Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
File:                     cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json)
Hash identifier:          RPuTmhYrT/a00IrBjWLyAJmTr049KEtJi4yU5xFgGVg=
Subject key identifier:   35:4A:3B:FB:82:4C:8F:94:7E:8F:5B:DA:11:CC:0C:3E:51:97:16:FA
Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9
Certificate issuer:       /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
Certificate serial:       01962F3D3593E18CCC70FD38BC6F3D07F5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft
Manifest number:          05BB
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: 0SOFnCkZ2s6T9YdycUsajZBBjd5iJ4dBWBspWTpaIck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:35:93:e1:8c:cc:70:fd:38:bc:6f:3d:07:f5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=354a3bfb824c8f947e8f5bda11cc0c3e519716fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:8a:35:5b:0a:09:25:65:e8:b0:2c:9c:ec:
                    cf:dd:e8:83:f6:f0:a5:56:53:06:1b:a8:90:b5:16:
                    17:a1:e8:b4:8b:01:58:c1:dd:79:bf:1a:74:03:e1:
                    34:23:b7:d2:20:a4:a8:b3:cb:0a:0f:fa:7d:d0:7b:
                    74:74:c1:c3:01:c9:ae:1a:86:eb:ce:76:fa:40:a5:
                    17:20:d3:aa:76:9c:e1:a8:9a:b5:d5:a3:30:51:37:
                    3b:d9:c1:29:e0:b3:71:cd:85:a3:bb:19:17:01:36:
                    c8:b9:00:3c:56:8d:6c:4b:7f:99:1c:9a:68:70:16:
                    67:c1:47:e6:45:ce:f6:15:37:7e:a2:fc:eb:8a:00:
                    d9:bf:f9:46:a3:39:00:ff:e1:7f:fa:41:ff:0a:0e:
                    37:d6:eb:22:ef:aa:5e:fa:d1:d7:ed:1f:4e:1e:06:
                    1f:f2:6a:4f:af:b2:f2:12:dc:16:0f:8e:a6:4a:bc:
                    36:93:0e:c4:a9:82:d6:9d:a3:b3:57:42:53:0e:60:
                    ea:d2:58:44:97:5e:3f:b6:0b:9c:bb:22:39:8a:60:
                    d6:be:c1:43:b9:82:c8:05:08:7f:c7:12:77:ef:05:
                    a2:53:e8:4e:ed:d7:16:15:e7:d9:ae:a0:09:4b:0e:
                    7f:f1:94:aa:92:01:a7:6b:85:cb:50:52:ef:6c:7b:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4A:3B:FB:82:4C:8F:94:7E:8F:5B:DA:11:CC:0C:3E:51:97:16:FA
            X509v3 Authority Key Identifier:
                keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:fb:d0:9f:98:33:cc:be:68:e2:24:4c:1f:f6:2f:5d:e4:
         74:f8:a3:7f:37:b3:9f:ad:2b:0d:4a:cd:9a:c7:61:e0:b3:c0:
         59:16:c6:db:32:e0:4d:7d:1d:2b:51:ca:f7:70:19:1a:d9:c0:
         48:e7:26:34:aa:a5:85:91:b5:e2:e6:2c:8c:8d:a2:19:b1:5f:
         d1:4b:59:95:1d:36:b1:be:43:d4:fa:7b:5e:97:db:46:8d:7a:
         27:d0:6d:ef:7f:2b:0d:d3:01:de:1b:4e:32:45:5f:50:b8:fe:
         2e:90:aa:fa:f8:f5:84:99:62:9f:62:83:e5:3b:dd:26:10:df:
         17:94:31:81:93:bd:27:39:c0:2c:b9:8c:dd:3a:05:44:6d:5c:
         c9:86:f2:d7:3f:65:d3:e5:8d:20:1e:0d:8e:9d:a7:75:c3:b6:
         85:df:c7:97:f6:57:f0:dd:9f:f3:f3:9e:36:48:33:74:78:12:
         31:a4:57:ff:af:44:3a:24:2d:e8:c7:b7:07:2a:05:e4:d2:d0:
         6a:ca:ca:4d:b1:e5:59:2c:a4:32:0e:7a:31:e6:b5:d8:af:63:
         a0:eb:89:f6:a4:8d:58:e1:fa:7e:41:35:82:8f:c4:08:0b:1c:
         06:2a:a5:16:76:d5:3a:09:d7:c6:0a:aa:aa:41:8b:74:42:f9:
         3d:7a:ea:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTWT4YzMcP04vG89B/WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh
OThkZjkwHhcNMjUwNDEzMTMwMTAyWhcNMjUwNDE0MTMwMTAyWjAzMTEwLwYDVQQD
EygzNTRhM2JmYjgyNGM4Zjk0N2U4ZjViZGExMWNjMGMzZTUxOTcxNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23CKNVsKCSVl6LAsnOzP3eiD9vCl
VlMGG6iQtRYXoei0iwFYwd15vxp0A+E0I7fSIKSos8sKD/p90Ht0dMHDAcmuGobr
znb6QKUXINOqdpzhqJq11aMwUTc72cEp4LNxzYWjuxkXATbIuQA8Vo1sS3+ZHJpo
cBZnwUfmRc72FTd+ovzrigDZv/lGozkA/+F/+kH/Cg431usi76pe+tHX7R9OHgYf
8mpPr7LyEtwWD46mSrw2kw7EqYLWnaOzV0JTDmDq0lhEl14/tgucuyI5imDWvsFD
uYLIBQh/xxJ37wWiU+hO7dcWFefZrqAJSw5/8ZSqkgGna4XLUFLvbHuTswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVKO/uCTI+Ufo9b2hHMDD5Rlxb6MB8GA1UdIwQY
MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt
ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5
LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbP70J+Y
M8y+aOIkTB/2L13kdPijfzezn60rDUrNmsdh4LPAWRbG2zLgTX0dK1HK93AZGtnA
SOcmNKqlhZG14uYsjI2iGbFf0UtZlR02sb5D1Pp7XpfbRo16J9Bt738rDdMB3htO
MkVfULj+LpCq+vj1hJlin2KD5TvdJhDfF5QxgZO9JznALLmM3ToFRG1cyYby1z9l
0+WNIB4Njp2ndcO2hd/Hl/ZX8N2f8/OeNkgzdHgSMaRX/69EOiQt6Me3ByoF5NLQ
asrKTbHlWSykMg56Mea12K9joOuJ9qSNWOH6fkE1go/ECAscBiqlFnbVOgnXxgqq
qkGLdEL5PXrqtw==
-----END CERTIFICATE-----