Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File:                     dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier:          Qnlc4/vtC/6TgSoczlVATKhyXVnvGsJnTCbcChk6s1o=
Subject key identifier:   2A:98:76:B2:7E:CA:C9:B0:B9:60:4C:EA:4C:55:D6:F3:F3:A7:3A:FB
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer:       /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial:       01962E989F81B1B7F24EA3146A884CB1B07C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number:          0315
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: QLCdgA9rviDMfPaY54cm9PwvY5uB9kdTA0p6ItwO9VI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9f:81:b1:b7:f2:4e:a3:14:6a:88:4c:b1:b0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=2a9876b27ecac9b0b9604cea4c55d6f3f3a73afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:69:7c:88:01:96:3d:be:7b:6a:03:75:44:
                    2c:7d:75:46:1f:56:0d:ad:c7:08:68:73:18:9a:cd:
                    cf:a8:5b:9c:d4:0c:f8:3a:b3:1f:e2:6f:16:5e:9b:
                    8d:5c:d1:27:d3:39:58:68:f4:20:50:c2:68:83:b4:
                    12:45:9f:10:5c:9b:f9:9c:8e:0c:f7:32:a0:8a:9c:
                    1b:f2:c8:6a:d9:5c:ed:7c:87:e1:21:26:83:8a:44:
                    e7:0b:e1:fd:6f:b6:51:e0:4f:52:49:dd:f7:32:31:
                    2d:68:6d:f1:cb:32:65:41:5d:b8:4e:a8:0f:60:5e:
                    6f:13:73:56:9d:86:48:84:2c:b1:04:7c:5c:22:94:
                    2c:47:98:08:e4:4a:d0:c0:ec:0c:eb:0d:99:27:10:
                    58:a8:cd:db:2e:a2:d5:d9:4d:ea:f2:6d:69:40:ea:
                    ab:ad:33:3f:ca:8e:12:cb:ef:3f:b4:7c:9f:dc:13:
                    6a:4b:ef:58:ee:52:dc:ca:65:2d:50:7d:8f:55:98:
                    1d:14:ff:b1:05:68:5b:fe:64:06:a6:d7:43:ad:1f:
                    cd:e7:e0:05:e9:4a:9b:7e:47:e8:29:9b:eb:0d:41:
                    c8:70:80:77:7d:a7:b2:97:d1:90:c4:0b:01:86:2a:
                    02:bf:f4:8a:25:22:7d:43:4d:b3:4b:94:4e:cf:aa:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:76:B2:7E:CA:C9:B0:B9:60:4C:EA:4C:55:D6:F3:F3:A7:3A:FB
            X509v3 Authority Key Identifier:
                keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:6c:09:c7:16:e0:25:35:05:90:1d:aa:74:e9:ab:f5:39:
         fa:2d:59:19:c9:52:f9:ac:a2:e1:85:94:f3:09:5f:f5:3d:bd:
         e2:33:b4:ff:f9:e5:89:db:eb:ed:c3:9a:a8:71:dd:bc:da:7f:
         ec:a0:2c:bd:c6:9a:ea:dd:c7:2a:0f:c2:0d:99:2c:04:69:32:
         fb:02:52:fa:66:31:0e:df:f7:e2:37:90:51:30:6a:ca:78:14:
         b6:9c:53:2b:e8:0f:f0:13:86:52:e7:fa:8f:b1:2e:f8:72:49:
         3c:6d:6f:63:88:2a:b8:b9:2a:c7:1e:34:ff:e5:a4:b5:8b:62:
         83:d0:c0:45:35:ae:e7:fe:1d:d7:e1:90:d7:c0:9e:c0:0e:9a:
         fd:1b:53:e6:32:24:d1:60:9a:fc:e3:9f:83:f5:fa:3f:a3:52:
         cc:57:fe:d9:34:f4:7c:7a:28:9f:29:90:d8:23:65:f1:a3:77:
         51:f6:f3:7e:fb:f8:9d:7f:3f:94:87:25:ac:b7:94:09:e0:f9:
         1f:74:10:5d:0a:99:20:f1:02:f5:3f:37:1f:b5:5f:9f:f8:d3:
         f4:21:0f:89:78:eb:88:37:07:92:6b:dc:38:46:2c:64:e5:d3:
         ac:04:11:59:a9:86:76:92:88:f1:42:0e:93:24:a1:a0:cd:3b:
         17:06:28:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJ+BsbfyTqMUaohMsbB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MDdmNjlkZWU0M2FjMDFkN2RmZWFjYTliNzZhMjQwZWE2
ZWYzNjYwHhcNMjUwNDEzMTAwMTE2WhcNMjUwNDE0MTAwMTE2WjAzMTEwLwYDVQQD
EygyYTk4NzZiMjdlY2FjOWIwYjk2MDRjZWE0YzU1ZDZmM2YzYTczYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4BpfIgBlj2+e2oDdUQsfXVGH1YN
rccIaHMYms3PqFuc1Az4OrMf4m8WXpuNXNEn0zlYaPQgUMJog7QSRZ8QXJv5nI4M
9zKgipwb8shq2VztfIfhISaDikTnC+H9b7ZR4E9SSd33MjEtaG3xyzJlQV24TqgP
YF5vE3NWnYZIhCyxBHxcIpQsR5gI5ErQwOwM6w2ZJxBYqM3bLqLV2U3q8m1pQOqr
rTM/yo4Sy+8/tHyf3BNqS+9Y7lLcymUtUH2PVZgdFP+xBWhb/mQGptdDrR/N5+AF
6UqbfkfoKZvrDUHIcIB3faeyl9GQxAsBhioCv/SKJSJ9Q02zS5ROz6rYyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqYdrJ+ysmwuWBM6kxV1vPzpzr7MB8GA1UdIwQY
MBaAFHYH9p3uQ6wB19/qypt2okDqbvNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTct
YzAyNDNhM2JkYWZiLzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTctYzAyNDNhM2JkYWZi
LzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAk1sCccW
4CU1BZAdqnTpq/U5+i1ZGclS+ayi4YWU8wlf9T294jO0//nlidvr7cOaqHHdvNp/
7KAsvcaa6t3HKg/CDZksBGky+wJS+mYxDt/34jeQUTBqyngUtpxTK+gP8BOGUuf6
j7Eu+HJJPG1vY4gquLkqxx40/+WktYtig9DARTWu5/4d1+GQ18CewA6a/RtT5jIk
0WCa/OOfg/X6P6NSzFf+2TT0fHoonymQ2CNl8aN3Ufbzfvv4nX8/lIclrLeUCeD5
H3QQXQqZIPEC9T83H7Vfn/jT9CEPiXjriDcHkmvcOEYsZOXTrAQRWamGdpKI8UIO
kyShoM07FwYoFg==
-----END CERTIFICATE-----