Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File:                     FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier:          dnHEM1fDAJFLweMq7SlDbP6ir5fkHLKghR1HWF9y1AA=
Subject key identifier:   C8:D8:C6:B1:C7:F5:8D:EA:C5:D3:AE:E2:DF:57:BF:52:D6:3A:87:88
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer:       /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial:       01962E9893FC4E66419B3553E552C6945309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: mccNx8VYmTywXB/2F9Q8u+G+5uSCJnQ0uubkJGxC7nE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:fc:4e:66:41:9b:35:53:e5:52:c6:94:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=c8d8c6b1c7f58deac5d3aee2df57bf52d63a8788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:ee:ea:25:ec:f3:42:7e:34:c7:d0:08:44:
                    eb:a2:4d:ee:7b:21:31:02:2a:72:5c:30:80:8d:ec:
                    82:d5:78:0d:76:01:93:dd:ab:66:1b:e8:6a:4b:b1:
                    cc:0c:78:4e:ce:2d:d6:d9:41:3e:92:1e:ab:38:ad:
                    b8:46:fd:d8:8a:d4:50:1f:c2:97:3a:ed:84:6f:17:
                    38:e7:88:42:3c:e3:ad:a4:21:dc:fc:10:d3:ca:ec:
                    80:25:14:fc:0b:5b:95:1d:4d:b3:9e:28:2a:93:96:
                    83:c0:ea:2f:6d:ef:6f:ef:60:f4:7d:f9:22:a8:ae:
                    8b:eb:0e:04:40:fd:c1:0f:79:b9:0a:0e:fd:8c:d3:
                    9a:26:ba:c3:9e:09:92:0a:a8:a4:94:0b:85:4b:8c:
                    d5:bf:83:72:50:65:04:f3:c5:ff:9e:05:4f:bb:57:
                    b3:87:8c:d6:bd:36:40:ca:6a:6e:ff:b3:fd:23:b0:
                    c6:41:3d:7c:f6:d1:35:17:aa:66:2f:43:e6:d4:b7:
                    77:f7:4e:a3:26:a5:6d:d4:92:d2:ba:75:06:4f:ab:
                    35:1a:77:ea:d8:a6:e9:c2:e6:84:8f:37:ed:d4:fc:
                    d5:12:c3:69:fe:47:0e:42:95:f1:cb:d5:87:6e:6e:
                    00:87:93:64:d4:15:5b:56:ac:8a:96:8f:a5:f1:b4:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D8:C6:B1:C7:F5:8D:EA:C5:D3:AE:E2:DF:57:BF:52:D6:3A:87:88
            X509v3 Authority Key Identifier:
                keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c9:a0:c2:e5:a9:2f:6f:ae:dd:c2:5a:8d:e2:21:14:d2:4b:
         42:07:be:4b:bb:ce:ee:91:22:a0:d7:d9:58:66:b8:67:fa:a3:
         18:d8:3d:7a:64:d9:15:ac:82:05:d5:6e:7b:89:e4:ef:7a:e8:
         a3:e6:12:2a:2e:45:94:88:43:76:0a:08:c2:e5:83:17:83:7b:
         1e:d6:a0:37:9b:5f:48:61:0f:af:79:79:6f:2b:9e:3d:a6:1a:
         dc:3e:54:3b:4e:b9:fe:fc:70:a0:9f:89:74:2b:23:b5:4c:d6:
         3d:a3:4e:40:88:d3:2f:24:dd:2c:ee:df:3c:32:a1:ff:91:55:
         ba:c7:5b:c6:dd:c8:21:8f:a1:53:89:51:f4:23:e6:a4:e2:10:
         cd:ad:64:6c:f2:e2:f6:42:2b:73:7a:37:9c:48:43:7a:c9:f1:
         b6:34:59:5d:55:c1:1d:ab:d7:43:6c:5a:28:f3:cf:3e:5a:a6:
         6e:8d:26:6e:e8:e6:ba:f4:83:0d:b7:5a:ff:b3:2d:7a:2a:99:
         c2:5d:24:fe:fe:81:03:c7:43:a0:6c:9f:0c:ac:bd:dd:87:ed:
         a0:c5:8b:7a:46:3a:49:33:ea:54:2f:84:c0:5a:ea:39:d3:e3:
         e9:b6:7c:e6:08:a8:d3:3a:2e:0d:5b:0e:4b:4d:5e:0f:2b:7a:
         82:4e:1c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJP8TmZBmzVT5VLGlFMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4
NzQ3MWMwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EyhjOGQ4YzZiMWM3ZjU4ZGVhYzVkM2FlZTJkZjU3YmY1MmQ2M2E4Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Lu6iXs80J+NMfQCETrok3ueyEx
AipyXDCAjeyC1XgNdgGT3atmG+hqS7HMDHhOzi3W2UE+kh6rOK24Rv3YitRQH8KX
Ou2Ebxc454hCPOOtpCHc/BDTyuyAJRT8C1uVHU2znigqk5aDwOovbe9v72D0ffki
qK6L6w4EQP3BD3m5Cg79jNOaJrrDngmSCqiklAuFS4zVv4NyUGUE88X/ngVPu1ez
h4zWvTZAympu/7P9I7DGQT189tE1F6pmL0Pm1Ld3906jJqVt1JLSunUGT6s1Gnfq
2KbpwuaEjzft1PzVEsNp/kcOQpXxy9WHbm4Ah5Nk1BVbVqyKlo+l8bQ8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjYxrHH9Y3qxdOu4t9Xv1LWOoeIMB8GA1UdIwQY
MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt
N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw
LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcmgwuWp
L2+u3cJajeIhFNJLQge+S7vO7pEioNfZWGa4Z/qjGNg9emTZFayCBdVue4nk73ro
o+YSKi5FlIhDdgoIwuWDF4N7HtagN5tfSGEPr3l5byuePaYa3D5UO065/vxwoJ+J
dCsjtUzWPaNOQIjTLyTdLO7fPDKh/5FVusdbxt3IIY+hU4lR9CPmpOIQza1kbPLi
9kIrc3o3nEhDesnxtjRZXVXBHavXQ2xaKPPPPlqmbo0mbujmuvSDDbda/7MteiqZ
wl0k/v6BA8dDoGyfDKy93YftoMWLekY6STPqVC+EwFrqOdPj6bZ85gio0zouDVsO
S01eDyt6gk4cGA==
-----END CERTIFICATE-----