Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File:                     sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier:          oViJyFiAtVT3Ke+gyzyj+GQh4vCP181imhmssHUjRRg=
Subject key identifier:   2F:75:88:CB:05:A9:EF:B7:51:17:B8:E4:13:8E:1E:72:0A:8E:A1:A2
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer:       /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial:       01962F071757F52D8724E7076051C9FB897A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number:          0E66
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: VUZNTen62B146ilDZKuhC/Gp2Dr+N561QSxzW/mG9qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:17:57:f5:2d:87:24:e7:07:60:51:c9:fb:89:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=2f7588cb05a9efb75117b8e4138e1e720a8ea1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:75:ee:ae:64:5d:88:8d:12:a3:89:a4:2e:
                    e0:34:01:50:a5:39:e6:f4:67:0c:23:98:93:19:3d:
                    74:db:2c:b3:3a:21:6e:2c:17:cc:69:36:70:e2:7c:
                    23:6c:69:47:80:a4:a8:f2:1a:96:c6:e8:0f:14:a0:
                    fc:71:ff:b6:15:41:a9:f5:98:bb:e7:5d:e7:5c:fa:
                    96:f4:d8:0e:15:80:30:3a:26:3a:2e:57:9f:96:72:
                    18:c2:ce:bc:4f:64:c3:99:da:2d:6c:ad:14:59:dd:
                    8b:44:ec:85:f2:fa:69:16:54:2e:62:be:cb:36:20:
                    26:9d:2d:0e:52:f9:19:3f:f9:1e:92:31:a5:09:18:
                    04:c1:34:f9:89:53:0e:43:76:f5:4f:fd:0d:31:ed:
                    4e:55:fd:48:85:22:b9:23:4d:86:0b:e8:5e:85:bd:
                    08:d9:63:0a:4c:50:26:35:ab:47:be:30:d8:36:0d:
                    f0:2c:58:a2:ba:3c:a2:b6:08:0b:8f:4f:9c:91:59:
                    42:9e:a4:76:c7:b2:92:ec:5a:1b:1a:8e:2f:aa:cd:
                    5b:f2:2b:e1:de:fd:92:c2:bf:ca:7f:c3:23:3c:0e:
                    c4:45:7a:d1:4d:10:3d:d7:d0:0e:54:c7:67:f0:3d:
                    2a:cf:69:f5:62:b5:c1:ff:97:88:20:d8:49:49:38:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:75:88:CB:05:A9:EF:B7:51:17:B8:E4:13:8E:1E:72:0A:8E:A1:A2
            X509v3 Authority Key Identifier:
                keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:35:4e:26:79:b7:92:ea:ce:27:97:e6:43:8e:0d:16:33:6a:
         ea:bd:db:b4:00:9c:93:56:d4:1d:bb:df:81:55:12:8a:e4:79:
         f6:f3:0d:46:cc:59:4f:0c:49:12:6e:c0:02:c2:ef:ed:c5:8c:
         76:29:af:2f:9b:ab:a0:91:9d:00:87:29:a0:16:db:c5:1e:b1:
         62:e0:8e:ce:62:2a:97:65:dc:32:e3:6c:8e:e9:d2:32:ae:2f:
         3e:8c:bb:32:ba:6d:94:fe:3a:4f:b4:0b:dc:2c:88:7c:31:31:
         bc:41:de:fb:a3:33:d6:72:67:4e:bf:42:7b:86:48:60:a7:be:
         b6:77:34:f4:7f:c7:0a:ec:88:ad:d1:3a:b4:1a:35:75:a7:94:
         5c:31:d3:73:d8:12:e5:0d:4c:6c:ff:ca:d9:1c:b0:f8:32:02:
         d3:e8:1d:33:f2:aa:92:00:d4:21:f2:f5:f3:3b:53:4f:aa:52:
         26:c9:8c:f8:dc:39:77:b5:7d:aa:a5:c6:05:38:d5:02:1a:69:
         ba:42:55:62:82:08:6e:c6:73:6f:e7:bd:3d:b9:16:cc:d0:cd:
         c5:08:1c:fd:d6:23:b7:04:37:eb:68:a5:46:42:84:16:21:1a:
         27:62:8f:ff:70:da:9a:c1:86:d4:25:50:d6:ca:d1:1c:b6:f3:
         20:bd:96:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxdX9S2HJOcHYFHJ+4l6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDgwODZiOGQxZGM3ZjEwZTM0M2ZkMTY1NzE5MjM5YTc1
NWJkMzQwHhcNMjUwNDEzMTIwMTU1WhcNMjUwNDE0MTIwMTU1WjAzMTEwLwYDVQQD
EygyZjc1ODhjYjA1YTllZmI3NTExN2I4ZTQxMzhlMWU3MjBhOGVhMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL517q5kXYiNEqOJpC7gNAFQpTnm
9GcMI5iTGT102yyzOiFuLBfMaTZw4nwjbGlHgKSo8hqWxugPFKD8cf+2FUGp9Zi7
513nXPqW9NgOFYAwOiY6LleflnIYws68T2TDmdotbK0UWd2LROyF8vppFlQuYr7L
NiAmnS0OUvkZP/kekjGlCRgEwTT5iVMOQ3b1T/0NMe1OVf1IhSK5I02GC+hehb0I
2WMKTFAmNatHvjDYNg3wLFiiujyitggLj0+ckVlCnqR2x7KS7FobGo4vqs1b8ivh
3v2Swr/Kf8MjPA7ERXrRTRA919AOVMdn8D0qz2n1YrXB/5eIINhJSTipqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC91iMsFqe+3URe45BOOHnIKjqGiMB8GA1UdIwQY
MBaAFLFICGuNHcfxDjQ/0WVxkjmnVb00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEt
ZTNkNWQ3ZWY0MjMyLzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kYWRmMzQtMWYzZi00Y2VhLTgwMDEtZTNkNWQ3ZWY0MjMy
LzEvc1VnSWE0MGR4X0VPTkRfUlpYR1NPYWRWdlRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTVOJnm3
kurOJ5fmQ44NFjNq6r3btACck1bUHbvfgVUSiuR59vMNRsxZTwxJEm7AAsLv7cWM
dimvL5uroJGdAIcpoBbbxR6xYuCOzmIql2XcMuNsjunSMq4vPoy7MrptlP46T7QL
3CyIfDExvEHe+6Mz1nJnTr9Ce4ZIYKe+tnc09H/HCuyIrdE6tBo1daeUXDHTc9gS
5Q1MbP/K2Ryw+DIC0+gdM/KqkgDUIfL18ztTT6pSJsmM+Nw5d7V9qqXGBTjVAhpp
ukJVYoIIbsZzb+e9PbkWzNDNxQgc/dYjtwQ362ilRkKEFiEaJ2KP/3DamsGG1CVQ
1srRHLbzIL2WWQ==
-----END CERTIFICATE-----