Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          MPZc48glCF7lYMprfy3a6Ki39qcMfQQkk7j4O4GdrI4=
Subject key identifier:   EF:91:55:2F:F7:C7:04:13:F8:69:E8:1B:C4:51:E5:0D:47:F1:8E:EF
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       01962F06520CC248D1ED010C068B0A826A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: uJz1kVf2UKNHXtw5PvjOsb3JHl5SPKh8aeRPPAY8inI=)
                          2: u07_9pXlmAHNvZNIHp40fo4J9fA.roa (hash: 204TNJbYlIMXBCvMgIFRQa54vmawR7NJf6FejBBRQA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:0c:c2:48:d1:ed:01:0c:06:8b:0a:82:6a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=ef91552ff7c70413f869e81bc451e50d47f18eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:74:26:1e:a4:33:9c:b7:57:df:34:e6:79:
                    61:2e:16:f9:a6:d0:5f:42:96:05:ce:95:fb:cc:4f:
                    07:e7:20:8d:8d:3a:6d:a3:41:b4:ff:b3:d4:5c:f5:
                    ea:04:ec:5c:4f:f0:17:a7:e4:4e:43:22:ae:43:26:
                    d9:0f:7f:84:94:5b:4f:a4:56:4f:ef:e4:1e:7a:1b:
                    78:31:e6:8c:f9:7b:e9:87:21:bc:f0:28:d6:d3:08:
                    2a:e8:e7:5b:09:99:5a:fc:29:65:12:8b:36:bb:f1:
                    db:18:29:8f:fc:c5:80:3f:30:73:ba:20:62:ee:d7:
                    01:71:d4:99:e3:2f:8c:f3:24:41:a5:72:05:7d:c2:
                    57:c3:c6:cb:22:35:29:3e:9c:2d:19:a3:e4:3b:5b:
                    3a:f4:2b:0f:fa:12:23:fe:d4:58:56:48:12:35:d1:
                    ce:c4:8b:73:37:51:a5:42:2c:e5:7f:4a:63:59:1b:
                    5c:43:5b:82:81:eb:b3:4b:e2:46:12:b3:84:b7:4c:
                    7f:56:32:e7:a8:e1:2c:b8:43:b4:f1:a6:4c:31:1c:
                    81:28:d4:15:e7:88:8d:27:7c:2b:61:a7:c0:1b:74:
                    e1:4f:aa:ad:86:ef:81:b1:be:c1:81:2b:78:3a:e6:
                    a6:8c:d7:27:87:d5:7c:e4:b6:a8:a5:11:19:7b:22:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:55:2F:F7:C7:04:13:F8:69:E8:1B:C4:51:E5:0D:47:F1:8E:EF
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c6:63:d6:39:76:27:fb:a9:2c:92:4d:e7:d4:9d:65:07:ed:
         ef:9d:21:23:b8:25:f1:15:26:00:9b:77:e5:ee:b9:e8:a8:5f:
         5a:dc:45:c4:a7:3c:70:92:80:04:73:67:d6:a3:36:90:63:b1:
         4d:11:10:fa:a5:3e:c1:c0:c3:62:b5:e0:95:2d:bc:7d:08:a1:
         93:64:ac:6b:18:b9:ac:ea:ba:66:19:8e:5f:e6:97:17:b7:96:
         b6:cf:c1:ee:fd:79:1d:94:81:eb:10:51:02:01:15:f3:3c:8f:
         7d:3f:98:b8:96:6e:00:c2:fa:98:4d:8b:77:a9:88:f6:59:46:
         c9:f1:0f:1e:dc:97:9c:a6:2f:d6:42:04:ec:aa:1a:a5:ab:31:
         a0:2a:c3:8d:b1:b2:f7:ef:15:e8:64:e7:83:f2:ec:53:6a:86:
         fd:9d:8f:d6:d1:46:a9:d5:21:3f:57:11:2a:f5:33:aa:10:7e:
         ad:f2:1c:12:05:74:5b:59:00:7c:ed:9c:6d:80:54:e3:82:f4:
         1d:5e:28:e0:ce:4a:98:e6:4d:5e:60:f6:ef:45:b4:55:29:d7:
         e6:67:5b:d0:3c:02:59:a3:3f:99:3b:67:eb:a6:f4:14:dc:b6:
         2d:79:4d:df:b3:41:26:bb:26:4e:20:99:87:e9:0e:fe:22:63:
         be:71:4b:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlIMwkjR7QEMBosKgmozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjdhMGMxYmFiZDYyMWU4MjIwZDBkNzc3ODc3YTg0NGI0
MTNjMTAwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
EyhlZjkxNTUyZmY3YzcwNDEzZjg2OWU4MWJjNDUxZTUwZDQ3ZjE4ZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwR0Jh6kM5y3V9805nlhLhb5ptBf
QpYFzpX7zE8H5yCNjTpto0G0/7PUXPXqBOxcT/AXp+ROQyKuQybZD3+ElFtPpFZP
7+Qeeht4MeaM+XvphyG88CjW0wgq6OdbCZla/CllEos2u/HbGCmP/MWAPzBzuiBi
7tcBcdSZ4y+M8yRBpXIFfcJXw8bLIjUpPpwtGaPkO1s69CsP+hIj/tRYVkgSNdHO
xItzN1GlQizlf0pjWRtcQ1uCgeuzS+JGErOEt0x/VjLnqOEsuEO08aZMMRyBKNQV
54iNJ3wrYafAG3ThT6qthu+Bsb7BgSt4OuamjNcnh9V85LaopREZeyKKbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+RVS/3xwQT+GnoG8RR5Q1H8Y7vMB8GA1UdIwQY
MBaAFAe3oMG6vWIegiDQ13eHeoRLQTwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYt
ZmI5MjE3MDI4YzVjLzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYtZmI5MjE3MDI4YzVj
LzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsZj1jl2
J/upLJJN59SdZQft750hI7gl8RUmAJt35e656KhfWtxFxKc8cJKABHNn1qM2kGOx
TREQ+qU+wcDDYrXglS28fQihk2Ssaxi5rOq6ZhmOX+aXF7eWts/B7v15HZSB6xBR
AgEV8zyPfT+YuJZuAML6mE2Ld6mI9llGyfEPHtyXnKYv1kIE7KoapasxoCrDjbGy
9+8V6GTng/LsU2qG/Z2P1tFGqdUhP1cRKvUzqhB+rfIcEgV0W1kAfO2cbYBU44L0
HV4o4M5KmOZNXmD270W0VSnX5mdb0DwCWaM/mTtn66b0FNy2LXlN37NBJrsmTiCZ
h+kO/iJjvnFLOQ==
-----END CERTIFICATE-----