Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File:                     Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier:          I+C8HJygMt46cgm3vvEPTq48pHaWA902lt4ttTd6km4=
Subject key identifier:   4D:20:80:7F:5A:9F:2A:8F:BB:0F:FB:70:D9:27:5A:66:E3:FE:36:D5
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer:       /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial:       01962F3D8095D84F711CC3557C66C1688C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: fake1GgqFEGHGz5Bn/x8t+4B58GKKgJom+FwD2rKV7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:95:d8:4f:71:1c:c3:55:7c:66:c1:68:8c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=4d20807f5a9f2a8fbb0ffb70d9275a66e3fe36d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:ef:11:05:a4:b3:f4:e2:11:64:70:86:7a:
                    80:81:e0:d1:95:17:ae:f5:cc:75:66:cd:23:02:8c:
                    1d:ff:32:da:1c:4c:0f:fb:3c:59:5f:f5:7f:c7:d0:
                    6e:af:da:cd:6b:a4:b0:36:04:ac:4e:96:f2:e3:27:
                    40:de:a6:41:ce:d1:2a:9d:20:1f:1d:88:dc:3a:29:
                    31:25:0c:cb:8b:1e:03:8e:a1:f0:18:0f:4f:76:2e:
                    d3:6d:aa:a1:28:00:3f:6a:55:77:f1:d6:74:b9:29:
                    8f:0b:e7:88:2f:fd:0d:08:8b:e1:a2:c6:25:67:82:
                    e2:ff:21:9a:95:c1:40:ed:b2:ef:6f:17:0d:4f:ea:
                    4a:f1:65:ea:34:54:4d:e2:fb:fe:ed:9d:69:9c:0e:
                    89:d9:d8:71:fe:91:77:2c:4a:0c:a8:40:8d:4f:61:
                    f4:89:16:19:c1:ec:0d:0c:99:79:af:7c:e0:75:86:
                    fc:61:b0:c1:9f:69:a3:ee:0a:25:cc:06:45:e5:8a:
                    50:ce:9b:a0:e7:5f:4f:4b:0f:3e:a9:de:80:09:d1:
                    1d:32:fe:e9:80:e4:78:19:ca:9c:de:8a:97:7c:59:
                    8e:dd:24:81:7a:6d:f6:a8:a5:82:5f:a7:31:a5:b9:
                    36:5a:94:9c:93:68:e4:5d:dc:35:7f:9b:b6:15:8a:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:20:80:7F:5A:9F:2A:8F:BB:0F:FB:70:D9:27:5A:66:E3:FE:36:D5
            X509v3 Authority Key Identifier:
                keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:d7:86:d0:e9:d4:4b:f3:e2:8d:89:e8:62:aa:d3:63:d8:
         33:fd:e1:72:75:17:0e:dc:15:d1:47:27:a6:7a:df:21:c5:71:
         3b:12:68:56:87:ad:9c:3a:84:3f:d1:24:ef:41:44:e3:69:af:
         fc:94:2d:d4:cf:89:0c:2f:18:b9:d0:e7:07:f6:50:60:c5:e1:
         83:35:d2:ad:93:11:4e:65:a7:ad:14:91:2e:20:7a:d3:21:71:
         a1:8a:30:e5:4d:e9:73:0a:f2:2f:8c:18:62:04:ad:aa:ac:ab:
         9c:33:57:37:2e:84:bd:a6:bb:f2:4a:bb:83:bb:95:f7:03:90:
         86:6b:7b:bd:c9:d1:39:96:8c:dd:87:75:99:e1:79:a9:c6:08:
         fd:de:a3:00:70:72:8b:58:63:36:1c:6c:59:3c:c1:d1:5b:2c:
         44:a8:7f:9c:92:a3:76:ae:b3:ef:0f:60:00:4d:ca:08:34:9e:
         cc:11:6b:5e:26:21:56:c6:c0:dd:a9:1f:85:96:cc:d5:63:1c:
         63:48:e3:87:0d:30:ba:20:56:cf:58:74:12:6d:5e:fe:e9:04:
         c0:84:45:7b:d0:f8:80:ff:d6:7d:e8:48:bf:94:83:1f:f4:57:
         7e:81:c5:a2:94:32:4b:01:41:55:2f:6a:77:60:46:e2:9d:13:
         37:42:28:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYCV2E9xHMNVfGbBaIyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy
MzE0MTgwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
Eyg0ZDIwODA3ZjVhOWYyYThmYmIwZmZiNzBkOTI3NWE2NmUzZmUzNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sbvEQWks/TiEWRwhnqAgeDRlReu
9cx1Zs0jAowd/zLaHEwP+zxZX/V/x9Bur9rNa6SwNgSsTpby4ydA3qZBztEqnSAf
HYjcOikxJQzLix4DjqHwGA9Pdi7TbaqhKAA/alV38dZ0uSmPC+eIL/0NCIvhosYl
Z4Li/yGalcFA7bLvbxcNT+pK8WXqNFRN4vv+7Z1pnA6J2dhx/pF3LEoMqECNT2H0
iRYZwewNDJl5r3zgdYb8YbDBn2mj7golzAZF5YpQzpug519PSw8+qd6ACdEdMv7p
gOR4Gcqc3oqXfFmO3SSBem32qKWCX6cxpbk2WpSck2jkXdw1f5u2FYru2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0ggH9anyqPuw/7cNknWmbj/jbVMB8GA1UdIwQY
MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt
YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl
LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn7XhtDp
1Evz4o2J6GKq02PYM/3hcnUXDtwV0UcnpnrfIcVxOxJoVoetnDqEP9Ek70FE42mv
/JQt1M+JDC8YudDnB/ZQYMXhgzXSrZMRTmWnrRSRLiB60yFxoYow5U3pcwryL4wY
YgStqqyrnDNXNy6Evaa78kq7g7uV9wOQhmt7vcnROZaM3Yd1meF5qcYI/d6jAHBy
i1hjNhxsWTzB0VssRKh/nJKjdq6z7w9gAE3KCDSezBFrXiYhVsbA3akfhZbM1WMc
Y0jjhw0wuiBWz1h0Em1e/ukEwIRFe9D4gP/WfehIv5SDH/RXfoHFopQySwFBVS9q
d2BG4p0TN0Io9A==
-----END CERTIFICATE-----