Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File:                     76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier:          DvBA8eY8TO4Tv49YJWKQ2rQ6MOANM5ERWBtbHWEQfn4=
Subject key identifier:   4E:EB:42:DF:F6:96:FC:F1:C8:76:54:B1:B6:98:C6:E9:02:78:B8:78
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       01962E6181D94FEAD623D318B81C8221B17D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number:          0DF7
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: 7LbaYyc3uE5AvJTRfd5gEXd7eD2xMEjYDohm9FpxVT4=)
                          2: eEg129AjahVFZwXWvrV2fJi_L-k.roa (hash: FNcsILhZfM7MXfMq8Z+RmOL7SETSv7P7KBCxxPHf6O4=)
                          3: gPnJRGAbg_gsEG5lsQLMQZ_aN3E.roa (hash: DPgRiY1XTMHzjxPysYXSL0RUck6B0Hjs2YcV10aS3mY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:81:d9:4f:ea:d6:23:d3:18:b8:1c:82:21:b1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=4eeb42dff696fcf1c87654b1b698c6e90278b878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:1c:4f:a7:4c:8e:54:ae:cc:60:db:52:3c:
                    ae:bb:d3:1c:f7:f2:4e:8c:0f:39:5d:10:ee:44:86:
                    93:6a:00:bd:94:20:8d:71:d4:18:ca:85:a6:5e:28:
                    67:b5:26:7a:d5:0d:bc:6a:f6:c8:9d:3b:91:7e:6f:
                    97:27:eb:ab:ef:16:be:9e:d5:cb:95:a7:dc:a1:ba:
                    a1:2c:f1:19:ac:8c:41:92:18:e9:36:8b:cb:92:a0:
                    b0:60:8f:cd:6c:02:0f:f3:a8:db:d3:c9:81:e7:a6:
                    3b:bd:41:73:97:5d:87:c0:8c:23:fd:81:48:44:6f:
                    21:71:5c:53:ce:79:fc:97:51:36:c0:d5:d7:47:3f:
                    28:36:cc:4b:40:27:a5:7f:fe:72:92:61:42:b5:c5:
                    d4:95:d0:4c:54:4e:d5:65:c3:35:25:d8:50:c8:22:
                    47:9a:dc:b8:20:55:9a:ff:de:2c:8a:6b:65:5d:aa:
                    62:ce:c2:cb:f4:d2:99:d5:8f:71:7c:9f:6d:55:58:
                    8b:8e:0c:5f:54:4e:3a:ee:94:b9:d7:4c:9c:cc:7d:
                    dd:6d:19:22:ee:f8:40:50:b1:9e:c8:90:6d:01:55:
                    b2:a1:32:a0:ed:d0:40:17:db:18:7e:da:9e:68:f4:
                    8b:06:29:b5:81:65:ac:32:88:aa:4f:b7:35:20:b2:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:42:DF:F6:96:FC:F1:C8:76:54:B1:B6:98:C6:E9:02:78:B8:78
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:98:0a:9a:13:ed:b5:19:59:2e:83:67:c1:13:9b:e2:f5:68:
         45:aa:a6:18:5f:7b:58:49:13:38:05:6d:2d:76:e6:41:6a:e2:
         c7:94:1f:52:4f:00:de:da:e8:1d:71:95:d2:63:a5:ab:3b:d1:
         d6:f8:44:9d:9c:78:97:8c:fd:5c:1a:3b:b2:45:33:35:fa:48:
         cb:d4:b6:fd:b4:76:c9:8b:b5:07:cc:6d:a1:36:db:e8:92:d9:
         95:07:d1:91:1b:48:b1:fa:72:50:8b:17:11:f6:fa:44:d7:ca:
         0c:19:4d:13:01:61:bb:f0:82:52:99:51:28:4c:8e:bb:5c:68:
         c6:3c:cf:49:60:d7:b7:5a:0b:d3:9a:32:53:6d:bd:96:73:7e:
         37:5a:2e:e6:09:8b:f0:12:f3:33:66:bf:bb:59:5a:91:03:63:
         c7:08:fb:ad:b6:fb:25:86:31:96:4d:5e:21:a2:3a:47:e6:87:
         e2:d8:90:c9:05:78:60:df:a2:cc:81:a8:d9:b6:56:f8:39:76:
         45:c6:a6:ce:b8:e6:c2:cc:f6:cb:df:e6:98:d2:51:4a:f4:1f:
         0f:ab:5b:c3:1d:81:70:c4:ec:1f:88:24:77:d0:f1:cb:34:5a:
         fc:88:56:12:06:a9:ef:68:5b:28:78:a9:60:a6:49:67:42:92:
         e5:2e:9b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYHZT+rWI9MYuByCIbF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjUwNDEzMDkwMTA0WhcNMjUwNDE0MDkwMTA0WjAzMTEwLwYDVQQD
Eyg0ZWViNDJkZmY2OTZmY2YxYzg3NjU0YjFiNjk4YzZlOTAyNzhiODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/kcT6dMjlSuzGDbUjyuu9Mc9/JO
jA85XRDuRIaTagC9lCCNcdQYyoWmXihntSZ61Q28avbInTuRfm+XJ+ur7xa+ntXL
lafcobqhLPEZrIxBkhjpNovLkqCwYI/NbAIP86jb08mB56Y7vUFzl12HwIwj/YFI
RG8hcVxTznn8l1E2wNXXRz8oNsxLQCelf/5ykmFCtcXUldBMVE7VZcM1JdhQyCJH
mty4IFWa/94simtlXapizsLL9NKZ1Y9xfJ9tVViLjgxfVE467pS510yczH3dbRki
7vhAULGeyJBtAVWyoTKg7dBAF9sYftqeaPSLBim1gWWsMoiqT7c1ILK9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7rQt/2lvzxyHZUsbaYxukCeLh4MB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5gKmhPt
tRlZLoNnwROb4vVoRaqmGF97WEkTOAVtLXbmQWrix5QfUk8A3troHXGV0mOlqzvR
1vhEnZx4l4z9XBo7skUzNfpIy9S2/bR2yYu1B8xtoTbb6JLZlQfRkRtIsfpyUIsX
Efb6RNfKDBlNEwFhu/CCUplRKEyOu1xoxjzPSWDXt1oL05oyU229lnN+N1ou5gmL
8BLzM2a/u1lakQNjxwj7rbb7JYYxlk1eIaI6R+aH4tiQyQV4YN+izIGo2bZW+Dl2
Rcamzrjmwsz2y9/mmNJRSvQfD6tbwx2BcMTsH4gkd9DxyzRa/IhWEgap72hbKHip
YKZJZ0KS5S6b1A==
-----END CERTIFICATE-----