Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
File:                     fEajytgJZa-Gy7AIPftAqy_xus8.mft (raw, json)
Hash identifier:          UWdvaZmW2FQh7e3GGPIIdV5GV4E3ghCB2H9dY6LFNKk=
Subject key identifier:   86:DE:CB:7D:8D:1A:F6:94:C3:A6:C3:D4:B8:90:AF:92:BA:B4:59:53
Authority key identifier: 7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF
Certificate issuer:       /CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
Certificate serial:       01962E2AD6ED5A90B99D218BD428C605AA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft
Manifest number:          0F14
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: fEajytgJZa-Gy7AIPftAqy_xus8.crl (hash: ruHppWJfjNpnHNjaH12646fiK+kDVINUeNxbkBs9olU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d6:ed:5a:90:b9:9d:21:8b:d4:28:c6:05:aa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c46a3cad80965af86cbb0083dfb40ab2ff1bacf
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=86decb7d8d1af694c3a6c3d4b890af92bab45953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:80:30:05:c8:f4:90:6a:1a:27:89:3e:54:
                    ad:df:b6:dc:59:29:28:72:a3:9b:90:76:7a:18:83:
                    80:e5:5a:01:71:9a:06:49:b8:0b:24:44:aa:2e:33:
                    22:b6:93:cc:10:96:a2:1c:b1:2d:ac:f7:9a:46:50:
                    b3:b7:22:42:e8:32:60:4c:e0:f1:6c:9e:89:50:3c:
                    5f:08:e7:f5:06:ce:a0:5a:0f:bd:9e:cc:5d:21:bf:
                    13:52:90:3d:5c:b9:63:33:dc:4b:1b:15:a6:aa:05:
                    f6:0d:9a:a9:81:d9:d9:a1:1e:56:44:48:6d:69:56:
                    d1:7d:5c:58:29:bc:21:1d:3d:49:fd:9e:97:8f:eb:
                    79:30:36:0f:d9:b2:4e:25:b9:ed:a6:42:3c:aa:4f:
                    2e:c4:64:d0:1c:fa:83:ff:39:2d:a9:73:16:3b:b4:
                    a8:1b:36:3e:dc:1e:4c:2e:fd:6c:20:c7:c4:d1:1a:
                    c6:85:09:51:6b:e2:21:f8:09:f5:21:36:9b:c1:7e:
                    c6:68:d3:d0:8b:41:d4:2e:b7:82:99:c7:a8:eb:bd:
                    42:65:94:d7:62:ed:e7:e0:a2:69:40:2b:2a:22:04:
                    74:c1:e2:32:10:b5:9c:47:28:16:cd:0a:be:b8:da:
                    e2:27:70:63:17:a2:ed:33:80:ae:4c:7a:7b:ec:da:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DE:CB:7D:8D:1A:F6:94:C3:A6:C3:D4:B8:90:AF:92:BA:B4:59:53
            X509v3 Authority Key Identifier:
                keyid:7C:46:A3:CA:D8:09:65:AF:86:CB:B0:08:3D:FB:40:AB:2F:F1:BA:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEajytgJZa-Gy7AIPftAqy_xus8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/373bcf-79d6-4863-9bf0-d8c964591afa/1/fEajytgJZa-Gy7AIPftAqy_xus8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:7b:17:d8:48:70:23:a4:69:62:c0:28:1e:90:a7:f3:37:
         6c:45:da:e6:3e:ae:05:65:7a:3d:08:85:0e:79:7d:68:94:f6:
         19:76:0b:05:8d:ce:aa:80:d6:e0:03:ea:93:83:98:05:a2:15:
         17:24:cf:29:43:50:9b:0e:ae:45:50:ef:0c:73:bc:f9:c1:08:
         de:14:9d:de:f6:05:95:a4:3e:37:05:48:59:71:df:cc:4f:f6:
         72:68:c7:da:fe:0e:0a:f4:0a:e7:15:6f:3f:51:6e:b0:fe:85:
         57:71:76:4d:b0:40:ff:48:fa:01:c4:cb:b0:0f:64:7e:af:f8:
         dd:9e:17:c4:3e:70:92:fd:8d:af:6e:6d:81:ac:ce:26:01:e5:
         8c:c9:22:73:b1:c1:af:7c:32:bd:83:04:d2:5b:7e:64:94:ea:
         64:be:a9:e3:7d:0f:53:ed:10:92:25:10:6c:9b:a8:1a:c5:61:
         af:9b:8b:3c:4c:25:6c:1f:62:90:97:94:dc:08:0b:ad:1b:55:
         a8:f6:e8:3d:e3:4d:1b:0e:72:44:94:9b:58:09:b8:1a:e9:3b:
         33:02:69:77:cd:26:90:d4:d7:db:af:fc:da:88:5c:25:93:be:
         c2:e0:a2:f3:90:c8:f6:32:b0:e6:34:07:46:87:df:8c:44:2a:
         9e:b5:0c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtbtWpC5nSGL1CjGBaoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDZhM2NhZDgwOTY1YWY4NmNiYjAwODNkZmI0MGFiMmZm
MWJhY2YwHhcNMjUwNDEzMDgwMTIxWhcNMjUwNDE0MDgwMTIxWjAzMTEwLwYDVQQD
Eyg4NmRlY2I3ZDhkMWFmNjk0YzNhNmMzZDRiODkwYWY5MmJhYjQ1OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpqAMAXI9JBqGieJPlSt37bcWSko
cqObkHZ6GIOA5VoBcZoGSbgLJESqLjMitpPMEJaiHLEtrPeaRlCztyJC6DJgTODx
bJ6JUDxfCOf1Bs6gWg+9nsxdIb8TUpA9XLljM9xLGxWmqgX2DZqpgdnZoR5WREht
aVbRfVxYKbwhHT1J/Z6Xj+t5MDYP2bJOJbntpkI8qk8uxGTQHPqD/zktqXMWO7So
GzY+3B5MLv1sIMfE0RrGhQlRa+Ih+An1ITabwX7GaNPQi0HULreCmceo671CZZTX
Yu3n4KJpQCsqIgR0weIyELWcRygWzQq+uNriJ3BjF6LtM4CuTHp77Npx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbey32NGvaUw6bD1LiQr5K6tFlTMB8GA1UdIwQY
MBaAFHxGo8rYCWWvhsuwCD37QKsv8brPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAt
ZDhjOTY0NTkxYWZhLzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNzNiY2YtNzlkNi00ODYzLTliZjAtZDhjOTY0NTkxYWZh
LzEvZkVhanl0Z0paYS1HeTdBSVBmdEFxeV94dXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPx7F9hI
cCOkaWLAKB6Qp/M3bEXa5j6uBWV6PQiFDnl9aJT2GXYLBY3OqoDW4APqk4OYBaIV
FyTPKUNQmw6uRVDvDHO8+cEI3hSd3vYFlaQ+NwVIWXHfzE/2cmjH2v4OCvQK5xVv
P1FusP6FV3F2TbBA/0j6AcTLsA9kfq/43Z4XxD5wkv2Nr25tgazOJgHljMkic7HB
r3wyvYME0lt+ZJTqZL6p430PU+0QkiUQbJuoGsVhr5uLPEwlbB9ikJeU3AgLrRtV
qPboPeNNGw5yRJSbWAm4Guk7MwJpd80mkNTX26/82ohcJZO+wuCi85DI9jKw5jQH
RoffjEQqnrUMLw==
-----END CERTIFICATE-----