Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File:                     fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier:          K95rcCz55sGKZYWljHw8Bws+UtEPavzALUNWzWs/ESY=
Subject key identifier:   A0:6A:67:1F:68:E4:9C:33:F1:95:12:F6:80:73:45:A0:FB:97:A0:86
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer:       /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial:       01962DF3D1C72812A717390F5175731E692F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number:          0BFD
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
                          2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: /54A0l8NKnGAC+4PSJ6iAbcO68jf235s+BPUi8i9yJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:c7:28:12:a7:17:39:0f:51:75:73:1e:69:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=a06a671f68e49c33f19512f6807345a0fb97a086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:80:cf:b4:d7:11:7f:08:6e:ba:c7:f3:53:
                    d7:c1:f4:6e:14:15:03:79:1c:16:5e:20:d2:e6:32:
                    e7:c1:e9:52:9c:cf:61:2f:0b:81:f0:04:2f:d8:4d:
                    0b:f1:6c:a7:27:58:af:24:0b:93:2a:c1:88:76:b6:
                    85:77:25:bc:10:9c:cd:0a:5c:a0:c1:cc:5d:b3:74:
                    f8:91:41:2c:08:e1:63:4a:e8:1a:ba:07:1e:b5:14:
                    bb:f8:52:b8:40:cb:96:63:1f:1d:a3:20:bb:c5:6e:
                    88:18:75:29:90:53:a1:0d:9f:f6:f5:15:66:d4:0a:
                    cb:62:e0:1a:31:88:ec:a8:28:e8:da:1f:5c:40:2c:
                    c1:9b:03:91:2c:be:c9:d7:90:32:83:d6:81:1e:43:
                    b5:db:8d:d6:b7:a0:c7:a4:a5:c5:0c:ac:c5:8c:c3:
                    39:c1:e9:1e:e6:2d:66:7f:56:ca:9e:19:56:9f:09:
                    f5:38:1d:7e:12:a7:10:3e:49:47:58:45:00:08:f2:
                    41:2d:33:b2:14:b8:fa:34:e8:c6:7a:e2:99:02:5c:
                    3b:12:de:5a:92:25:91:b5:e1:a4:c6:49:5d:04:2e:
                    81:0f:0e:3d:ea:26:58:4e:85:52:b0:0e:da:b0:0b:
                    19:e5:8e:cc:97:3e:77:f7:6a:31:bb:8b:9b:7b:95:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6A:67:1F:68:E4:9C:33:F1:95:12:F6:80:73:45:A0:FB:97:A0:86
            X509v3 Authority Key Identifier:
                keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:57:d7:16:95:9a:f2:1d:2e:5c:28:c0:0d:42:a6:c7:78:ef:
         c3:69:41:88:c5:a3:7a:80:2e:4c:a5:8b:90:ea:56:be:92:91:
         de:af:d2:75:bb:cb:c0:ea:52:83:1c:58:e4:0a:ab:c1:19:a8:
         2a:83:89:6a:08:05:95:05:4c:3b:85:bc:ca:49:93:be:50:a1:
         7a:53:4c:db:c9:91:fe:0a:6e:31:6a:09:20:a1:e9:a2:25:a8:
         04:26:4d:a8:ae:1b:f1:0d:1e:01:cf:2f:70:65:8f:1b:97:fe:
         e8:6d:38:7b:e4:aa:76:89:c3:43:68:c4:ab:bc:64:1b:f2:cb:
         28:73:ab:62:61:70:6a:9f:53:0d:5f:f7:a1:ee:cf:d3:6e:38:
         81:86:b3:e9:0f:8b:b3:d6:b8:0a:2c:92:e4:06:3a:a4:c0:09:
         42:79:89:00:78:63:d4:1e:84:de:ae:cb:0b:2e:e5:ea:1f:52:
         79:77:7d:d6:14:20:c4:61:b3:9d:a3:03:12:34:86:0e:f2:4f:
         af:10:3b:e0:42:df:e3:7a:29:31:b9:c4:4c:0d:60:30:9f:15:
         25:58:8d:77:db:0b:f7:0b:af:15:13:8b:a3:20:51:e3:c9:c6:
         41:d2:3e:c5:1c:ef:ca:99:cc:9f:c0:e1:92:b2:05:f1:2f:33:
         00:71:e9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89HHKBKnFzkPUXVzHmkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1
MTFjNzAwHhcNMjUwNDEzMDcwMTE1WhcNMjUwNDE0MDcwMTE1WjAzMTEwLwYDVQQD
EyhhMDZhNjcxZjY4ZTQ5YzMzZjE5NTEyZjY4MDczNDVhMGZiOTdhMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4CAz7TXEX8IbrrH81PXwfRuFBUD
eRwWXiDS5jLnwelSnM9hLwuB8AQv2E0L8WynJ1ivJAuTKsGIdraFdyW8EJzNClyg
wcxds3T4kUEsCOFjSugaugcetRS7+FK4QMuWYx8doyC7xW6IGHUpkFOhDZ/29RVm
1ArLYuAaMYjsqCjo2h9cQCzBmwORLL7J15Ayg9aBHkO1243Wt6DHpKXFDKzFjMM5
weke5i1mf1bKnhlWnwn1OB1+EqcQPklHWEUACPJBLTOyFLj6NOjGeuKZAlw7Et5a
kiWRteGkxkldBC6BDw496iZYToVSsA7asAsZ5Y7Mlz5392oxu4ube5UzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBqZx9o5Jwz8ZUS9oBzRaD7l6CGMB8GA1UdIwQY
MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt
OTE2NTFkOWI4NTZhLzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh
LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFfXFpWa
8h0uXCjADUKmx3jvw2lBiMWjeoAuTKWLkOpWvpKR3q/SdbvLwOpSgxxY5AqrwRmo
KoOJaggFlQVMO4W8ykmTvlChelNM28mR/gpuMWoJIKHpoiWoBCZNqK4b8Q0eAc8v
cGWPG5f+6G04e+SqdonDQ2jEq7xkG/LLKHOrYmFwap9TDV/3oe7P0244gYaz6Q+L
s9a4CiyS5AY6pMAJQnmJAHhj1B6E3q7LCy7l6h9SeXd91hQgxGGznaMDEjSGDvJP
rxA74ELf43opMbnETA1gMJ8VJViNd9sL9wuvFROLoyBR48nGQdI+xRzvypnMn8Dh
krIF8S8zAHHpVw==
-----END CERTIFICATE-----