Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File:                     gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier:          aaKS9qbhle/YUBqgv+DYFQod6YBx/g0dEYOkpizxAZk=
Subject key identifier:   CF:C7:8E:11:2E:77:AE:F7:E9:57:23:82:46:EA:5F:5B:3F:33:17:4D
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer:       /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial:       01962F74C338488C2A84EDC622DCA373294F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: E/8B1oqYr6QFUwScRvkq8hqeYE+3PtNEuIgQ1/Je0lE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c3:38:48:8c:2a:84:ed:c6:22:dc:a3:73:29:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=cfc78e112e77aef7e957238246ea5f5b3f33174d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:2f:f6:b7:c3:ec:c4:cd:96:32:07:35:8e:
                    b0:c1:fd:a3:ae:ea:c8:1b:15:89:f6:a3:d5:ea:b8:
                    b3:b0:cb:e9:e5:92:c9:c4:e2:6f:2c:1b:83:70:16:
                    6f:d8:1e:0f:a8:5a:7f:74:8e:d8:50:f0:51:ed:f0:
                    e1:e5:6c:92:57:b6:f3:43:69:f3:fc:fb:92:da:78:
                    14:63:11:b3:0d:38:ee:fe:7c:8f:65:d1:82:bb:88:
                    0b:ca:01:bb:b9:5a:c8:e5:17:8a:4a:01:74:88:b3:
                    9f:d0:dd:d2:7a:fe:7c:32:e3:72:11:46:35:7b:f0:
                    0c:e5:2e:e2:98:a2:a7:05:81:44:91:79:30:8f:df:
                    a5:5b:7b:ab:83:fd:c0:e8:ce:10:06:a1:46:3b:33:
                    46:e8:3e:01:9c:f7:7d:f9:d1:c5:b7:6f:de:c1:66:
                    ff:c1:c6:a3:19:94:a4:fd:f1:ab:82:e1:5d:ee:69:
                    0a:dd:80:18:72:13:1a:6f:0d:e9:9f:2b:35:0a:73:
                    3e:f6:81:ac:af:da:64:1b:16:25:41:ee:c7:1c:86:
                    51:bf:a1:eb:a0:3e:48:fc:9b:b3:d0:f5:8d:1e:ca:
                    f2:f4:38:98:af:2a:93:be:31:b4:56:ba:d6:85:c5:
                    3d:97:a1:be:ec:08:60:ff:7a:c3:8c:dc:c8:81:7b:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:8E:11:2E:77:AE:F7:E9:57:23:82:46:EA:5F:5B:3F:33:17:4D
            X509v3 Authority Key Identifier:
                keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:41:77:50:02:f0:02:c0:47:59:d7:ef:59:3d:9c:7b:c8:
         cd:02:50:43:0d:d5:17:4f:e2:13:1b:ff:b3:57:53:0d:9c:c4:
         78:92:74:c9:e5:96:9b:24:a3:c8:69:f2:53:f9:e9:67:ed:a5:
         4e:ce:47:f9:f3:04:db:05:03:a9:fe:99:e9:d3:b4:7d:be:09:
         a7:eb:aa:31:48:e6:1f:87:2d:2e:eb:9a:60:9c:64:83:ac:2b:
         28:52:df:60:96:43:8c:86:e1:63:8f:3b:88:2f:0d:40:71:12:
         ed:47:52:8e:3a:11:7d:02:6a:13:8d:50:bc:16:fa:45:7d:0e:
         d5:f6:09:43:41:62:ec:3f:38:a2:c0:6d:03:e0:a3:d9:30:bb:
         62:22:d3:1d:58:6e:90:49:d8:80:8e:ba:ac:e1:f7:33:b4:25:
         5e:86:93:91:7b:ee:cb:df:ce:8e:36:1b:c2:6c:90:26:03:e7:
         34:bd:f5:34:b1:bf:1f:46:5a:46:aa:98:40:5f:66:17:a7:5b:
         9c:bf:c4:53:8e:5f:c6:43:3b:f4:7c:a2:92:c6:ac:42:0e:bb:
         49:ea:49:b3:7a:53:95:46:cc:f4:47:39:f4:e5:8e:4d:e5:63:
         aa:40:12:d7:f8:e2:0b:08:92:4e:68:04:7f:30:fc:d8:8e:c4:
         40:a2:2f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMM4SIwqhO3GItyjcylPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMWIxN2ViNjE2Mzg5MzMyMWI0N2U0YWY3ZmE1NmIwMWM1
ZjM3YjUwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
EyhjZmM3OGUxMTJlNzdhZWY3ZTk1NzIzODI0NmVhNWY1YjNmMzMxNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYwv9rfD7MTNljIHNY6wwf2jrurI
GxWJ9qPV6rizsMvp5ZLJxOJvLBuDcBZv2B4PqFp/dI7YUPBR7fDh5WySV7bzQ2nz
/PuS2ngUYxGzDTju/nyPZdGCu4gLygG7uVrI5ReKSgF0iLOf0N3Sev58MuNyEUY1
e/AM5S7imKKnBYFEkXkwj9+lW3urg/3A6M4QBqFGOzNG6D4BnPd9+dHFt2/ewWb/
wcajGZSk/fGrguFd7mkK3YAYchMabw3pnys1CnM+9oGsr9pkGxYlQe7HHIZRv6Hr
oD5I/Juz0PWNHsry9DiYryqTvjG0VrrWhcU9l6G+7Ahg/3rDjNzIgXtYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/HjhEud6736VcjgkbqX1s/MxdNMB8GA1UdIwQY
MBaAFIEbF+thY4kzIbR+Svf6VrAcXze1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTkt
ZDRhN2JhNjYwY2VlLzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTktZDRhN2JhNjYwY2Vl
LzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOdBd1AC
8ALAR1nX71k9nHvIzQJQQw3VF0/iExv/s1dTDZzEeJJ0yeWWmySjyGnyU/npZ+2l
Ts5H+fME2wUDqf6Z6dO0fb4Jp+uqMUjmH4ctLuuaYJxkg6wrKFLfYJZDjIbhY487
iC8NQHES7UdSjjoRfQJqE41QvBb6RX0O1fYJQ0Fi7D84osBtA+Cj2TC7YiLTHVhu
kEnYgI66rOH3M7QlXoaTkXvuy9/OjjYbwmyQJgPnNL31NLG/H0ZaRqqYQF9mF6db
nL/EU45fxkM79HyiksasQg67SepJs3pTlUbM9Ec59OWOTeVjqkAS1/jiCwiSTmgE
fzD82I7EQKIvAA==
-----END CERTIFICATE-----