Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File:                     RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier:          V8wuZ6J4ykVLw4TpqghN/3/XqGKrd0s+anm31z2AkyI=
Subject key identifier:   1F:5B:44:E9:79:B0:67:C7:15:46:B8:A9:A7:F6:6C:D6:98:F5:9A:7E
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer:       /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial:       01962E9927C09BC922D67A206EC96B648A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
                          2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: Mcf8qHarPnUJgFEQKmLvjorYJKRca04UhBrOgp26mdA=)
                          3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:c0:9b:c9:22:d6:7a:20:6e:c9:6b:64:8a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=1f5b44e979b067c71546b8a9a7f66cd698f59a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fb:87:13:ef:e4:e5:ff:cd:60:62:70:30:fb:
                    2a:e3:ef:18:80:95:d3:95:44:17:a2:49:d4:42:55:
                    ad:9e:b8:bf:c7:73:e6:dd:4f:45:78:d2:63:e8:41:
                    96:e0:95:4b:d3:b6:4b:3a:12:74:80:a3:86:ce:9c:
                    dd:99:21:81:fe:5c:49:63:11:ef:b6:cd:48:eb:c5:
                    76:da:d2:c4:bc:d2:fb:08:a2:97:f4:9a:ee:38:35:
                    8d:d5:fa:68:80:63:18:ec:ae:52:1e:84:8c:09:a9:
                    c3:83:ad:80:1b:67:13:69:28:61:1b:8b:23:4b:09:
                    bd:28:bc:0e:35:84:91:58:34:9f:3a:12:34:b9:91:
                    eb:28:82:49:83:0f:2c:66:18:db:42:33:bc:48:9c:
                    4c:b0:73:d0:f1:d5:bb:ac:e6:b1:4b:1e:87:d7:03:
                    f2:70:7d:45:65:34:d6:d5:fc:04:90:d6:9e:16:b4:
                    ec:d6:39:08:14:80:25:82:e9:aa:4a:0b:3d:b4:74:
                    34:94:94:37:de:a3:3e:e4:48:fc:61:1d:48:17:99:
                    36:c9:23:02:f8:3c:a4:77:18:83:88:b9:ed:e6:6e:
                    8e:9b:10:86:83:db:7b:5f:fb:07:b1:43:c0:94:7e:
                    3f:03:b3:70:4d:47:aa:92:84:ae:4c:c3:21:6f:58:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:44:E9:79:B0:67:C7:15:46:B8:A9:A7:F6:6C:D6:98:F5:9A:7E
            X509v3 Authority Key Identifier:
                keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:02:b1:03:9f:4d:c3:e0:6b:cf:59:95:9d:09:34:3e:01:
         86:4f:08:3b:6e:42:b8:9c:c7:5c:13:98:af:cc:91:ae:62:8b:
         0a:b9:2e:94:66:32:bf:a1:ea:d3:51:d4:22:fb:48:f1:e4:dc:
         58:59:38:6f:6a:56:aa:bf:cc:11:3f:a1:1b:be:7e:9c:76:fa:
         e0:ee:e0:37:30:0b:7e:ff:e9:17:ff:d0:e4:2a:04:9b:78:25:
         af:82:a6:9e:05:61:a0:69:6e:fc:74:34:3c:a1:8a:d2:16:f9:
         f7:27:14:de:6d:a8:9f:1b:10:b8:85:c3:0e:63:2d:06:c5:e8:
         19:42:21:77:be:9d:7c:67:ea:5c:be:ae:38:97:27:a6:16:0c:
         75:73:93:72:99:cd:e3:be:c2:9b:2b:87:ac:eb:89:8e:e3:fd:
         ec:77:84:c8:82:f1:f2:57:9d:5e:46:5d:43:b0:a8:07:a1:73:
         e6:78:dc:4f:a6:46:00:50:d9:d5:b9:dc:e8:7b:8e:cc:04:d6:
         b1:01:bc:4d:06:2b:8d:ec:cc:c8:69:db:c2:cd:45:04:d8:f1:
         1c:a8:d6:b5:23:33:08:b1:c0:a2:42:3d:3e:d6:c0:3e:49:6c:
         ed:87:8a:58:58:c5:e1:26:dd:34:83:df:82:96:5b:30:ac:a2:
         82:4f:62:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumSfAm8ki1nogbslrZIpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NmVjYjNiZTEwNjVlMWU3MTU4OTUwOGJlYzZkNzRiNWE3
YjFlZDcwHhcNMjUwNDEzMTAwMTUxWhcNMjUwNDE0MTAwMTUxWjAzMTEwLwYDVQQD
EygxZjViNDRlOTc5YjA2N2M3MTU0NmI4YTlhN2Y2NmNkNjk4ZjU5YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvuHE+/k5f/NYGJwMPsq4+8YgJXT
lUQXoknUQlWtnri/x3Pm3U9FeNJj6EGW4JVL07ZLOhJ0gKOGzpzdmSGB/lxJYxHv
ts1I68V22tLEvNL7CKKX9JruODWN1fpogGMY7K5SHoSMCanDg62AG2cTaShhG4sj
Swm9KLwONYSRWDSfOhI0uZHrKIJJgw8sZhjbQjO8SJxMsHPQ8dW7rOaxSx6H1wPy
cH1FZTTW1fwEkNaeFrTs1jkIFIAlgumqSgs9tHQ0lJQ33qM+5Ej8YR1IF5k2ySMC
+DykdxiDiLnt5m6OmxCGg9t7X/sHsUPAlH4/A7NwTUeqkoSuTMMhb1iAKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9bROl5sGfHFUa4qaf2bNaY9Zp+MB8GA1UdIwQY
MBaAFEVuyzvhBl4ecViVCL7G10taex7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1Nzct
NWFjNzRkYmExN2I4LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1NzctNWFjNzRkYmExN2I4
LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8sCsQOf
TcPga89ZlZ0JND4Bhk8IO25CuJzHXBOYr8yRrmKLCrkulGYyv6Hq01HUIvtI8eTc
WFk4b2pWqr/MET+hG75+nHb64O7gNzALfv/pF//Q5CoEm3glr4KmngVhoGlu/HQ0
PKGK0hb59ycU3m2onxsQuIXDDmMtBsXoGUIhd76dfGfqXL6uOJcnphYMdXOTcpnN
477CmyuHrOuJjuP97HeEyILx8ledXkZdQ7CoB6Fz5njcT6ZGAFDZ1bnc6HuOzATW
sQG8TQYrjezMyGnbws1FBNjxHKjWtSMzCLHAokI9PtbAPkls7YeKWFjF4SbdNIPf
gpZbMKyigk9iTA==
-----END CERTIFICATE-----