Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File:                     70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier:          IuXpJLu4ZkY6jxjqmE3FTXnF5xUb4fIrsq3FrrDG+dY=
Subject key identifier:   07:A3:68:42:BF:8F:00:88:EB:A3:40:EE:BE:8B:9C:8A:C2:EC:7F:B8
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer:       /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial:       01962F3D9AD53BC2C71C1EA0BE7C38F6802F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
                          2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: cS/O/uEuGFQeovwKPQffClhe9ltcqdUsgHxSkvz/KPQ=)
                          3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:d5:3b:c2:c7:1c:1e:a0:be:7c:38:f6:80:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=07a36842bf8f0088eba340eebe8b9c8ac2ec7fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:c0:64:38:a2:60:16:7c:a3:4f:c3:44:fc:
                    1a:44:b3:7e:25:da:85:03:89:d4:71:c6:d3:82:10:
                    21:f3:aa:55:86:15:d0:4b:b0:08:d7:7b:7f:0f:bb:
                    38:d3:01:8d:58:3d:9b:2b:91:85:ae:35:17:e6:3f:
                    b0:a8:99:9a:77:4b:7f:12:07:c7:ee:74:e5:02:7f:
                    a8:31:91:55:4e:cb:12:02:f4:b3:2c:37:ac:d4:60:
                    61:d2:86:d4:f8:58:36:6b:a5:37:a0:1e:1f:60:e7:
                    a5:48:ab:af:79:8e:c2:08:c5:f9:8c:d6:f0:b0:bd:
                    7e:7a:81:a8:66:04:ce:30:7d:18:8d:9f:f4:fe:6e:
                    7f:2a:4b:ab:59:15:3a:32:f6:07:10:4c:6a:15:ec:
                    a0:c3:8f:9a:92:44:49:cf:ac:e5:c8:c2:21:b9:59:
                    cb:94:40:1b:43:18:69:f8:21:e2:bc:d5:d3:7e:59:
                    f4:6f:bb:76:8a:6f:9e:53:0a:52:40:e8:57:ec:ba:
                    90:63:92:b8:e7:f2:47:a7:06:33:a5:ed:3e:ba:ca:
                    0f:1d:c4:e1:3f:cc:e5:af:f0:de:00:15:f5:a9:a3:
                    ce:45:00:dd:81:8f:ef:72:e7:0a:47:09:40:d3:19:
                    5e:ce:f0:0a:56:c6:6d:bb:ae:e1:be:0b:8b:24:43:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A3:68:42:BF:8F:00:88:EB:A3:40:EE:BE:8B:9C:8A:C2:EC:7F:B8
            X509v3 Authority Key Identifier:
                keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c5:3c:a9:66:a4:83:cd:4c:90:79:f7:8d:ed:09:8a:d6:82:
         e1:27:0a:17:9a:73:f6:28:e6:f3:c9:36:d5:3e:e5:63:86:c0:
         97:8e:dc:d7:c0:c7:f6:65:ed:ba:11:1b:ee:65:85:f0:80:5c:
         78:88:83:2a:c9:6b:2b:29:11:87:0e:3a:60:f1:54:17:89:6b:
         1e:08:32:a4:87:b4:0e:e1:6d:7e:7d:25:1f:d8:42:fe:54:ec:
         03:dc:9a:07:2e:28:53:85:14:6a:00:3d:97:72:bf:6a:20:da:
         bc:c4:c4:82:da:dd:e4:ab:67:5c:ac:be:84:c5:31:8c:a5:48:
         c6:96:a2:54:5f:91:52:76:b1:58:b6:af:de:09:48:47:ff:b4:
         73:05:57:77:d7:9f:b4:eb:f7:51:2b:36:a2:3a:71:02:41:89:
         cf:7c:63:5c:77:3c:b8:af:3c:44:f8:f0:f7:e7:09:06:3a:9b:
         9f:0d:be:c7:33:a8:b7:22:22:3d:56:fd:58:50:ab:cf:2c:e7:
         08:c5:6f:90:90:6d:3e:62:d3:68:3a:f7:89:ef:ca:86:75:3c:
         4f:8c:e8:94:89:4b:f3:23:a6:bb:05:b8:fa:df:66:f1:ca:9d:
         87:0b:3b:dd:2b:09:f8:d0:54:8f:cc:ac:10:67:80:06:12:5a:
         31:47:a0:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZrVO8LHHB6gvnw49oAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
EygwN2EzNjg0MmJmOGYwMDg4ZWJhMzQwZWViZThiOWM4YWMyZWM3ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoLAZDiiYBZ8o0/DRPwaRLN+JdqF
A4nUccbTghAh86pVhhXQS7AI13t/D7s40wGNWD2bK5GFrjUX5j+wqJmad0t/EgfH
7nTlAn+oMZFVTssSAvSzLDes1GBh0obU+Fg2a6U3oB4fYOelSKuveY7CCMX5jNbw
sL1+eoGoZgTOMH0YjZ/0/m5/KkurWRU6MvYHEExqFeygw4+akkRJz6zlyMIhuVnL
lEAbQxhp+CHivNXTfln0b7t2im+eUwpSQOhX7LqQY5K45/JHpwYzpe0+usoPHcTh
P8zlr/DeABX1qaPORQDdgY/vcucKRwlA0xlezvAKVsZtu67hvguLJEPB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAejaEK/jwCI66NA7r6LnIrC7H+4MB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsU8qWak
g81MkHn3je0JitaC4ScKF5pz9ijm88k21T7lY4bAl47c18DH9mXtuhEb7mWF8IBc
eIiDKslrKykRhw46YPFUF4lrHggypIe0DuFtfn0lH9hC/lTsA9yaBy4oU4UUagA9
l3K/aiDavMTEgtrd5KtnXKy+hMUxjKVIxpaiVF+RUnaxWLav3glIR/+0cwVXd9ef
tOv3USs2ojpxAkGJz3xjXHc8uK88RPjw9+cJBjqbnw2+xzOotyIiPVb9WFCrzyzn
CMVvkJBtPmLTaDr3ie/KhnU8T4zolIlL8yOmuwW4+t9m8cqdhws73SsJ+NBUj8ys
EGeABhJaMUeggQ==
-----END CERTIFICATE-----