Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          obtwHh3U4nG26PGH4yR/7+EEnIfyCZkF+8O1s7L6ljc=
Subject key identifier:   28:55:88:F8:E2:3C:8E:1C:8E:65:DE:F1:67:B6:BF:F2:1A:77:70:3F
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       01962F3D44F324AD1A563AF4DDE596222CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          0C46
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (hash: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=)
                          2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: t5/8GhSU9DcTaTf0QGAhMT+6Yrx2e+HRF/ZVGWkRzfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:f3:24:ad:1a:56:3a:f4:dd:e5:96:22:2c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=285588f8e23c8e1c8e65def167b6bff21a77703f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:ad:36:cc:9f:b0:87:28:f4:7e:45:8b:fe:
                    25:63:f6:1e:53:f8:3a:54:3a:e1:fc:f6:ab:1a:3d:
                    4d:db:e7:ce:97:74:fe:f3:31:ee:85:e4:49:50:b1:
                    e8:2d:5d:41:94:64:d9:b0:9a:c3:c0:65:f1:11:e3:
                    44:07:d8:43:9e:d7:23:46:a7:e8:b8:87:5d:81:f7:
                    5c:ea:95:d7:a6:04:25:e7:83:61:dd:60:3f:2c:8e:
                    6d:6e:4e:07:5b:ca:12:9f:7b:b2:8f:2f:05:a4:39:
                    1f:72:b6:0b:23:d5:8e:e1:81:2b:98:8b:ad:2a:9f:
                    fb:40:0b:7f:b4:5e:5e:5b:2f:2e:3d:93:c8:de:45:
                    c7:66:a3:d2:04:d2:28:6c:78:81:b0:a3:dc:48:c0:
                    1b:0d:e1:a9:36:ed:9b:41:ab:28:eb:f5:06:39:ec:
                    1e:be:1f:9c:a2:c3:b7:8a:1b:8d:d1:bf:71:e0:e6:
                    8f:b6:8a:b8:ca:bb:25:f2:b2:5e:d5:24:6a:24:8c:
                    6e:de:c5:f2:dc:4d:d9:77:23:14:1b:58:47:b0:af:
                    9d:6a:38:0e:9d:07:30:ad:a1:db:56:65:ec:32:36:
                    1a:6c:e9:65:06:7d:7d:51:46:c5:a1:b7:29:4b:4b:
                    bc:92:70:db:45:9d:d7:0e:b9:17:e2:96:61:0f:fa:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:88:F8:E2:3C:8E:1C:8E:65:DE:F1:67:B6:BF:F2:1A:77:70:3F
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:06:5f:02:8f:58:d5:33:c1:4b:e1:62:d6:56:6c:dc:c2:0f:
         6d:d0:dc:53:7f:68:92:af:7c:59:76:16:ac:6d:ed:e5:cc:a5:
         0c:ed:2b:dc:91:44:92:68:1c:16:f7:d3:21:59:8c:29:1d:1f:
         2f:70:f1:9c:e5:1f:94:ae:a4:25:8c:2b:a7:0e:4b:27:4b:00:
         d7:f4:1b:98:53:9d:e4:ce:29:93:10:e3:28:1c:5c:26:9a:01:
         73:ac:14:3d:9c:d1:0f:59:8c:df:ea:b9:37:ff:b2:83:69:3c:
         87:d3:bd:b8:79:4c:43:24:5e:ba:f6:26:63:5e:d3:1e:48:b5:
         19:f7:b7:c9:64:72:22:7b:71:0e:0b:8e:c5:fc:df:14:35:49:
         5f:9e:8a:73:f9:bf:ed:62:6e:00:97:56:06:42:f5:66:9e:3f:
         f7:e2:a3:5f:a6:13:48:23:ad:fb:80:6d:1d:41:50:55:ab:60:
         d3:24:28:73:b5:f2:09:85:67:f6:45:5f:f6:e6:3b:0d:a5:78:
         76:56:81:bd:d0:9a:7c:2b:36:e9:33:1b:0a:de:df:6f:49:9f:
         68:7d:00:c1:f8:1b:be:50:8f:32:7d:8b:ed:e0:7d:e7:05:89:
         3d:65:ed:b8:39:5b:a4:e4:1c:6b:a7:41:7d:91:95:d9:3e:07:
         82:a8:51:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUTzJK0aVjr03eWWIiymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjUwNDEzMTMwMTA2WhcNMjUwNDE0MTMwMTA2WjAzMTEwLwYDVQQD
EygyODU1ODhmOGUyM2M4ZTFjOGU2NWRlZjE2N2I2YmZmMjFhNzc3MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+StNsyfsIco9H5Fi/4lY/YeU/g6
VDrh/ParGj1N2+fOl3T+8zHuheRJULHoLV1BlGTZsJrDwGXxEeNEB9hDntcjRqfo
uIddgfdc6pXXpgQl54Nh3WA/LI5tbk4HW8oSn3uyjy8FpDkfcrYLI9WO4YErmIut
Kp/7QAt/tF5eWy8uPZPI3kXHZqPSBNIobHiBsKPcSMAbDeGpNu2bQaso6/UGOewe
vh+cosO3ihuN0b9x4OaPtoq4yrsl8rJe1SRqJIxu3sXy3E3ZdyMUG1hHsK+dajgO
nQcwraHbVmXsMjYabOllBn19UUbFobcpS0u8knDbRZ3XDrkX4pZhD/qLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChViPjiPI4cjmXe8We2v/Iad3A/MB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAZfAo9Y
1TPBS+Fi1lZs3MIPbdDcU39okq98WXYWrG3t5cylDO0r3JFEkmgcFvfTIVmMKR0f
L3DxnOUflK6kJYwrpw5LJ0sA1/QbmFOd5M4pkxDjKBxcJpoBc6wUPZzRD1mM3+q5
N/+yg2k8h9O9uHlMQyReuvYmY17THki1Gfe3yWRyIntxDguOxfzfFDVJX56Kc/m/
7WJuAJdWBkL1Zp4/9+KjX6YTSCOt+4BtHUFQVatg0yQoc7XyCYVn9kVf9uY7DaV4
dlaBvdCafCs26TMbCt7fb0mfaH0AwfgbvlCPMn2L7eB95wWJPWXtuDlbpOQca6dB
fZGV2T4HgqhRFw==
-----END CERTIFICATE-----