Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          tOK2X+1yDY8EEfevqmV2rDjQb+NRg7P3S7rnUksXmF4=
Subject key identifier:   41:75:02:2E:7E:34:1A:38:B5:B3:A0:9B:2C:8C:69:C3:C3:48:4C:88
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       01962E987E4439F4295CB379EE42325582D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0547
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: 94JlnqPeCszHYMZgg5I0dDjn4pdJ+QD1A2cD6/6gWJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:44:39:f4:29:5c:b3:79:ee:42:32:55:82:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=4175022e7e341a38b5b3a09b2c8c69c3c3484c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:33:41:9d:43:b0:10:c6:c6:be:6e:fa:ea:
                    32:4f:c9:a2:ca:05:ca:73:93:28:3f:65:62:06:bb:
                    88:4a:27:f7:df:9f:3f:d6:97:ec:2e:58:11:06:4f:
                    29:ce:b1:3d:32:02:d4:76:7f:e4:fe:94:a3:63:bc:
                    ec:92:41:41:07:cf:1e:03:0b:a2:77:ae:f4:84:94:
                    01:28:ae:7e:de:5b:73:cd:ab:0d:3f:3e:36:9a:b9:
                    e2:d2:f9:d6:6c:52:7d:2f:63:ef:2a:db:32:6d:1f:
                    1f:5c:7a:0a:73:bd:40:58:44:cc:af:a5:e4:72:e2:
                    85:71:94:d1:25:74:6c:b1:76:40:a8:83:df:55:29:
                    88:16:68:2a:0b:ea:2e:f9:c5:35:4b:86:28:2b:ea:
                    df:13:9e:a5:df:5a:e3:91:ad:2c:4d:c0:17:04:bb:
                    b7:3b:58:a7:6b:36:a9:09:92:c2:dd:43:b2:6f:ce:
                    8d:f3:e7:e6:63:dc:b2:5a:96:2a:b5:8f:3b:e8:28:
                    2b:ab:0c:5d:67:bb:6c:00:32:28:57:11:b2:30:a0:
                    20:42:cd:1f:1a:43:9d:f2:20:ac:f3:1d:fa:9f:0c:
                    a4:c2:e6:fc:12:aa:ef:ff:d4:04:9a:df:79:73:bc:
                    16:69:42:98:81:f4:35:99:92:0f:00:6b:f3:2f:a1:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:02:2E:7E:34:1A:38:B5:B3:A0:9B:2C:8C:69:C3:C3:48:4C:88
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:13:5a:c1:75:ec:a1:81:c6:42:1b:06:0c:52:80:85:5b:
         f4:9a:6d:86:cf:7c:93:04:d0:99:bf:53:44:7f:93:dc:ff:a5:
         8f:ea:f7:81:47:4b:2b:d4:db:71:20:b6:88:21:83:e6:c6:9c:
         08:ba:96:40:b8:5f:6c:73:0d:7c:50:ea:81:6f:fe:99:96:98:
         03:d4:94:f7:ec:27:42:ca:9d:8c:32:8a:31:b0:24:69:1a:29:
         73:c8:40:4e:e8:69:02:a7:70:c7:f0:b0:b2:18:13:cc:d1:a5:
         00:cb:56:cb:99:2c:4b:d8:18:5e:ca:81:c8:95:0d:bc:c6:f1:
         e9:a4:39:91:25:1a:c6:5a:17:63:89:68:9f:f5:54:a3:c8:ba:
         39:c6:59:ce:a1:81:74:ce:0c:e4:69:ed:55:c3:47:4e:3a:1c:
         9a:34:eb:21:a7:94:f3:d0:47:58:f9:d1:9d:c1:13:97:e0:00:
         00:df:92:4f:41:ca:68:ee:3b:0b:81:be:0d:54:71:bc:f3:66:
         73:54:19:0a:8e:f3:22:2a:15:9f:c9:ea:1c:f5:b0:54:8a:85:
         aa:3e:aa:e3:d6:d4:2c:8f:83:20:ae:8b:63:2b:54:0a:ad:9b:
         55:d0:23:e7:22:d2:a7:fc:b4:cb:86:3f:e2:ed:0e:cf:c7:02:
         a2:72:c3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumH5EOfQpXLN57kIyVYLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWZhOWMyOTUwNmI0ZmNmMTcyOTIxMWE0ZmE3N2MxZjIx
MTQ2OGQwHhcNMjUwNDEzMTAwMTA3WhcNMjUwNDE0MTAwMTA3WjAzMTEwLwYDVQQD
Eyg0MTc1MDIyZTdlMzQxYTM4YjViM2EwOWIyYzhjNjljM2MzNDg0Yzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmszQZ1DsBDGxr5u+uoyT8miygXK
c5MoP2ViBruISif3358/1pfsLlgRBk8pzrE9MgLUdn/k/pSjY7zskkFBB88eAwui
d670hJQBKK5+3ltzzasNPz42mrni0vnWbFJ9L2PvKtsybR8fXHoKc71AWETMr6Xk
cuKFcZTRJXRssXZAqIPfVSmIFmgqC+ou+cU1S4YoK+rfE56l31rjka0sTcAXBLu3
O1inazapCZLC3UOyb86N8+fmY9yyWpYqtY876CgrqwxdZ7tsADIoVxGyMKAgQs0f
GkOd8iCs8x36nwykwub8Eqrv/9QEmt95c7wWaUKYgfQ1mZIPAGvzL6E2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF1Ai5+NBo4tbOgmyyMacPDSEyIMB8GA1UdIwQY
MBaAFO7vqcKVBrT88XKSEaT6d8HyEUaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQt
Y2YzNjA3M2QyZGIwLzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lNDc4MDUtNjliYi00MzU5LWJkMmQtY2YzNjA3M2QyZGIw
LzEvN3UtcHdwVUd0UHp4Y3BJUnBQcDN3ZklSUm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKcTWsF1
7KGBxkIbBgxSgIVb9Jpths98kwTQmb9TRH+T3P+lj+r3gUdLK9TbcSC2iCGD5sac
CLqWQLhfbHMNfFDqgW/+mZaYA9SU9+wnQsqdjDKKMbAkaRopc8hATuhpAqdwx/Cw
shgTzNGlAMtWy5ksS9gYXsqByJUNvMbx6aQ5kSUaxloXY4lon/VUo8i6OcZZzqGB
dM4M5GntVcNHTjocmjTrIaeU89BHWPnRncETl+AAAN+ST0HKaO47C4G+DVRxvPNm
c1QZCo7zIioVn8nqHPWwVIqFqj6q49bULI+DIK6LYytUCq2bVdAj5yLSp/y0y4Y/
4u0Oz8cConLDBw==
-----END CERTIFICATE-----