Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File:                     5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier:          4gPQUFYxBpIDzXIhmx8Uf0jYZt3go71OwtEKc/qyyfs=
Subject key identifier:   68:82:ED:4B:17:CC:6B:4B:6B:24:48:2C:54:E0:33:17:E8:6E:39:CB
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer:       /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial:       01962DF3C5928F9F5056A148B81F15ABF3FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: OU4VIdpkvE8eoEhtvtbJipInSrhaKLIPaG0Y37q8q8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c5:92:8f:9f:50:56:a1:48:b8:1f:15:ab:f3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=6882ed4b17cc6b4b6b24482c54e03317e86e39cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:e2:5f:4a:00:4c:02:70:ee:d4:21:23:7d:
                    a3:21:6a:85:69:11:e7:6d:f4:c0:62:77:6a:6d:dc:
                    9e:26:b5:c6:d3:08:a2:c9:0b:d1:c5:bf:fa:1f:55:
                    0a:68:5a:86:2f:d7:6f:4d:67:3a:62:00:e4:fc:35:
                    b7:85:33:7f:db:2c:9a:63:f7:7c:7a:fb:81:74:b6:
                    0f:0b:87:a1:c4:a4:d5:8c:5a:88:92:2f:dd:51:08:
                    d1:a2:49:e5:41:bd:37:b2:87:26:d5:92:57:bb:ae:
                    bb:12:dc:c1:b3:da:ac:1a:61:be:a0:fc:4e:ee:ce:
                    34:3d:0f:f7:4d:52:11:5b:32:72:fb:5d:90:c7:0b:
                    da:07:23:cb:1b:76:85:08:99:6b:19:19:bb:bb:02:
                    bb:a2:c4:6f:5a:29:f1:bb:ce:75:76:65:25:45:14:
                    01:12:e7:f7:60:df:bb:73:fe:24:21:13:0a:03:c0:
                    2c:4f:b5:7e:3c:17:94:c5:76:64:e3:51:b9:6a:45:
                    23:db:e3:7d:01:7d:9b:04:82:c7:5b:06:a5:80:f4:
                    67:e8:58:9e:6b:a5:65:95:a8:4d:18:ac:74:19:71:
                    11:dd:24:e0:5e:9d:73:b8:4f:bb:ca:a4:54:f6:14:
                    97:bb:17:e7:27:8c:42:6f:6e:96:47:5f:16:d7:1e:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:ED:4B:17:CC:6B:4B:6B:24:48:2C:54:E0:33:17:E8:6E:39:CB
            X509v3 Authority Key Identifier:
                keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d9:e0:9d:cf:ec:18:1d:2e:76:ab:46:e3:57:88:52:da:f8:
         24:33:a4:50:55:00:f0:9b:3c:ea:84:35:db:12:ca:87:0e:56:
         fa:9c:0b:84:7b:61:09:e9:51:2b:56:c7:c1:32:0e:b3:5e:3c:
         c7:9f:24:67:ce:75:5b:30:2c:79:26:46:5c:37:76:e3:71:9b:
         d1:0c:d5:df:e0:58:0f:25:83:a7:2b:10:b5:63:21:83:2e:4b:
         06:c2:ae:c8:d0:d0:67:08:fb:5c:6a:bc:16:b3:d7:03:cb:b4:
         fe:d8:9c:3b:94:73:94:bc:72:3d:9d:a0:10:9b:c2:63:d0:eb:
         57:da:8d:65:27:7c:ad:07:2e:da:ef:77:23:22:c1:35:37:de:
         75:fe:55:e0:d0:c7:05:82:76:03:6e:36:c8:5f:26:be:a2:ac:
         6c:fd:2a:ae:b4:63:31:02:ea:77:d2:b5:a9:1e:20:69:b6:28:
         6c:91:25:11:4c:f4:a4:3d:9a:84:5f:45:ce:cc:1e:3e:cf:d5:
         9d:9e:78:9a:3c:f2:e0:a4:0e:01:b7:6a:c0:5f:ea:7a:59:c3:
         8a:ca:4c:ae:6f:f2:43:2a:02:56:59:e7:a0:c2:b7:d0:ff:ad:
         4c:2e:45:51:81:86:39:22:32:a0:0b:9c:9e:a5:30:10:04:39:
         94:da:dd:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88WSj59QVqFIuB8Vq/P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2
ZjlhMjMwHhcNMjUwNDEzMDcwMTEyWhcNMjUwNDE0MDcwMTEyWjAzMTEwLwYDVQQD
Eyg2ODgyZWQ0YjE3Y2M2YjRiNmIyNDQ4MmM1NGUwMzMxN2U4NmUzOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGbiX0oATAJw7tQhI32jIWqFaRHn
bfTAYndqbdyeJrXG0wiiyQvRxb/6H1UKaFqGL9dvTWc6YgDk/DW3hTN/2yyaY/d8
evuBdLYPC4ehxKTVjFqIki/dUQjRoknlQb03socm1ZJXu667EtzBs9qsGmG+oPxO
7s40PQ/3TVIRWzJy+12QxwvaByPLG3aFCJlrGRm7uwK7osRvWinxu851dmUlRRQB
Euf3YN+7c/4kIRMKA8AsT7V+PBeUxXZk41G5akUj2+N9AX2bBILHWwalgPRn6Fie
a6VllahNGKx0GXER3STgXp1zuE+7yqRU9hSXuxfnJ4xCb26WR18W1x7RqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiC7UsXzGtLayRILFTgMxfobjnLMB8GA1UdIwQY
MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt
NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk
LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwdngnc/s
GB0udqtG41eIUtr4JDOkUFUA8Js86oQ12xLKhw5W+pwLhHthCelRK1bHwTIOs148
x58kZ851WzAseSZGXDd243Gb0QzV3+BYDyWDpysQtWMhgy5LBsKuyNDQZwj7XGq8
FrPXA8u0/ticO5RzlLxyPZ2gEJvCY9DrV9qNZSd8rQcu2u93IyLBNTfedf5V4NDH
BYJ2A242yF8mvqKsbP0qrrRjMQLqd9K1qR4gabYobJElEUz0pD2ahF9FzswePs/V
nZ54mjzy4KQOAbdqwF/qelnDispMrm/yQyoCVlnnoMK30P+tTC5FUYGGOSIyoAuc
nqUwEAQ5lNrdtA==
-----END CERTIFICATE-----