Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File:                     20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier:          +Ce6gEBS3PQ6liHPpvZ7OW2SpvqnodLucWUl2G9HK2U=
Subject key identifier:   D4:53:1E:79:A5:30:27:A7:A9:A2:02:B9:A0:0F:73:2E:24:B8:7E:E1
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer:       /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial:       01962DF41FD441456E55B4C93B18D349FE63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: nzEpQqYySZWXPylK6iDupScU2+/y9WoOMD3ARB/OW8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1f:d4:41:45:6e:55:b4:c9:3b:18:d3:49:fe:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=d4531e79a53027a7a9a202b9a00f732e24b87ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e4:21:2f:71:d6:57:f4:1a:4b:cf:c0:5d:b7:
                    22:c8:3b:e9:e1:4b:ea:1d:fd:fb:3a:49:a8:24:eb:
                    49:d6:42:c7:54:8e:a2:5b:a8:71:c8:e7:78:3d:7e:
                    5e:b8:f4:92:e3:cf:f6:39:67:12:b4:98:36:df:ef:
                    43:a0:7e:08:87:d9:a9:36:8f:c1:04:a6:1e:38:32:
                    7a:e0:99:cd:6a:da:26:6c:5f:08:41:3d:9f:57:5b:
                    65:4e:44:a2:50:43:cc:c5:b7:b6:a8:18:e1:55:46:
                    56:8f:a0:16:ec:bd:91:52:7f:e7:9d:ab:d8:fd:1d:
                    37:c5:76:80:23:f2:97:ad:40:d5:ca:a2:0d:ca:88:
                    2b:61:cc:52:cb:dc:62:9a:29:d5:2f:ea:62:47:b9:
                    4d:ea:4a:b6:e5:02:54:ca:92:65:fc:48:2e:c5:90:
                    91:ec:de:52:7d:2d:54:1a:39:8b:41:e3:21:03:3c:
                    ca:92:ab:3e:9a:dd:d9:7d:aa:ef:a5:1d:88:62:7c:
                    97:36:f2:a1:db:c6:e0:7a:ee:c5:5a:f3:f4:b6:34:
                    44:c3:a7:48:8f:9c:e4:4f:49:19:3d:b5:9a:56:f9:
                    bb:f8:ae:f7:22:9d:60:6f:49:db:d6:9a:51:56:68:
                    97:58:7d:b4:ed:63:36:5f:6f:d0:23:67:72:8e:c7:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:1E:79:A5:30:27:A7:A9:A2:02:B9:A0:0F:73:2E:24:B8:7E:E1
            X509v3 Authority Key Identifier:
                keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:8d:0c:aa:1b:2f:f7:f8:f8:8a:09:95:fb:40:af:1a:8c:
         81:47:99:f2:38:df:e4:58:89:66:a6:1d:0d:7e:06:bc:c9:30:
         12:98:bf:66:86:13:4c:3b:6a:3d:86:b1:e2:1b:b2:db:6a:0e:
         98:74:03:de:89:10:a5:9a:78:0b:b4:d8:19:67:6c:fa:78:0e:
         6e:96:27:ba:30:34:54:3d:e9:d2:11:e3:63:44:ee:68:57:77:
         ea:cd:36:5c:37:70:57:4a:94:ec:82:d9:d0:a7:39:d2:b6:fc:
         5e:02:56:ac:98:35:76:95:24:2c:ae:c1:9c:29:7a:8d:dc:a6:
         2e:34:dc:5e:ae:02:fa:bd:ee:92:6d:bd:3c:3c:0f:a3:12:54:
         59:43:12:2d:6d:5c:98:3b:3d:f3:a7:aa:13:f7:d8:6a:47:40:
         b3:83:45:ac:34:50:f0:96:f6:c0:78:87:24:3b:39:ef:ef:9c:
         44:60:d9:99:e3:7b:72:75:4b:00:08:b7:01:74:7f:dc:4e:e1:
         e9:cc:2a:6a:2f:3c:3c:53:38:b8:3c:f6:12:d2:c9:77:ee:03:
         ed:77:d1:df:07:74:db:29:3d:c2:d2:84:f1:d2:74:65:22:ae:
         94:d6:9d:c2:85:70:61:a5:0d:c8:79:ff:d5:9f:ef:a3:16:f8:
         a9:be:35:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B/UQUVuVbTJOxjTSf5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDg4MTYzZGFmNTBkYjY0NmRlNGRmMjRkMzRjYmFjOTkz
ZjQ1N2YwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EyhkNDUzMWU3OWE1MzAyN2E3YTlhMjAyYjlhMDBmNzMyZTI0Yjg3ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOQhL3HWV/QaS8/AXbciyDvp4Uvq
Hf37OkmoJOtJ1kLHVI6iW6hxyOd4PX5euPSS48/2OWcStJg23+9DoH4Ih9mpNo/B
BKYeODJ64JnNatombF8IQT2fV1tlTkSiUEPMxbe2qBjhVUZWj6AW7L2RUn/nnavY
/R03xXaAI/KXrUDVyqINyogrYcxSy9ximinVL+piR7lN6kq25QJUypJl/EguxZCR
7N5SfS1UGjmLQeMhAzzKkqs+mt3ZfarvpR2IYnyXNvKh28bgeu7FWvP0tjREw6dI
j5zkT0kZPbWaVvm7+K73Ip1gb0nb1ppRVmiXWH207WM2X2/QI2dyjsfD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRTHnmlMCenqaICuaAPcy4kuH7hMB8GA1UdIwQY
MBaAFNtIgWPa9Q22Rt5N8k00y6yZP0V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAt
MTlkNTdmZjFmYmQ5LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy80ZTVjMTAtNzFlZC00ZGViLWI0ZTAtMTlkNTdmZjFmYmQ5
LzEvMjBpQlk5cjFEYlpHM2szeVRUVExySmtfUlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMmNDKob
L/f4+IoJlftArxqMgUeZ8jjf5FiJZqYdDX4GvMkwEpi/ZoYTTDtqPYax4huy22oO
mHQD3okQpZp4C7TYGWds+ngObpYnujA0VD3p0hHjY0TuaFd36s02XDdwV0qU7ILZ
0Kc50rb8XgJWrJg1dpUkLK7BnCl6jdymLjTcXq4C+r3ukm29PDwPoxJUWUMSLW1c
mDs986eqE/fYakdAs4NFrDRQ8Jb2wHiHJDs57++cRGDZmeN7cnVLAAi3AXR/3E7h
6cwqai88PFM4uDz2EtLJd+4D7XfR3wd02yk9wtKE8dJ0ZSKulNadwoVwYaUNyHn/
1Z/voxb4qb41KA==
-----END CERTIFICATE-----