Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
File:                     3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json)
Hash identifier:          ezPkuIG/QEbw5pqg/yNlaeZpoEWmn8+ruqwl7iqaITo=
Subject key identifier:   DD:A1:E3:9E:08:42:8E:4B:E6:C8:79:AC:25:9F:14:17:39:F0:AF:F6
Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57
Certificate issuer:       /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
Certificate serial:       01962E996C48878F0ABA373A79BADE64D472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft
Manifest number:          0552
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: 1vSc1pV04RT4SqBu6lpDFGs8TmAYM6rsL8nYIx3SerQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:48:87:8f:0a:ba:37:3a:79:ba:de:64:d4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=dda1e39e08428e4be6c879ac259f141739f0aff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:4a:25:1d:77:a6:f0:ba:3b:26:0b:c4:8c:
                    73:dd:1c:9b:67:1b:53:dd:c3:8c:a3:83:21:25:48:
                    05:9f:a1:41:f3:bf:15:96:84:68:de:59:32:ce:4d:
                    9e:13:62:f1:3f:4b:e2:85:4c:b4:b3:a9:0d:e3:46:
                    62:f0:ec:af:be:9d:dc:b8:5e:cd:2a:e6:dd:5f:d6:
                    20:2e:f7:d3:13:71:0e:a7:56:de:bc:a3:3f:c9:67:
                    a6:85:56:81:a4:df:10:3a:41:9e:b7:31:18:23:08:
                    3e:e4:e8:5f:b5:70:34:d8:8c:1b:6d:51:df:b9:38:
                    de:5a:39:cc:62:21:62:75:11:76:0c:09:73:c4:0d:
                    f1:7e:f4:cb:bc:76:9c:a5:65:e0:ed:31:7b:50:c2:
                    d6:88:28:da:81:f1:6b:5f:a9:ac:6e:d8:1a:d1:3d:
                    76:6c:c4:32:93:1f:55:20:68:06:a5:6c:8a:e7:b0:
                    9d:74:78:b7:0c:43:5c:30:5d:90:58:83:fb:a0:cd:
                    bf:a5:56:be:7b:9e:a4:c2:1c:5b:cb:87:de:8c:d7:
                    1e:0b:1e:67:fa:b2:6b:f5:cb:08:a7:40:7d:be:10:
                    98:da:12:52:17:1b:9f:5e:95:85:7d:ee:2b:03:91:
                    db:3c:1f:54:6f:18:76:2e:90:a3:a3:47:47:a0:40:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:E3:9E:08:42:8E:4B:E6:C8:79:AC:25:9F:14:17:39:F0:AF:F6
            X509v3 Authority Key Identifier:
                keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:de:42:43:b8:40:62:bc:ba:9d:00:f3:fa:94:57:f6:9b:90:
         18:1f:58:47:fd:46:eb:67:1b:da:d1:18:b3:99:cb:b2:f8:79:
         8c:61:ce:ba:b2:3f:c4:3a:5c:ad:98:95:ba:bb:b0:30:bc:fa:
         1b:7b:10:29:70:38:bf:72:19:0f:e2:0f:a8:5b:32:8c:cb:30:
         a6:64:6d:68:d3:90:4d:d5:8d:ed:09:bb:68:9a:cb:11:1d:88:
         b8:2c:0e:67:1e:95:82:d2:71:fa:15:fe:00:3e:f1:41:0f:3c:
         80:cd:1c:29:f7:3c:26:4c:29:e1:12:5b:45:1c:e8:06:0e:ee:
         b4:96:3b:91:fd:61:00:30:1c:41:1d:63:08:27:7a:72:34:54:
         cd:72:db:f7:62:41:59:f2:92:19:06:3d:7c:60:2b:3a:8b:ac:
         b4:33:f4:f7:2c:9d:28:fb:b1:31:9c:e8:bd:9e:41:38:8b:9b:
         7a:08:37:5d:42:fe:a9:a9:e5:85:fb:6a:8c:12:2d:4e:9a:8a:
         fa:3f:1f:d5:b0:d4:cf:a2:ca:c3:85:7b:e6:95:04:e3:0b:ce:
         f9:4c:e5:3f:46:a3:6a:b1:8d:cb:28:86:6f:95:b0:7a:25:a7:
         d0:79:ed:b9:f6:7d:9f:b2:c3:e1:61:1b:49:53:6e:ec:17:65:
         fd:90:32:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWxIh48Kujc6ebreZNRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk
MGEwNTcwHhcNMjUwNDEzMTAwMjA4WhcNMjUwNDE0MTAwMjA4WjAzMTEwLwYDVQQD
EyhkZGExZTM5ZTA4NDI4ZTRiZTZjODc5YWMyNTlmMTQxNzM5ZjBhZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/dKJR13pvC6OyYLxIxz3RybZxtT
3cOMo4MhJUgFn6FB878VloRo3lkyzk2eE2LxP0vihUy0s6kN40Zi8Oyvvp3cuF7N
KubdX9YgLvfTE3EOp1bevKM/yWemhVaBpN8QOkGetzEYIwg+5OhftXA02IwbbVHf
uTjeWjnMYiFidRF2DAlzxA3xfvTLvHacpWXg7TF7UMLWiCjagfFrX6msbtga0T12
bMQykx9VIGgGpWyK57CddHi3DENcMF2QWIP7oM2/pVa+e56kwhxby4fejNceCx5n
+rJr9csIp0B9vhCY2hJSFxufXpWFfe4rA5HbPB9Ubxh2LpCjo0dHoEBFvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2h454IQo5L5sh5rCWfFBc58K/2MB8GA1UdIwQY
MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt
MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk
LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN5CQ7hA
Yry6nQDz+pRX9puQGB9YR/1G62cb2tEYs5nLsvh5jGHOurI/xDpcrZiVuruwMLz6
G3sQKXA4v3IZD+IPqFsyjMswpmRtaNOQTdWN7Qm7aJrLER2IuCwOZx6VgtJx+hX+
AD7xQQ88gM0cKfc8Jkwp4RJbRRzoBg7utJY7kf1hADAcQR1jCCd6cjRUzXLb92JB
WfKSGQY9fGArOoustDP09yydKPuxMZzovZ5BOIubegg3XUL+qanlhftqjBItTpqK
+j8f1bDUz6LKw4V75pUE4wvO+UzlP0ajarGNyyiGb5WweiWn0HntufZ9n7LD4WEb
SVNu7Bdl/ZAy6g==
-----END CERTIFICATE-----