Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          7RVqe8IVSNT71mi6iHpmUZXY5W6GV5C7kfq79WJDo3Q=
Subject key identifier:   32:F3:A1:E4:AD:E5:97:08:91:D4:05:D7:0C:B3:16:6B:D4:2A:D9:03
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       01962FAB0E939BC15596C5720D42BEE7D4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          0322
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: NjiXHScixPnswiojfhxSw/lZeXKd529lERJ0APtCbc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0e:93:9b:c1:55:96:c5:72:0d:42:be:e7:d4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=32f3a1e4ade5970891d405d70cb3166bd42ad903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:77:0b:01:70:0c:0a:cb:80:b8:97:9d:d6:
                    d3:8c:2a:0a:65:62:20:0c:c0:15:63:c6:c1:b0:00:
                    2b:29:e8:cf:00:f3:63:a2:e5:98:0a:67:2d:39:e3:
                    45:06:c2:01:26:35:99:8f:f0:4f:74:3d:eb:bb:d9:
                    90:18:63:2e:1a:79:30:b7:1d:b0:d2:b5:92:57:e2:
                    ab:ab:6c:05:6c:1d:c6:35:5c:ce:f5:db:d5:92:b6:
                    e3:fa:f5:45:a0:76:c1:e7:21:10:b9:de:0f:8f:6e:
                    5d:fe:3c:67:ed:53:45:31:78:6f:ee:37:b9:be:6d:
                    9f:03:ea:cf:3b:d4:6c:8c:55:56:b2:09:74:86:f8:
                    06:43:6d:68:f6:b3:3b:e2:bf:15:dc:81:14:d0:99:
                    80:e2:e1:f4:08:90:e7:5e:a8:82:aa:47:db:c0:7b:
                    18:3a:86:62:71:6f:fa:3b:6a:ca:39:1d:5c:c1:20:
                    42:e8:cc:c8:1a:f1:99:48:b3:a1:17:1b:5c:f7:25:
                    37:ae:61:01:61:63:e5:e0:4e:00:51:1a:9e:ba:81:
                    c2:43:f9:4f:34:b3:c5:50:75:6a:2f:b2:f3:00:6a:
                    49:47:3c:47:f2:a4:0f:8c:a7:92:20:65:71:f6:17:
                    24:d2:5f:b3:74:2b:ad:29:c7:78:83:dd:71:58:48:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:A1:E4:AD:E5:97:08:91:D4:05:D7:0C:B3:16:6B:D4:2A:D9:03
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:44:49:37:70:e6:fe:a6:ac:08:21:a4:51:00:df:8a:72:eb:
         49:90:3e:24:c1:ab:c9:bd:ef:2b:1f:b7:08:36:14:9e:a9:6f:
         e6:b8:bd:d8:1b:be:c8:00:5c:2e:1b:52:5a:6f:e8:13:2a:11:
         98:ad:8a:01:f5:32:fe:b8:a2:47:27:7d:20:4c:77:fb:53:c7:
         23:8b:d4:1a:67:20:11:bb:9a:5c:58:03:b0:0a:72:69:8c:6a:
         9f:21:08:00:5b:44:2f:2a:1a:22:85:77:17:7f:cc:0c:48:34:
         1d:9f:ba:ea:ef:bf:a1:4f:22:91:bd:a6:69:d8:76:15:26:a3:
         2b:1b:5f:bd:01:2e:43:b2:a1:2c:85:e0:1b:dd:fc:12:ac:66:
         0f:2c:a4:09:88:a0:7b:12:c6:85:69:a0:32:15:e4:35:ff:18:
         9f:95:84:e7:e9:25:52:53:8a:d3:22:16:7d:0a:d3:4b:01:cf:
         c1:70:34:51:c5:33:2d:e8:9a:e2:dc:11:4e:c0:ed:50:59:c8:
         1e:de:b6:1f:75:a8:f9:8a:c8:b8:aa:cf:10:b9:e6:28:6b:a2:
         2d:91:4a:50:cf:9f:75:17:73:ca:d1:aa:38:93:77:57:35:a7:
         1f:57:47:13:4e:ea:64:f9:a7:64:64:a1:4b:33:e6:85:aa:3f:
         7f:a2:ce:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqw6Tm8FVlsVyDUK+59TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0N2U5MmJmNDFhNWE3NzQ1MTFmYjcyM2FmOTRhZmYwZDM1
MTI2MDIwHhcNMjUwNDEzMTUwMTAxWhcNMjUwNDE0MTUwMTAxWjAzMTEwLwYDVQQD
EygzMmYzYTFlNGFkZTU5NzA4OTFkNDA1ZDcwY2IzMTY2YmQ0MmFkOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxJ3CwFwDArLgLiXndbTjCoKZWIg
DMAVY8bBsAArKejPAPNjouWYCmctOeNFBsIBJjWZj/BPdD3ru9mQGGMuGnkwtx2w
0rWSV+Krq2wFbB3GNVzO9dvVkrbj+vVFoHbB5yEQud4Pj25d/jxn7VNFMXhv7je5
vm2fA+rPO9RsjFVWsgl0hvgGQ21o9rM74r8V3IEU0JmA4uH0CJDnXqiCqkfbwHsY
OoZicW/6O2rKOR1cwSBC6MzIGvGZSLOhFxtc9yU3rmEBYWPl4E4AURqeuoHCQ/lP
NLPFUHVqL7LzAGpJRzxH8qQPjKeSIGVx9hck0l+zdCutKcd4g91xWEib0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLzoeSt5ZcIkdQF1wyzFmvUKtkDMB8GA1UdIwQY
MBaAFOR+kr9Bpad0UR+3I6+Ur/DTUSYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWIt
OTQ0ZDg4MTA5ODQxLzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWItOTQ0ZDg4MTA5ODQx
LzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIURJN3Dm
/qasCCGkUQDfinLrSZA+JMGryb3vKx+3CDYUnqlv5ri92Bu+yABcLhtSWm/oEyoR
mK2KAfUy/riiRyd9IEx3+1PHI4vUGmcgEbuaXFgDsApyaYxqnyEIAFtELyoaIoV3
F3/MDEg0HZ+66u+/oU8ikb2madh2FSajKxtfvQEuQ7KhLIXgG938EqxmDyykCYig
exLGhWmgMhXkNf8Yn5WE5+klUlOK0yIWfQrTSwHPwXA0UcUzLeia4twRTsDtUFnI
Ht62H3Wo+YrIuKrPELnmKGuiLZFKUM+fdRdzytGqOJN3VzWnH1dHE07qZPmnZGSh
SzPmhao/f6LObQ==
-----END CERTIFICATE-----