Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File:                     435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier:          1XDg/OxRj3Xymv2F4RPk7SVn6pEEaKX9W8IS+kQGTEU=
Subject key identifier:   CB:1D:8B:12:B7:D1:D1:6D:A9:35:27:1A:42:E8:70:D6:54:E9:42:18
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer:       /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial:       01962F3DE0BDC01D9DF279A7758F6F7D120B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number:          06F7
Signing time:             Sun 13 Apr 2025 13:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:46 +0000
Files and hashes:         1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: 10Cf/O0wQa0EPYpQ4/q659msC1jHlnyWNcGO9sZQsTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e0:bd:c0:1d:9d:f2:79:a7:75:8f:6f:7d:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
        Validity
            Not Before: Apr 13 13:01:46 2025 GMT
            Not After : Apr 14 13:01:46 2025 GMT
        Subject: CN=cb1d8b12b7d1d16da935271a42e870d654e94218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:00:46:50:5f:ce:2b:1c:3d:0e:57:18:ac:
                    57:40:f0:b0:92:0d:d9:0d:6f:24:39:5b:6f:80:d2:
                    ba:2d:3e:c6:d4:6f:bd:fd:2c:21:41:0a:48:af:55:
                    bb:dc:cb:bd:03:e2:69:39:ce:8b:32:50:f8:45:4d:
                    77:04:be:f8:2a:9c:23:56:7d:03:6d:65:ca:7a:30:
                    1e:43:c4:28:09:4e:9f:ee:fe:4e:4c:09:63:e8:fa:
                    5f:9c:ea:6f:7e:36:79:dc:96:9d:45:00:64:64:73:
                    12:84:01:fe:ab:68:82:17:77:9b:90:4a:db:7c:b1:
                    40:52:9c:7f:78:1f:ae:a7:7a:ba:17:22:67:26:6e:
                    f4:38:0f:84:bf:9b:5f:34:32:8d:75:27:4e:00:ea:
                    00:34:c3:81:98:69:f5:68:59:45:f5:5b:ae:3d:56:
                    b7:ac:04:fb:63:53:3f:7e:0e:da:69:9c:58:b6:6b:
                    e3:d2:da:ea:e7:8d:c8:5d:8c:70:39:d9:01:a9:c5:
                    61:26:2b:74:89:86:21:c8:03:dd:2d:d0:39:b8:da:
                    f0:54:67:ca:bf:2f:7d:01:a6:26:d5:39:33:35:db:
                    c3:23:bd:3c:c3:f8:69:dc:45:1b:42:b1:4f:92:5e:
                    9d:4c:70:9b:d1:b2:c3:ef:b2:de:56:3a:15:81:7a:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:8B:12:B7:D1:D1:6D:A9:35:27:1A:42:E8:70:D6:54:E9:42:18
            X509v3 Authority Key Identifier:
                keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:e1:c8:02:96:2a:1c:ef:00:09:a1:82:59:1f:5e:87:2f:5c:
         34:61:d7:3a:1e:cf:14:85:02:0e:e6:83:d4:47:ea:56:4a:03:
         46:15:cb:44:dd:e2:f8:1a:5e:df:a2:03:08:47:0c:f6:c4:96:
         98:03:38:6d:c7:29:99:bc:6a:d3:78:fa:5b:7e:81:1a:7f:8e:
         cb:2d:20:da:5f:9f:f1:a2:0d:09:a3:88:04:06:c2:96:72:1a:
         80:de:f3:5c:eb:5a:9d:6e:62:1b:63:88:14:81:5f:08:a4:cd:
         21:39:85:9b:d6:9b:fc:fb:8e:3f:22:36:79:22:d1:d1:b2:85:
         de:e5:a0:2a:89:16:f0:4a:10:fb:bf:b9:df:77:d1:7d:39:df:
         9a:88:35:51:22:c6:25:7b:eb:bc:dd:9e:a2:b7:79:63:4f:c3:
         1b:86:f6:4b:ec:34:b2:cb:5d:04:8c:51:48:e1:0d:e1:61:fa:
         6c:c1:59:b8:f7:f6:4f:da:a3:4b:f8:07:70:f4:7f:40:cc:67:
         06:89:1b:81:d7:0f:9f:c9:88:b2:d8:c8:76:50:61:bc:36:37:
         8e:2d:fb:5a:fe:06:51:54:3d:1b:e7:33:6b:4e:f7:90:ea:75:
         36:c9:69:9e:7c:44:83:b8:cd:92:d3:63:70:68:d2:ae:a7:8d:
         b0:ed:b2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeC9wB2d8nmndY9vfRILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2U0MmExNDZiOTBiYTdjZDMzMWFkNmExM2VlZjFkYTJm
YmE0NDAwHhcNMjUwNDEzMTMwMTQ2WhcNMjUwNDE0MTMwMTQ2WjAzMTEwLwYDVQQD
EyhjYjFkOGIxMmI3ZDFkMTZkYTkzNTI3MWE0MmU4NzBkNjU0ZTk0MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0ARlBfziscPQ5XGKxXQPCwkg3Z
DW8kOVtvgNK6LT7G1G+9/SwhQQpIr1W73Mu9A+JpOc6LMlD4RU13BL74KpwjVn0D
bWXKejAeQ8QoCU6f7v5OTAlj6PpfnOpvfjZ53JadRQBkZHMShAH+q2iCF3ebkErb
fLFAUpx/eB+up3q6FyJnJm70OA+Ev5tfNDKNdSdOAOoANMOBmGn1aFlF9VuuPVa3
rAT7Y1M/fg7aaZxYtmvj0trq543IXYxwOdkBqcVhJit0iYYhyAPdLdA5uNrwVGfK
vy99AaYm1TkzNdvDI708w/hp3EUbQrFPkl6dTHCb0bLD77LeVjoVgXoy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsdixK30dFtqTUnGkLocNZU6UIYMB8GA1UdIwQY
MBaAFON+QqFGuQunzTMa1qE+7x2i+6RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYt
MDYzMjlmNmUwNDc1LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYtMDYzMjlmNmUwNDc1
LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2+HIApYq
HO8ACaGCWR9ehy9cNGHXOh7PFIUCDuaD1EfqVkoDRhXLRN3i+Bpe36IDCEcM9sSW
mAM4bccpmbxq03j6W36BGn+Oyy0g2l+f8aINCaOIBAbClnIagN7zXOtanW5iG2OI
FIFfCKTNITmFm9ab/PuOPyI2eSLR0bKF3uWgKokW8EoQ+7+533fRfTnfmog1USLG
JXvrvN2eord5Y0/DG4b2S+w0sstdBIxRSOEN4WH6bMFZuPf2T9qjS/gHcPR/QMxn
BokbgdcPn8mIstjIdlBhvDY3ji37Wv4GUVQ9G+cza073kOp1NslpnnxEg7jNktNj
cGjSrqeNsO2ydQ==
-----END CERTIFICATE-----