Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File:                     7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier:          oA4tbxntzbB1YWZDLXTL44aZEmhax5LBzpG+rVZGPX8=
Subject key identifier:   CB:FE:7F:5B:A8:2F:28:48:BB:30:61:40:66:23:66:AB:9E:33:1E:59
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer:       /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial:       01962E988B46C7BBBB5D1C41ABB13B37EB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number:          075D
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: 2M4VHc9YfLik4Dz5d2UNHFZ2nJ8yGIV/S3gPLneFZo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8b:46:c7:bb:bb:5d:1c:41:ab:b1:3b:37:eb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=cbfe7f5ba82f2848bb306140662366ab9e331e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:e4:eb:4f:c2:65:5e:be:22:a6:7b:5d:51:
                    44:21:20:f7:be:a4:7d:13:c7:f6:4f:4d:6d:fb:25:
                    5e:94:2c:42:72:9d:3b:89:ac:47:c0:31:cb:08:be:
                    f3:01:5f:94:83:f7:08:cb:78:06:30:af:eb:0a:bd:
                    09:bd:c0:23:2c:ac:65:6b:55:89:13:95:84:11:30:
                    78:4f:0c:2a:ba:ca:c6:f2:81:39:1f:c6:25:3a:9d:
                    c9:c6:1e:17:4e:2d:de:cb:bc:98:f2:55:83:9a:4e:
                    ef:91:8e:eb:b1:69:48:ae:67:f3:14:17:74:5f:b4:
                    cf:23:fe:8c:2c:c8:54:fd:5c:ad:de:43:c5:cc:5b:
                    22:e5:30:10:38:7e:69:4c:14:94:81:5b:09:24:c4:
                    69:03:76:c1:82:bb:74:14:01:36:ce:83:8c:68:3a:
                    02:3e:3a:d7:01:25:2d:74:37:30:2a:27:f0:c0:d0:
                    36:8b:e3:51:ac:f2:99:10:1d:d4:91:6c:9a:da:7b:
                    b6:31:ac:79:54:71:ec:ec:48:33:4d:30:99:14:3a:
                    05:86:c9:1f:0e:9a:c8:86:67:26:fa:6b:b0:ee:6d:
                    54:22:ae:fd:10:70:7b:42:2d:89:94:18:7f:9a:8e:
                    ce:0b:da:22:fc:35:5a:65:f2:72:00:ef:4b:3e:96:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FE:7F:5B:A8:2F:28:48:BB:30:61:40:66:23:66:AB:9E:33:1E:59
            X509v3 Authority Key Identifier:
                keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e9:d8:fc:36:fd:1c:2f:db:54:55:8f:e9:92:dd:ea:d0:fb:
         ce:21:50:23:6b:72:b8:28:94:f8:04:62:d8:f2:7c:01:db:54:
         24:92:b8:34:3e:a3:d2:bb:24:12:b7:b5:7f:e6:fe:5d:bc:ce:
         62:23:86:e8:92:fb:f8:e0:cf:ad:60:c7:1c:57:aa:f9:0c:40:
         9f:43:bb:af:a6:43:83:94:7d:ec:a1:87:72:d9:f1:a1:e1:f0:
         7b:ee:55:d1:f5:5b:85:10:9d:1c:57:39:fb:d2:43:29:07:8f:
         31:d8:4c:c8:02:11:ec:89:38:59:9d:f9:a5:87:3d:0a:bc:23:
         c7:36:87:68:41:54:c1:67:33:ba:c7:40:83:ab:d1:45:1f:71:
         9e:c8:4e:7b:7d:6a:14:a9:7e:4a:f3:75:20:fe:32:42:25:ae:
         b9:dd:50:55:2d:32:12:18:a4:eb:bf:a2:34:1d:b1:66:02:ad:
         14:a1:f4:77:18:63:62:23:70:bc:5a:4d:6a:70:f0:80:56:56:
         6c:a8:85:d1:b5:a3:55:b6:46:87:7a:04:07:7d:4a:80:1a:78:
         a5:49:ae:eb:fd:07:a0:e6:7f:de:e7:44:9f:0d:d9:9b:f3:85:
         b8:cc:fd:9d:67:36:f0:62:e7:75:0e:fb:0a:f5:20:9b:72:b1:
         62:1a:f2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumItGx7u7XRxBq7E7N+uSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMTNlOWFhMjQ5YzU5NTAyYzBjZjhiNzg0ZDQzM2ZhNzUw
MjA0Y2IwHhcNMjUwNDEzMTAwMTEwWhcNMjUwNDE0MTAwMTEwWjAzMTEwLwYDVQQD
EyhjYmZlN2Y1YmE4MmYyODQ4YmIzMDYxNDA2NjIzNjZhYjllMzMxZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXk60/CZV6+IqZ7XVFEISD3vqR9
E8f2T01t+yVelCxCcp07iaxHwDHLCL7zAV+Ug/cIy3gGMK/rCr0JvcAjLKxla1WJ
E5WEETB4TwwqusrG8oE5H8YlOp3Jxh4XTi3ey7yY8lWDmk7vkY7rsWlIrmfzFBd0
X7TPI/6MLMhU/Vyt3kPFzFsi5TAQOH5pTBSUgVsJJMRpA3bBgrt0FAE2zoOMaDoC
PjrXASUtdDcwKifwwNA2i+NRrPKZEB3UkWya2nu2Max5VHHs7EgzTTCZFDoFhskf
DprIhmcm+muw7m1UIq79EHB7Qi2JlBh/mo7OC9oi/DVaZfJyAO9LPpYxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv+f1uoLyhIuzBhQGYjZqueMx5ZMB8GA1UdIwQY
MBaAFO8T6aoknFlQLAz4t4TUM/p1AgTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQt
NTIxYjI1ODdkZDBjLzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iM2M1MjItZjY4Yi00Yjk4LWE1ODQtNTIxYjI1ODdkZDBj
LzEvN3hQcHFpU2NXVkFzRFBpM2hOUXotblVDQk1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnenY/Db9
HC/bVFWP6ZLd6tD7ziFQI2tyuCiU+ARi2PJ8AdtUJJK4ND6j0rskEre1f+b+XbzO
YiOG6JL7+ODPrWDHHFeq+QxAn0O7r6ZDg5R97KGHctnxoeHwe+5V0fVbhRCdHFc5
+9JDKQePMdhMyAIR7Ik4WZ35pYc9CrwjxzaHaEFUwWczusdAg6vRRR9xnshOe31q
FKl+SvN1IP4yQiWuud1QVS0yEhik67+iNB2xZgKtFKH0dxhjYiNwvFpNanDwgFZW
bKiF0bWjVbZGh3oEB31KgBp4pUmu6/0HoOZ/3udEnw3Zm/OFuMz9nWc28GLndQ77
CvUgm3KxYhryEg==
-----END CERTIFICATE-----