Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File:                     7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier:          EguPN4FjI0eHUOgIDGJt5WfiyHGXLUiZailRSPHeBXw=
Subject key identifier:   31:2F:CD:AA:CD:8C:CD:AF:52:E0:84:4F:47:1A:9B:5F:73:40:07:D0
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       01962F066F02977F5225E6AFD6519279662C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: ubiQ41nHqNwFJo672MawsxojGij01Gh9VOuGP9zr9u4=)
                          2: JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (hash: K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:02:97:7f:52:25:e6:af:d6:51:92:79:66:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=312fcdaacd8ccdaf52e0844f471a9b5f734007d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:d8:7b:94:1c:fd:57:c1:e9:19:ea:fb:84:
                    41:f0:fd:7a:b5:c7:f0:09:e1:03:bd:e0:15:00:07:
                    19:61:94:4f:73:6b:d3:84:c7:84:32:47:a6:c8:1d:
                    81:eb:f0:05:f2:47:66:35:df:ee:10:21:0a:2c:c7:
                    36:c1:dc:fa:74:02:da:d5:6c:51:d4:be:c5:74:bc:
                    6c:a7:52:73:4b:47:c1:bd:ee:1b:82:e7:ab:78:08:
                    56:07:24:35:40:73:af:48:e1:37:d5:72:ca:35:7e:
                    ca:3b:09:4d:d7:0a:0f:41:e3:6c:10:4f:e2:c6:a0:
                    c4:5a:b6:62:35:68:eb:d8:f1:39:8a:82:ad:e2:39:
                    f6:c8:8c:46:74:7b:09:b0:05:eb:f1:07:da:3a:7e:
                    70:0f:de:d9:4d:bf:8d:26:af:85:2f:f9:8f:a3:02:
                    0d:d4:6a:f9:39:ff:55:99:1c:f6:62:8a:81:82:99:
                    d5:35:7b:79:a1:6e:64:af:70:b2:cc:26:f9:70:f3:
                    05:a1:3f:09:79:bb:fa:54:8c:b1:fb:a9:b7:bb:0a:
                    cf:4b:83:59:56:1c:7a:4d:3b:0a:7b:3f:52:a6:8d:
                    b7:d5:11:c2:fc:d6:04:bb:5f:03:05:52:6f:1d:9f:
                    69:ae:69:03:d6:fb:bf:40:a9:e4:68:1d:ca:3b:b8:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:CD:AA:CD:8C:CD:AF:52:E0:84:4F:47:1A:9B:5F:73:40:07:D0
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2b:84:62:f1:e9:b4:13:aa:78:67:da:62:33:93:b5:6a:cc:
         f8:b1:c8:a7:15:7a:23:37:8e:1b:21:24:56:83:f1:73:b9:db:
         fb:f7:f1:be:20:50:57:54:33:48:61:07:f1:b6:3d:81:66:9e:
         5e:af:0d:9c:e2:d2:55:4f:cf:49:b2:c8:74:05:36:1f:7c:39:
         0a:12:c4:5e:71:95:c7:c7:91:33:04:0d:5f:d8:5b:8d:a1:d3:
         10:2b:c9:25:52:c6:5a:a8:5b:05:f8:f3:f2:df:29:ef:5e:93:
         e5:c8:83:3c:a9:fb:ec:5c:7f:cc:22:bc:20:ee:97:53:aa:08:
         ab:a3:bd:24:2c:37:04:a7:b3:69:bc:38:41:46:80:e8:d7:c8:
         24:a1:a9:dd:e0:aa:3b:4c:da:0d:a9:1e:cd:bc:9e:54:81:86:
         8b:d9:80:33:34:5f:e6:4d:a4:7e:2a:a2:08:94:d5:06:3d:3e:
         71:4c:43:e4:c1:a8:a9:ad:8b:b7:53:fc:96:28:19:da:11:6d:
         cc:1a:83:c5:35:86:d2:eb:47:bf:a2:86:8e:ee:6b:4b:dc:ff:
         84:62:c6:db:b3:20:a6:5c:5e:72:0b:ef:ae:6e:8a:93:56:24:
         96:8a:75:b1:f0:29:20:2a:47:d2:76:3f:5c:4c:29:45:be:fb:
         9a:2c:1f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBm8Cl39SJeav1lGSeWYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYTI2YzQwOGZjNjdiNzUyNzM0Y2M5OTdmMzYzMGRiYWY2
ZjYwNmYwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
EygzMTJmY2RhYWNkOGNjZGFmNTJlMDg0NGY0NzFhOWI1ZjczNDAwN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvDYe5Qc/VfB6Rnq+4RB8P16tcfw
CeEDveAVAAcZYZRPc2vThMeEMkemyB2B6/AF8kdmNd/uECEKLMc2wdz6dALa1WxR
1L7FdLxsp1JzS0fBve4bguereAhWByQ1QHOvSOE31XLKNX7KOwlN1woPQeNsEE/i
xqDEWrZiNWjr2PE5ioKt4jn2yIxGdHsJsAXr8QfaOn5wD97ZTb+NJq+FL/mPowIN
1Gr5Of9VmRz2YoqBgpnVNXt5oW5kr3CyzCb5cPMFoT8Jebv6VIyx+6m3uwrPS4NZ
Vhx6TTsKez9Spo231RHC/NYEu18DBVJvHZ9prmkD1vu/QKnkaB3KO7jzVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEvzarNjM2vUuCET0cam19zQAfQMB8GA1UdIwQY
MBaAFO2ibECPxnt1JzTMmX82MNuvb2BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTIt
OWQ0YTY2YWIzZmYyLzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTItOWQ0YTY2YWIzZmYy
LzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCuEYvHp
tBOqeGfaYjOTtWrM+LHIpxV6IzeOGyEkVoPxc7nb+/fxviBQV1QzSGEH8bY9gWae
Xq8NnOLSVU/PSbLIdAU2H3w5ChLEXnGVx8eRMwQNX9hbjaHTECvJJVLGWqhbBfjz
8t8p716T5ciDPKn77Fx/zCK8IO6XU6oIq6O9JCw3BKezabw4QUaA6NfIJKGp3eCq
O0zaDakezbyeVIGGi9mAMzRf5k2kfiqiCJTVBj0+cUxD5MGoqa2Lt1P8ligZ2hFt
zBqDxTWG0utHv6KGju5rS9z/hGLG27Mgplxecgvvrm6Kk1Yklop1sfApICpH0nY/
XEwpRb77miwfJQ==
-----END CERTIFICATE-----