Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
File:                     urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft (raw, json)
Hash identifier:          M2HlfjNBFbwvGEaiMUxT+bYcIrQhCXdWM+VnJHbwpTE=
Subject key identifier:   AE:7C:1E:1F:64:2B:9D:01:31:F8:F1:8D:89:16:EF:C1:A7:3C:FB:97
Authority key identifier: BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
Certificate issuer:       /CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Certificate serial:       01962E997129CF68A3D1DBD1735DCFC4D9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
Manifest number:          0A07
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl (hash: 0gWwmuktCTIk5adIVdPOk3N8e4Lli/7hlhXMerOYhxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:29:cf:68:a3:d1:db:d1:73:5d:cf:c4:d9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=ae7c1e1f642b9d0131f8f18d8916efc1a73cfb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:6f:70:9c:f6:18:ea:a5:65:23:db:5d:7b:
                    64:5a:48:55:67:91:a3:80:60:c8:26:ea:7f:16:53:
                    bc:42:74:47:94:15:69:25:f6:e9:22:f2:c4:fa:e0:
                    b0:26:57:08:cb:ac:52:2f:a6:98:eb:8f:f4:ba:6a:
                    91:2a:5f:4c:0a:2e:75:b1:6a:af:17:40:fe:90:3e:
                    25:20:98:14:a6:cb:4a:05:57:e8:dd:9d:5e:47:59:
                    d0:dd:07:02:e5:ce:64:6c:09:1a:3f:b4:d0:f8:5a:
                    21:c2:6b:74:5c:59:fe:3e:4c:db:fe:5e:f3:e5:57:
                    03:9c:2e:0f:02:2e:e6:4f:81:a7:a6:da:c0:7d:ac:
                    cf:ed:9d:96:c1:ea:07:0a:ce:20:a4:cc:96:54:77:
                    7d:d8:48:51:83:d5:0d:2a:e8:7a:3b:db:0a:99:24:
                    eb:8c:b1:d0:1a:35:69:ed:4e:48:9e:5a:2f:f0:d8:
                    61:16:de:b4:fb:f6:b1:b9:b9:55:16:07:22:74:0e:
                    d6:ea:b0:17:96:d4:90:7a:43:d3:0b:46:07:cc:02:
                    05:cf:8f:6c:41:2d:13:13:4b:22:23:44:da:0b:b7:
                    87:4c:c4:60:5c:6c:62:8b:e4:bf:b4:c9:cf:4f:c8:
                    58:c6:70:fe:cb:cb:34:8e:a6:76:48:48:97:ec:19:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7C:1E:1F:64:2B:9D:01:31:F8:F1:8D:89:16:EF:C1:A7:3C:FB:97
            X509v3 Authority Key Identifier:
                keyid:BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:42:ec:2a:5c:23:9e:85:41:fc:21:58:26:54:df:2a:b5:
         0b:8e:ac:fc:42:97:26:aa:cb:f6:d6:a1:6c:b5:23:b6:85:33:
         06:5b:0d:60:a9:1c:e8:46:74:bd:1c:c5:bd:1d:41:e6:0d:11:
         81:c8:00:f5:94:0b:7e:6a:49:35:aa:f5:6d:d8:44:80:cb:de:
         28:97:31:69:d6:c9:bf:53:ea:31:37:18:a5:0b:4d:f5:f2:5a:
         23:1d:86:dd:8e:c8:e3:64:40:95:56:33:49:d9:13:d6:f3:aa:
         28:12:de:6e:83:d7:f9:24:7d:45:d1:c0:13:23:77:21:7c:d9:
         94:68:d2:84:7f:45:46:d8:7d:6e:61:5b:4f:15:7b:f6:74:c2:
         d9:d4:80:f2:c9:8f:25:87:c3:d2:14:5b:03:4b:a3:87:88:f0:
         ee:71:36:49:c0:cc:f4:95:ca:e0:53:d3:44:65:28:fb:e8:82:
         d5:c9:f9:b9:3d:4a:6d:ff:52:39:f9:3a:10:b8:45:45:33:c6:
         d0:fe:48:a7:a7:1a:bd:96:02:fb:f5:21:9b:39:3f:88:f4:65:
         a7:dd:c6:36:86:37:73:41:3e:b6:ce:eb:c3:d2:ff:ce:f4:3d:
         cd:ca:80:e0:df:ed:cc:ec:e5:35:51:ae:d1:87:2e:81:3c:03:
         6f:70:4c:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXEpz2ij0dvRc13PxNnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjliYmMyNGU5YWMzZDllYzdlMTBiZjk1NzQ3ZGFiNWM0
NWRkMmIwHhcNMjUwNDEzMTAwMjEwWhcNMjUwNDE0MTAwMjEwWjAzMTEwLwYDVQQD
EyhhZTdjMWUxZjY0MmI5ZDAxMzFmOGYxOGQ4OTE2ZWZjMWE3M2NmYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRvcJz2GOqlZSPbXXtkWkhVZ5Gj
gGDIJup/FlO8QnRHlBVpJfbpIvLE+uCwJlcIy6xSL6aY64/0umqRKl9MCi51sWqv
F0D+kD4lIJgUpstKBVfo3Z1eR1nQ3QcC5c5kbAkaP7TQ+Fohwmt0XFn+Pkzb/l7z
5VcDnC4PAi7mT4GnptrAfazP7Z2WweoHCs4gpMyWVHd92EhRg9UNKuh6O9sKmSTr
jLHQGjVp7U5Inlov8NhhFt60+/axublVFgcidA7W6rAXltSQekPTC0YHzAIFz49s
QS0TE0siI0TaC7eHTMRgXGxii+S/tMnPT8hYxnD+y8s0jqZ2SEiX7BlV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK58Hh9kK50BMfjxjYkW78GnPPuXMB8GA1UdIwQY
MBaAFLq5u8JOmsPZ7H4Qv5V0fatcRd0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjIt
MmViYzY0NDhmNjAyLzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yODI5ZmEtYzBhMi00YTc4LTkyNjItMmViYzY0NDhmNjAy
LzEvdXJtN3drNmF3OW5zZmhDX2xYUjlxMXhGM1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdc1C7Cpc
I56FQfwhWCZU3yq1C46s/EKXJqrL9tahbLUjtoUzBlsNYKkc6EZ0vRzFvR1B5g0R
gcgA9ZQLfmpJNar1bdhEgMveKJcxadbJv1PqMTcYpQtN9fJaIx2G3Y7I42RAlVYz
SdkT1vOqKBLeboPX+SR9RdHAEyN3IXzZlGjShH9FRth9bmFbTxV79nTC2dSA8smP
JYfD0hRbA0ujh4jw7nE2ScDM9JXK4FPTRGUo++iC1cn5uT1Kbf9SOfk6ELhFRTPG
0P5Ip6cavZYC+/Uhmzk/iPRlp93GNoY3c0E+ts7rw9L/zvQ9zcqA4N/tzOzlNVGu
0YcugTwDb3BMmg==
-----END CERTIFICATE-----