Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File:                     55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier:          whdA8HrRRhZJvYRuurgQ29GEc4JLDsxV8saMNM7Qa8o=
Subject key identifier:   7C:2A:AD:AF:41:45:3C:8C:09:21:0D:CB:67:55:7D:85:2B:C6:6D:19
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer:       /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial:       01962DF4267F7565DA3C6882193497F0918F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number:          093C
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: paSLnTLrunWnNIi/hq0ryu6nZUtddit6flaSgr0p1FU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:7f:75:65:da:3c:68:82:19:34:97:f0:91:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=7c2aadaf41453c8c09210dcb67557d852bc66d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:02:39:5e:c0:66:6e:24:70:7c:4b:49:47:
                    e3:4f:51:25:91:8e:f3:26:61:58:08:2d:46:4d:b0:
                    c0:00:2c:c7:f1:f9:61:d5:0e:ac:bf:52:7d:23:2d:
                    6b:f8:69:c3:f6:d5:1e:45:46:0f:d9:3d:99:66:7f:
                    bd:4e:b2:9e:ac:f6:18:4f:f2:fb:35:25:b1:28:1a:
                    a0:26:b8:a5:19:8c:2c:5e:0d:6a:cc:e6:f3:e7:3d:
                    50:ae:d1:28:8e:1d:30:ac:ee:42:56:a3:c0:1b:19:
                    b1:0b:1c:82:22:4a:b5:df:3b:71:a5:32:1c:cb:26:
                    fc:3b:f1:9b:f8:14:61:85:40:05:d5:ae:df:1d:2f:
                    e4:cf:3a:29:06:0d:17:a7:97:02:01:5d:fe:1d:c4:
                    59:a0:07:cc:ba:65:76:b2:a5:5a:05:a1:2d:99:10:
                    ba:e8:a9:e1:d5:b9:78:3f:ea:b7:45:3f:c7:fb:86:
                    f1:5a:97:9c:ad:f6:83:a4:a5:bb:30:6a:11:23:98:
                    bb:ef:a3:75:30:e9:ff:70:fa:4f:64:d1:4c:ae:b2:
                    84:59:b8:07:78:1a:85:68:e9:d8:ab:d7:82:fa:79:
                    8a:9f:dd:f0:64:3f:23:62:19:e0:43:fb:32:4b:c6:
                    1b:7b:ab:e7:ab:74:7b:14:16:37:71:cc:3b:e5:ec:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:AD:AF:41:45:3C:8C:09:21:0D:CB:67:55:7D:85:2B:C6:6D:19
            X509v3 Authority Key Identifier:
                keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7c:3b:72:c6:af:47:65:e2:ae:26:01:db:5c:53:32:3c:13:
         64:fc:0b:57:b2:d9:d2:4f:a1:e6:49:bf:2b:ed:67:1c:68:c6:
         e9:c0:2c:24:43:f2:28:6c:4b:8a:8d:da:51:c2:b0:f1:9b:58:
         c5:28:a7:25:9c:d4:8c:40:e6:ec:6f:5d:ff:6c:0f:da:64:eb:
         2a:97:a9:84:22:5d:26:fc:42:33:6e:9d:3a:fd:73:82:25:b4:
         0e:99:c0:61:f7:ba:3c:da:eb:f4:af:f7:f6:34:15:db:78:c2:
         95:7d:97:87:e4:9a:37:89:45:2e:4a:e4:2a:09:0f:cd:55:c0:
         67:9b:4a:18:47:58:f7:d0:3b:bb:b8:3f:7a:9c:61:ac:b4:12:
         25:55:0d:0e:a7:f1:95:25:2b:d0:b0:5b:94:b1:e4:82:1d:47:
         94:69:cb:33:28:fd:ee:8a:18:5e:c6:de:a4:95:82:b3:b1:29:
         09:a0:4b:34:0e:c1:42:42:d3:2d:3f:49:31:ef:d2:12:42:ca:
         7d:65:48:5e:6e:b5:92:8b:a2:33:d4:fa:70:e1:5f:70:a0:36:
         fe:aa:9d:14:9d:1a:73:b5:7b:fe:58:f9:25:64:06:74:43:64:
         2a:d1:30:00:7e:ed:91:9d:f9:75:a2:7c:2d:59:43:70:93:a3:
         5b:20:b6:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CZ/dWXaPGiCGTSX8JGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTg0Zjk0MGJiMTNkMDUxYzhmODk1ZTc3OTY1MmIwNWFl
MGMwYjMwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
Eyg3YzJhYWRhZjQxNDUzYzhjMDkyMTBkY2I2NzU1N2Q4NTJiYzY2ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvoCOV7AZm4kcHxLSUfjT1ElkY7z
JmFYCC1GTbDAACzH8flh1Q6sv1J9Iy1r+GnD9tUeRUYP2T2ZZn+9TrKerPYYT/L7
NSWxKBqgJrilGYwsXg1qzObz5z1QrtEojh0wrO5CVqPAGxmxCxyCIkq13ztxpTIc
yyb8O/Gb+BRhhUAF1a7fHS/kzzopBg0Xp5cCAV3+HcRZoAfMumV2sqVaBaEtmRC6
6Knh1bl4P+q3RT/H+4bxWpecrfaDpKW7MGoRI5i776N1MOn/cPpPZNFMrrKEWbgH
eBqFaOnYq9eC+nmKn93wZD8jYhngQ/syS8Ybe6vnq3R7FBY3ccw75ez3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwqra9BRTyMCSENy2dVfYUrxm0ZMB8GA1UdIwQY
MBaAFOeYT5QLsT0FHI+JXneWUrBa4MCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVoUGxBdXhQUVVjajRsZWQ1WlNzRnJnd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC83Nzc0ZTctM2I0YS00YTE2LWFiZTUt
YjljMDBlZTVhNDkwLzEvNTVoUGxBdXhQUVVjajRsZWQ1WlNzRnJnd0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC83Nzc0ZTctM2I0YS00YTE2LWFiZTUtYjljMDBlZTVhNDkw
LzEvNTVoUGxBdXhQUVVjajRsZWQ1WlNzRnJnd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHw7csav
R2XiriYB21xTMjwTZPwLV7LZ0k+h5km/K+1nHGjG6cAsJEPyKGxLio3aUcKw8ZtY
xSinJZzUjEDm7G9d/2wP2mTrKpephCJdJvxCM26dOv1zgiW0DpnAYfe6PNrr9K/3
9jQV23jClX2Xh+SaN4lFLkrkKgkPzVXAZ5tKGEdY99A7u7g/epxhrLQSJVUNDqfx
lSUr0LBblLHkgh1HlGnLMyj97ooYXsbepJWCs7EpCaBLNA7BQkLTLT9JMe/SEkLK
fWVIXm61kouiM9T6cOFfcKA2/qqdFJ0ac7V7/lj5JWQGdENkKtEwAH7tkZ35daJ8
LVlDcJOjWyC2Dw==
-----END CERTIFICATE-----