Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          AxS82gbiTaw5b/CylEE2bzbuTrutS1rEx4LaEhiZ8l4=
Subject key identifier:   C0:13:7F:16:FA:C6:03:4A:9B:93:53:B9:3A:2E:21:EF:5D:1D:2B:2D
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       01962F7420EF195D1410540B14E434E25835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: 47Grv7+5CGiaMBldG9G59KlyB4pgbFFNuChlOt++zUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:20:ef:19:5d:14:10:54:0b:14:e4:34:e2:58:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=c0137f16fac6034a9b9353b93a2e21ef5d1d2b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:4e:10:7b:81:34:1a:31:3a:66:17:72:69:
                    b0:b6:1d:01:1f:2e:be:e3:41:11:50:28:25:b6:5e:
                    b6:08:7d:1d:d4:a8:c4:20:9c:5f:f8:34:2f:f0:f4:
                    37:ab:48:46:f0:77:69:89:74:d5:f6:7b:43:22:5a:
                    17:ae:7c:2d:f6:a2:1e:a8:0d:b5:39:c5:60:fb:99:
                    0a:14:d6:ea:d3:fe:16:dc:77:d6:35:09:f9:0f:4d:
                    50:dd:5e:e9:24:20:75:e9:d6:24:29:5b:60:4a:ac:
                    3d:3e:12:34:6c:60:36:f3:5d:73:10:b8:8a:bd:6d:
                    ff:af:c7:f9:36:14:36:57:b5:ab:96:a1:d4:01:fc:
                    b5:89:c3:4d:8e:34:78:99:0c:47:0a:84:12:20:3b:
                    bc:02:6e:12:42:c2:eb:fb:e4:a7:a3:8d:57:9c:81:
                    87:98:3f:5e:1f:9e:32:96:32:3e:39:30:7d:2a:d7:
                    ec:da:87:9b:98:6f:e8:a7:3e:ec:8d:a8:17:4a:c6:
                    fb:1e:f3:19:14:15:a3:46:ed:ba:75:00:63:76:a9:
                    d0:b4:80:15:f7:71:4b:be:16:88:04:e9:9a:ef:5b:
                    27:6b:e3:bf:0a:fc:b3:14:0e:02:b0:3a:cc:ad:c0:
                    44:1d:f8:d7:c5:48:94:6e:ca:8a:77:4a:9f:7e:35:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:7F:16:FA:C6:03:4A:9B:93:53:B9:3A:2E:21:EF:5D:1D:2B:2D
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:f8:f9:b3:39:8a:82:05:85:59:0f:b4:82:ec:7d:05:6b:
         7c:29:12:30:b0:33:6a:c7:ec:d1:54:b3:fa:d9:89:8c:fa:1a:
         89:38:05:43:c2:b9:b8:2f:7e:c1:59:5d:fb:d0:2b:92:8a:55:
         6f:d9:48:e3:52:d3:93:25:51:bb:97:b7:5a:6d:90:91:b7:cb:
         f2:6f:99:ce:b2:6e:11:26:29:53:4d:33:14:f5:2e:ae:48:86:
         1b:e1:e5:b1:5d:1d:92:31:ef:59:39:c1:76:e9:e0:67:4e:31:
         17:cf:a5:3b:d2:8a:d2:2d:b9:07:79:52:1c:1b:47:37:c5:e1:
         88:f6:13:9a:b6:aa:5f:e4:1f:f2:fe:18:a1:a5:5a:49:a6:d6:
         1c:2d:97:87:5a:29:ee:e4:6a:db:27:58:1d:f2:d2:81:95:ba:
         e3:90:b6:ca:6b:41:fb:27:e6:94:6d:8c:8d:bb:ac:42:db:ea:
         70:11:b3:eb:bc:cd:f0:4c:54:54:ef:b0:7f:8e:b2:ac:c6:4c:
         12:76:c1:f4:12:e9:f4:ff:50:35:3d:a0:b7:0d:1e:fd:11:51:
         28:77:24:d3:fc:22:b4:db:50:27:12:57:6f:5c:a2:c7:e1:2a:
         f0:ad:b3:14:d4:69:32:92:fc:04:0a:2e:c6:e7:cd:f3:5b:ce:
         8f:92:de:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCDvGV0UEFQLFOQ04lg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDNkZjgyOWFmZDZhMWYyNTkwZTQyNDQ1MjJlMWIzNmMw
ODZhOTQwHhcNMjUwNDEzMTQwMTAxWhcNMjUwNDE0MTQwMTAxWjAzMTEwLwYDVQQD
EyhjMDEzN2YxNmZhYzYwMzRhOWI5MzUzYjkzYTJlMjFlZjVkMWQyYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvtOEHuBNBoxOmYXcmmwth0BHy6+
40ERUCgltl62CH0d1KjEIJxf+DQv8PQ3q0hG8HdpiXTV9ntDIloXrnwt9qIeqA21
OcVg+5kKFNbq0/4W3HfWNQn5D01Q3V7pJCB16dYkKVtgSqw9PhI0bGA2811zELiK
vW3/r8f5NhQ2V7WrlqHUAfy1icNNjjR4mQxHCoQSIDu8Am4SQsLr++Sno41XnIGH
mD9eH54yljI+OTB9Ktfs2oebmG/opz7sjagXSsb7HvMZFBWjRu26dQBjdqnQtIAV
93FLvhaIBOma71sna+O/CvyzFA4CsDrMrcBEHfjXxUiUbsqKd0qffjVIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMATfxb6xgNKm5NTuTouIe9dHSstMB8GA1UdIwQY
MBaAFO4D34Ka/WofJZDkJEUi4bNsCGqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjIt
YTFhNDZhODBjMWRhLzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjItYTFhNDZhODBjMWRh
LzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4P4+bM5
ioIFhVkPtILsfQVrfCkSMLAzasfs0VSz+tmJjPoaiTgFQ8K5uC9+wVld+9ArkopV
b9lI41LTkyVRu5e3Wm2QkbfL8m+ZzrJuESYpU00zFPUurkiGG+HlsV0dkjHvWTnB
dungZ04xF8+lO9KK0i25B3lSHBtHN8XhiPYTmraqX+Qf8v4YoaVaSabWHC2Xh1op
7uRq2ydYHfLSgZW645C2ymtB+yfmlG2MjbusQtvqcBGz67zN8ExUVO+wf46yrMZM
EnbB9BLp9P9QNT2gtw0e/RFRKHck0/witNtQJxJXb1yix+Eq8K2zFNRpMpL8BAou
xufN81vOj5LeSw==
-----END CERTIFICATE-----