Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File:                     RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier:          eEIXkVJZIwjXwSJ12dR5100VeKrHalFe6zdhFcBzBL8=
Subject key identifier:   BC:93:18:82:24:C6:ED:45:D0:96:06:1F:73:28:96:49:02:07:05:C7
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer:       /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial:       01962F0674B283D820BF5DD059C6890040EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: YSsh2avZegQQ8jX/Ixdhk2uHn7uuIIaqYFbPNJ/cnRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:74:b2:83:d8:20:bf:5d:d0:59:c6:89:00:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=bc93188224c6ed45d096061f73289649020705c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:ba:30:82:f8:c0:6d:8d:eb:06:49:1e:a7:
                    80:3a:18:d4:a9:dd:09:3c:43:72:ff:b9:8e:54:68:
                    82:08:c6:cc:63:9e:f5:4a:d2:fd:9f:ef:e0:a5:8e:
                    b9:4f:06:b9:49:39:ec:c3:1c:fb:99:50:4d:2e:f6:
                    5d:31:6a:ab:96:64:4a:5f:51:a3:77:7c:75:72:57:
                    0d:4d:3b:c7:7c:ac:e5:b3:6a:e4:e7:6b:06:e7:4e:
                    1f:76:48:26:26:2b:46:0f:60:43:80:12:c4:4a:88:
                    9f:75:38:ce:33:1c:90:46:dd:4e:33:9b:d3:e8:cf:
                    ef:4f:07:c2:fc:19:3e:e1:b3:8e:35:17:e3:44:88:
                    b3:63:17:cb:5a:87:6c:84:ac:39:35:08:f6:27:5e:
                    3e:ce:e9:4d:60:e2:2d:ed:de:55:04:f3:1e:16:f8:
                    f3:81:22:aa:b0:3a:bc:f0:0a:2f:ee:97:2e:39:8f:
                    8b:7a:cf:0f:e1:92:51:10:1a:af:87:3b:84:11:a3:
                    aa:42:08:2a:fe:53:b7:a2:1a:10:c5:4f:7d:63:25:
                    30:54:b5:04:5b:63:e5:b9:b5:02:08:5f:d8:7b:35:
                    c9:83:86:8f:70:20:51:9e:c1:28:b9:44:7d:33:1a:
                    a4:10:c6:86:b6:e5:be:8b:ee:45:22:78:9f:91:17:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:93:18:82:24:C6:ED:45:D0:96:06:1F:73:28:96:49:02:07:05:C7
            X509v3 Authority Key Identifier:
                keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:c5:19:3f:b5:47:e8:26:a9:c8:8f:86:13:8d:cc:cc:35:
         72:5b:fd:17:5c:9b:bc:f4:4c:58:d8:e5:01:4f:3a:9e:d5:b2:
         c9:b1:6f:27:7e:cb:ec:b0:35:10:89:72:14:b8:82:8b:62:ec:
         4b:d9:cd:3a:9a:72:9a:09:bb:16:79:6a:9b:29:98:22:ed:ea:
         75:69:be:c9:f3:2f:fa:38:38:7e:02:16:52:58:3b:b8:02:16:
         46:24:6a:3d:d5:ad:3b:08:3c:74:c2:05:3d:c8:63:56:f9:b8:
         ed:21:c5:a2:cd:42:62:ff:b0:76:d0:f5:0c:aa:c0:f8:b1:48:
         16:ef:17:6d:c1:ab:32:ba:08:a1:39:fd:f7:4d:d9:2a:12:5d:
         21:0c:a9:e3:87:75:28:a5:75:b7:11:f9:eb:8e:52:32:43:da:
         66:f1:2d:37:76:e3:b1:58:35:6c:d1:eb:86:a9:b9:fc:57:6b:
         b6:c4:f4:f8:00:bd:a2:d3:db:13:fd:14:9a:08:6e:37:c5:43:
         c8:81:7a:c5:9b:78:62:45:7e:bc:82:8e:c4:e4:a0:ca:77:45:
         95:8a:b0:bf:0f:5c:b7:69:5c:c2:c6:62:38:69:8e:7c:34:2c:
         72:f6:80:57:10:d5:1e:27:7b:8a:c0:70:77:4e:bc:f2:5b:ef:
         68:c9:77:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnSyg9ggv13QWcaJAEDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz
MGY1NDEwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
EyhiYzkzMTg4MjI0YzZlZDQ1ZDA5NjA2MWY3MzI4OTY0OTAyMDcwNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4he6MIL4wG2N6wZJHqeAOhjUqd0J
PENy/7mOVGiCCMbMY571StL9n+/gpY65Twa5STnswxz7mVBNLvZdMWqrlmRKX1Gj
d3x1clcNTTvHfKzls2rk52sG504fdkgmJitGD2BDgBLESoifdTjOMxyQRt1OM5vT
6M/vTwfC/Bk+4bOONRfjRIizYxfLWodshKw5NQj2J14+zulNYOIt7d5VBPMeFvjz
gSKqsDq88Aov7pcuOY+Les8P4ZJREBqvhzuEEaOqQggq/lO3ohoQxU99YyUwVLUE
W2PlubUCCF/YezXJg4aPcCBRnsEouUR9MxqkEMaGtuW+i+5FInifkRd8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyTGIIkxu1F0JYGH3MolkkCBwXHMB8GA1UdIwQY
MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt
MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm
LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0bFGT+1
R+gmqciPhhONzMw1clv9F1ybvPRMWNjlAU86ntWyybFvJ37L7LA1EIlyFLiCi2Ls
S9nNOppymgm7FnlqmymYIu3qdWm+yfMv+jg4fgIWUlg7uAIWRiRqPdWtOwg8dMIF
PchjVvm47SHFos1CYv+wdtD1DKrA+LFIFu8XbcGrMroIoTn9903ZKhJdIQyp44d1
KKV1txH5645SMkPaZvEtN3bjsVg1bNHrhqm5/FdrtsT0+AC9otPbE/0UmghuN8VD
yIF6xZt4YkV+vIKOxOSgyndFlYqwvw9ct2lcwsZiOGmOfDQscvaAVxDVHid7isBw
d0688lvvaMl3+Q==
-----END CERTIFICATE-----