Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File:                     t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier:          NSZfUYmeRlxBD4Ppa5C/ADzGWEDBIduLGfXemQILKBQ=
Subject key identifier:   48:60:26:BA:B3:37:F4:C8:C6:DF:D5:6D:64:26:8F:DC:8C:FC:93:32
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer:       /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial:       01962F74EA860C6B6B610D790C8E3C0F0841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number:          C5
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
                          2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: W4hqjJX0JGd3B4KUl5uubatlCdIcNZ91+vISctzt0bE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ea:86:0c:6b:6b:61:0d:79:0c:8e:3c:0f:08:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=486026bab337f4c8c6dfd56d64268fdc8cfc9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:a3:7a:7f:60:34:17:4a:a4:63:bb:65:22:
                    e5:46:42:54:8e:a9:ef:43:33:04:b2:2f:9e:12:3d:
                    ba:64:59:e6:08:8f:5f:bd:50:0d:1c:7f:34:41:18:
                    90:fc:10:ad:cc:61:fa:27:e8:00:1a:87:37:0d:44:
                    52:0d:6b:28:ae:4f:15:c9:26:53:92:ba:e3:54:69:
                    b6:97:de:ae:17:70:53:cd:9c:b7:40:d2:4b:3c:95:
                    6a:2a:f5:cd:66:17:9b:c0:1e:63:73:a3:88:da:a4:
                    dd:b2:97:03:bd:51:18:04:23:f0:a3:a7:b8:38:ba:
                    ae:73:bb:42:4d:b2:93:41:2c:fa:45:a9:23:61:20:
                    39:19:97:f0:d2:9d:0d:a1:25:ba:5d:28:0d:c9:97:
                    dc:55:aa:05:d8:1f:9b:2e:aa:73:c8:0f:be:1a:7e:
                    e6:8a:3d:d0:69:3b:6e:e8:16:5c:00:21:db:da:43:
                    9d:67:79:eb:00:9d:8a:29:78:55:fb:47:b0:7f:5e:
                    b4:bf:c5:4e:10:84:cd:d9:c1:bf:76:23:da:ee:b2:
                    c4:2c:dc:4f:b5:55:34:a7:3a:ba:7d:6a:20:03:3a:
                    3b:c9:95:8c:62:6d:e2:05:3e:e7:9c:14:eb:55:ae:
                    1e:c2:31:c5:e6:f6:3a:96:ed:96:98:5d:f1:9a:71:
                    d7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:26:BA:B3:37:F4:C8:C6:DF:D5:6D:64:26:8F:DC:8C:FC:93:32
            X509v3 Authority Key Identifier:
                keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:03:2e:91:83:e1:2d:d5:bc:b3:cd:e8:ee:3b:bc:38:e9:05:
         31:bc:29:de:0f:37:f8:5a:ea:b6:80:41:03:74:b1:6f:2a:63:
         98:fa:5a:ef:4f:3b:05:e4:aa:40:41:12:5f:a3:ce:c2:90:9f:
         94:2f:c4:a1:8c:de:41:af:4b:86:cb:a6:9e:b2:0f:13:ce:d3:
         74:ab:58:d4:83:cb:09:c3:e0:02:60:ff:b6:39:4a:d3:73:2a:
         06:05:9b:79:5d:df:59:1c:3b:a7:03:1f:79:5f:ea:a5:6b:0a:
         bc:54:b9:0c:c2:cc:99:0b:56:e7:dd:71:43:56:de:09:61:c0:
         ef:cf:3d:d9:c0:5a:2c:c5:bf:6d:9c:d1:61:d5:ac:e7:f2:fc:
         a6:92:61:85:4a:42:00:1f:38:8e:63:45:26:16:71:04:12:ce:
         da:15:82:9e:0a:8b:04:1c:dc:82:57:6c:85:9f:17:28:c8:e0:
         91:e2:b0:9d:39:7d:0b:ff:13:91:35:02:fd:da:03:b0:a2:12:
         91:08:7f:be:39:f8:bb:a2:ab:13:c5:c2:23:da:9c:88:9a:ee:
         d5:77:67:d3:e2:f6:37:a7:08:83:f6:24:22:95:1b:04:ae:20:
         ed:68:d4:5a:8a:ee:2c:39:e1:48:79:cf:6c:9f:df:d7:e1:5e:
         fe:a9:4b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOqGDGtrYQ15DI48DwhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjE5NWI2NTEyZWM4Nzg3ZDk5YTFiMmU0ZWJkODA4ODRm
OTgwYjIwHhcNMjUwNDEzMTQwMTUzWhcNMjUwNDE0MTQwMTUzWjAzMTEwLwYDVQQD
Eyg0ODYwMjZiYWIzMzdmNGM4YzZkZmQ1NmQ2NDI2OGZkYzhjZmM5MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySKjen9gNBdKpGO7ZSLlRkJUjqnv
QzMEsi+eEj26ZFnmCI9fvVANHH80QRiQ/BCtzGH6J+gAGoc3DURSDWsork8VySZT
krrjVGm2l96uF3BTzZy3QNJLPJVqKvXNZhebwB5jc6OI2qTdspcDvVEYBCPwo6e4
OLquc7tCTbKTQSz6RakjYSA5GZfw0p0NoSW6XSgNyZfcVaoF2B+bLqpzyA++Gn7m
ij3QaTtu6BZcACHb2kOdZ3nrAJ2KKXhV+0ewf160v8VOEITN2cG/diPa7rLELNxP
tVU0pzq6fWogAzo7yZWMYm3iBT7nnBTrVa4ewjHF5vY6lu2WmF3xmnHX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhgJrqzN/TIxt/VbWQmj9yM/JMyMB8GA1UdIwQY
MBaAFLexlbZRLsh4fZmhsuTr2AiE+YCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYt
YjM4ODExMGEzMDc4LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mY2ZkMjctMTRjOC00ODQ0LTlmZmYtYjM4ODExMGEzMDc4
LzEvdDdHVnRsRXV5SGg5bWFHeTVPdllDSVQ1Z0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgMukYPh
LdW8s83o7ju8OOkFMbwp3g83+FrqtoBBA3SxbypjmPpa7087BeSqQEESX6POwpCf
lC/EoYzeQa9LhsumnrIPE87TdKtY1IPLCcPgAmD/tjlK03MqBgWbeV3fWRw7pwMf
eV/qpWsKvFS5DMLMmQtW591xQ1beCWHA78892cBaLMW/bZzRYdWs5/L8ppJhhUpC
AB84jmNFJhZxBBLO2hWCngqLBBzcgldshZ8XKMjgkeKwnTl9C/8TkTUC/doDsKIS
kQh/vjn4u6KrE8XCI9qciJru1Xdn0+L2N6cIg/YkIpUbBK4g7WjUWoruLDnhSHnP
bJ/f1+Fe/qlLSw==
-----END CERTIFICATE-----