Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File:                     NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier:          x3Ohxw9nxwu8z9Iaq11mIo8HtgKTY4W/dS9XEG1rgLU=
Subject key identifier:   B1:BC:7F:27:EE:9E:23:2F:25:49:E2:54:E0:F2:BF:DB:6A:64:02:F0
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer:       /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial:       01962F3DC65C8259BF4A8A20205C581081F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: hvvBz/t41o+igE1SRV7FVSKwl13bDc0gGpCQjvO5M/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:5c:82:59:bf:4a:8a:20:20:5c:58:10:81:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=b1bc7f27ee9e232f2549e254e0f2bfdb6a6402f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:85:0d:2c:2b:f2:00:dc:71:e9:4d:18:ae:
                    cf:d6:b7:7e:1a:a9:db:ea:16:74:03:3f:fd:79:ce:
                    2c:46:2d:d5:b8:b3:82:97:f9:8c:33:1e:43:0e:d6:
                    d2:55:a0:b9:d4:36:da:9e:9e:87:b2:ca:b2:ec:71:
                    70:98:69:1c:69:a4:d6:7d:32:96:0f:24:16:cc:63:
                    0d:ca:f9:a5:f3:20:d7:a6:ad:e5:bf:99:e3:2f:35:
                    3a:18:80:6b:7b:0f:ab:20:79:06:df:e4:38:ac:ef:
                    a4:47:9e:bd:c6:6d:ed:33:fc:64:23:10:54:e3:90:
                    33:a7:05:58:60:46:5a:f2:b8:cb:a7:0b:1e:8b:8e:
                    b0:75:5f:99:ec:d2:05:17:38:e5:fa:ff:f1:6e:80:
                    58:3b:98:28:3d:97:41:57:b6:74:ed:f5:c5:a9:b5:
                    9f:03:09:db:c5:97:8a:78:f5:a6:bc:25:79:2f:96:
                    4c:10:b5:34:c9:7e:5a:47:a6:ca:66:5f:bc:2c:3f:
                    78:61:b6:99:94:df:15:91:34:fa:a6:07:6b:87:eb:
                    57:59:63:99:bd:c3:56:39:9b:5f:d4:13:55:55:9c:
                    c6:3f:45:34:6d:7c:4a:a4:a6:5b:e6:0f:58:d5:b1:
                    22:a9:81:bf:a3:bb:a3:53:2a:40:36:e1:a3:01:83:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BC:7F:27:EE:9E:23:2F:25:49:E2:54:E0:F2:BF:DB:6A:64:02:F0
            X509v3 Authority Key Identifier:
                keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:de:ee:96:db:99:f8:13:b8:48:1a:e2:2f:7d:29:35:06:39:
         b2:56:1e:bb:03:4e:7e:38:2f:80:94:96:23:39:ff:cd:49:42:
         76:17:3a:b1:10:68:d9:f6:6b:6b:da:d4:05:22:dc:d7:d3:1e:
         87:c1:eb:85:a8:a6:2d:8c:b0:01:5b:bd:ff:12:44:96:e0:a1:
         fe:20:13:9b:a9:17:ae:a4:e8:50:5e:1c:7e:83:74:be:f7:02:
         a5:92:46:52:a0:c2:24:76:56:9d:ac:b3:6f:8a:9e:d1:7f:d0:
         0c:b1:f2:b1:a9:d0:12:45:f1:8e:c8:b5:38:bd:eb:6e:be:94:
         ce:3c:df:9d:c2:56:e4:86:d0:a3:2f:29:db:7e:5f:4d:17:9a:
         bb:d8:58:9c:0e:3e:8a:e0:f1:7d:e6:01:94:8a:80:70:0b:2d:
         f9:b6:88:29:f3:5b:22:32:cd:08:e7:15:c0:41:65:7a:7c:ff:
         21:a5:33:6c:58:9e:03:10:30:fa:54:20:a1:00:1b:0f:99:84:
         79:d3:26:a8:33:58:85:6c:57:46:e0:f4:9a:e3:3e:cd:c7:8e:
         6d:ec:07:83:1b:fd:d5:0a:64:4a:a9:11:62:9a:7a:a5:92:39:
         ca:a7:1b:f8:5e:af:b8:89:de:29:e5:a3:2c:05:87:2e:19:bd:
         76:b6:64:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcZcglm/SoogIFxYEIH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTY3NjQ1OTRlMDBkOWFiODAxNzg5M2M3MTA5MmNmNTE2
YjEwMWYwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
EyhiMWJjN2YyN2VlOWUyMzJmMjU0OWUyNTRlMGYyYmZkYjZhNjQwMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kWFDSwr8gDccelNGK7P1rd+Gqnb
6hZ0Az/9ec4sRi3VuLOCl/mMMx5DDtbSVaC51Dbanp6Hssqy7HFwmGkcaaTWfTKW
DyQWzGMNyvml8yDXpq3lv5njLzU6GIBrew+rIHkG3+Q4rO+kR569xm3tM/xkIxBU
45AzpwVYYEZa8rjLpwsei46wdV+Z7NIFFzjl+v/xboBYO5goPZdBV7Z07fXFqbWf
AwnbxZeKePWmvCV5L5ZMELU0yX5aR6bKZl+8LD94YbaZlN8VkTT6pgdrh+tXWWOZ
vcNWOZtf1BNVVZzGP0U0bXxKpKZb5g9Y1bEiqYG/o7ujUypANuGjAYPdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG8fyfuniMvJUniVODyv9tqZALwMB8GA1UdIwQY
MBaAFDXmdkWU4A2auAF4k8cQks9RaxAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQt
YjJmMGIxYmNhZTVjLzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80YzMxZjItOGYzMC00ZGJlLTkzOGQtYjJmMGIxYmNhZTVj
LzEvTmVaMlJaVGdEWnE0QVhpVHh4Q1N6MUZyRUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzd7ultuZ
+BO4SBriL30pNQY5slYeuwNOfjgvgJSWIzn/zUlCdhc6sRBo2fZra9rUBSLc19Me
h8HrhaimLYywAVu9/xJEluCh/iATm6kXrqToUF4cfoN0vvcCpZJGUqDCJHZWnayz
b4qe0X/QDLHysanQEkXxjsi1OL3rbr6UzjzfncJW5IbQoy8p235fTReau9hYnA4+
iuDxfeYBlIqAcAst+baIKfNbIjLNCOcVwEFlenz/IaUzbFieAxAw+lQgoQAbD5mE
edMmqDNYhWxXRuD0muM+zceObewHgxv91QpkSqkRYpp6pZI5yqcb+F6vuIneKeWj
LAWHLhm9drZklg==
-----END CERTIFICATE-----