Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File:                     Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier:          0LF8Lx370Tql1sR81DEAUXNTJ1DHo+6kboo4M/ANtQE=
Subject key identifier:   4E:A5:1E:BC:1D:7F:53:7E:ED:46:AC:25:03:F0:4C:F5:C6:31:41:93
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer:       /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial:       01962E98941627F5EBC9A3A6211EE6305420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number:          09F6
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: blQgBnlnPct/2HRq0/bwcrILRwGo0Qq6/cCeKO7+wKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:16:27:f5:eb:c9:a3:a6:21:1e:e6:30:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=4ea51ebc1d7f537eed46ac2503f04cf5c6314193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:bf:e4:ec:0a:e2:63:4d:f0:de:b0:9b:32:
                    7d:a0:fd:27:07:6d:9f:4a:87:01:6b:a9:28:38:fe:
                    bb:f3:c9:d6:5b:75:07:f8:ce:c0:91:f9:bf:ca:ce:
                    c5:f5:52:09:4d:7a:f4:ca:d2:70:a7:61:76:91:d4:
                    52:85:be:aa:ad:8d:4c:86:9a:e1:3a:5c:e9:9f:a7:
                    38:09:bc:c8:ae:2b:fe:30:e3:16:77:0b:db:d9:05:
                    2d:d9:65:be:98:f2:de:10:7b:6d:db:c9:41:06:db:
                    7f:d5:ab:95:5b:8e:03:15:b9:65:c4:5c:ec:b2:ff:
                    04:03:60:e7:7a:1d:00:c3:c9:86:fd:e3:9d:d5:03:
                    b3:86:b4:65:79:73:7c:3f:56:88:04:5a:ba:fa:94:
                    13:4e:4e:f0:6c:6e:e7:42:0b:71:41:69:ca:d5:f4:
                    51:82:a3:7c:63:2e:6d:34:93:4f:dc:24:18:7d:f1:
                    bf:b5:bd:58:ce:89:c2:0f:e1:a8:5e:4b:61:94:20:
                    63:84:cc:91:c6:9b:a3:57:b3:89:28:8e:b0:a0:0d:
                    94:9f:63:e1:cb:51:03:a8:db:0c:a8:95:7b:61:12:
                    54:ae:3a:e3:15:f0:83:75:20:7e:90:79:f0:f4:f3:
                    e3:49:1e:80:aa:6d:87:9e:90:d7:85:f9:72:5f:40:
                    d8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:1E:BC:1D:7F:53:7E:ED:46:AC:25:03:F0:4C:F5:C6:31:41:93
            X509v3 Authority Key Identifier:
                keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:58:c7:1d:08:45:04:bd:b9:ff:41:4b:90:93:0e:b5:1b:f4:
         b9:18:f8:39:a5:ac:fd:74:7b:82:fa:cb:d4:7d:f9:31:e9:b6:
         c0:84:d1:8c:c6:5e:f1:e2:bf:fd:6d:c5:64:50:cf:c1:57:0b:
         0b:4a:bf:0e:95:17:2c:be:9d:38:8f:66:7d:76:15:c3:81:1e:
         c5:1a:85:9d:cf:8b:17:a0:97:e2:cd:55:89:e0:ff:d9:b1:31:
         98:4c:b9:30:7c:fa:60:9a:59:4a:35:39:22:d6:a7:19:c4:df:
         d5:49:6c:f7:44:fa:f4:bc:18:6e:fe:22:53:ea:a9:65:b3:37:
         48:c6:28:42:9d:5c:9d:29:2c:83:c1:20:27:68:26:cb:5d:19:
         af:b8:bd:9b:7d:b6:c1:2c:14:1e:de:e7:a7:ba:b0:de:ad:1e:
         b8:77:65:a2:87:90:7a:39:df:08:47:fa:a0:db:dd:bc:a0:95:
         66:e1:38:01:96:c9:b9:56:7e:fb:cd:6c:6f:f5:aa:65:6b:97:
         f2:4c:ef:b2:02:c3:2d:09:10:29:52:7a:28:99:99:44:8c:f9:
         c5:cc:a3:dd:3d:90:32:94:c7:41:92:3b:65:83:44:81:e2:49:
         eb:e2:b2:2e:7a:62:d0:39:91:8b:1e:ab:a9:f5:17:8b:62:00:
         ac:77:31:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJQWJ/XryaOmIR7mMFQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk
OTZiZjkwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
Eyg0ZWE1MWViYzFkN2Y1MzdlZWQ0NmFjMjUwM2YwNGNmNWM2MzE0MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjm/5OwK4mNN8N6wmzJ9oP0nB22f
SocBa6koOP6788nWW3UH+M7Akfm/ys7F9VIJTXr0ytJwp2F2kdRShb6qrY1Mhprh
Olzpn6c4CbzIriv+MOMWdwvb2QUt2WW+mPLeEHtt28lBBtt/1auVW44DFbllxFzs
sv8EA2Dneh0Aw8mG/eOd1QOzhrRleXN8P1aIBFq6+pQTTk7wbG7nQgtxQWnK1fRR
gqN8Yy5tNJNP3CQYffG/tb1YzonCD+GoXkthlCBjhMyRxpujV7OJKI6woA2Un2Ph
y1EDqNsMqJV7YRJUrjrjFfCDdSB+kHnw9PPjSR6Aqm2HnpDXhflyX0DYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6lHrwdf1N+7UasJQPwTPXGMUGTMB8GA1UdIwQY
MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt
Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi
LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVjHHQhF
BL25/0FLkJMOtRv0uRj4OaWs/XR7gvrL1H35Mem2wITRjMZe8eK//W3FZFDPwVcL
C0q/DpUXLL6dOI9mfXYVw4EexRqFnc+LF6CX4s1VieD/2bExmEy5MHz6YJpZSjU5
ItanGcTf1Uls90T69LwYbv4iU+qpZbM3SMYoQp1cnSksg8EgJ2gmy10Zr7i9m322
wSwUHt7np7qw3q0euHdlooeQejnfCEf6oNvdvKCVZuE4AZbJuVZ++81sb/WqZWuX
8kzvsgLDLQkQKVJ6KJmZRIz5xcyj3T2QMpTHQZI7ZYNEgeJJ6+KyLnpi0DmRix6r
qfUXi2IArHcxrQ==
-----END CERTIFICATE-----