Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File:                     rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier:          RkNtZHs8LUTw2qXoUDjtOiHRbW7OMZIEvlLNypqH7uU=
Subject key identifier:   ED:36:91:CE:15:81:F9:AA:74:0E:57:4D:F2:15:E8:62:7F:21:92:65
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer:       /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial:       01962F747C08F2322BBB0B0C4E04F47133C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number:          0B07
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: ArXM7RJDnDKHHLBE21eoL2lE76c.roa (hash: n1+IHvUCKe6KRZXjngvQSrArHwaB9mNvliy4XN3wMhA=)
                          2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: d2deq9Q8hGCu2SXaxAzdw6WQREx4CVnVK6ut6mzYfe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:08:f2:32:2b:bb:0b:0c:4e:04:f4:71:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=ed3691ce1581f9aa740e574df215e8627f219265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:55:f6:1e:87:19:00:cd:44:4c:e2:50:cf:
                    70:41:5f:b9:f0:5a:7f:f0:f6:d2:ca:00:38:43:14:
                    bb:87:41:31:28:3b:69:6f:22:67:e0:61:52:ae:3d:
                    df:0b:4c:dd:5e:70:33:f4:d8:12:15:1c:95:fa:f1:
                    f4:19:39:52:d2:30:bb:13:db:2c:b2:50:7a:21:dd:
                    e0:90:d6:82:c8:4e:de:d3:7b:b1:4b:db:96:45:23:
                    3b:15:77:5e:dc:00:00:01:6b:0b:60:fb:6f:b0:b7:
                    18:99:82:dc:82:77:eb:59:9a:ea:fc:04:99:d0:7f:
                    7a:b3:ac:a2:13:18:f2:55:e8:f3:c9:dd:e2:61:a9:
                    94:9b:60:e0:b5:2d:84:6f:35:9e:c1:6e:5c:16:2d:
                    39:cc:20:76:67:8a:4a:9f:83:c6:78:4a:61:5b:56:
                    48:33:ed:6e:de:5d:92:0b:bc:f4:57:75:4d:53:0c:
                    09:8e:5e:b5:2b:7a:7d:6a:17:5b:ae:a1:f1:27:b7:
                    ab:5a:64:0a:57:ec:f9:c3:50:1d:55:f0:f5:ec:3c:
                    a6:d9:29:17:af:f1:fb:52:b9:21:77:a7:2b:b7:c7:
                    5f:2d:1d:0d:7e:74:c6:f5:79:c8:ac:4b:94:63:fa:
                    39:86:be:2b:01:5a:2d:a6:04:98:39:f3:67:17:a2:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:91:CE:15:81:F9:AA:74:0E:57:4D:F2:15:E8:62:7F:21:92:65
            X509v3 Authority Key Identifier:
                keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7d:b1:be:e8:cb:89:1e:67:63:f1:cf:d1:9c:b8:80:e5:d6:
         fd:65:0b:72:c1:5a:77:ef:0b:e5:88:b5:99:95:52:e8:5b:4d:
         b4:e7:44:27:f6:8c:f5:6e:e8:cc:ea:a7:9b:60:5f:05:d0:55:
         40:68:21:6e:ce:b6:73:c7:3b:44:7e:9a:b0:1d:a1:ff:f5:41:
         15:5d:e1:e4:0b:3e:38:79:74:96:a8:60:2b:5f:29:22:25:5b:
         e9:dc:05:b6:23:90:ec:0f:e6:a8:e8:d8:c9:89:8a:7b:98:36:
         86:11:cc:1d:dd:5a:37:ad:d5:a6:2d:06:17:84:89:51:90:32:
         80:71:b5:3c:7d:2e:fc:cc:37:95:b4:f9:e4:d4:15:56:d1:4e:
         83:54:69:f4:d1:95:4d:f9:a4:ae:52:6a:6a:bb:04:73:5b:19:
         1f:2c:fc:f5:c7:a8:b1:63:16:eb:76:91:e2:6d:e8:97:e2:db:
         f5:e8:4a:07:b9:4a:8e:6b:e0:52:e3:06:fe:81:80:e2:ea:1d:
         b8:3f:6d:ba:cd:0b:ed:c9:04:27:29:44:15:f4:1b:88:88:d3:
         0b:cf:5d:46:85:9a:ac:a0:be:a1:90:fe:2b:e1:86:98:7e:20:
         17:80:c7:ce:11:4c:42:24:b0:7e:02:d7:32:69:e2:d1:31:b8:
         34:bf:35:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHwI8jIruwsMTgT0cTPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlN2YxODdjMTI3ODJmYzRkODQ0NzYyMjM1OTkzMzI5YzQ1
NjNhMGQwHhcNMjUwNDEzMTQwMTI1WhcNMjUwNDE0MTQwMTI1WjAzMTEwLwYDVQQD
EyhlZDM2OTFjZTE1ODFmOWFhNzQwZTU3NGRmMjE1ZTg2MjdmMjE5MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY5V9h6HGQDNREziUM9wQV+58Fp/
8PbSygA4QxS7h0ExKDtpbyJn4GFSrj3fC0zdXnAz9NgSFRyV+vH0GTlS0jC7E9ss
slB6Id3gkNaCyE7e03uxS9uWRSM7FXde3AAAAWsLYPtvsLcYmYLcgnfrWZrq/ASZ
0H96s6yiExjyVejzyd3iYamUm2DgtS2EbzWewW5cFi05zCB2Z4pKn4PGeEphW1ZI
M+1u3l2SC7z0V3VNUwwJjl61K3p9ahdbrqHxJ7erWmQKV+z5w1AdVfD17Dym2SkX
r/H7Urkhd6crt8dfLR0NfnTG9XnIrEuUY/o5hr4rAVotpgSYOfNnF6J8lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO02kc4VgfmqdA5XTfIV6GJ/IZJlMB8GA1UdIwQY
MBaAFK5/GHwSeC/E2ER2IjWZMynEVjoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYt
MDU4Nzc2MDRhMDFkLzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jOGY2NDctZWQ3OS00MmQ5LThkZjYtMDU4Nzc2MDRhMDFk
LzEvcm44WWZCSjRMOFRZUkhZaU5aa3pLY1JXT2cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwX2xvujL
iR5nY/HP0Zy4gOXW/WULcsFad+8L5Yi1mZVS6FtNtOdEJ/aM9W7ozOqnm2BfBdBV
QGghbs62c8c7RH6asB2h//VBFV3h5As+OHl0lqhgK18pIiVb6dwFtiOQ7A/mqOjY
yYmKe5g2hhHMHd1aN63Vpi0GF4SJUZAygHG1PH0u/Mw3lbT55NQVVtFOg1Rp9NGV
TfmkrlJqarsEc1sZHyz89ceosWMW63aR4m3ol+Lb9ehKB7lKjmvgUuMG/oGA4uod
uD9tus0L7ckEJylEFfQbiIjTC89dRoWarKC+oZD+K+GGmH4gF4DHzhFMQiSwfgLX
Mmni0TG4NL81fQ==
-----END CERTIFICATE-----