Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File:                     0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier:          2BFpDe2L2s3TUrUQvqBdKXB7+qzKVX3KAJgJ36NC8gg=
Subject key identifier:   DC:6F:69:7B:00:A1:91:68:0B:C8:B0:9F:87:93:93:15:88:2A:4A:E6
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer:       /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial:       01962FAB0D9418288BAB28B56065F4EC0644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number:          0A7E
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: cbcpTe4GWr1yeB88DuFFdUxF9is3Ekdj/p27slk9R3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0d:94:18:28:8b:ab:28:b5:60:65:f4:ec:06:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=dc6f697b00a191680bc8b09f87939315882a4ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:df:39:5b:8d:65:d0:88:ba:47:89:bf:fc:
                    ee:49:1e:fc:02:be:16:c7:f4:41:08:66:83:04:4a:
                    55:c7:95:99:a1:01:b3:34:9f:52:f6:a0:c5:82:d8:
                    54:04:ee:e3:ab:61:40:7b:fa:b9:bc:00:17:bf:fd:
                    77:de:ee:40:49:12:53:57:8f:dd:40:b3:55:48:f1:
                    6d:7f:1d:e9:9e:81:49:f7:36:83:3c:8d:72:08:62:
                    49:bc:5d:06:92:d6:0e:40:17:66:5a:44:5c:89:61:
                    82:21:76:37:18:3e:6b:d0:19:44:6c:51:79:6c:83:
                    db:38:08:0e:c2:3b:79:91:df:f0:7d:53:2f:2f:94:
                    ff:73:37:74:08:51:3a:73:53:87:7d:ac:d0:49:52:
                    68:94:38:02:9c:ec:d6:b2:f4:c9:8e:79:fa:08:bc:
                    5b:6d:e7:18:80:cf:0f:b8:1b:b2:f8:73:0d:41:98:
                    61:80:c3:13:f4:88:14:31:73:3b:b3:9d:7a:2f:d8:
                    28:a6:22:9c:46:75:f9:2b:34:b7:b3:3c:7a:e2:02:
                    79:cb:c2:b5:2f:79:60:d7:d0:bc:05:0c:91:06:21:
                    62:7c:ea:fb:26:3a:af:fd:57:a9:78:0e:c7:d4:97:
                    e6:09:e8:49:17:cb:a3:98:0a:f5:e1:de:c4:2d:75:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:69:7B:00:A1:91:68:0B:C8:B0:9F:87:93:93:15:88:2A:4A:E6
            X509v3 Authority Key Identifier:
                keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:74:ba:02:ea:48:71:6f:cc:8f:8f:9a:7b:60:2b:da:96:bc:
         56:48:a8:7d:d8:6c:77:14:37:f8:d2:31:bc:5f:17:20:45:53:
         b2:8f:7a:d9:74:48:e8:4e:21:57:f1:66:33:e6:b6:e6:23:ba:
         0f:5d:e7:73:2f:fa:4f:8c:19:50:5d:71:e4:0a:48:1d:89:04:
         f7:61:d7:51:43:6a:7e:97:9f:4d:94:1f:e6:f2:30:a9:6b:58:
         94:18:ed:e5:eb:4f:a1:e1:3d:b1:c2:2a:7f:3a:02:fa:1a:d7:
         93:71:5d:0b:b3:7f:ad:1e:b0:94:6b:82:93:51:99:64:22:f2:
         08:15:06:f6:ef:11:df:2e:04:28:37:f2:fa:b0:8f:17:10:3f:
         80:34:06:6d:76:e6:9c:ca:95:ec:31:21:fa:47:fe:df:c2:c2:
         97:12:38:59:34:13:2a:5e:28:9e:f8:a0:b4:2c:72:3f:d2:b8:
         dd:a8:a7:25:74:62:f0:6b:fa:bc:b7:4f:0a:7f:5e:1d:9d:c8:
         c5:b0:f0:84:c1:06:fe:a3:8d:74:b4:57:ae:c8:36:ba:db:85:
         7a:2d:fe:b3:99:12:2c:b0:5b:9e:a4:5d:fa:64:63:58:4c:90:
         cc:c5:ba:38:24:08:17:f7:bd:34:0c:f2:fd:f3:f3:91:ab:24:
         31:ef:aa:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqw2UGCiLqyi1YGX07AZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTc5Nzg1ODZiZmYzYTY3NzdkNTVhOWE5NjM1ODQxNTE2
ZDQzYjQwHhcNMjUwNDEzMTUwMTAxWhcNMjUwNDE0MTUwMTAxWjAzMTEwLwYDVQQD
EyhkYzZmNjk3YjAwYTE5MTY4MGJjOGIwOWY4NzkzOTMxNTg4MmE0YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8vfOVuNZdCIukeJv/zuSR78Ar4W
x/RBCGaDBEpVx5WZoQGzNJ9S9qDFgthUBO7jq2FAe/q5vAAXv/133u5ASRJTV4/d
QLNVSPFtfx3pnoFJ9zaDPI1yCGJJvF0GktYOQBdmWkRciWGCIXY3GD5r0BlEbFF5
bIPbOAgOwjt5kd/wfVMvL5T/czd0CFE6c1OHfazQSVJolDgCnOzWsvTJjnn6CLxb
becYgM8PuBuy+HMNQZhhgMMT9IgUMXM7s516L9gopiKcRnX5KzS3szx64gJ5y8K1
L3lg19C8BQyRBiFifOr7Jjqv/VepeA7H1JfmCehJF8ujmAr14d7ELXUF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxvaXsAoZFoC8iwn4eTkxWIKkrmMB8GA1UdIwQY
MBaAFNIXl4WGv/Omd31VqaljWEFRbUO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEt
NGNlNGQzYjE5N2Q4LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEtNGNlNGQzYjE5N2Q4
LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXS6AupI
cW/Mj4+ae2Ar2pa8VkiofdhsdxQ3+NIxvF8XIEVTso962XRI6E4hV/FmM+a25iO6
D13ncy/6T4wZUF1x5ApIHYkE92HXUUNqfpefTZQf5vIwqWtYlBjt5etPoeE9scIq
fzoC+hrXk3FdC7N/rR6wlGuCk1GZZCLyCBUG9u8R3y4EKDfy+rCPFxA/gDQGbXbm
nMqV7DEh+kf+38LClxI4WTQTKl4onvigtCxyP9K43ainJXRi8Gv6vLdPCn9eHZ3I
xbDwhMEG/qONdLRXrsg2utuFei3+s5kSLLBbnqRd+mRjWEyQzMW6OCQIF/e9NAzy
/fPzkaskMe+q9Q==
-----END CERTIFICATE-----