Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File:                     V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier:          v5zuIgjM/LmIJwihpV6yGtqgdxr8U7NH47PVczB5KBo=
Subject key identifier:   D5:CF:E8:82:86:6D:48:05:76:E9:4D:D2:2B:3D:9A:93:06:7F:69:70
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer:       /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial:       01962E9872EF8DA67A97B25D997007DF8C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number:          06F8
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: Rs9clRHaOKciboK2neBZtkM5iQseX8lsHuyKPHsKH7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:ef:8d:a6:7a:97:b2:5d:99:70:07:df:8c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=d5cfe882866d480576e94dd22b3d9a93067f6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:c1:0b:b3:fd:29:db:51:83:0c:65:2a:f4:
                    fb:c2:60:b8:2c:f2:c4:76:97:bd:7a:51:42:00:4b:
                    21:2e:b8:74:f7:8e:7f:1f:29:d6:67:40:9b:11:ff:
                    9f:bf:14:0f:02:b5:e1:42:94:f3:d6:03:c9:a2:a8:
                    fc:56:ea:28:df:d1:f9:95:e7:0c:bc:8f:9f:1d:28:
                    f1:7b:4f:d2:4e:f3:fd:25:b7:b1:1f:8e:97:95:d4:
                    82:1c:bd:2a:fa:44:24:6c:72:6c:03:6a:ae:b7:3f:
                    18:f1:d3:b1:d1:a6:39:54:76:07:cb:0e:39:6d:91:
                    49:3e:4d:15:56:4c:ca:e7:93:da:75:94:60:69:30:
                    72:40:0f:dc:0c:49:3b:e4:0a:49:24:30:90:83:ec:
                    37:04:ff:5a:d6:e3:a6:6c:1e:35:68:0f:af:ed:b4:
                    c3:e0:90:60:1b:8b:18:d9:cc:e8:a3:f4:e7:8c:da:
                    2c:01:56:89:a5:75:a4:c0:e3:e2:bc:2e:ad:6b:f1:
                    3d:4c:aa:06:ce:e2:ef:ac:56:66:cf:ef:68:7a:a7:
                    08:09:9f:9c:9d:f3:74:d0:73:b9:5b:42:53:9b:b1:
                    f7:cf:da:e2:19:8c:a7:df:3a:1e:96:e3:d9:bb:f2:
                    3d:7b:1f:e8:ff:fb:bd:47:bf:3e:31:b3:bd:28:ce:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CF:E8:82:86:6D:48:05:76:E9:4D:D2:2B:3D:9A:93:06:7F:69:70
            X509v3 Authority Key Identifier:
                keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:a3:2a:25:8b:8b:9a:0f:36:1d:5c:88:cd:be:fe:4a:96:
         7b:53:01:36:8d:72:41:bc:19:68:92:e7:10:fb:91:8b:a2:67:
         31:c6:5d:36:de:4d:53:fc:61:d6:f7:19:16:f4:1f:b3:92:d9:
         2c:76:de:ad:ae:d0:52:16:f9:81:f2:2d:23:5e:dc:bf:b8:e3:
         b4:99:a9:6b:75:74:26:31:bc:51:89:25:f0:ab:3a:e0:d5:86:
         f7:69:c1:ea:c2:42:06:3e:dc:40:8f:71:07:c3:9a:ad:23:32:
         1e:e1:a9:40:0a:98:55:0c:05:92:05:40:ec:ea:a4:46:c6:60:
         f3:aa:db:d5:ea:98:ef:9b:0b:5d:21:0a:3b:b3:0a:de:ee:26:
         c4:da:17:fd:28:85:d1:4b:b2:53:e1:26:d8:fa:51:26:51:99:
         c8:7d:21:a2:cf:aa:fe:1e:8f:59:a3:05:78:d2:09:ae:4b:5e:
         f3:85:05:e9:9e:b0:80:b0:55:de:3d:90:50:74:dc:b2:00:53:
         9c:03:b1:66:77:ad:2f:cb:72:fa:09:61:e1:b2:92:c7:d2:b5:
         18:51:8a:0a:d8:30:fc:b8:74:92:10:ff:ce:89:63:f8:68:d6:
         4c:ad:76:42:b8:d4:e5:76:81:2d:8a:83:2d:15:e2:cc:4d:7a:
         fb:a1:da:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHLvjaZ6l7JdmXAH34xFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Nzk3N2EyNzU2MWNmOTA1OGE1MmU0NjBjOTQ5OTQ4MDU1
YmRkM2QwHhcNMjUwNDEzMTAwMTA0WhcNMjUwNDE0MTAwMTA0WjAzMTEwLwYDVQQD
EyhkNWNmZTg4Mjg2NmQ0ODA1NzZlOTRkZDIyYjNkOWE5MzA2N2Y2OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWXBC7P9KdtRgwxlKvT7wmC4LPLE
dpe9elFCAEshLrh0945/HynWZ0CbEf+fvxQPArXhQpTz1gPJoqj8Vuoo39H5lecM
vI+fHSjxe0/STvP9JbexH46XldSCHL0q+kQkbHJsA2qutz8Y8dOx0aY5VHYHyw45
bZFJPk0VVkzK55PadZRgaTByQA/cDEk75ApJJDCQg+w3BP9a1uOmbB41aA+v7bTD
4JBgG4sY2czoo/TnjNosAVaJpXWkwOPivC6ta/E9TKoGzuLvrFZmz+9oeqcICZ+c
nfN00HO5W0JTm7H3z9riGYyn3zoeluPZu/I9ex/o//u9R78+MbO9KM6ZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXP6IKGbUgFdulN0is9mpMGf2lwMB8GA1UdIwQY
MBaAFFd5d6J1Yc+QWKUuRgyUmUgFW909MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kZTc4YzktYTVmYS00Mzg1LTllZGYt
NTRmNzJkN2Y1YzIwLzEvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kZTc4YzktYTVmYS00Mzg1LTllZGYtNTRmNzJkN2Y1YzIw
LzEvVjNsM29uVmh6NUJZcFM1R0RKU1pTQVZiM1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKE6jKiWL
i5oPNh1ciM2+/kqWe1MBNo1yQbwZaJLnEPuRi6JnMcZdNt5NU/xh1vcZFvQfs5LZ
LHbera7QUhb5gfItI17cv7jjtJmpa3V0JjG8UYkl8Ks64NWG92nB6sJCBj7cQI9x
B8OarSMyHuGpQAqYVQwFkgVA7OqkRsZg86rb1eqY75sLXSEKO7MK3u4mxNoX/SiF
0UuyU+Em2PpRJlGZyH0hos+q/h6PWaMFeNIJrkte84UF6Z6wgLBV3j2QUHTcsgBT
nAOxZnetL8ty+glh4bKSx9K1GFGKCtgw/Lh0khD/zolj+GjWTK12QrjU5XaBLYqD
LRXizE16+6Ha1g==
-----END CERTIFICATE-----