Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File:                     t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier:          u6FtxmyMIgSIoEoLbFqTO6ULvVjd18PXT6zzUKsfiN0=
Subject key identifier:   6F:12:04:BD:B7:65:FD:8D:8E:C8:FE:DF:10:12:78:0B:4F:25:99:B7
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer:       /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial:       01962E98C7A18F414B0FDF2FD9C5435233D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
                          2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: kr6uzNlePZR77hFHwqRkDGM3rIYupOPxiOLJvxFFw20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c7:a1:8f:41:4b:0f:df:2f:d9:c5:43:52:33:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=6f1204bdb765fd8d8ec8fedf1012780b4f2599b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:e6:96:0e:37:7b:e5:d9:81:4d:83:df:1a:
                    08:e6:3c:33:cf:93:ab:57:f4:14:95:a5:3b:64:45:
                    9c:26:7a:7a:02:7e:3a:18:a2:0d:47:ef:eb:4a:7e:
                    a7:42:7b:cf:1d:af:27:25:d2:03:e5:ce:1b:4d:4c:
                    4c:e6:25:25:a7:17:3b:77:03:8b:68:c6:e7:8c:ca:
                    39:54:96:ca:2b:46:c7:39:ab:6a:33:10:c8:97:ea:
                    da:d4:1f:11:a1:50:f7:47:46:98:99:62:ac:f9:07:
                    24:68:2f:8e:8d:fd:f3:1b:bd:bb:73:6f:d3:57:34:
                    fb:84:4b:69:82:73:83:02:b0:f6:a1:ba:c4:d6:43:
                    49:fa:f1:e7:ec:3b:40:e8:79:49:5b:fc:a0:e9:14:
                    74:64:0b:82:a5:7c:e4:3b:64:59:77:a5:e3:95:eb:
                    29:e2:34:f4:d5:d5:98:50:84:9c:3d:d3:11:b6:5d:
                    2c:62:12:e7:18:43:45:23:d3:74:0f:68:6e:62:49:
                    73:6b:1e:76:24:33:ca:20:e0:88:e5:52:f4:19:a7:
                    5e:f3:98:09:8b:0a:c6:53:55:ae:36:60:28:5e:c6:
                    28:c3:36:9f:db:46:df:72:72:21:89:b5:83:a7:ec:
                    41:4a:98:cc:42:de:70:85:33:b2:c9:5f:f8:df:7e:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:04:BD:B7:65:FD:8D:8E:C8:FE:DF:10:12:78:0B:4F:25:99:B7
            X509v3 Authority Key Identifier:
                keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:91:51:b2:3d:22:3d:b8:a2:4a:85:ba:27:1f:0a:98:73:
         fc:0e:b5:83:ed:5c:ac:9b:98:ad:30:21:0b:e4:f0:31:5e:bf:
         66:bc:ef:53:2d:8c:86:5d:0b:b9:6d:3a:98:97:71:89:7a:a8:
         56:88:34:e6:bc:1f:6d:1b:f1:81:60:b0:b9:bf:de:22:cc:1d:
         ef:1c:20:a5:04:e8:d0:b7:24:3d:1c:cf:9c:84:6b:d4:03:6e:
         0d:99:4c:0b:10:14:b8:f5:b4:94:8c:9d:ca:ab:a1:c4:b2:9e:
         66:08:65:9f:25:e3:ef:e0:63:ab:fb:83:6c:df:ce:a9:0c:e8:
         1e:18:e7:f2:1e:90:80:74:39:7c:10:0d:43:c5:19:e6:7c:0b:
         e7:e6:a3:bf:b9:47:85:28:c8:f1:0a:1d:2f:d8:72:fc:e7:72:
         fe:31:cd:9c:ed:0e:b4:5b:ce:41:73:94:1b:2c:3f:11:ac:df:
         b0:19:44:c1:43:fd:71:24:35:d2:15:90:37:75:89:fd:c9:36:
         4b:3c:de:04:0d:d6:42:3d:db:9e:f1:ac:ff:9d:fe:f7:f4:3d:
         90:26:ea:0e:c1:26:af:18:5c:6d:ac:f6:b3:1d:af:60:c9:f5:
         c3:92:00:b7:3e:90:5e:2c:b4:9b:10:52:a5:c5:03:e8:66:ca:
         cf:a7:46:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMehj0FLD98v2cVDUjPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjY3YmE1NzlmNDhhNDIwN2FjNDA5YWJmNGYwMTE5NDA0
NmVhM2EwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg2ZjEyMDRiZGI3NjVmZDhkOGVjOGZlZGYxMDEyNzgwYjRmMjU5OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z7mlg43e+XZgU2D3xoI5jwzz5Or
V/QUlaU7ZEWcJnp6An46GKINR+/rSn6nQnvPHa8nJdID5c4bTUxM5iUlpxc7dwOL
aMbnjMo5VJbKK0bHOatqMxDIl+ra1B8RoVD3R0aYmWKs+QckaC+Ojf3zG727c2/T
VzT7hEtpgnODArD2obrE1kNJ+vHn7DtA6HlJW/yg6RR0ZAuCpXzkO2RZd6Xjlesp
4jT01dWYUIScPdMRtl0sYhLnGENFI9N0D2huYklzax52JDPKIOCI5VL0Gade85gJ
iwrGU1WuNmAoXsYowzaf20bfcnIhibWDp+xBSpjMQt5whTOyyV/4336xHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8SBL23Zf2Njsj+3xASeAtPJZm3MB8GA1UdIwQY
MBaAFLe2e6V59IpCB6xAmr9PARlARuo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYt
Yjc3NDMyMGQ5OTdmLzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYtYjc3NDMyMGQ5OTdm
LzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMWRUbI9
Ij24okqFuicfCphz/A61g+1crJuYrTAhC+TwMV6/ZrzvUy2Mhl0LuW06mJdxiXqo
Vog05rwfbRvxgWCwub/eIswd7xwgpQTo0LckPRzPnIRr1ANuDZlMCxAUuPW0lIyd
yquhxLKeZghlnyXj7+Bjq/uDbN/OqQzoHhjn8h6QgHQ5fBANQ8UZ5nwL5+ajv7lH
hSjI8QodL9hy/Ody/jHNnO0OtFvOQXOUGyw/EazfsBlEwUP9cSQ10hWQN3WJ/ck2
SzzeBA3WQj3bnvGs/53+9/Q9kCbqDsEmrxhcbaz2sx2vYMn1w5IAtz6QXiy0mxBS
pcUD6GbKz6dG8Q==
-----END CERTIFICATE-----