Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File:                     7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier:          OhbuppOj0eYTzh+X6X42Ng3GBbkBlKS+h4RXvxSNf68=
Subject key identifier:   48:BE:36:D5:6D:43:F6:59:B8:EB:EB:BB:45:7B:23:41:77:96:7D:60
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer:       /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial:       01962F3DBCEC827E80767A5157BDCFC176D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: hjizXCD3GDMuqscyLc3ypgkMyZSKXQsYk2Z5GlQsyTk=)
                          2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:ec:82:7e:80:76:7a:51:57:bd:cf:c1:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=48be36d56d43f659b8ebebbb457b234177967d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:61:7e:b9:f9:38:0b:1e:b4:4b:a2:69:30:
                    11:30:b6:71:48:53:47:e6:09:31:21:f0:7f:0f:47:
                    2c:b3:31:aa:74:1c:c2:f3:3c:a8:e1:58:57:a2:c0:
                    08:8f:a9:0b:2c:e6:6a:16:9b:31:c5:cc:fd:82:91:
                    31:2f:61:26:2d:6c:b7:f7:22:da:45:7a:f4:b2:07:
                    5d:68:1a:05:a7:01:b3:08:ed:e3:59:4f:ba:40:73:
                    ba:e4:4d:14:19:0b:f4:96:30:ed:df:c9:e1:e8:24:
                    e7:a8:25:0d:03:65:15:ad:0f:e8:a6:1e:5e:84:a1:
                    9a:f1:c9:86:fa:fe:6e:54:92:ac:82:a2:82:7c:96:
                    b6:67:21:af:37:ce:5b:a0:e7:84:02:31:78:bc:e6:
                    a6:6b:34:3a:57:3e:68:76:8f:d0:5e:e5:62:0e:f3:
                    1b:22:13:9e:9c:53:1e:88:d4:c2:f6:93:fb:88:bb:
                    4a:ab:a1:c4:ec:54:ff:0a:50:f8:13:f7:31:36:4b:
                    be:fe:59:61:79:88:02:d6:59:78:8c:1e:b3:a0:2d:
                    a6:58:22:7f:f9:9b:45:89:f0:f4:f3:09:6a:1c:4b:
                    73:aa:93:62:88:c5:53:d3:f8:06:0a:75:f1:db:43:
                    19:58:33:ea:f8:0c:4c:20:7e:57:73:a1:e8:d2:43:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BE:36:D5:6D:43:F6:59:B8:EB:EB:BB:45:7B:23:41:77:96:7D:60
            X509v3 Authority Key Identifier:
                keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:81:5e:2f:a7:47:ce:c7:52:cb:09:3e:cc:6b:9c:4a:24:d8:
         8b:8f:56:fb:73:b4:d6:39:c7:87:0a:00:b4:95:66:51:e4:e4:
         74:c1:95:cd:aa:1e:ec:de:37:26:06:0d:09:94:37:67:11:29:
         19:ac:7e:74:88:9b:a8:94:40:a5:0e:4a:fc:ba:df:7b:16:84:
         4b:80:e4:58:b9:a6:a3:53:e2:5a:c8:0d:b0:09:9e:df:61:34:
         1e:52:48:e1:6c:52:12:d9:a3:63:73:81:0d:68:03:ea:e4:bc:
         fd:a8:66:d4:21:fc:f1:ba:7e:cf:5d:aa:d0:71:31:6c:36:cc:
         fc:a0:c8:ef:d5:75:68:b0:71:80:7d:65:82:91:6b:3e:05:ae:
         61:1d:db:8c:1a:ca:8a:0a:a0:da:b9:18:6d:5e:87:bd:30:5a:
         f2:f2:78:54:d0:3f:e5:8f:d6:28:a3:5d:4e:89:d9:ca:fd:6e:
         68:a8:a8:cf:64:c2:8e:63:da:d3:de:57:59:84:38:7b:90:05:
         cb:a0:a7:eb:94:e4:d0:4c:f2:b3:2b:30:97:28:58:f1:6b:01:
         50:a7:3b:32:31:84:3a:78:59:e8:25:cb:eb:2a:85:e1:57:4a:
         d2:40:a4:8a:7f:f8:34:a0:b5:28:91:7d:52:d7:bc:a5:46:21:
         55:62:ba:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbzsgn6AdnpRV73PwXbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwNDEzMTMwMTM3WhcNMjUwNDE0MTMwMTM3WjAzMTEwLwYDVQQD
Eyg0OGJlMzZkNTZkNDNmNjU5YjhlYmViYmI0NTdiMjM0MTc3OTY3ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG5hfrn5OAsetEuiaTARMLZxSFNH
5gkxIfB/D0csszGqdBzC8zyo4VhXosAIj6kLLOZqFpsxxcz9gpExL2EmLWy39yLa
RXr0sgddaBoFpwGzCO3jWU+6QHO65E0UGQv0ljDt38nh6CTnqCUNA2UVrQ/oph5e
hKGa8cmG+v5uVJKsgqKCfJa2ZyGvN85boOeEAjF4vOamazQ6Vz5odo/QXuViDvMb
IhOenFMeiNTC9pP7iLtKq6HE7FT/ClD4E/cxNku+/llheYgC1ll4jB6zoC2mWCJ/
+ZtFifD08wlqHEtzqpNiiMVT0/gGCnXx20MZWDPq+AxMIH5Xc6Ho0kPYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi+NtVtQ/ZZuOvru0V7I0F3ln1gMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4FeL6dH
zsdSywk+zGucSiTYi49W+3O01jnHhwoAtJVmUeTkdMGVzaoe7N43JgYNCZQ3ZxEp
Gax+dIibqJRApQ5K/LrfexaES4DkWLmmo1PiWsgNsAme32E0HlJI4WxSEtmjY3OB
DWgD6uS8/ahm1CH88bp+z12q0HExbDbM/KDI79V1aLBxgH1lgpFrPgWuYR3bjBrK
igqg2rkYbV6HvTBa8vJ4VNA/5Y/WKKNdTonZyv1uaKioz2TCjmPa095XWYQ4e5AF
y6Cn65Tk0EzysyswlyhY8WsBUKc7MjGEOnhZ6CXL6yqF4VdK0kCkin/4NKC1KJF9
Ute8pUYhVWK6Lw==
-----END CERTIFICATE-----