Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          PNiVuKgFxIHpghAn3oO0nDfsf2iOJlQeB1eUT+QHuIs=
Subject key identifier:   DC:80:C4:9B:70:9A:15:AC:F3:71:E4:1D:E0:A8:8F:58:0A:DA:E1:3A
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       01962DF3940D208E95DA2B04D972F4424BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 07:00:59 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: h5z3KT+M4qFsUGLQsArjm67k3MwbtfHqqGqhnwkpj/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:94:0d:20:8e:95:da:2b:04:d9:72:f4:42:4b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: Apr 13 07:00:59 2025 GMT
            Not After : Apr 14 07:00:59 2025 GMT
        Subject: CN=dc80c49b709a15acf371e41de0a88f580adae13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:c3:49:7f:a0:3e:cb:8c:15:08:d1:33:b9:
                    ea:b8:a0:20:8c:1a:8d:a9:1a:60:46:cf:94:85:8f:
                    19:ef:0c:6c:e6:53:8a:a8:2a:c8:e2:60:99:95:8d:
                    e5:57:b3:8b:1b:13:33:e9:6c:77:81:33:6b:dd:fd:
                    fa:61:ec:e1:58:f6:fc:a8:aa:cf:11:73:bb:cc:b3:
                    7b:c8:9f:15:0b:3a:7d:fd:ff:44:de:5f:c5:6f:94:
                    9a:42:5b:22:0e:d1:52:d1:4a:a5:b4:d9:c3:58:f8:
                    18:78:97:b1:ef:df:9c:b4:76:5d:49:a6:da:2e:bd:
                    62:11:11:29:af:c5:89:78:ad:71:ec:e3:51:66:79:
                    78:83:10:0e:53:c7:16:7e:0e:27:1c:3a:ac:75:b8:
                    0f:b1:1c:44:46:37:98:54:74:24:21:19:d1:28:8f:
                    19:15:a4:46:95:8e:b8:24:06:02:a1:31:72:a4:c5:
                    c8:6a:a9:45:74:17:06:ed:3f:1b:74:6f:8e:ed:2c:
                    83:4c:65:65:73:df:32:fa:3e:48:d7:3a:93:7f:56:
                    81:aa:13:7b:24:f4:98:18:3c:d8:36:0a:c8:64:74:
                    aa:b4:65:9a:91:dd:47:c4:97:c0:1c:93:8c:7e:11:
                    ac:4d:c3:fb:53:bf:c7:e1:3e:32:57:bd:8d:f6:7b:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:C4:9B:70:9A:15:AC:F3:71:E4:1D:E0:A8:8F:58:0A:DA:E1:3A
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:46:0c:bc:1e:a3:4f:c6:7f:0d:c7:01:37:06:cd:f9:cf:e1:
         cd:1d:c9:d8:7d:cc:d0:69:7c:ee:ac:4b:78:3e:50:4f:5a:43:
         23:70:c3:a8:0b:a5:11:72:02:76:48:08:09:87:91:9d:a2:24:
         93:a3:d4:f6:50:00:e8:b0:36:21:37:19:7e:90:1d:d4:67:00:
         0a:01:9d:64:d1:4f:80:02:61:e0:c1:cd:f0:1d:5c:9e:26:c0:
         a4:b3:12:42:70:9c:85:ba:a2:1c:39:46:ae:28:56:80:31:e0:
         9c:1e:99:05:ed:db:69:ea:12:a8:cc:02:04:97:45:6b:d2:e0:
         3a:48:dd:fe:47:d1:32:f6:67:4e:ff:6a:d5:5b:39:c1:5c:ff:
         05:0c:15:c4:ce:bd:62:85:cf:0b:d9:52:10:ca:d1:5f:ee:5e:
         8c:04:c4:59:1e:31:49:78:de:0d:1d:bb:4a:6c:fd:b1:87:0a:
         a8:b4:0c:c4:e5:3b:86:99:d3:6f:4c:e6:4a:8a:9c:81:96:af:
         0c:be:2e:58:4d:5b:18:54:83:cc:7f:c5:2d:98:60:6a:63:ac:
         63:b2:89:36:ac:50:7d:90:f7:ca:71:47:60:0f:91:48:85:93:
         04:c3:dc:ca:d2:86:2d:67:5b:bd:ca:94:e2:d3:22:99:13:c5:
         47:1a:25:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85QNII6V2isE2XL0QkvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTZlZTdlNDg0YWUyZWYwOTIwZDA5NWJjYWUyNjhmYWZk
Njk2MTkwHhcNMjUwNDEzMDcwMDU5WhcNMjUwNDE0MDcwMDU5WjAzMTEwLwYDVQQD
EyhkYzgwYzQ5YjcwOWExNWFjZjM3MWU0MWRlMGE4OGY1ODBhZGFlMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7zDSX+gPsuMFQjRM7nquKAgjBqN
qRpgRs+UhY8Z7wxs5lOKqCrI4mCZlY3lV7OLGxMz6Wx3gTNr3f36YezhWPb8qKrP
EXO7zLN7yJ8VCzp9/f9E3l/Fb5SaQlsiDtFS0UqltNnDWPgYeJex79+ctHZdSaba
Lr1iEREpr8WJeK1x7ONRZnl4gxAOU8cWfg4nHDqsdbgPsRxERjeYVHQkIRnRKI8Z
FaRGlY64JAYCoTFypMXIaqlFdBcG7T8bdG+O7SyDTGVlc98y+j5I1zqTf1aBqhN7
JPSYGDzYNgrIZHSqtGWakd1HxJfAHJOMfhGsTcP7U7/H4T4yV72N9nuHQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyAxJtwmhWs83HkHeCoj1gK2uE6MB8GA1UdIwQY
MBaAFNRW7n5ISuLvCSDQlbyuJo+v1pYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUt
NTRlOWZmZDNiYmUwLzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUtNTRlOWZmZDNiYmUw
LzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkYMvB6j
T8Z/DccBNwbN+c/hzR3J2H3M0Gl87qxLeD5QT1pDI3DDqAulEXICdkgICYeRnaIk
k6PU9lAA6LA2ITcZfpAd1GcACgGdZNFPgAJh4MHN8B1cnibApLMSQnCchbqiHDlG
rihWgDHgnB6ZBe3baeoSqMwCBJdFa9LgOkjd/kfRMvZnTv9q1Vs5wVz/BQwVxM69
YoXPC9lSEMrRX+5ejATEWR4xSXjeDR27Smz9sYcKqLQMxOU7hpnTb0zmSoqcgZav
DL4uWE1bGFSDzH/FLZhgamOsY7KJNqxQfZD3ynFHYA+RSIWTBMPcytKGLWdbvcqU
4tMimRPFRxolMw==
-----END CERTIFICATE-----