Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File:                     7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier:          L0JOk4tPF2i3qzG9Te+7min71dPCRIZwK/biyKSW9UE=
Subject key identifier:   7B:30:F6:54:D5:EF:2C:C7:93:58:41:15:1A:BF:CE:B3:4A:E8:A8:3C
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer:       /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial:       01962E98610C4449E704405E2A9F4E88F1F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: 5BomreoAAZuGbHgae90+BtvEfDWjv37HbahybLa/OEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:61:0c:44:49:e7:04:40:5e:2a:9f:4e:88:f1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=7b30f654d5ef2cc7935841151abfceb34ae8a83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:2f:0f:5c:8f:fc:4b:a1:f0:e5:bd:c5:c2:
                    d2:9c:e2:61:12:44:b5:1a:df:fc:60:ee:fb:6e:39:
                    e9:62:c2:7e:99:e7:97:1c:33:ec:b6:2e:06:2c:08:
                    a3:1e:1f:ed:38:4b:93:29:e3:fe:a7:a8:8f:c4:8b:
                    b5:89:77:d4:b1:25:13:c4:3b:4a:34:df:6e:ae:ce:
                    ba:94:7a:7c:ce:45:3d:b1:05:24:93:ea:62:ca:3b:
                    a2:2b:02:90:77:ac:d8:49:d7:45:bb:d6:25:e1:c0:
                    d2:ce:33:39:e7:60:c1:dd:8c:d1:76:19:85:18:fc:
                    62:71:e6:a7:0e:b8:e3:0d:ea:50:4c:f0:32:1b:9d:
                    1b:c1:dd:30:c1:83:2e:90:4a:70:97:ad:73:87:9e:
                    be:a9:19:ff:91:c7:47:07:01:6e:4e:aa:59:37:cb:
                    34:c3:11:0b:b7:52:e7:3d:7b:ba:9b:38:3d:77:c8:
                    0a:5f:1f:37:c1:ff:e0:74:62:7d:95:6f:d5:c2:2e:
                    0a:eb:70:fb:b4:ac:d2:9c:a7:9f:d4:af:c6:85:22:
                    85:d9:6b:56:94:5d:56:41:8e:7c:55:fd:e4:61:2b:
                    f9:a1:44:1a:d4:2f:95:90:9f:86:71:00:3f:d9:d0:
                    dd:f9:0e:76:d3:65:03:07:1b:df:c0:a6:f2:a5:da:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:F6:54:D5:EF:2C:C7:93:58:41:15:1A:BF:CE:B3:4A:E8:A8:3C
            X509v3 Authority Key Identifier:
                keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:6d:d8:dc:6e:43:3b:5a:7f:7b:00:58:12:e0:e4:8d:38:
         f0:ea:f0:95:3c:24:db:01:f2:bb:13:fb:cf:ec:fa:9c:6a:26:
         a9:00:eb:9d:5e:72:5d:25:41:c0:57:06:85:0f:2b:2e:2d:c4:
         82:70:bf:e8:e8:f5:03:0d:78:6a:be:43:f2:ee:0e:4a:a7:54:
         4f:62:d4:8c:58:3b:bf:1d:51:c2:08:d7:76:ff:93:24:90:f2:
         1f:2a:20:97:a3:36:1a:a9:35:12:a9:e2:05:67:cf:fe:26:1e:
         2b:b9:eb:2a:92:37:dc:78:fb:1f:28:45:a2:ad:c6:3c:45:db:
         ae:f0:7a:ff:44:f0:da:86:58:a4:24:4e:76:f2:36:0a:ae:36:
         4a:ea:86:44:89:58:da:05:0c:4b:ef:b2:b6:3f:0f:9c:a5:64:
         fd:e4:c9:16:a4:72:91:aa:20:03:90:f6:75:a7:44:9f:72:74:
         2c:c2:86:9a:73:80:ae:fb:b8:2b:f2:c1:83:03:8e:f4:46:4d:
         25:8d:e1:0d:e1:95:1c:8e:26:6c:9f:5e:ab:4f:7f:ac:3e:a6:
         39:65:90:15:ba:82:91:d8:15:5d:7f:39:c3:10:f7:3e:d1:02:
         b5:4b:96:87:8b:17:cb:f4:16:f7:06:88:27:cb:14:90:8f:2f:
         ca:28:67:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGEMREnnBEBeKp9OiPHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlN2MyOGMxOWNhOWQyNzA2OGNlYmM2OWM4MTU0MTY3NWRj
MTJjZGYwHhcNMjUwNDEzMTAwMTAwWhcNMjUwNDE0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg3YjMwZjY1NGQ1ZWYyY2M3OTM1ODQxMTUxYWJmY2ViMzRhZThhODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOsvD1yP/Euh8OW9xcLSnOJhEkS1
Gt/8YO77bjnpYsJ+meeXHDPsti4GLAijHh/tOEuTKeP+p6iPxIu1iXfUsSUTxDtK
NN9urs66lHp8zkU9sQUkk+piyjuiKwKQd6zYSddFu9Yl4cDSzjM552DB3YzRdhmF
GPxiceanDrjjDepQTPAyG50bwd0wwYMukEpwl61zh56+qRn/kcdHBwFuTqpZN8s0
wxELt1LnPXu6mzg9d8gKXx83wf/gdGJ9lW/Vwi4K63D7tKzSnKef1K/GhSKF2WtW
lF1WQY58Vf3kYSv5oUQa1C+VkJ+GcQA/2dDd+Q5202UDBxvfwKbypdrmdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsw9lTV7yzHk1hBFRq/zrNK6Kg8MB8GA1UdIwQY
MBaAFO58KMGcqdJwaM68acgVQWddwSzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN253b3daeXAwbkJvenJ4cHlCVkJaMTNCTE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lMjRlYzItZDk1Ni00NTc1LTkyODct
MTU3ZTNlZDUyZjExLzEvN253b3daeXAwbkJvenJ4cHlCVkJaMTNCTE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lMjRlYzItZDk1Ni00NTc1LTkyODctMTU3ZTNlZDUyZjEx
LzEvN253b3daeXAwbkJvenJ4cHlCVkJaMTNCTE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAxt2Nxu
Qztaf3sAWBLg5I048OrwlTwk2wHyuxP7z+z6nGomqQDrnV5yXSVBwFcGhQ8rLi3E
gnC/6Oj1Aw14ar5D8u4OSqdUT2LUjFg7vx1RwgjXdv+TJJDyHyogl6M2Gqk1Eqni
BWfP/iYeK7nrKpI33Hj7HyhFoq3GPEXbrvB6/0Tw2oZYpCROdvI2Cq42SuqGRIlY
2gUMS++ytj8PnKVk/eTJFqRykaogA5D2dadEn3J0LMKGmnOArvu4K/LBgwOO9EZN
JY3hDeGVHI4mbJ9eq09/rD6mOWWQFbqCkdgVXX85wxD3PtECtUuWh4sXy/QW9waI
J8sUkI8vyihnIw==
-----END CERTIFICATE-----