Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
File:                     ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft (raw, json)
Hash identifier:          aRXF7iVKW3RpXyxtA7IG3c1Xo4jMMpRUsrBqHnZLFeM=
Subject key identifier:   E0:4C:75:31:C4:55:82:59:38:9C:3D:B0:7B:9E:A6:4A:2E:A1:06:3E
Authority key identifier: 7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87
Certificate issuer:       /CN=7b0d46c5822cad9253ea53a100f3d936224ae687
Certificate serial:       01962DF3D898FAC8205629128318C514293D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft
Manifest number:          031A
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl (hash: 9KDrstlNw+G91Otx8+vhXSGDSCcZmPum9X2IAtsTvp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:98:fa:c8:20:56:29:12:83:18:c5:14:29:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0d46c5822cad9253ea53a100f3d936224ae687
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=e04c7531c4558259389c3db07b9ea64a2ea1063e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:e2:4c:62:d5:2d:11:09:44:24:4d:36:0b:
                    d4:ba:4d:76:62:13:fa:3c:b2:6f:cc:dc:15:a8:3a:
                    1c:a7:b8:fb:de:b2:bf:d6:1b:a9:d8:84:30:31:02:
                    b7:81:78:69:5e:72:fb:45:4f:8a:05:9c:bc:56:c4:
                    bb:39:5f:5c:b4:51:e5:b5:68:94:b8:83:0f:4d:90:
                    c5:30:f7:98:a9:ff:5b:95:bf:73:c4:e6:74:e3:67:
                    37:a0:4e:97:37:ea:0a:65:34:83:f7:6a:97:31:34:
                    02:be:ef:c1:ae:7a:11:97:5b:cc:d9:d5:10:ae:7e:
                    62:cd:28:16:ae:37:c2:71:a8:74:fd:ab:63:ea:f7:
                    d8:4c:72:ed:24:78:33:5a:2e:f9:26:1a:63:15:8b:
                    ca:d8:56:9e:4a:48:5f:da:f9:4f:a7:24:b6:fe:77:
                    f9:d0:c6:b6:6d:75:da:ea:60:da:1b:45:97:62:a0:
                    47:13:c8:da:f7:d8:1b:c8:1b:22:ce:48:c4:f2:17:
                    0c:4f:da:97:2e:fc:8e:23:e8:0b:c3:aa:1e:2e:61:
                    20:4a:59:c7:fb:8a:15:05:03:bf:33:a0:4e:81:4a:
                    63:c5:21:d7:b8:43:0e:e0:49:8e:67:c2:35:60:a2:
                    ef:89:e5:f4:8f:70:27:a7:69:96:2f:96:e1:8f:84:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4C:75:31:C4:55:82:59:38:9C:3D:B0:7B:9E:A6:4A:2E:A1:06:3E
            X509v3 Authority Key Identifier:
                keyid:7B:0D:46:C5:82:2C:AD:92:53:EA:53:A1:00:F3:D9:36:22:4A:E6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew1GxYIsrZJT6lOhAPPZNiJK5oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c25444-2671-4ad2-9050-baa59ece2b63/1/ew1GxYIsrZJT6lOhAPPZNiJK5oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:89:1d:f0:cb:b6:2e:d6:15:ce:98:b8:61:b0:58:8f:b6:
         e4:d0:b6:bc:86:2c:41:f8:e9:76:85:6e:9d:e9:f9:52:09:8e:
         a8:00:e1:7b:e8:f9:a3:11:36:c0:d7:fa:81:88:40:6b:0d:2e:
         20:3d:6e:95:9f:5c:e0:87:d6:c8:84:13:10:67:5b:b8:84:fb:
         8a:b5:26:64:89:32:97:9a:a7:65:0e:46:3e:a2:27:1a:d4:c7:
         28:c1:01:c6:48:41:ea:b5:01:cc:49:ae:51:ca:69:63:9e:71:
         93:f7:62:0a:c5:60:ff:15:f9:e1:11:b4:a9:8e:d6:f4:69:66:
         6e:54:57:b6:95:4f:97:21:f9:33:e5:2b:e6:c4:5d:9c:83:64:
         2a:08:d2:c5:65:77:00:a1:f4:f4:0c:17:61:d3:62:7d:fe:93:
         5b:c1:d1:02:b0:cd:be:53:0f:f5:e3:90:06:61:41:98:51:3a:
         e1:50:98:80:de:92:3e:62:11:78:da:ee:7f:b8:43:4d:be:c4:
         a6:ee:12:4b:67:01:a6:46:05:cc:73:c7:95:57:c8:59:65:a7:
         c9:a8:8c:29:4f:b3:61:02:7d:5f:76:a1:1f:21:6c:70:60:8d:
         f6:b0:cc:76:c2:ee:b8:19:46:1c:4f:85:8b:83:17:48:d4:41:
         09:63:b9:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89iY+sggVikSgxjFFCk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGQ0NmM1ODIyY2FkOTI1M2VhNTNhMTAwZjNkOTM2MjI0
YWU2ODcwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
EyhlMDRjNzUzMWM0NTU4MjU5Mzg5YzNkYjA3YjllYTY0YTJlYTEwNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvibiTGLVLREJRCRNNgvUuk12YhP6
PLJvzNwVqDocp7j73rK/1hup2IQwMQK3gXhpXnL7RU+KBZy8VsS7OV9ctFHltWiU
uIMPTZDFMPeYqf9blb9zxOZ042c3oE6XN+oKZTSD92qXMTQCvu/BrnoRl1vM2dUQ
rn5izSgWrjfCcah0/atj6vfYTHLtJHgzWi75JhpjFYvK2FaeSkhf2vlPpyS2/nf5
0Ma2bXXa6mDaG0WXYqBHE8ja99gbyBsizkjE8hcMT9qXLvyOI+gLw6oeLmEgSlnH
+4oVBQO/M6BOgUpjxSHXuEMO4EmOZ8I1YKLvieX0j3Anp2mWL5bhj4Sr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBMdTHEVYJZOJw9sHuepkouoQY+MB8GA1UdIwQY
MBaAFHsNRsWCLK2SU+pToQDz2TYiSuaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAt
YmFhNTllY2UyYjYzLzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jMjU0NDQtMjY3MS00YWQyLTkwNTAtYmFhNTllY2UyYjYz
LzEvZXcxR3hZSXNyWkpUNmxPaEFQUFpOaUpLNW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqCJHfDL
ti7WFc6YuGGwWI+25NC2vIYsQfjpdoVunen5UgmOqADhe+j5oxE2wNf6gYhAaw0u
ID1ulZ9c4IfWyIQTEGdbuIT7irUmZIkyl5qnZQ5GPqInGtTHKMEBxkhB6rUBzEmu
UcppY55xk/diCsVg/xX54RG0qY7W9GlmblRXtpVPlyH5M+Ur5sRdnINkKgjSxWV3
AKH09AwXYdNiff6TW8HRArDNvlMP9eOQBmFBmFE64VCYgN6SPmIReNruf7hDTb7E
pu4SS2cBpkYFzHPHlVfIWWWnyaiMKU+zYQJ9X3ahHyFscGCN9rDMdsLuuBlGHE+F
i4MXSNRBCWO5dg==
-----END CERTIFICATE-----