Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File:                     oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier:          frE1Hr6FGS+DO2jkrJwcj9b9Jd9dXfIX+aB5J+qvYkw=
Subject key identifier:   0B:D4:DA:39:99:55:F7:15:52:02:36:94:A1:7E:0C:A6:B9:53:C2:0E
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer:       /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial:       01962E98AD99F974D4000FDA01AE1DEE4E8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: g/RvwKi96Y6JBrQB5HEmOBwmA51rsVhHtAg3NR8U8yw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:99:f9:74:d4:00:0f:da:01:ae:1d:ee:4e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=0bd4da399955f71552023694a17e0ca6b953c20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:a5:b0:da:f2:ca:41:2e:29:0a:3b:2d:d0:
                    c0:87:53:f3:29:ab:d1:20:e2:d3:46:4f:31:14:8d:
                    e3:7c:b6:b3:e6:35:a9:a6:1f:4c:63:ae:d2:62:1b:
                    da:29:3e:d0:bf:9d:af:9c:b4:38:ea:21:31:8d:66:
                    99:1c:f0:06:92:23:24:f1:35:f8:d7:00:9a:2e:12:
                    bc:dd:2a:9a:94:5a:be:14:96:53:a4:e8:37:e9:7c:
                    b1:92:71:61:d9:be:b9:e3:a1:d1:01:5c:23:41:a9:
                    41:35:36:04:33:13:39:81:8f:5d:b5:25:94:35:73:
                    de:68:1d:bb:4e:e8:91:09:8e:1a:4d:65:90:87:4d:
                    12:a2:08:43:75:89:d4:ff:cb:46:b8:37:f9:3d:10:
                    3b:3e:12:2e:bf:0d:1d:ee:2c:a3:94:62:6f:2c:35:
                    de:ef:59:b6:03:15:36:5d:42:5c:a1:ea:2a:45:25:
                    64:45:8a:d1:08:fd:b0:e5:a9:51:53:62:c8:c7:1f:
                    56:eb:aa:6a:48:ee:ef:0c:77:88:ee:50:ec:84:71:
                    0e:6b:ff:ae:b9:c7:e4:57:a1:e7:90:4f:a1:92:1e:
                    5d:cc:f9:2d:f7:eb:6f:ae:c7:95:18:5a:80:64:38:
                    04:aa:64:9b:a1:95:e3:17:33:55:3d:01:4b:9d:5c:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:DA:39:99:55:F7:15:52:02:36:94:A1:7E:0C:A6:B9:53:C2:0E
            X509v3 Authority Key Identifier:
                keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:e6:c9:8b:04:88:cd:10:c6:3f:ee:61:ff:7d:fc:8e:54:
         4e:69:da:4f:d2:98:08:a8:32:25:1f:e3:88:99:86:f1:98:8a:
         39:99:90:54:87:63:46:5e:8b:9e:77:86:4a:45:a8:60:74:87:
         74:67:a5:3a:c3:63:45:09:b0:73:d9:7a:61:f2:e2:49:ca:1c:
         03:7c:90:f3:f4:42:32:7c:e4:03:52:d0:f5:03:4f:52:81:0b:
         c2:2e:96:09:9c:ba:49:37:c1:f6:36:dd:0c:e7:67:ef:44:ca:
         6c:40:a4:6e:bf:54:02:32:d8:40:88:8d:e6:90:2d:4b:ab:5f:
         07:99:34:bc:d0:9f:7c:ef:90:52:e9:f9:21:c9:08:43:3d:03:
         db:7e:fc:c9:f7:67:5e:28:97:3e:c3:df:9f:69:ed:0c:22:4b:
         3e:bc:75:14:02:16:89:a7:d4:f1:7d:61:65:ae:32:00:bf:88:
         20:30:fd:85:3d:67:91:7f:3a:e6:a4:9e:ac:fc:ba:0c:b4:57:
         94:55:00:9e:78:1b:41:a6:71:cc:f4:48:7e:0a:2e:c2:75:8e:
         60:6f:6b:b3:db:48:2b:3c:32:05:5e:f7:a2:87:84:78:9c:b8:
         ca:8e:2f:0f:39:25:3d:81:5a:f2:98:ec:d8:b6:99:83:20:c6:
         5b:37:24:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumK2Z+XTUAA/aAa4d7k6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI0NDYyNjk3YTI3ZmU3YWI5NGI2YWNhOTA2NzkzMWQ5
MjEwMmYwHhcNMjUwNDEzMTAwMTE5WhcNMjUwNDE0MTAwMTE5WjAzMTEwLwYDVQQD
EygwYmQ0ZGEzOTk5NTVmNzE1NTIwMjM2OTRhMTdlMGNhNmI5NTNjMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwailsNryykEuKQo7LdDAh1PzKavR
IOLTRk8xFI3jfLaz5jWpph9MY67SYhvaKT7Qv52vnLQ46iExjWaZHPAGkiMk8TX4
1wCaLhK83SqalFq+FJZTpOg36XyxknFh2b6546HRAVwjQalBNTYEMxM5gY9dtSWU
NXPeaB27TuiRCY4aTWWQh00SoghDdYnU/8tGuDf5PRA7PhIuvw0d7iyjlGJvLDXe
71m2AxU2XUJcoeoqRSVkRYrRCP2w5alRU2LIxx9W66pqSO7vDHeI7lDshHEOa/+u
ucfkV6HnkE+hkh5dzPkt9+tvrseVGFqAZDgEqmSboZXjFzNVPQFLnVwy/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvU2jmZVfcVUgI2lKF+DKa5U8IOMB8GA1UdIwQY
MBaAFKFSRGJpeif+erlLasqQZ5MdkhAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGIt
NGIxYWY0MTRmZDAwLzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYTc2ZmUtNjExOS00ZGUwLWJmNGItNGIxYWY0MTRmZDAw
LzEvb1ZKRVltbDZKXzU2dVV0cXlwQm5reDJTRUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATozmyYsE
iM0Qxj/uYf99/I5UTmnaT9KYCKgyJR/jiJmG8ZiKOZmQVIdjRl6LnneGSkWoYHSH
dGelOsNjRQmwc9l6YfLiScocA3yQ8/RCMnzkA1LQ9QNPUoELwi6WCZy6STfB9jbd
DOdn70TKbECkbr9UAjLYQIiN5pAtS6tfB5k0vNCffO+QUun5IckIQz0D2378yfdn
XiiXPsPfn2ntDCJLPrx1FAIWiafU8X1hZa4yAL+IIDD9hT1nkX865qSerPy6DLRX
lFUAnngbQaZxzPRIfgouwnWOYG9rs9tIKzwyBV73ooeEeJy4yo4vDzklPYFa8pjs
2LaZgyDGWzckBg==
-----END CERTIFICATE-----