Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File:                     elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier:          C77cVEf0xftMeLIVwcmGNCBxKiyY0i32h04XE+dFgIE=
Subject key identifier:   6B:07:F0:2B:94:28:D1:26:3E:AA:B6:9E:68:15:19:9B:90:87:0C:58
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer:       /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial:       01962E61F9538EEC7E0AE74A3BE441D49F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number:          02F9
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: uhFoDReuf4ejCAOI5rmeIYc1A6THQh7q9SrW8wkOdKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:53:8e:ec:7e:0a:e7:4a:3b:e4:41:d4:9f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=6b07f02b9428d1263eaab69e6815199b90870c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:73:2b:5c:35:be:cf:ad:8a:d4:79:f4:88:
                    f9:e6:b3:94:ea:05:e8:d8:5f:4b:ee:38:96:13:bf:
                    9a:e9:a3:06:56:a8:5c:b3:18:96:f9:50:9a:74:35:
                    71:20:16:e0:cb:1f:c8:78:fc:70:dd:a9:d2:63:b2:
                    45:13:3c:a5:d4:ea:71:57:f1:33:c2:c0:ea:a3:cd:
                    eb:b1:b4:30:ee:8f:69:e5:8e:32:d6:0b:76:c7:ae:
                    ce:26:c4:0e:bc:27:a4:a5:40:ed:46:9a:6e:d1:a5:
                    74:c5:66:97:9b:d0:86:c5:4f:19:60:08:c8:fd:13:
                    39:54:54:8d:62:2a:91:07:46:c4:d3:76:8d:d1:a6:
                    47:04:70:5c:ba:8b:84:c1:3f:e2:99:bb:3e:cd:f1:
                    e9:73:52:e5:6a:f5:a2:1a:a3:90:a4:09:83:7c:43:
                    a6:9b:6d:98:b7:bc:de:92:cb:e8:98:a3:a3:4b:1c:
                    14:6f:1d:84:73:f5:a4:c5:fd:4a:e9:95:77:3e:83:
                    3e:bb:3d:47:68:e8:29:ac:af:e0:a6:29:ac:6b:ee:
                    0f:84:21:cf:9d:90:1a:72:4e:65:3b:7b:4f:d4:7d:
                    69:6b:30:61:99:c6:b4:3b:d8:c1:93:6f:d2:fb:eb:
                    5c:73:34:39:a3:06:90:78:2f:a7:6e:00:68:03:87:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:F0:2B:94:28:D1:26:3E:AA:B6:9E:68:15:19:9B:90:87:0C:58
            X509v3 Authority Key Identifier:
                keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:03:bf:f6:63:b5:6b:72:d4:d6:da:d2:45:e2:3b:0a:4a:18:
         eb:97:9a:59:4a:db:70:5e:e7:0c:26:cb:6b:e0:de:7d:d1:f4:
         18:c8:64:b5:ac:9a:0c:42:60:c8:bf:f3:f3:92:c2:6f:9f:8c:
         98:f6:56:d4:1e:ee:30:d6:eb:15:a6:a7:de:c9:87:99:c4:f9:
         02:6f:d1:58:96:26:05:9e:bc:24:03:80:60:20:53:c5:1b:35:
         c2:a7:2a:2a:42:ff:bb:06:b7:24:31:e0:4c:e9:4d:27:b1:30:
         44:47:d8:d5:43:1b:38:70:6e:ac:7a:18:8d:02:8f:1b:55:fa:
         a1:39:ea:08:ac:b5:d8:fd:b2:8a:99:4b:7c:c5:27:ec:d2:87:
         72:e1:23:27:18:88:7e:bb:ce:30:fd:7a:67:09:fd:8b:cb:f0:
         01:aa:be:5d:81:19:12:b4:04:87:a1:a1:87:de:42:14:76:c4:
         1f:b6:4c:1b:4a:67:e9:82:b4:74:76:74:4c:b6:78:34:b9:51:
         a3:53:65:26:d8:55:0c:24:52:19:cf:2f:e9:fa:88:28:4e:81:
         8b:37:5d:fd:c8:55:c2:03:62:4c:f9:45:62:29:19:c5:18:24:
         c2:b8:2f:67:10:7c:cd:41:65:ff:53:89:9f:95:37:65:b8:b7:
         9a:09:10:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYflTjux+CudKO+RB1J+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTI0ZGFjYmUwMmE5NTkzMWNhMWQ2ZWUyOWIzYzg5NTdh
NGVjYmUwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
Eyg2YjA3ZjAyYjk0MjhkMTI2M2VhYWI2OWU2ODE1MTk5YjkwODcwYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SRzK1w1vs+titR59Ij55rOU6gXo
2F9L7jiWE7+a6aMGVqhcsxiW+VCadDVxIBbgyx/IePxw3anSY7JFEzyl1OpxV/Ez
wsDqo83rsbQw7o9p5Y4y1gt2x67OJsQOvCekpUDtRppu0aV0xWaXm9CGxU8ZYAjI
/RM5VFSNYiqRB0bE03aN0aZHBHBcuouEwT/imbs+zfHpc1LlavWiGqOQpAmDfEOm
m22Yt7zeksvomKOjSxwUbx2Ec/Wkxf1K6ZV3PoM+uz1HaOgprK/gpimsa+4PhCHP
nZAack5lO3tP1H1pazBhmca0O9jBk2/S++tcczQ5owaQeC+nbgBoA4eUnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsH8CuUKNEmPqq2nmgVGZuQhwxYMB8GA1UdIwQY
MBaAFHpSTay+AqlZMcodbuKbPIlXpOy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUt
YjhiMTBjNmQ1ZWJmLzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUtYjhiMTBjNmQ1ZWJm
LzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgO/9mO1
a3LU1trSReI7CkoY65eaWUrbcF7nDCbLa+DefdH0GMhktayaDEJgyL/z85LCb5+M
mPZW1B7uMNbrFaan3smHmcT5Am/RWJYmBZ68JAOAYCBTxRs1wqcqKkL/uwa3JDHg
TOlNJ7EwREfY1UMbOHBurHoYjQKPG1X6oTnqCKy12P2yiplLfMUn7NKHcuEjJxiI
frvOMP16Zwn9i8vwAaq+XYEZErQEh6Ghh95CFHbEH7ZMG0pn6YK0dHZ0TLZ4NLlR
o1NlJthVDCRSGc8v6fqIKE6Bizdd/chVwgNiTPlFYikZxRgkwrgvZxB8zUFl/1OJ
n5U3Zbi3mgkQiw==
-----END CERTIFICATE-----