Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File:                     U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier:          VK6TZjKpXviZv09pwN4Tk8orxn6cIUfvqILZKPI9Vdw=
Subject key identifier:   8B:20:2A:82:1D:B0:BE:1B:3D:C2:C6:C1:44:76:80:57:E0:AF:D9:08
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer:       /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial:       01962DF3BA2EC0C8B192B110352674C967AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: nR++vxqqSlEBZcnEvQIDcq9K8ll4PT7UemK6qY65AZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ba:2e:c0:c8:b1:92:b1:10:35:26:74:c9:67:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=8b202a821db0be1b3dc2c6c144768057e0afd908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:7d:a0:5c:7e:93:b9:f7:d6:02:d6:39:e0:
                    69:6e:d0:f6:4d:31:df:7e:25:e5:1b:d9:c8:a7:51:
                    f1:6f:eb:7b:2c:2b:82:ed:05:5d:56:77:b5:1e:fd:
                    ac:27:94:3f:b7:35:69:4a:b7:06:54:3f:b8:cd:4a:
                    11:f3:2d:30:5e:89:c0:81:92:aa:d7:2a:85:c3:2e:
                    2a:72:06:a3:89:25:5c:0c:6c:86:74:04:6e:01:fc:
                    d8:84:0b:00:ac:92:ca:44:86:64:8d:d1:31:b4:8a:
                    10:a1:14:5e:9d:c1:d2:02:58:19:68:a8:2a:34:31:
                    7d:93:bf:cc:b6:54:e5:bd:9a:d4:1c:57:33:8c:a5:
                    66:6f:e1:7b:e2:61:db:2b:3f:f8:89:43:5f:73:de:
                    40:38:ec:83:de:61:16:e8:75:56:50:3a:23:87:9a:
                    b2:7d:60:b1:7e:9f:ea:e9:d4:a0:d9:cc:61:3f:b9:
                    e7:4f:68:d1:4e:46:af:e0:53:2b:8a:f0:2b:73:1c:
                    fe:a0:8e:fb:32:76:55:9c:34:71:3e:19:f2:7d:fb:
                    af:6e:69:e9:0a:8c:13:5a:00:0d:b1:f7:80:97:bb:
                    1f:28:8b:55:90:ed:97:6e:c3:3a:25:0e:f7:ec:86:
                    be:9c:e3:c5:87:42:f8:32:9d:50:df:1b:f2:78:3f:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:20:2A:82:1D:B0:BE:1B:3D:C2:C6:C1:44:76:80:57:E0:AF:D9:08
            X509v3 Authority Key Identifier:
                keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:3d:5e:6a:a3:86:78:5b:7f:36:b7:c2:ac:25:c5:5a:07:
         5f:be:5f:13:0c:2d:c4:55:11:38:ae:bf:7e:9d:d8:fc:40:9c:
         80:9f:e3:f8:24:34:8b:81:37:79:7e:29:dc:3f:48:47:a0:8e:
         0b:1f:25:75:43:3e:c8:6e:b0:81:f5:01:c9:c6:99:48:70:8b:
         80:31:33:64:06:e2:c8:6c:a6:f1:2f:2d:49:30:f3:56:f2:47:
         6a:5c:ba:c6:43:27:5e:e8:f6:1c:68:4a:4c:61:8c:ee:fe:da:
         38:13:9f:e3:e8:90:11:b5:4a:3d:5e:14:f5:25:28:21:05:9a:
         59:69:80:ab:ca:fe:70:6a:30:de:76:18:6d:23:c7:60:28:8a:
         b6:4a:26:41:76:cc:87:a4:a8:66:49:42:2e:ee:6e:9c:1c:fa:
         7f:a3:68:b6:6e:47:ea:57:5b:47:4a:84:a1:53:80:5e:f6:85:
         81:f6:97:ab:b5:86:f7:3d:cc:8a:25:c6:68:4c:86:10:2c:22:
         f8:25:11:e7:75:bf:59:98:b2:79:2c:bd:55:1a:92:d4:de:90:
         cc:98:d8:bc:1e:26:32:02:7b:9a:09:c6:36:7b:39:fa:f9:9b:
         8c:e9:46:6f:50:80:b9:75:d9:5f:29:b2:16:90:3f:f9:77:ed:
         4b:d6:6d:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87ouwMixkrEQNSZ0yWesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNjU4M2RlODM2ZmNjMjhlNzBiZjY2ZWFkYjhkMzhmM2Y2
NGY0ZTEwHhcNMjUwNDEzMDcwMTA5WhcNMjUwNDE0MDcwMTA5WjAzMTEwLwYDVQQD
Eyg4YjIwMmE4MjFkYjBiZTFiM2RjMmM2YzE0NDc2ODA1N2UwYWZkOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gx9oFx+k7n31gLWOeBpbtD2TTHf
fiXlG9nIp1Hxb+t7LCuC7QVdVne1Hv2sJ5Q/tzVpSrcGVD+4zUoR8y0wXonAgZKq
1yqFwy4qcgajiSVcDGyGdARuAfzYhAsArJLKRIZkjdExtIoQoRRencHSAlgZaKgq
NDF9k7/MtlTlvZrUHFczjKVmb+F74mHbKz/4iUNfc95AOOyD3mEW6HVWUDojh5qy
fWCxfp/q6dSg2cxhP7nnT2jRTkav4FMrivArcxz+oI77MnZVnDRxPhnyffuvbmnp
CowTWgANsfeAl7sfKItVkO2XbsM6JQ737Ia+nOPFh0L4Mp1Q3xvyeD+/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsgKoIdsL4bPcLGwUR2gFfgr9kIMB8GA1UdIwQY
MBaAFFNlg96Db8wo5wv2bq24048/ZPThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2Et
ODJhNjk5MGRmMzhkLzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy82ZjI2M2EtNDE5My00MzA5LTljN2EtODJhNjk5MGRmMzhk
LzEvVTJXRDNvTnZ6Q2puQ19adXJialRqejlrOU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2A9Xmqj
hnhbfza3wqwlxVoHX75fEwwtxFUROK6/fp3Y/ECcgJ/j+CQ0i4E3eX4p3D9IR6CO
Cx8ldUM+yG6wgfUBycaZSHCLgDEzZAbiyGym8S8tSTDzVvJHaly6xkMnXuj2HGhK
TGGM7v7aOBOf4+iQEbVKPV4U9SUoIQWaWWmAq8r+cGow3nYYbSPHYCiKtkomQXbM
h6SoZklCLu5unBz6f6Notm5H6ldbR0qEoVOAXvaFgfaXq7WG9z3MiiXGaEyGECwi
+CUR53W/WZiyeSy9VRqS1N6QzJjYvB4mMgJ7mgnGNns5+vmbjOlGb1CAuXXZXymy
FpA/+XftS9Zt2Q==
-----END CERTIFICATE-----