:DD:61:82:61:29:86:86:19:85
Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92
Certificate issuer:       /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
Certificate serial:       01962F06C51363DB05A2BAC5763C0170967A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft
Manifest number:          09CD
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: rhOXrL61krmwpmSnYZ5sPTo7CWf1DKxNkDedstfBr+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:13:63:db:05:a2:ba:c5:76:3c:01:70:96:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=a26e803ced26e72cd72fe2dd6182612986861985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:af:15:0d:0d:b9:7a:1c:2b:b1:41:b0:f7:
                    ea:3b:e5:69:f8:45:be:ca:47:62:14:c4:55:69:b4:
                    ae:c5:d9:fb:99:22:64:46:00:32:9d:10:f5:f4:89:
                    a7:e4:c6:b1:3e:8a:ef:10:72:4c:12:26:e4:32:89:
                    ee:aa:9a:12:28:01:b8:68:5c:79:e3:a4:eb:c1:6c:
                    fe:5b:ea:0c:e1:b3:61:f7:0f:dc:d8:f4:d9:c1:a9:
                    d4:29:81:0a:e4:62:09:52:fa:87:0c:c6:c2:f1:41:
                    35:42:3f:58:cf:b2:59:6d:db:52:32:38:07:b4:c2:
                    ac:c1:ac:8f:7f:91:e0:c0:6f:7a:c4:d6:01:c7:fa:
                    5a:6e:34:2c:79:05:d9:db:19:50:cd:28:c7:7c:c3:
                    8c:b9:ce:b6:0f:ae:57:7e:e0:39:b5:ee:56:87:f8:
                    21:38:d8:e1:c4:6d:cd:7d:b1:b3:71:9c:13:ce:78:
                    9c:c5:b6:bf:85:52:eb:0c:88:9b:96:72:69:55:9a:
                    74:af:6e:c9:5e:c0:f6:c1:fc:e2:7f:0e:7a:5f:87:
                    df:22:79:ff:8b:2e:84:20:11:ec:22:34:78:24:83:
                    e0:96:12:94:a6:2f:d5:6a:0e:da:c1:93:49:51:e3:
                    fa:b0:af:b3:81:27:27:80:13:a8:4f:53:ac:67:34:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:80:3C:ED:26:E7:2C:D7:2F:E2:DD:61:82:61:29:86:86:19:85
            X509v3 Authority Key Identifier:
                keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:51:cd:c4:8f:9c:bc:5c:e1:0a:98:84:a5:a0:b2:70:30:
         07:39:2c:3b:8f:bf:6e:13:f7:be:37:24:a1:d1:c3:ba:e9:b0:
         15:00:16:8a:c8:08:72:b4:da:09:55:c0:b7:30:a5:f0:ea:c8:
         7b:b5:23:2d:66:fa:f8:11:f2:9f:1c:8e:66:7c:6e:df:4d:73:
         23:4c:15:2c:ba:9a:d9:c0:78:69:a8:c9:0f:20:cf:59:09:a7:
         57:66:77:86:cb:3b:63:f7:52:8b:ec:d8:5c:19:f2:c8:1d:fe:
         f5:ab:31:70:5e:d3:db:31:92:49:b0:54:94:3d:db:66:b1:7a:
         c6:e2:a8:1c:cd:a8:af:94:1b:f3:80:24:cf:d9:7c:bb:61:2d:
         d5:d5:b1:3c:cd:5a:cc:25:74:76:a1:c1:84:bb:b9:7c:75:93:
         74:37:4e:26:b1:1b:41:08:b9:b3:b4:92:ad:0c:ac:ed:0a:e6:
         8d:3c:40:b7:a0:c6:99:e4:18:ee:25:67:0c:cd:95:d1:37:7e:
         69:df:d0:a4:04:31:23:bd:35:7e:b0:0a:c0:b3:ac:c7:53:06:
         8d:45:08:fa:5c:28:85:2c:a8:69:c1:26:2a:ed:26:86:50:6d:
         ff:c3:13:ed:06:75:3f:e7:9f:37:26:a9:e5:f3:22:5a:d1:17:
         60:02:c6:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsUTY9sForrFdjwBcJZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWMyNjdhZTJmMWJmOTVlNmQ3YTE0MjA4MGU1ZGY3YTMx
Mzk0OTIwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EyhhMjZlODAzY2VkMjZlNzJjZDcyZmUyZGQ2MTgyNjEyOTg2ODYxOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2OvFQ0NuXocK7FBsPfqO+Vp+EW+
ykdiFMRVabSuxdn7mSJkRgAynRD19Imn5MaxPorvEHJMEibkMonuqpoSKAG4aFx5
46TrwWz+W+oM4bNh9w/c2PTZwanUKYEK5GIJUvqHDMbC8UE1Qj9Yz7JZbdtSMjgH
tMKswayPf5HgwG96xNYBx/pabjQseQXZ2xlQzSjHfMOMuc62D65XfuA5te5Wh/gh
ONjhxG3NfbGzcZwTznicxba/hVLrDIiblnJpVZp0r27JXsD2wfzifw56X4ffInn/
iy6EIBHsIjR4JIPglhKUpi/Vag7awZNJUeP6sK+zgScngBOoT1OsZzQ/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJugDztJucs1y/i3WGCYSmGhhmFMB8GA1UdIwQY
MBaAFE7sJnri8b+V5tehQggOXfejE5SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMt
NmI5NmM4MzYxMjY1LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMtNmI5NmM4MzYxMjY1
LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6pRzcSP
nLxc4QqYhKWgsnAwBzksO4+/bhP3vjckodHDuumwFQAWisgIcrTaCVXAtzCl8OrI
e7UjLWb6+BHynxyOZnxu301zI0wVLLqa2cB4aajJDyDPWQmnV2Z3hss7Y/dSi+zY
XBnyyB3+9asxcF7T2zGSSbBUlD3bZrF6xuKoHM2or5Qb84Akz9l8u2Et1dWxPM1a
zCV0dqHBhLu5fHWTdDdOJrEbQQi5s7SSrQys7QrmjTxAt6DGmeQY7iVnDM2V0Td+
ad/QpAQxI701frAKwLOsx1MGjUUI+lwohSyoacEmKu0mhlBt/8MT7QZ1P+efNyap
5fMiWtEXYALGSA==
-----END CERTIFICATE-----