Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/818f6a-7e0a-4a00-956e-2d993ff031be/1/kH0XgcKKAnQep6Y6zjqVMX7ri3w.mft
File:                     kH0XgcKKAnQep6Y6zjqVMX7ri3w.mft (raw, json)
Hash identifier:          twT9FPzrANxgWVD2HMHT1HEy2Qz8D/sXwufPZxKib78=
Subject key identifier:   7B:7C:66:85:DB:79:38:FF:D4:D3:E6:A8:16:83:25:BD:EC:33:B8:C3
Authority key identifier: 90:7D:17:81:C2:8A:02:74:1E:A7:A6:3A:CE:3A:95:31:7E:EB:8B:7C
Certificate issuer:       /CN=907d1781c28a02741ea7a63ace3a95317eeb8b7c
Certificate serial:       01962F3DB8830DF62903493066EA356C2C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kH0XgcKKAnQep6Y6zjqVMX7ri3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/818f6a-7e0a-4a00-956e-2d993ff031be/1/kH0XgcKKAnQep6Y6zjqVMX7ri3w.mft
Manifest number:          0481
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: kH0XgcKKAnQep6Y6zjqVMX7ri3w.crl (hash: AZjgZ+dUsStNMlwOJCetVGuAHmAUTfiL8nNTi9j/5ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b8:83:0d:f6:29:03:49:30:66:ea:35:6c:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907d1781c28a02741ea7a63ace3a95317eeb8b7c
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=7b7c6685db7938ffd4d3e6a8168325bdec33b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:88:80:38:a8:3a:07:3e:c0:fc:1e:17:8c:
                    ef:e3:a6:e2:72:60:fc:b1:52:81:3f:22:08:e0:e7:
                    7a:ec:48:91:47:05:b8:f9:28:7b:ad:f1:b5:86:af:
                    fd:b8:c0:43:da:e3:3f:59:3b:b6:0e:dd:2d:25:4a:
                    aa:d1:a2:9d:09:f7:01:33:8d:8b:3b:df:39:90:aa:
                    27:bf:2c:4a:63:95:81:db:4a:53:0e:22:ff:1b:d2:
                    47:d3:4b:95:83:4a:6a:d5:14:2f:99:18:cb:fb:64:
                    b0:be:43:fe:0e:f9:e5:3a:41:1a:85:f3:6f:b7:66:
                    21:98:9d:cf:51:2a:9a:3f:d9:22:ad:97:ae:1c:f5:
                    c9:86:f5:f8:bc:f0:23:39:39:9e:0b:df:9b:57:81:
                    4e:ba:4c:dc:18:9c:c0:fd:9e:58:ba:9f:94:16:d3:
                    de:83:6a:44:70:26:81:e8:24:d5:ec:8e:fd:e5:d1:
                    87:4b:a3:df:da:d5:c5:ff:39:14:1d:30:99:d3:f1:
                    3a:d9:9f:5d:bc:86:91:a1:c5:a9:13:82:20:a6:76:
                    dd:a5:cf:4b:b2:35:1a:d4:4c:0f:57:b4:d4:cb:18:
                    49:af:7c:4a:d0:09:1c:e1:b6:f6:97:60:79:35:6e:
                    8a:9a:6b:b2:29:3b:5e:a9:ac:fb:66:0f:8d:0c:45:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:66:85:DB:79:38:FF:D4:D3:E6:A8:16:83:25:BD:EC:33:B8:C3
            X509v3 Authority Key Identifier:
                keyid:90:7D:17:81:C2:8A:02:74:1E:A7:A6:3A:CE:3A:95:31:7E:EB:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0XgcKKAnQep6Y6zjqVMX7ri3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/818f6a-7e0a-4a00-956e-2d993ff031be/1/kH0XgcKKAnQep6Y6zjqVMX7ri3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/818f6a-7e0a-4a00-956e-2d993ff031be/1/kH0XgcKKAnQep6Y6zjqVMX7ri3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:69:20:68:0d:84:84:89:66:c3:b2:60:f7:57:44:ad:07:c2:
         be:ae:ce:bd:93:91:7c:6f:cc:bb:09:56:6a:01:49:84:f5:56:
         b0:78:6f:3a:f8:e4:5d:ba:f4:ed:51:38:53:7c:f8:91:f8:21:
         63:90:9e:2e:68:6d:d4:61:70:75:76:3d:ab:e3:41:24:6e:1f:
         95:f9:bb:e5:58:6a:7c:fb:5b:ca:ed:09:f1:1a:a0:a2:4a:81:
         3d:94:70:fd:12:b5:74:89:3e:9f:fe:bf:64:d9:25:8e:5b:e5:
         e3:f8:4b:c1:9f:48:6a:f2:01:bf:30:d8:52:11:73:7c:0c:4f:
         92:85:81:07:60:59:22:d7:a8:44:ca:ff:54:21:02:94:cd:8f:
         23:3f:62:e2:f5:ca:9e:89:33:2c:fe:cb:19:67:7f:b1:e3:d7:
         a7:01:28:35:a3:d5:e5:6a:8b:06:3a:0f:15:78:f4:7e:59:66:
         1d:41:11:60:b6:5d:35:df:29:60:ca:75:c2:3a:2c:30:07:0b:
         6a:c5:e6:10:29:be:9e:89:6e:e4:d0:dd:2a:c2:00:48:df:ba:
         d1:48:fa:db:4c:74:84:34:2f:d7:f4:f0:93:bd:22:59:60:12:
         92:d6:50:d3:38:bb:cc:90:46:45:a6:0a:54:91:8f:4e:4f:13:
         32:84:67:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbiDDfYpA0kwZuo1bCxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2QxNzgxYzI4YTAyNzQxZWE3YTYzYWNlM2E5NTMxN2Vl
YjhiN2MwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
Eyg3YjdjNjY4NWRiNzkzOGZmZDRkM2U2YTgxNjgzMjViZGVjMzNiOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOOIgDioOgc+wPweF4zv46bicmD8
sVKBPyII4Od67EiRRwW4+Sh7rfG1hq/9uMBD2uM/WTu2Dt0tJUqq0aKdCfcBM42L
O985kKonvyxKY5WB20pTDiL/G9JH00uVg0pq1RQvmRjL+2SwvkP+DvnlOkEahfNv
t2YhmJ3PUSqaP9kirZeuHPXJhvX4vPAjOTmeC9+bV4FOukzcGJzA/Z5Yup+UFtPe
g2pEcCaB6CTV7I795dGHS6Pf2tXF/zkUHTCZ0/E62Z9dvIaRocWpE4Igpnbdpc9L
sjUa1EwPV7TUyxhJr3xK0Akc4bb2l2B5NW6KmmuyKTteqaz7Zg+NDEVpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt8ZoXbeTj/1NPmqBaDJb3sM7jDMB8GA1UdIwQY
MBaAFJB9F4HCigJ0HqemOs46lTF+64t8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0gwWGdjS0tBblFlcDZZNnpqcVZNWDdyaTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84MThmNmEtN2UwYS00YTAwLTk1NmUt
MmQ5OTNmZjAzMWJlLzEva0gwWGdjS0tBblFlcDZZNnpqcVZNWDdyaTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC84MThmNmEtN2UwYS00YTAwLTk1NmUtMmQ5OTNmZjAzMWJl
LzEva0gwWGdjS0tBblFlcDZZNnpqcVZNWDdyaTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGkgaA2E
hIlmw7Jg91dErQfCvq7OvZORfG/MuwlWagFJhPVWsHhvOvjkXbr07VE4U3z4kfgh
Y5CeLmht1GFwdXY9q+NBJG4flfm75VhqfPtbyu0J8RqgokqBPZRw/RK1dIk+n/6/
ZNkljlvl4/hLwZ9IavIBvzDYUhFzfAxPkoWBB2BZIteoRMr/VCEClM2PIz9i4vXK
nokzLP7LGWd/sePXpwEoNaPV5WqLBjoPFXj0fllmHUERYLZdNd8pYMp1wjosMAcL
asXmECm+nolu5NDdKsIASN+60Uj620x0hDQv1/Twk70iWWASktZQ0zi7zJBGRaYK
VJGPTk8TMoRneg==
-----END CERTIFICATE-----