Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File:                     UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier:          y6GkcDqJqbFIY6miLvpvM/GVr70RD+rc9FLGvlsPg5I=
Subject key identifier:   EE:5D:05:E8:D1:B7:FA:D5:CE:72:89:D5:DD:9A:32:4C:DB:17:A6:14
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer:       /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial:       01962E9889702D1340D2C1423533568E978A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: V1QLGYNYhv3zabcXFR3Z0wRAvDgGp3CPIQK7A799Yxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:70:2d:13:40:d2:c1:42:35:33:56:8e:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=ee5d05e8d1b7fad5ce7289d5dd9a324cdb17a614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:2a:01:62:5d:55:d9:4d:ea:b8:09:b3:4b:
                    0e:fd:8b:8d:a5:70:5f:a6:b0:9a:9d:a1:c4:1a:10:
                    38:15:53:81:2c:da:65:b8:d2:f1:f9:00:4e:62:71:
                    30:84:db:43:98:21:25:9d:8e:81:bd:b9:ad:e7:e5:
                    d2:57:e7:28:cc:c0:71:0d:8d:92:cc:08:31:92:b0:
                    5b:f9:90:8b:f4:8c:19:60:34:59:ed:47:f5:2d:b6:
                    b5:3c:3e:8f:7a:11:2b:8b:51:03:2e:0f:85:db:b3:
                    c4:13:b1:24:21:94:20:30:b3:83:68:d5:64:30:6b:
                    79:6c:3d:da:fd:4d:d9:5a:77:59:6c:1a:27:0a:b4:
                    ad:c3:1c:cf:20:7b:4a:71:47:e3:f0:04:3b:33:0d:
                    0b:8b:73:48:49:54:38:ae:fc:e8:21:44:ea:5e:ed:
                    de:a7:94:70:34:68:0b:45:01:46:36:95:0b:47:57:
                    88:63:84:05:12:bd:a8:41:cc:2d:a8:93:a7:93:77:
                    73:25:9f:24:8b:e9:79:c3:a5:d5:fa:a3:e4:86:c8:
                    10:51:c9:e9:63:4a:0e:2f:9a:12:13:9a:c9:87:c6:
                    0f:f6:10:1b:38:01:ab:63:0c:f1:00:a3:ac:de:e2:
                    49:9d:15:0b:50:70:5d:db:28:6a:07:52:ce:66:b4:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:05:E8:D1:B7:FA:D5:CE:72:89:D5:DD:9A:32:4C:DB:17:A6:14
            X509v3 Authority Key Identifier:
                keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:38:77:d5:f7:01:49:ae:7b:7c:40:9d:eb:2e:69:f3:0a:ed:
         b8:f5:50:b3:11:6d:94:01:7e:91:16:34:49:4c:0c:ec:d1:1a:
         ee:dd:37:c5:35:c0:31:97:95:f6:bd:c4:a9:08:aa:7c:30:4a:
         ec:39:2f:78:ec:6b:19:f5:4a:db:5d:32:c3:da:43:b2:31:10:
         0d:5a:50:1f:5a:d2:c0:87:ca:55:83:d4:2c:d2:6e:8b:37:4e:
         1e:e2:38:03:6c:68:bb:20:e0:a1:49:ae:f6:bc:87:64:c7:fa:
         de:ef:1b:a1:e8:8a:5d:7e:aa:5f:23:41:fd:0b:93:50:74:85:
         0e:8e:b5:cf:a4:10:7f:c7:cc:b7:d0:34:7d:98:a5:41:72:eb:
         03:a7:c8:bc:4a:03:ab:7b:22:df:51:be:89:22:cb:8f:ba:18:
         07:1b:eb:82:e9:80:04:b0:f2:db:df:bf:17:74:ef:b8:ac:37:
         5d:a2:04:ae:8e:dd:aa:9d:f7:36:38:aa:4b:d7:8d:48:d2:38:
         37:ec:77:a8:a9:8f:3d:08:76:7c:58:70:6f:b0:31:0d:75:07:
         cc:3c:09:53:52:1a:23:ad:c7:36:c4:bf:cd:7e:3f:65:11:5b:
         39:94:f9:a7:dd:1d:03:8e:86:14:eb:cc:58:cc:8f:5f:ca:33:
         cb:e6:0e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIlwLRNA0sFCNTNWjpeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGIyOTI5NzJjMTBjNjlmOTdlY2QyNGYyZmI2OWI0ZjY3
NzZkZTgwHhcNMjUwNDEzMTAwMTEwWhcNMjUwNDE0MTAwMTEwWjAzMTEwLwYDVQQD
EyhlZTVkMDVlOGQxYjdmYWQ1Y2U3Mjg5ZDVkZDlhMzI0Y2RiMTdhNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RoqAWJdVdlN6rgJs0sO/YuNpXBf
prCanaHEGhA4FVOBLNpluNLx+QBOYnEwhNtDmCElnY6Bvbmt5+XSV+cozMBxDY2S
zAgxkrBb+ZCL9IwZYDRZ7Uf1Lba1PD6PehEri1EDLg+F27PEE7EkIZQgMLODaNVk
MGt5bD3a/U3ZWndZbBonCrStwxzPIHtKcUfj8AQ7Mw0Li3NISVQ4rvzoIUTqXu3e
p5RwNGgLRQFGNpULR1eIY4QFEr2oQcwtqJOnk3dzJZ8ki+l5w6XV+qPkhsgQUcnp
Y0oOL5oSE5rJh8YP9hAbOAGrYwzxAKOs3uJJnRULUHBd2yhqB1LOZrTvQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5dBejRt/rVznKJ1d2aMkzbF6YUMB8GA1UdIwQY
MBaAFFHbKSlywQxp+X7NJPL7abT2d23oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2Ut
NmVhZjlkYWJhZTBmLzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8wYmM5NTUtMjVkZS00Nzk4LWIzY2UtNmVhZjlkYWJhZTBm
LzEvVWRzcEtYTEJER241ZnMwazh2dHB0UFozYmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTh31fcB
Sa57fECd6y5p8wrtuPVQsxFtlAF+kRY0SUwM7NEa7t03xTXAMZeV9r3EqQiqfDBK
7DkveOxrGfVK210yw9pDsjEQDVpQH1rSwIfKVYPULNJuizdOHuI4A2xouyDgoUmu
9ryHZMf63u8boeiKXX6qXyNB/QuTUHSFDo61z6QQf8fMt9A0fZilQXLrA6fIvEoD
q3si31G+iSLLj7oYBxvrgumABLDy29+/F3TvuKw3XaIEro7dqp33NjiqS9eNSNI4
N+x3qKmPPQh2fFhwb7AxDXUHzDwJU1IaI63HNsS/zX4/ZRFbOZT5p90dA46GFOvM
WMyPX8ozy+YObw==
-----END CERTIFICATE-----