Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          NDAa/7wcrnLO0NolYvt5qvO5k6h9HWPkLPPTECBQ+Cg=
Subject key identifier:   BD:24:B1:2D:26:D5:0B:20:F4:38:3A:4D:84:4A:7F:39:55:C9:17:BA
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       01962F74C7AA06DAC0E1C3DF5810E1A68CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          01E7
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: Lg0RWL+v4mWDCvXLNckLzG1jVcUrlGCi/8sY/cbR5GE=)
                          2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:aa:06:da:c0:e1:c3:df:58:10:e1:a6:8c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=bd24b12d26d50b20f4383a4d844a7f3955c917ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:d3:6b:80:2c:dc:6b:ac:79:53:8b:67:ac:
                    0c:64:d3:b0:8b:3d:b6:35:c9:d6:b4:15:91:bc:68:
                    cb:31:9f:67:e1:cb:0a:52:57:10:3c:62:dd:35:9b:
                    ec:9e:cc:6a:2a:22:19:9d:7b:8e:87:e0:16:c7:25:
                    5c:a5:5e:d9:29:58:9e:2b:0d:c3:aa:7c:9a:cb:a8:
                    39:e2:fb:03:a4:b0:e5:e0:6a:72:4b:11:ff:2f:b8:
                    02:bf:34:f3:6e:2d:b1:40:cc:70:1c:65:3e:f7:80:
                    2d:be:3f:f0:12:ab:6b:ee:50:8f:10:f7:e8:5f:60:
                    ff:7b:f3:56:ba:be:19:39:62:ae:6f:46:99:5f:2b:
                    6e:a5:c9:d0:40:9e:d7:b7:31:b7:64:f5:19:e1:07:
                    1c:1d:35:9e:0c:e5:4b:75:a0:14:70:86:4f:8d:74:
                    38:3b:96:c0:be:3c:47:15:cc:fb:3f:22:0b:9e:6c:
                    05:0a:36:08:fa:7a:af:b4:86:12:1c:4b:79:67:4f:
                    38:53:4c:a5:a8:f6:35:6b:a6:73:b9:37:4e:c9:21:
                    68:46:63:eb:32:38:76:72:a9:71:5e:c5:1c:67:f4:
                    f9:b2:74:c5:d2:bd:7e:2b:99:85:7e:d6:e5:8d:0e:
                    e0:40:30:49:0d:57:0c:37:df:9e:8d:de:9f:83:e1:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:24:B1:2D:26:D5:0B:20:F4:38:3A:4D:84:4A:7F:39:55:C9:17:BA
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:50:e9:04:65:57:0f:fc:bf:cc:44:b7:ad:d5:8b:a8:82:
         2e:28:78:ce:ff:b0:f9:b3:ba:06:26:db:23:0a:4d:33:02:8a:
         16:9d:0c:77:57:80:57:c1:af:90:14:db:51:a9:94:ce:45:0c:
         11:e5:68:e5:72:a8:73:3f:88:b5:20:ea:4f:67:90:8c:c4:fb:
         ff:4c:9b:22:37:d1:a5:97:bb:18:e2:5e:9e:08:fc:84:87:4e:
         9a:52:f1:63:f4:57:fc:95:2c:f3:7a:53:68:16:ee:e6:c5:44:
         4c:6d:ec:97:1f:5e:f8:20:4d:98:91:0e:0d:5b:cd:40:a0:38:
         93:47:a4:6c:f6:11:5a:92:cf:b5:95:4f:10:10:2a:c7:b2:14:
         ed:0e:96:8b:82:f9:e8:b9:44:78:8f:8e:0f:7b:75:dd:89:cf:
         ae:a4:3a:f2:ee:f7:c6:3e:fd:9e:07:7d:3a:ca:eb:64:9c:5e:
         8e:eb:c9:d9:c8:7f:86:bb:e9:af:9d:5a:77:25:65:24:af:82:
         01:40:65:11:1e:35:65:14:54:be:a1:6f:5f:8c:11:16:e2:e4:
         52:91:8d:6c:cf:8f:bb:1d:01:62:f2:5b:5b:8b:46:e7:87:28:
         13:85:33:c9:36:38:22:95:08:17:21:41:d0:c5:78:4d:23:20:
         cc:7c:e7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMeqBtrA4cPfWBDhpozMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
EyhiZDI0YjEyZDI2ZDUwYjIwZjQzODNhNGQ4NDRhN2YzOTU1YzkxN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZfTa4As3GuseVOLZ6wMZNOwiz22
NcnWtBWRvGjLMZ9n4csKUlcQPGLdNZvsnsxqKiIZnXuOh+AWxyVcpV7ZKVieKw3D
qnyay6g54vsDpLDl4GpySxH/L7gCvzTzbi2xQMxwHGU+94Atvj/wEqtr7lCPEPfo
X2D/e/NWur4ZOWKub0aZXytupcnQQJ7XtzG3ZPUZ4QccHTWeDOVLdaAUcIZPjXQ4
O5bAvjxHFcz7PyILnmwFCjYI+nqvtIYSHEt5Z084U0ylqPY1a6ZzuTdOySFoRmPr
Mjh2cqlxXsUcZ/T5snTF0r1+K5mFftbljQ7gQDBJDVcMN9+ejd6fg+GpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0ksS0m1Qsg9Dg6TYRKfzlVyRe6MB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8xQ6QRl
Vw/8v8xEt63Vi6iCLih4zv+w+bO6BibbIwpNMwKKFp0Md1eAV8GvkBTbUamUzkUM
EeVo5XKocz+ItSDqT2eQjMT7/0ybIjfRpZe7GOJengj8hIdOmlLxY/RX/JUs83pT
aBbu5sVETG3slx9e+CBNmJEODVvNQKA4k0ekbPYRWpLPtZVPEBAqx7IU7Q6Wi4L5
6LlEeI+OD3t13YnPrqQ68u73xj79ngd9OsrrZJxejuvJ2ch/hrvpr51adyVlJK+C
AUBlER41ZRRUvqFvX4wRFuLkUpGNbM+Pux0BYvJbW4tG54coE4UzyTY4IpUIFyFB
0MV4TSMgzHznmw==
-----END CERTIFICATE-----