Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File:                     j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier:          w161Ax6W1ulCTUz3qVO6C39Flm3b/qrD2hMd7e2aO0w=
Subject key identifier:   7E:CA:B5:AB:B3:8D:D7:4C:32:58:BD:11:46:A4:AE:04:6B:7B:F7:F9
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer:       /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial:       01962F3DD9F4EEB73E24239D3BF92FBD5E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: PgvoO4wDD+t4Ha9CHArmp+heeiKEuYXT6QwuYo4zxcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d9:f4:ee:b7:3e:24:23:9d:3b:f9:2f:bd:5e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=7ecab5abb38dd74c3258bd1146a4ae046b7bf7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:79:ff:20:c8:24:86:f1:2c:00:14:31:52:
                    7a:6d:ee:1f:1f:b7:c8:df:6a:6f:d7:0c:8d:88:7f:
                    f2:1c:a6:37:3a:7e:92:58:ff:b7:2a:ac:a7:45:c1:
                    7b:13:a8:b4:55:57:ad:d8:98:c2:4a:b7:bc:e4:1b:
                    a2:12:31:4d:1d:ce:0f:cb:38:b9:fc:c9:17:12:53:
                    68:33:80:e8:3d:01:89:72:ed:a9:cb:01:c0:85:12:
                    c1:ba:67:2d:54:e0:c2:85:2d:72:39:23:e1:a2:d7:
                    bb:65:af:59:17:01:49:3f:2e:f3:74:44:12:2e:96:
                    9a:b0:fc:8a:56:bb:dc:e7:6f:dc:68:ab:5f:3b:90:
                    27:5d:b2:f3:a9:6e:8b:77:fa:6c:7f:59:13:dc:59:
                    dd:fd:50:5b:e2:05:2e:a8:82:3e:69:fb:b6:7e:53:
                    db:98:19:53:ae:9f:b4:77:0a:27:e7:dd:b3:de:b0:
                    5f:1d:d3:c9:18:ff:8b:b4:29:a9:3c:4b:c8:d2:6f:
                    17:5b:d3:7e:5a:69:81:50:15:42:85:69:02:cd:45:
                    a2:bb:b6:57:33:0f:2d:d7:a4:a6:73:da:f2:f3:7d:
                    87:bd:0d:38:a8:17:00:1d:47:7d:39:ca:b8:b4:24:
                    f8:08:eb:1e:f0:ed:55:15:4c:4d:ca:20:f1:02:1f:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:B5:AB:B3:8D:D7:4C:32:58:BD:11:46:A4:AE:04:6B:7B:F7:F9
            X509v3 Authority Key Identifier:
                keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:28:02:e5:96:87:3c:55:bf:62:ca:db:8c:b9:c2:9e:4f:fd:
         d8:d7:ca:79:fc:24:41:ae:4c:b2:24:b1:4b:87:fb:66:3f:0a:
         48:17:79:86:d4:1a:f9:86:61:67:7d:30:d2:2a:22:0b:72:4c:
         7d:08:6c:56:3f:03:4b:b8:5e:4f:8f:89:a4:cc:5e:ec:2c:3b:
         a3:53:73:48:c6:da:92:d5:76:cc:74:31:96:90:01:31:cc:2c:
         1b:92:fd:b7:40:52:e6:35:9b:b0:b7:a7:58:ce:d8:c0:a3:f6:
         74:8d:85:ce:2e:12:61:4a:ef:50:27:9c:8e:5e:6f:4b:2a:de:
         ba:35:b3:58:de:33:a7:58:19:7f:cd:c9:86:32:53:59:eb:34:
         fc:1a:c2:77:28:e0:d7:d5:2e:c0:bb:74:7d:72:cc:f5:d0:dc:
         b1:b3:7f:45:4c:7e:38:6f:a6:dd:4e:74:bc:86:09:16:0e:eb:
         fa:53:b2:5b:d8:8d:6f:2e:9c:58:86:86:ca:01:cc:33:cb:bf:
         a6:ec:b8:cc:d6:5b:cd:da:54:14:f1:f0:fb:e5:56:85:46:dd:
         ac:b3:61:a7:f9:6c:b2:c0:77:d7:bf:55:6c:61:db:1d:b3:31:
         f1:5f:50:f4:32:ba:86:34:b3:e1:81:c8:89:32:8c:84:8e:77:
         62:49:b2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdn07rc+JCOdO/kvvV52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZWVlOTRhMGUzYjIyODA5NzY0YWVlMWUyOGYwNzhmYWQ2
MzZiYzMwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZWNhYjVhYmIzOGRkNzRjMzI1OGJkMTE0NmE0YWUwNDZiN2JmN2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv515/yDIJIbxLAAUMVJ6be4fH7fI
32pv1wyNiH/yHKY3On6SWP+3KqynRcF7E6i0VVet2JjCSre85BuiEjFNHc4Pyzi5
/MkXElNoM4DoPQGJcu2pywHAhRLBumctVODChS1yOSPhote7Za9ZFwFJPy7zdEQS
LpaasPyKVrvc52/caKtfO5AnXbLzqW6Ld/psf1kT3Fnd/VBb4gUuqII+afu2flPb
mBlTrp+0dwon592z3rBfHdPJGP+LtCmpPEvI0m8XW9N+WmmBUBVChWkCzUWiu7ZX
Mw8t16Smc9ry832HvQ04qBcAHUd9Ocq4tCT4COse8O1VFUxNyiDxAh8FWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7KtauzjddMMli9EUakrgRre/f5MB8GA1UdIwQY
MBaAFI/u6UoOOyKAl2Su4eKPB4+tY2vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1Mzkt
YTRiOTYxODA4MjAxLzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1MzktYTRiOTYxODA4MjAx
LzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnygC5ZaH
PFW/YsrbjLnCnk/92NfKefwkQa5MsiSxS4f7Zj8KSBd5htQa+YZhZ30w0ioiC3JM
fQhsVj8DS7heT4+JpMxe7Cw7o1NzSMbaktV2zHQxlpABMcwsG5L9t0BS5jWbsLen
WM7YwKP2dI2Fzi4SYUrvUCecjl5vSyreujWzWN4zp1gZf83JhjJTWes0/BrCdyjg
19UuwLt0fXLM9dDcsbN/RUx+OG+m3U50vIYJFg7r+lOyW9iNby6cWIaGygHMM8u/
puy4zNZbzdpUFPHw++VWhUbdrLNhp/lsssB3179VbGHbHbMx8V9Q9DK6hjSz4YHI
iTKMhI53YkmyGA==
-----END CERTIFICATE-----