Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
File:                     UMrU5Xdbox7K4ibRBG89waEEgU0.mft (raw, json)
Hash identifier:          uHT9OgfWaopcgv6BREb/rWR5OTrEz3P49XYW7oMTVtY=
Subject key identifier:   8E:DD:E7:A1:C0:3B:07:11:40:A3:28:30:07:DB:EE:C6:20:8C:F1:EA
Authority key identifier: 50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D
Certificate issuer:       /CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
Certificate serial:       01962E2AEC681E8AA6D0F4353DCA4B467099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft
Manifest number:          047F
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: UMrU5Xdbox7K4ibRBG89waEEgU0.crl (hash: jLYS04MFwdIS088OeTrMMiJvm1sG3h4+jRC1kj25HMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:68:1e:8a:a6:d0:f4:35:3d:ca:4b:46:70:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50cad4e5775ba31ecae226d1046f3dc1a104814d
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=8edde7a1c03b071140a3283007dbeec6208cf1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:07:75:3c:63:d9:0b:a4:8e:91:11:33:9f:
                    d5:36:93:5f:1f:01:0d:91:d9:b8:52:a6:97:31:1f:
                    10:bc:48:dd:bd:bb:95:0e:6e:cb:51:92:96:dc:18:
                    a9:51:25:77:22:77:5a:e1:5f:17:a9:0e:1a:33:89:
                    9e:2f:91:8e:9f:c1:a5:98:1f:6d:95:a8:d7:f7:6a:
                    03:8d:17:0b:4e:62:f1:d2:d9:9f:c0:7c:be:29:a1:
                    4a:70:84:87:46:a3:ac:03:80:09:04:ed:88:66:08:
                    7a:0c:54:fd:a5:44:09:80:0f:47:0b:19:10:bc:db:
                    ef:06:0c:a7:7d:32:78:16:1b:e8:a7:ec:b2:14:c1:
                    60:89:b3:10:b3:60:2b:3c:40:e8:e3:7f:a8:2f:1c:
                    53:8c:fa:cd:78:b2:03:94:6d:b8:76:ae:ee:a5:22:
                    13:fc:5d:93:74:2b:3a:dd:cb:f6:f7:e6:42:9f:1e:
                    96:1f:17:13:75:b9:04:ce:17:65:c2:73:42:9d:63:
                    ee:8d:c7:00:56:9e:cb:76:6a:bb:03:90:af:87:05:
                    9c:49:27:71:b2:ef:26:e9:8e:62:35:d8:14:e5:71:
                    04:76:ee:ab:eb:84:08:7a:36:44:ea:ae:7e:3a:77:
                    81:61:98:06:9a:47:c7:a8:e1:ca:ca:4a:ed:f9:69:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DD:E7:A1:C0:3B:07:11:40:A3:28:30:07:DB:EE:C6:20:8C:F1:EA
            X509v3 Authority Key Identifier:
                keyid:50:CA:D4:E5:77:5B:A3:1E:CA:E2:26:D1:04:6F:3D:C1:A1:04:81:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMrU5Xdbox7K4ibRBG89waEEgU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8a2085-a6c3-4fde-8dba-6639bca7a1b0/1/UMrU5Xdbox7K4ibRBG89waEEgU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:cd:98:a7:8f:71:0e:63:74:0f:4e:b1:b1:7e:52:d1:67:
         a7:03:12:17:c8:95:b0:41:ab:45:cb:a2:70:ee:cc:d6:47:87:
         8c:f2:64:0d:1f:c1:07:ac:61:b2:64:2c:ba:b5:09:ed:c0:5e:
         ae:8a:db:81:f9:24:86:6b:d6:9f:20:46:ce:18:c3:ae:0c:ee:
         9b:38:e6:f2:07:0e:bb:c6:07:3e:44:b1:5a:f1:d9:21:f1:23:
         19:2c:61:2b:b7:0e:68:3e:38:05:33:c3:c0:1b:aa:fd:a6:ad:
         e0:11:cf:b0:67:58:a1:19:00:89:65:af:5e:2a:dc:6f:b2:d1:
         e6:ed:af:34:f5:47:c3:46:aa:33:69:30:2c:c1:b3:70:23:4d:
         40:6a:ee:00:c7:fc:32:08:1f:8a:78:40:e7:e3:7d:3d:6b:54:
         8c:7d:0a:e2:45:3f:e9:53:40:67:d2:af:1b:10:e4:9a:0b:89:
         b6:d1:95:2e:e9:95:ce:0e:25:7d:d6:5d:3f:c1:4e:2c:c3:67:
         9b:aa:57:69:5a:3d:da:c6:a1:d4:cc:df:e5:01:79:f3:30:15:
         f9:84:5c:00:f7:a9:db:42:97:b4:d1:cc:12:25:da:5b:9e:58:
         d2:a9:82:65:ec:ec:12:eb:a6:cc:82:ba:ba:8c:fa:c0:c7:e5:
         dc:14:df:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuxoHoqm0PQ1PcpLRnCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwY2FkNGU1Nzc1YmEzMWVjYWUyMjZkMTA0NmYzZGMxYTEw
NDgxNGQwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
Eyg4ZWRkZTdhMWMwM2IwNzExNDBhMzI4MzAwN2RiZWVjNjIwOGNmMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fIHdTxj2QukjpERM5/VNpNfHwEN
kdm4UqaXMR8QvEjdvbuVDm7LUZKW3BipUSV3Inda4V8XqQ4aM4meL5GOn8GlmB9t
lajX92oDjRcLTmLx0tmfwHy+KaFKcISHRqOsA4AJBO2IZgh6DFT9pUQJgA9HCxkQ
vNvvBgynfTJ4Fhvop+yyFMFgibMQs2ArPEDo43+oLxxTjPrNeLIDlG24dq7upSIT
/F2TdCs63cv29+ZCnx6WHxcTdbkEzhdlwnNCnWPujccAVp7Ldmq7A5CvhwWcSSdx
su8m6Y5iNdgU5XEEdu6r64QIejZE6q5+OneBYZgGmkfHqOHKykrt+WnIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7d56HAOwcRQKMoMAfb7sYgjPHqMB8GA1UdIwQY
MBaAFFDK1OV3W6MeyuIm0QRvPcGhBIFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1yVTVYZGJveDdLNGliUkJHODl3YUVFZ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YTIwODUtYTZjMy00ZmRlLThkYmEt
NjYzOWJjYTdhMWIwLzEvVU1yVTVYZGJveDdLNGliUkJHODl3YUVFZ1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YTIwODUtYTZjMy00ZmRlLThkYmEtNjYzOWJjYTdhMWIw
LzEvVU1yVTVYZGJveDdLNGliUkJHODl3YUVFZ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr3NmKeP
cQ5jdA9OsbF+UtFnpwMSF8iVsEGrRcuicO7M1keHjPJkDR/BB6xhsmQsurUJ7cBe
rorbgfkkhmvWnyBGzhjDrgzumzjm8gcOu8YHPkSxWvHZIfEjGSxhK7cOaD44BTPD
wBuq/aat4BHPsGdYoRkAiWWvXircb7LR5u2vNPVHw0aqM2kwLMGzcCNNQGruAMf8
MggfinhA5+N9PWtUjH0K4kU/6VNAZ9KvGxDkmguJttGVLumVzg4lfdZdP8FOLMNn
m6pXaVo92sah1Mzf5QF58zAV+YRcAPep20KXtNHMEiXaW55Y0qmCZezsEuumzIK6
uoz6wMfl3BTfIg==
-----END CERTIFICATE-----