Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File:                     TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier:          fH5ZkHj5xTS570WOVtzAw+8aSOEUUuN7rN8gaqid1Yg=
Subject key identifier:   8B:E3:8E:A9:E6:48:35:C0:BE:3C:47:3E:10:D2:20:0A:7F:FF:A2:43
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer:       /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial:       01962E9999AB5C89970D23D217CA86BFCC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: DWVbblncT8+HQReKG+bu++ydxvb8spG6f6EhfZ88/PQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:99:ab:5c:89:97:0d:23:d2:17:ca:86:bf:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=8be38ea9e64835c0be3c473e10d2200a7fffa243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:4f:32:f4:bd:c1:b6:a1:05:b2:9b:df:46:
                    7d:f8:58:9c:83:cc:b2:c9:83:4f:a0:1b:09:0f:75:
                    3b:de:d9:46:68:c0:d4:5a:ba:8a:9c:f2:57:98:58:
                    d1:fa:61:7a:0b:01:f9:b9:e3:2b:1d:2f:5a:f0:f1:
                    1d:97:75:9f:ff:91:70:9c:c5:18:c1:92:e1:26:5f:
                    7d:df:bc:6c:0d:0c:d4:00:46:dc:24:4a:34:af:e1:
                    1b:93:6f:33:ad:47:c2:47:17:47:15:50:45:5a:03:
                    72:ae:92:21:ca:77:a4:e6:20:bd:3c:32:7f:af:12:
                    f4:4f:cf:ab:57:f5:f8:2c:5d:a4:41:b0:30:7f:4a:
                    ee:7c:a1:fe:b9:bb:99:d5:19:80:87:33:bc:2d:68:
                    f5:56:5e:f0:52:5b:15:11:3a:1a:ed:b1:11:9a:40:
                    0e:36:67:cc:f3:58:47:2c:04:16:70:0b:c7:aa:24:
                    7e:34:69:81:89:fc:f6:53:73:97:b3:6e:53:47:95:
                    49:a5:9c:b2:a3:dd:40:b8:79:5e:f2:54:e9:a7:ef:
                    d1:76:78:13:f2:c7:48:8f:83:f1:db:82:64:21:36:
                    ba:57:5b:33:b2:72:bc:4d:d0:09:32:94:00:9a:b2:
                    14:01:3f:fa:28:b4:d1:e0:25:1f:f4:0e:38:5f:dc:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:8E:A9:E6:48:35:C0:BE:3C:47:3E:10:D2:20:0A:7F:FF:A2:43
            X509v3 Authority Key Identifier:
                keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9c:7b:86:ef:5c:13:6d:cd:57:6e:f0:e5:e1:9f:56:96:16:
         9c:db:d9:68:2a:1d:01:84:9a:f7:e8:57:9f:ef:c3:e0:86:27:
         f1:6a:38:9f:0b:e9:87:ba:9e:9d:27:43:bf:3b:23:5f:91:db:
         32:2f:bf:a7:8f:b2:07:68:f4:52:ae:40:d8:51:e3:cf:7a:b4:
         ef:dd:d3:4f:8c:2c:ed:32:b5:bf:54:41:31:bb:18:7f:1a:91:
         08:63:d5:f6:1f:90:70:e0:d5:1a:cb:ee:86:1b:16:5b:88:1f:
         90:dc:71:e1:9d:86:66:58:ed:15:a7:24:56:56:d9:f9:c5:28:
         2f:c4:71:d7:2e:1c:4f:a1:f6:f1:87:21:2e:03:6d:6e:cc:97:
         a5:4a:37:fb:a5:ff:ce:6b:ed:57:68:cb:a2:01:21:db:08:e4:
         31:7e:38:15:90:64:72:30:87:87:fa:b5:e1:fe:94:b4:04:4c:
         95:f1:34:f5:bb:9c:c2:f7:28:94:cd:b1:ef:ae:3f:91:9c:dd:
         27:04:2a:d9:fe:2c:f8:55:1c:7a:54:3b:db:87:af:ca:c2:f2:
         41:8b:b3:40:46:28:73:b2:82:4a:f5:00:9e:db:d2:5c:96:3a:
         26:35:37:88:24:ea:3d:4c:f6:42:36:06:a7:0d:85:3c:b1:6e:
         32:fe:25:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZmrXImXDSPSF8qGv8w3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJkNDBhNTNiYjYwYjg2NzU5ZTZlYzBhNTIwNzMwMGI0
MWFmNzAwHhcNMjUwNDEzMTAwMjIwWhcNMjUwNDE0MTAwMjIwWjAzMTEwLwYDVQQD
Eyg4YmUzOGVhOWU2NDgzNWMwYmUzYzQ3M2UxMGQyMjAwYTdmZmZhMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWRPMvS9wbahBbKb30Z9+Ficg8yy
yYNPoBsJD3U73tlGaMDUWrqKnPJXmFjR+mF6CwH5ueMrHS9a8PEdl3Wf/5FwnMUY
wZLhJl9937xsDQzUAEbcJEo0r+Ebk28zrUfCRxdHFVBFWgNyrpIhynek5iC9PDJ/
rxL0T8+rV/X4LF2kQbAwf0rufKH+ubuZ1RmAhzO8LWj1Vl7wUlsVEToa7bERmkAO
NmfM81hHLAQWcAvHqiR+NGmBifz2U3OXs25TR5VJpZyyo91AuHle8lTpp+/RdngT
8sdIj4Px24JkITa6V1szsnK8TdAJMpQAmrIUAT/6KLTR4CUf9A44X9xwPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvjjqnmSDXAvjxHPhDSIAp//6JDMB8GA1UdIwQY
MBaAFE8y1ApTu2C4Z1nm7ApSBzALQa9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYt
YzZiZjJmZmI3MjUzLzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNzVlNjMtODE0OS00OWM2LTkzOWYtYzZiZjJmZmI3MjUz
LzEvVHpMVUNsTzdZTGhuV2Vic0NsSUhNQXRCcjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpx7hu9c
E23NV27w5eGfVpYWnNvZaCodAYSa9+hXn+/D4IYn8Wo4nwvph7qenSdDvzsjX5Hb
Mi+/p4+yB2j0Uq5A2FHjz3q0793TT4ws7TK1v1RBMbsYfxqRCGPV9h+QcODVGsvu
hhsWW4gfkNxx4Z2GZljtFackVlbZ+cUoL8Rx1y4cT6H28YchLgNtbsyXpUo3+6X/
zmvtV2jLogEh2wjkMX44FZBkcjCHh/q14f6UtARMlfE09bucwvcolM2x764/kZzd
JwQq2f4s+FUcelQ724evysLyQYuzQEYoc7KCSvUAntvSXJY6JjU3iCTqPUz2QjYG
pw2FPLFuMv4l3g==
-----END CERTIFICATE-----