Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File:                     B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier:          BesGdcuyW9WLefs7W3AqFNAvaXQZbFYEFDJ36PnGsvM=
Subject key identifier:   45:B9:06:7E:D3:40:47:8B:20:7E:34:21:07:E5:2C:3A:D5:D9:F7:97
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer:       /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial:       01962ECF8F665A7D74C2D313239EC0BAFD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number:          0B6E
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: 1i/Fwg+cTRUZ8nI1OxeZPfm8Y7amirfU+VHdYf8LxDo=)
                          2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:66:5a:7d:74:c2:d3:13:23:9e:c0:ba:fd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=45b9067ed340478b207e342107e52c3ad5d9f797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:e4:66:8b:ce:cb:96:d6:23:b1:9b:f7:34:
                    3e:f9:42:fb:e8:26:28:c4:b3:a6:7b:61:16:bd:c0:
                    87:15:19:e1:a5:80:0a:48:4c:60:fa:5b:1b:0d:61:
                    69:1b:6f:c2:e5:c9:77:be:01:d3:5f:92:a3:31:e1:
                    d7:e1:4f:05:8b:37:a6:5a:bd:02:d0:96:83:be:2f:
                    e3:e1:11:0f:72:bb:db:c7:f7:b9:54:b1:b2:be:f5:
                    75:06:40:17:50:51:82:cd:ad:2b:78:30:b5:0a:64:
                    0c:9c:75:85:c1:97:3d:1d:65:29:24:07:ab:37:b1:
                    67:65:7c:1f:f6:80:eb:2d:10:6d:42:f5:58:66:ce:
                    a9:48:36:36:b4:18:c3:f1:2c:d5:be:28:ab:d6:ac:
                    de:9f:44:95:ac:df:e3:e2:6e:c9:45:f5:ae:c4:a9:
                    89:40:2f:b6:6f:32:9d:2a:e5:e7:aa:6d:5b:71:51:
                    b8:0b:7b:58:b9:38:6b:fa:e9:31:1f:d1:37:d6:b6:
                    df:9d:72:e0:f5:20:f9:47:0e:46:af:fb:a4:0a:db:
                    bf:b7:64:05:b0:1a:6e:e1:fc:1c:b4:74:4e:e4:53:
                    ea:4a:87:dc:62:77:07:85:65:08:9f:dc:56:27:fe:
                    e3:a7:e8:51:1a:5a:24:de:c5:63:78:40:96:4e:08:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:06:7E:D3:40:47:8B:20:7E:34:21:07:E5:2C:3A:D5:D9:F7:97
            X509v3 Authority Key Identifier:
                keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f7:0b:31:4d:b3:af:2b:00:d8:b8:73:9e:87:57:70:cb:94:
         46:e9:50:2d:d1:1c:95:27:77:63:99:0b:7f:9f:8c:84:37:2f:
         61:3b:29:37:4e:99:f4:be:7c:7a:1d:d0:11:eb:71:2f:29:09:
         d5:a4:63:71:fe:45:e3:b2:84:c4:15:31:1e:ee:46:aa:b4:ab:
         bb:6a:0d:19:99:7b:ba:cd:ed:9e:dc:01:9c:32:84:f0:fe:86:
         ae:b7:f3:c0:b8:9a:3d:b7:ef:bf:8f:37:41:ad:27:40:9a:c6:
         b3:0f:7f:ea:3d:0f:3b:e3:fe:12:98:cc:f4:4b:fc:2c:e0:fc:
         77:75:e6:2c:97:f5:51:21:b9:bd:0f:ae:41:4e:fb:fc:52:b6:
         a9:4c:ed:60:98:a3:04:52:6e:4f:95:ea:74:71:8d:52:9b:07:
         9a:84:e5:9c:9c:fd:bc:96:f7:10:0d:8a:b4:6b:0f:55:b7:3d:
         ac:81:65:65:bf:2a:02:40:07:be:27:b3:ed:13:0c:66:d5:dc:
         17:23:45:e9:a6:6e:82:13:9d:b3:30:21:9f:6f:73:51:5e:8c:
         d4:dc:c2:a5:0f:06:d3:30:1a:7f:2d:60:a6:37:4f:2f:0b:e7:
         28:ad:c6:d6:17:c8:24:db:a6:48:99:ae:78:e1:11:1a:04:71:
         73:b7:6c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz49mWn10wtMTI57Auv2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2
MmMwNDMwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
Eyg0NWI5MDY3ZWQzNDA0NzhiMjA3ZTM0MjEwN2U1MmMzYWQ1ZDlmNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCvkZovOy5bWI7Gb9zQ++UL76CYo
xLOme2EWvcCHFRnhpYAKSExg+lsbDWFpG2/C5cl3vgHTX5KjMeHX4U8FizemWr0C
0JaDvi/j4REPcrvbx/e5VLGyvvV1BkAXUFGCza0reDC1CmQMnHWFwZc9HWUpJAer
N7FnZXwf9oDrLRBtQvVYZs6pSDY2tBjD8SzVviir1qzen0SVrN/j4m7JRfWuxKmJ
QC+2bzKdKuXnqm1bcVG4C3tYuThr+ukxH9E31rbfnXLg9SD5Rw5Gr/ukCtu/t2QF
sBpu4fwctHRO5FPqSofcYncHhWUIn9xWJ/7jp+hRGlok3sVjeECWTggTsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW5Bn7TQEeLIH40IQflLDrV2feXMB8GA1UdIwQY
MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt
YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew
LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPcLMU2z
rysA2LhznodXcMuURulQLdEclSd3Y5kLf5+MhDcvYTspN06Z9L58eh3QEetxLykJ
1aRjcf5F47KExBUxHu5GqrSru2oNGZl7us3tntwBnDKE8P6GrrfzwLiaPbfvv483
Qa0nQJrGsw9/6j0PO+P+EpjM9Ev8LOD8d3XmLJf1USG5vQ+uQU77/FK2qUztYJij
BFJuT5XqdHGNUpsHmoTlnJz9vJb3EA2KtGsPVbc9rIFlZb8qAkAHviez7RMMZtXc
FyNF6aZughOdszAhn29zUV6M1NzCpQ8G0zAafy1gpjdPLwvnKK3G1hfIJNumSJmu
eOERGgRxc7dscg==
-----END CERTIFICATE-----