Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File:                     fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier:          DZ3eJCAX8H9iB+ydLH6xRQdJOepRzZBfnVWlDxZkc+c=
Subject key identifier:   F5:53:88:35:24:37:88:37:D4:67:DA:03:3E:8D:C9:B8:1F:CB:3F:AE
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer:       /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial:       01962F74949EC8A9B58CF2A261C1E3EF0BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: olG0/QbDNo98D7gUACVMTeOP2VcTx1Cc2Kfwnci0lHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:9e:c8:a9:b5:8c:f2:a2:61:c1:e3:ef:0b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=f553883524378837d467da033e8dc9b81fcb3fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:0c:ee:68:6d:49:d7:6e:5c:b2:2e:95:17:
                    a1:44:72:fc:d0:f8:da:df:aa:e0:f5:e8:d4:15:bb:
                    4c:5f:c6:7e:a4:ef:80:d0:ab:1a:2f:37:93:d6:0c:
                    92:c1:a2:5b:5c:02:b4:5f:34:44:8d:2a:b4:36:84:
                    7a:c0:50:f8:6f:be:40:0a:2a:2e:4c:b0:9b:8b:43:
                    fb:5d:20:fb:22:b0:8e:a3:bf:ff:e6:1a:27:b6:03:
                    1f:da:f4:8b:5d:c1:fe:73:da:9c:b9:20:79:5a:91:
                    ae:45:6e:03:59:fd:f6:a9:3a:89:1e:de:c5:b2:61:
                    da:a0:67:06:25:6b:05:13:bd:f9:80:e4:8e:88:0a:
                    2c:94:da:b9:95:e5:72:cf:dd:ba:69:26:fe:2d:e2:
                    78:08:2a:82:99:01:39:a3:02:a4:4e:6a:6b:32:99:
                    7d:10:8c:f4:98:fe:4d:e1:3e:09:0e:7e:5c:11:0d:
                    3e:83:5d:a6:a3:70:05:bd:be:fe:95:df:75:ec:55:
                    df:a6:35:3d:2a:26:b3:b0:46:dd:ce:92:c2:c7:76:
                    bf:f6:ea:08:c6:b8:4b:ef:14:d8:01:05:85:42:45:
                    f3:cb:74:8c:f6:b9:f4:63:d0:64:c6:d6:f7:68:9d:
                    da:00:92:6b:72:84:9f:90:77:b7:67:ec:a1:b1:3c:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:88:35:24:37:88:37:D4:67:DA:03:3E:8D:C9:B8:1F:CB:3F:AE
            X509v3 Authority Key Identifier:
                keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:82:ea:97:45:4b:a6:f3:a9:8c:00:6d:68:ed:9f:0b:4b:
         86:32:27:98:8e:28:15:96:76:f2:39:77:1a:7a:eb:d4:e4:db:
         67:9d:8d:a8:a3:83:79:46:02:7a:5d:9c:b3:3a:eb:00:41:28:
         fc:6b:cd:e5:58:ef:14:9d:d2:f7:1d:11:97:31:5b:cc:9e:23:
         43:21:bd:75:54:e9:42:5c:0b:96:08:b9:1b:93:cb:11:f4:fc:
         57:c5:59:60:fe:44:ca:16:29:be:70:4a:d2:82:71:d7:69:10:
         40:cb:a8:28:e5:c2:1c:13:85:a0:a0:df:23:93:46:1a:87:78:
         8f:26:68:c0:7a:e3:10:c0:c2:45:cf:e1:2d:be:e3:e2:f8:be:
         a1:b6:f3:e6:96:3f:bb:dd:b1:6f:51:2c:ca:bf:10:4d:c2:cf:
         f9:f2:cb:23:a1:8e:d5:ef:25:79:f1:79:11:0e:f1:d4:2d:08:
         3d:62:ec:df:37:42:37:25:aa:21:57:95:00:ac:f7:83:d5:63:
         ec:87:dc:0b:a7:d3:3c:c6:35:0e:5a:15:f0:5d:2e:9a:8d:78:
         c6:c0:ca:2c:97:a7:f6:33:cf:43:10:88:54:45:bd:7d:25:c0:
         4a:94:9e:b0:4e:0d:e7:8d:b3:17:fe:35:fb:2b:be:d2:e8:ea:
         57:24:32:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJSeyKm1jPKiYcHj7wvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGJjYWJlYzQzNzlmMmQzYjk0MTg3NDEwZDJlNmUwMzFh
NzQxNzEwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
EyhmNTUzODgzNTI0Mzc4ODM3ZDQ2N2RhMDMzZThkYzliODFmY2IzZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53YM7mhtSdduXLIulRehRHL80Pja
36rg9ejUFbtMX8Z+pO+A0KsaLzeT1gySwaJbXAK0XzREjSq0NoR6wFD4b75ACiou
TLCbi0P7XSD7IrCOo7//5hontgMf2vSLXcH+c9qcuSB5WpGuRW4DWf32qTqJHt7F
smHaoGcGJWsFE735gOSOiAoslNq5leVyz926aSb+LeJ4CCqCmQE5owKkTmprMpl9
EIz0mP5N4T4JDn5cEQ0+g12mo3AFvb7+ld917FXfpjU9KiazsEbdzpLCx3a/9uoI
xrhL7xTYAQWFQkXzy3SM9rn0Y9Bkxtb3aJ3aAJJrcoSfkHe3Z+yhsTzSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVTiDUkN4g31GfaAz6Nybgfyz+uMB8GA1UdIwQY
MBaAFH0Lyr7EN58tO5QYdBDS5uAxp0FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjIt
OTcxNWNkNjk4ZTMyLzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjItOTcxNWNkNjk4ZTMy
LzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1eC6pdF
S6bzqYwAbWjtnwtLhjInmI4oFZZ28jl3Gnrr1OTbZ52NqKODeUYCel2cszrrAEEo
/GvN5VjvFJ3S9x0RlzFbzJ4jQyG9dVTpQlwLlgi5G5PLEfT8V8VZYP5EyhYpvnBK
0oJx12kQQMuoKOXCHBOFoKDfI5NGGod4jyZowHrjEMDCRc/hLb7j4vi+obbz5pY/
u92xb1Esyr8QTcLP+fLLI6GO1e8lefF5EQ7x1C0IPWLs3zdCNyWqIVeVAKz3g9Vj
7IfcC6fTPMY1DloV8F0umo14xsDKLJen9jPPQxCIVEW9fSXASpSesE4N542zF/41
+yu+0ujqVyQytg==
-----END CERTIFICATE-----