Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File:                     MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier:          Py5dyPPQ0XqTHRX3fK506DtTJYzYDiNmPY/k0RAQvkE=
Subject key identifier:   AD:75:F9:A4:D5:22:57:41:99:62:EE:82:A9:BB:16:11:E1:7D:C2:F1
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer:       /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial:       01962F3D6604C528A481A1E731F0E32164D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number:          03C7
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: kbLlJmJz8j9z+6pvWoaA4YB77SW5zNlYv9VPF/jou/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:04:c5:28:a4:81:a1:e7:31:f0:e3:21:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=ad75f9a4d52257419962ee82a9bb1611e17dc2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:56:fd:86:87:4d:33:1c:ef:a6:30:0a:ad:
                    c5:24:30:72:80:08:d5:d0:ad:97:f9:a7:96:b3:bb:
                    10:0e:01:db:b0:d4:39:bb:ad:e1:c9:a3:ba:ce:78:
                    36:8b:2f:c7:1d:be:2b:1d:4c:d9:e5:53:a9:d5:e1:
                    5f:9d:f0:1c:73:d7:d9:37:e3:23:89:79:3f:49:b8:
                    fd:82:8e:e4:51:43:15:68:d1:9d:d2:55:b3:a9:24:
                    c9:6c:12:cb:3e:ee:ab:a5:48:3c:33:b9:3e:20:dd:
                    55:5b:eb:63:2a:4e:49:a8:57:d7:28:f2:21:8b:da:
                    42:19:55:06:77:1d:b4:9d:53:23:1a:10:23:b6:d0:
                    35:d4:54:47:5a:18:1f:24:fb:c3:a2:47:2e:8b:75:
                    de:04:cf:38:55:c2:f6:53:09:0b:f9:43:d5:8a:7f:
                    fd:a1:ed:a3:1d:fa:7a:25:65:71:1b:51:03:1c:62:
                    80:94:04:61:f0:08:43:95:42:b6:f7:aa:e2:8d:30:
                    61:82:6e:3d:e0:b2:05:18:05:04:00:8f:02:36:e3:
                    49:b6:10:84:5d:6b:72:7d:c9:7a:7c:58:f2:ed:37:
                    df:72:5a:4c:d5:d8:40:6c:0e:86:21:e5:94:bc:b0:
                    e0:a1:56:58:9b:db:4f:ea:0c:59:93:fe:61:51:21:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:75:F9:A4:D5:22:57:41:99:62:EE:82:A9:BB:16:11:E1:7D:C2:F1
            X509v3 Authority Key Identifier:
                keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:37:04:53:19:90:19:bf:91:a7:9f:3c:6c:f1:1c:e2:1e:a7:
         df:79:d7:43:37:61:04:6d:c2:cf:76:ac:7c:b1:9e:13:4e:88:
         3d:4e:8f:a6:01:8b:1a:66:53:19:7c:c5:2d:00:57:8f:86:32:
         22:96:2a:2c:20:15:ff:db:c0:eb:90:3f:54:23:2f:13:c1:80:
         ad:98:68:a1:14:0e:36:bf:7f:fc:ed:6c:2c:f3:03:ca:4c:47:
         92:46:93:aa:fb:a9:e8:02:c9:f6:af:0d:41:a0:51:11:2e:d3:
         de:93:01:d5:0d:42:be:70:26:a1:44:eb:72:d5:e2:6c:cc:34:
         f9:a4:61:8e:83:de:c0:36:74:6f:fa:a5:69:61:b0:3d:66:26:
         c3:66:09:a6:36:32:51:1b:ce:5c:26:28:c1:dd:94:74:42:8c:
         07:b2:3c:24:27:61:52:af:29:3e:94:c0:e0:b5:c0:5e:dd:09:
         ef:8b:d9:cb:ed:e6:2b:3d:95:3a:ad:dc:3c:7f:02:bc:c5:00:
         17:e8:a3:e8:f5:bc:8b:b2:0c:74:86:d0:a8:36:0a:06:5b:08:
         6b:5d:42:6a:35:4a:84:b7:89:aa:62:c8:1a:41:e2:de:70:c6:
         76:20:fd:2f:50:f8:c4:3f:ad:07:89:1f:7a:79:d1:32:7e:e7:
         6a:66:db:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWYExSikgaHnMfDjIWTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYjdhOTUzMjgwYjZmOTk4ZmMxMWM0N2NiZTkxYjgyNjMz
NjRlYjAwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
EyhhZDc1ZjlhNGQ1MjI1NzQxOTk2MmVlODJhOWJiMTYxMWUxN2RjMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bpW/YaHTTMc76YwCq3FJDBygAjV
0K2X+aeWs7sQDgHbsNQ5u63hyaO6zng2iy/HHb4rHUzZ5VOp1eFfnfAcc9fZN+Mj
iXk/Sbj9go7kUUMVaNGd0lWzqSTJbBLLPu6rpUg8M7k+IN1VW+tjKk5JqFfXKPIh
i9pCGVUGdx20nVMjGhAjttA11FRHWhgfJPvDokcui3XeBM84VcL2UwkL+UPVin/9
oe2jHfp6JWVxG1EDHGKAlARh8AhDlUK296rijTBhgm494LIFGAUEAI8CNuNJthCE
XWtyfcl6fFjy7TffclpM1dhAbA6GIeWUvLDgoVZYm9tP6gxZk/5hUSGU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK11+aTVIldBmWLugqm7FhHhfcLxMB8GA1UdIwQY
MBaAFDC3qVMoC2+Zj8EcR8vpG4JjNk6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgt
OWM3MTY5YjdhMmU0LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZmIzZmYtYmUzYy00MTg1LTllMDgtOWM3MTY5YjdhMmU0
LzEvTUxlcFV5Z0xiNW1Qd1J4SHkta2JnbU0yVHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzcEUxmQ
Gb+Rp588bPEc4h6n33nXQzdhBG3Cz3asfLGeE06IPU6PpgGLGmZTGXzFLQBXj4Yy
IpYqLCAV/9vA65A/VCMvE8GArZhooRQONr9//O1sLPMDykxHkkaTqvup6ALJ9q8N
QaBRES7T3pMB1Q1CvnAmoUTrctXibMw0+aRhjoPewDZ0b/qlaWGwPWYmw2YJpjYy
URvOXCYowd2UdEKMB7I8JCdhUq8pPpTA4LXAXt0J74vZy+3mKz2VOq3cPH8CvMUA
F+ij6PW8i7IMdIbQqDYKBlsIa11CajVKhLeJqmLIGkHi3nDGdiD9L1D4xD+tB4kf
ennRMn7nambbYg==
-----END CERTIFICATE-----