Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File:                     s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier:          kFq14kFGD1vFCvQmi3pk5RFG9z+HvuvIEmo+aa78vuQ=
Subject key identifier:   C0:BA:C9:8A:BA:C4:A3:A2:EC:65:8B:2E:B1:7E:C8:4F:76:95:D4:5C
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer:       /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial:       01962E986A06376CAFF860DD875B1A0C1D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number:          12AD
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=)
                          2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: sNfhhTIEfTM2QPnqKFjVTujcxjh/PXJpT46pknVsXmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6a:06:37:6c:af:f8:60:dd:87:5b:1a:0c:1d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=c0bac98abac4a3a2ec658b2eb17ec84f7695d45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:0b:c9:f1:8e:c6:13:c7:c2:52:d5:11:8e:
                    26:f0:cb:a2:7b:d3:2f:da:b6:2d:0b:92:64:8b:a9:
                    1a:af:3e:fd:d2:8d:3b:b0:19:29:ad:e1:3e:54:14:
                    cd:e4:1a:39:1d:78:eb:61:cd:a4:ab:28:37:70:f8:
                    63:55:07:a5:8c:0a:12:30:c2:f6:0d:f4:77:ed:aa:
                    ec:37:9c:48:e5:08:cb:7e:79:b6:84:e5:35:aa:f9:
                    28:aa:d9:66:e7:59:7e:f2:3b:e2:5e:59:49:87:f8:
                    97:a7:be:0b:73:eb:56:75:72:13:1d:d5:19:98:19:
                    e5:f3:cc:a7:c5:6c:fa:9d:1e:0f:7c:db:60:3a:3e:
                    90:91:1b:d2:4c:6c:b3:32:9e:7d:1b:b0:ed:57:07:
                    59:bc:8c:e3:96:50:4e:39:4c:c9:89:58:1d:fa:f4:
                    c9:4b:fc:89:eb:84:b3:9a:52:92:04:67:98:1c:36:
                    c0:4b:8b:bf:56:4d:f0:3f:fb:bd:4d:01:6c:9b:af:
                    c0:5b:9a:bd:aa:d3:c2:94:1a:e1:b3:08:64:0b:cb:
                    90:51:66:0c:5a:90:d9:36:b3:32:c7:ac:ae:1e:be:
                    0e:58:29:3e:89:8a:e8:87:ce:71:f5:e9:8c:5f:73:
                    22:63:c2:a9:de:8d:15:39:4d:2c:a8:81:9c:ba:d6:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:C9:8A:BA:C4:A3:A2:EC:65:8B:2E:B1:7E:C8:4F:76:95:D4:5C
            X509v3 Authority Key Identifier:
                keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:02:d2:7c:52:12:31:fb:79:cb:21:5f:f9:c5:37:65:9a:
         f4:c7:74:e5:ed:b4:5d:6f:41:ed:38:59:45:b2:a4:21:78:2d:
         f5:2c:a1:fd:59:53:9a:0c:81:ad:dd:39:0c:1e:cd:50:fc:24:
         8b:0d:2d:e5:d2:55:42:75:98:bf:f3:71:7f:9a:01:35:a8:c0:
         fa:4d:81:95:b9:be:bc:02:ce:fd:30:a0:df:8e:05:5b:02:b6:
         8c:46:f4:9c:a9:84:b9:5f:57:67:39:c3:ea:93:e5:e5:e6:e8:
         95:12:62:3b:42:c5:41:82:1c:7b:e8:1e:90:bb:ba:94:b0:26:
         6e:3c:bc:2a:ca:e8:7d:9d:b9:46:d9:05:8a:4c:e3:8d:53:73:
         69:5a:ad:ed:94:33:db:e2:32:14:3a:ec:9a:7c:04:1b:74:1e:
         2d:c8:a4:af:74:80:5a:82:31:c0:2f:84:e2:3d:81:44:d7:5d:
         c2:10:19:df:f1:bd:17:6e:d9:a5:40:46:8a:b8:eb:5c:c8:81:
         98:14:e0:41:9a:4e:a3:d9:4b:ec:3f:22:af:db:3a:4e:9b:4c:
         06:ec:01:e4:fa:73:7a:ac:10:a6:d0:36:79:99:81:9c:2a:ff:
         24:25:fb:1f:ab:00:f0:43:72:a8:be:48:82:44:df:e6:02:7c:
         66:db:dc:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGoGN2yv+GDdh1saDB0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4
YzFkMjIwHhcNMjUwNDEzMTAwMTAyWhcNMjUwNDE0MTAwMTAyWjAzMTEwLwYDVQQD
EyhjMGJhYzk4YWJhYzRhM2EyZWM2NThiMmViMTdlYzg0Zjc2OTVkNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4cLyfGOxhPHwlLVEY4m8Muie9Mv
2rYtC5Jki6karz790o07sBkpreE+VBTN5Bo5HXjrYc2kqyg3cPhjVQeljAoSMML2
DfR37arsN5xI5QjLfnm2hOU1qvkoqtlm51l+8jviXllJh/iXp74Lc+tWdXITHdUZ
mBnl88ynxWz6nR4PfNtgOj6QkRvSTGyzMp59G7DtVwdZvIzjllBOOUzJiVgd+vTJ
S/yJ64SzmlKSBGeYHDbAS4u/Vk3wP/u9TQFsm6/AW5q9qtPClBrhswhkC8uQUWYM
WpDZNrMyx6yuHr4OWCk+iYroh85x9emMX3MiY8Kp3o0VOU0sqIGcutYfnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC6yYq6xKOi7GWLLrF+yE92ldRcMB8GA1UdIwQY
MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt
MjA3MTU0NmI3MGY5LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5
LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUywC0nxS
EjH7ecshX/nFN2Wa9Md05e20XW9B7ThZRbKkIXgt9Syh/VlTmgyBrd05DB7NUPwk
iw0t5dJVQnWYv/Nxf5oBNajA+k2Blbm+vALO/TCg344FWwK2jEb0nKmEuV9XZznD
6pPl5ebolRJiO0LFQYIce+gekLu6lLAmbjy8KsrofZ25RtkFikzjjVNzaVqt7ZQz
2+IyFDrsmnwEG3QeLcikr3SAWoIxwC+E4j2BRNddwhAZ3/G9F27ZpUBGirjrXMiB
mBTgQZpOo9lL7D8ir9s6TptMBuwB5PpzeqwQptA2eZmBnCr/JCX7H6sA8ENyqL5I
gkTf5gJ8ZtvcOw==
-----END CERTIFICATE-----