Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File:                     B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier:          lbq8lsycsoOrg0rybyffUxRw2mZJBiku9RAutXn7HQI=
Subject key identifier:   4D:4E:E5:D2:98:43:75:43:BA:3B:64:4C:4A:43:85:28:FA:77:D7:5F
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer:       /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial:       01962F748B5490B83F36A569F5CA39311F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: +sh56JDNmbZffktEUoa64QTZ4JiemJ0Xfrm23CtqdxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:54:90:b8:3f:36:a5:69:f5:ca:39:31:1f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=4d4ee5d298437543ba3b644c4a438528fa77d75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:05:a9:97:dc:9a:39:6e:aa:81:5e:99:fe:
                    f3:02:5c:94:27:be:1f:f8:29:9e:2f:ba:f3:cf:c3:
                    ce:22:e8:f4:d3:a9:54:5e:ee:79:0c:1c:d0:58:c0:
                    06:de:b6:2c:8f:c7:52:8d:61:b0:2c:e3:4a:44:50:
                    e0:6d:00:32:01:5e:57:c2:43:3d:99:ef:37:bc:f0:
                    a2:93:7e:e3:ee:66:31:f7:76:4f:e5:92:78:91:89:
                    e6:b6:55:91:cc:f4:14:67:6c:45:b3:aa:ce:8d:a4:
                    5c:a3:e4:e9:ff:d0:98:d9:6f:82:86:50:0f:b0:35:
                    11:81:78:f5:ab:21:93:27:1b:be:3c:9f:e1:4a:11:
                    39:85:90:73:22:e3:39:31:53:cf:27:52:1b:75:6c:
                    44:63:b8:2a:9b:ce:9c:8c:f2:31:97:c9:47:2d:5d:
                    86:c4:50:c2:c9:c7:47:04:29:fd:41:44:53:1f:20:
                    cc:c5:7d:d5:5a:13:55:32:6c:54:4c:a8:6f:c6:7f:
                    43:7a:12:30:fa:76:2c:f1:01:a8:70:b1:c2:38:97:
                    86:33:03:ed:95:90:50:71:76:57:93:97:43:82:3e:
                    e0:8e:27:41:e7:a0:af:aa:d7:5a:ef:6e:d0:88:4f:
                    9d:0e:f3:9c:4b:55:71:d3:36:df:ff:fa:2e:d4:e6:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:E5:D2:98:43:75:43:BA:3B:64:4C:4A:43:85:28:FA:77:D7:5F
            X509v3 Authority Key Identifier:
                keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:8d:5e:6a:44:50:46:ea:26:6e:7a:d1:b3:42:4d:5b:dc:
         50:c9:77:e9:53:e1:83:1c:5f:b1:3b:90:38:da:72:0e:42:ec:
         c9:9e:9a:23:cb:20:6a:99:f0:e5:10:a3:ee:eb:d0:44:17:79:
         e6:4d:92:44:e0:0f:16:9f:f6:b3:8f:8e:9b:26:f3:02:20:2b:
         0a:a8:68:b8:2b:93:84:d6:5b:a2:aa:4c:a8:d3:ac:08:b7:de:
         7f:cc:f0:a9:e3:76:16:f8:b8:9b:e6:ad:1c:5f:16:38:ab:56:
         5a:70:fa:59:83:ad:cc:81:90:95:cb:1a:be:3d:9f:a0:f4:bd:
         f8:a0:28:79:65:9d:80:7f:6c:0a:8e:93:76:d8:93:dd:00:d4:
         10:57:26:a2:6d:9d:f2:93:7b:6c:20:d7:e3:ed:3d:95:99:a0:
         41:53:7b:82:db:cd:64:47:a6:fe:95:2c:8d:3d:9f:da:17:d7:
         26:94:9d:29:c8:98:37:65:60:2b:f0:64:df:0f:9a:03:bc:70:
         0a:77:d0:86:3f:99:f5:e4:65:16:9b:d2:54:16:37:b7:bf:16:
         ba:41:6c:9d:6e:a0:b9:88:02:9f:d2:4e:94:fb:c5:35:89:e2:
         78:a8:fb:1e:c6:94:61:3c:ff:a8:39:4e:ab:89:f2:1d:1d:9b:
         28:21:17:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdItUkLg/NqVp9co5MR8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWUwNzk5ZjA4YWY4ZmU1MjBmOTQ4MmNkZDA1ZThlYTY1
ZTYxYTgwHhcNMjUwNDEzMTQwMTI5WhcNMjUwNDE0MTQwMTI5WjAzMTEwLwYDVQQD
Eyg0ZDRlZTVkMjk4NDM3NTQzYmEzYjY0NGM0YTQzODUyOGZhNzdkNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S8FqZfcmjluqoFemf7zAlyUJ74f
+CmeL7rzz8POIuj006lUXu55DBzQWMAG3rYsj8dSjWGwLONKRFDgbQAyAV5XwkM9
me83vPCik37j7mYx93ZP5ZJ4kYnmtlWRzPQUZ2xFs6rOjaRco+Tp/9CY2W+ChlAP
sDURgXj1qyGTJxu+PJ/hShE5hZBzIuM5MVPPJ1IbdWxEY7gqm86cjPIxl8lHLV2G
xFDCycdHBCn9QURTHyDMxX3VWhNVMmxUTKhvxn9DehIw+nYs8QGocLHCOJeGMwPt
lZBQcXZXk5dDgj7gjidB56Cvqtda727QiE+dDvOcS1Vx0zbf//ou1OaoLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1O5dKYQ3VDujtkTEpDhSj6d9dfMB8GA1UdIwQY
MBaAFAfuB5nwivj+Ug+Ugs3QXo6mXmGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDIt
YTcyMzQ0YjNmZjEwLzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZTZkY2UtYzhlZi00N2UzLWE2ZDItYTcyMzQ0YjNmZjEw
LzEvQi00SG1mQ0stUDVTRDVTQ3pkQmVqcVplWWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc+NXmpE
UEbqJm560bNCTVvcUMl36VPhgxxfsTuQONpyDkLsyZ6aI8sgapnw5RCj7uvQRBd5
5k2SROAPFp/2s4+OmybzAiArCqhouCuThNZboqpMqNOsCLfef8zwqeN2Fvi4m+at
HF8WOKtWWnD6WYOtzIGQlcsavj2foPS9+KAoeWWdgH9sCo6TdtiT3QDUEFcmom2d
8pN7bCDX4+09lZmgQVN7gtvNZEem/pUsjT2f2hfXJpSdKciYN2VgK/Bk3w+aA7xw
CnfQhj+Z9eRlFpvSVBY3t78WukFsnW6guYgCn9JOlPvFNYnieKj7HsaUYTz/qDlO
q4nyHR2bKCEXDw==
-----END CERTIFICATE-----