Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File:                     H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier:          9m/Ep44xgtj1zquR9qLMFpIQokgiLXtXun4DkNzteHg=
Subject key identifier:   D0:B7:4D:19:50:83:0E:1A:F5:12:75:2E:77:4B:84:2A:6E:B9:39:89
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer:       /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial:       01962F74B7005E9EBEC55A52F9051984B5E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number:          0733
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: h1rI2NHFNH/+kbMXyjKEQk79uinEcoFG19h3s+jraww=)
                          2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:00:5e:9e:be:c5:5a:52:f9:05:19:84:b5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=d0b74d1950830e1af512752e774b842a6eb93989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:cc:98:ca:e8:07:fc:88:9c:c2:ca:86:5e:
                    a4:d5:71:fc:e5:1a:01:0f:84:35:59:05:f6:cb:be:
                    f1:78:81:e7:d5:b0:7a:71:3d:ac:3e:b1:a9:a6:33:
                    72:1e:9a:d4:8f:c1:61:db:d4:0e:06:6f:bc:fa:bc:
                    ec:a8:71:9d:b2:70:92:bc:ad:93:1e:0f:77:29:b7:
                    9e:ab:e6:51:0c:74:bb:48:49:28:53:3b:a8:4c:fb:
                    7b:cb:a7:94:d8:1b:78:ed:c8:4b:75:44:28:aa:e9:
                    4a:9e:c2:8c:29:9d:45:fa:f4:fe:60:41:ca:6b:4c:
                    05:87:5b:49:b2:8c:a6:0d:5a:6c:34:d1:3a:e6:94:
                    56:ab:42:7a:c0:63:05:80:78:24:06:6a:7a:08:0d:
                    d2:42:bc:8b:2e:f6:f2:7a:16:39:3a:90:b2:0f:cc:
                    79:1b:1e:43:e3:cc:2d:16:47:04:a7:96:dd:28:7d:
                    9d:54:cc:ab:e0:fe:b4:b6:18:99:41:c6:57:30:d4:
                    d2:ef:e2:ff:a4:fa:ab:60:d3:da:8f:67:e2:5c:54:
                    69:72:96:9a:29:f4:20:24:bd:13:ec:4d:49:c7:be:
                    16:8b:17:bc:a4:c8:97:83:60:88:f7:0f:5a:00:19:
                    21:87:42:b0:c5:7c:da:9e:d1:75:2c:2a:54:01:06:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:4D:19:50:83:0E:1A:F5:12:75:2E:77:4B:84:2A:6E:B9:39:89
            X509v3 Authority Key Identifier:
                keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:26:03:01:a0:a9:27:bc:e2:45:d0:46:33:a9:52:56:c9:4a:
         8e:79:7b:27:f2:27:cd:6e:f3:b1:d0:fe:d6:c3:96:0a:51:97:
         de:e9:f6:9a:17:ac:aa:dc:e1:6f:ba:e9:fe:84:40:3a:50:d5:
         4c:05:e0:ad:11:e5:20:60:e3:3e:4c:0f:d5:2a:38:0b:f2:6f:
         5f:da:05:4c:f8:88:f9:7a:84:55:11:cc:f9:02:7a:b6:a1:b3:
         60:8d:87:d8:77:f2:2b:84:af:36:b6:3f:05:ea:86:89:61:b1:
         28:18:61:9a:71:5d:3e:77:3e:5f:01:09:4a:ad:73:af:76:0c:
         ff:fb:dc:06:39:cf:7c:8f:c8:cf:5c:ac:46:64:06:a7:0b:17:
         11:e4:f8:c8:20:0b:a0:7a:15:f2:d1:1a:63:10:d5:2a:60:d9:
         be:41:2e:aa:c7:48:fa:8b:01:2a:ea:a1:96:37:a4:5c:f9:a9:
         ff:8e:e3:77:b9:56:49:b6:b6:e1:b6:94:95:95:e9:b3:00:ff:
         ba:41:a6:c6:43:ad:ba:b2:7e:ea:da:9c:23:d5:0e:1f:9a:48:
         3d:c9:bb:da:09:b0:70:6d:88:6f:33:34:15:80:14:f2:33:78:
         bb:91:69:90:9a:cc:1f:50:9b:bd:57:d6:57:9f:a5:cb:e4:13:
         7a:bb:4a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLcAXp6+xVpS+QUZhLXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1
OTU1YjQwHhcNMjUwNDEzMTQwMTQwWhcNMjUwNDE0MTQwMTQwWjAzMTEwLwYDVQQD
EyhkMGI3NGQxOTUwODMwZTFhZjUxMjc1MmU3NzRiODQyYTZlYjkzOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzjMmMroB/yInMLKhl6k1XH85RoB
D4Q1WQX2y77xeIHn1bB6cT2sPrGppjNyHprUj8Fh29QOBm+8+rzsqHGdsnCSvK2T
Hg93Kbeeq+ZRDHS7SEkoUzuoTPt7y6eU2Bt47chLdUQoqulKnsKMKZ1F+vT+YEHK
a0wFh1tJsoymDVpsNNE65pRWq0J6wGMFgHgkBmp6CA3SQryLLvbyehY5OpCyD8x5
Gx5D48wtFkcEp5bdKH2dVMyr4P60thiZQcZXMNTS7+L/pPqrYNPaj2fiXFRpcpaa
KfQgJL0T7E1Jx74Wixe8pMiXg2CI9w9aABkhh0KwxXzantF1LCpUAQbMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC3TRlQgw4a9RJ1LndLhCpuuTmJMB8GA1UdIwQY
MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct
ZGVkZWEzYWIwZDNiLzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi
LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSYDAaCp
J7ziRdBGM6lSVslKjnl7J/InzW7zsdD+1sOWClGX3un2mhesqtzhb7rp/oRAOlDV
TAXgrRHlIGDjPkwP1So4C/JvX9oFTPiI+XqEVRHM+QJ6tqGzYI2H2HfyK4SvNrY/
BeqGiWGxKBhhmnFdPnc+XwEJSq1zr3YM//vcBjnPfI/Iz1ysRmQGpwsXEeT4yCAL
oHoV8tEaYxDVKmDZvkEuqsdI+osBKuqhljekXPmp/47jd7lWSba24baUlZXpswD/
ukGmxkOturJ+6tqcI9UOH5pIPcm72gmwcG2IbzM0FYAU8jN4u5FpkJrMH1CbvVfW
V5+ly+QTertKVg==
-----END CERTIFICATE-----