Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File:                     7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier:          9YDf4lmx5AqupqaiS/mDWkqrqpMxyv2HkdpMJel8BSM=
Subject key identifier:   65:18:73:75:8A:18:4F:17:58:CA:EC:24:2A:40:20:A2:87:BD:AF:27
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer:       /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial:       01962F74C5F4B0DBC6EA75066358C39012B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number:          0F76
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: Hk3h4lRyjuX6oyzwP1jgAAXKnrjNYd+/wn6EdMyV+Sc=)
                          2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c5:f4:b0:db:c6:ea:75:06:63:58:c3:90:12:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=651873758a184f1758caec242a4020a287bdaf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:57:b1:56:1a:1c:0e:bb:07:38:3c:2e:c7:
                    4a:b8:dd:81:9f:76:b9:b4:7d:d9:b7:77:c3:fd:2f:
                    08:19:44:d1:5f:bb:a9:91:b4:c9:10:56:27:22:a0:
                    4f:7c:7e:f8:9a:eb:70:e8:4d:c9:e5:2f:ac:4b:c8:
                    ca:61:cc:e9:23:bd:c4:e8:86:5c:24:ae:0f:33:0f:
                    ad:5c:65:51:70:88:30:60:49:0d:04:2c:d5:25:5e:
                    d9:46:ba:0c:bb:3c:d7:7f:b0:07:25:a4:65:8d:92:
                    c7:7c:2e:af:3f:75:53:9b:88:5e:19:91:bc:1a:78:
                    ee:7a:c4:f1:d1:05:09:9e:ab:3b:d2:73:1f:77:87:
                    7c:fe:f3:2c:b7:44:27:41:eb:69:fe:ab:7d:a4:03:
                    1c:bc:07:b8:50:ed:c5:bc:d6:b2:8c:d6:ac:13:95:
                    72:b5:5b:47:8b:ea:72:8f:8a:d5:04:70:16:a9:a9:
                    b6:86:80:21:df:fe:dc:67:f0:82:59:8e:81:1c:a5:
                    37:04:71:7e:dd:e7:71:fb:13:df:bd:2c:29:ea:a1:
                    a6:04:d4:0b:13:b0:42:84:2d:fa:05:67:a2:28:5c:
                    20:2d:9f:d6:44:a0:56:37:a5:bc:56:e6:be:a0:4a:
                    bd:45:b9:eb:77:79:47:7a:6b:ce:74:ff:86:b1:36:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:18:73:75:8A:18:4F:17:58:CA:EC:24:2A:40:20:A2:87:BD:AF:27
            X509v3 Authority Key Identifier:
                keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:25:b8:e8:45:06:65:7b:5e:53:f8:ed:7c:d7:52:50:e4:
         9c:1f:1b:55:86:c5:c0:ba:3f:41:cc:04:02:d6:04:6a:23:93:
         77:19:1e:08:a1:37:e0:97:61:d2:29:9d:1d:9a:92:3d:f4:95:
         5e:e0:d0:64:16:2c:b8:e1:a1:4e:a3:ae:f0:80:2a:1b:d1:38:
         11:3e:6d:8d:c3:f2:72:08:17:a9:30:a7:23:32:43:67:a6:7c:
         fe:ee:71:5c:16:80:ab:9c:3d:54:9b:0e:c6:0c:27:28:43:70:
         da:18:bc:4e:17:17:fa:06:10:53:83:80:09:4f:a8:67:d2:f0:
         79:fb:4a:81:6f:5f:ce:be:f3:c1:c2:4d:a5:27:d5:b1:1b:9d:
         f7:9f:de:48:bd:a5:be:b0:52:4c:b7:35:95:11:bc:0a:f9:90:
         26:a4:9d:c7:9e:c6:25:5d:7b:69:d5:88:73:a6:5b:a7:0a:9b:
         1f:f5:69:35:6e:bd:96:a9:f6:a3:4c:2c:36:fc:e8:ca:b7:86:
         af:4a:06:80:44:3b:c9:f3:46:d7:a9:ee:b9:ec:0b:b6:b8:e5:
         e8:8e:2f:78:2d:47:23:16:7b:23:af:0d:47:0d:4c:bc:b3:d7:
         13:b7:29:a6:5f:f9:31:97:4c:16:16:d2:7e:08:b6:06:f2:10:
         47:6c:2d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMX0sNvG6nUGY1jDkBK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYmQwZjI5MDVlMGFiYzA2NDIwMzE2NTZhM2E1NjllZjcz
N2I0ZDAwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
Eyg2NTE4NzM3NThhMTg0ZjE3NThjYWVjMjQyYTQwMjBhMjg3YmRhZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj09XsVYaHA67Bzg8LsdKuN2Bn3a5
tH3Zt3fD/S8IGUTRX7upkbTJEFYnIqBPfH74mutw6E3J5S+sS8jKYczpI73E6IZc
JK4PMw+tXGVRcIgwYEkNBCzVJV7ZRroMuzzXf7AHJaRljZLHfC6vP3VTm4heGZG8
GnjuesTx0QUJnqs70nMfd4d8/vMst0QnQetp/qt9pAMcvAe4UO3FvNayjNasE5Vy
tVtHi+pyj4rVBHAWqam2hoAh3/7cZ/CCWY6BHKU3BHF+3edx+xPfvSwp6qGmBNQL
E7BChC36BWeiKFwgLZ/WRKBWN6W8Vua+oEq9Rbnrd3lHemvOdP+GsTbLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUYc3WKGE8XWMrsJCpAIKKHva8nMB8GA1UdIwQY
MBaAFO29DykF4KvAZCAxZWo6Vp73N7TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQt
MDI4ZmU1MjU1YmJlLzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82NDQ4ZDItZmUwNy00ZmM0LTk2MjQtMDI4ZmU1MjU1YmJl
LzEvN2IwUEtRWGdxOEJrSURGbGFqcFdudmMzdE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjMluOhF
BmV7XlP47XzXUlDknB8bVYbFwLo/QcwEAtYEaiOTdxkeCKE34Jdh0imdHZqSPfSV
XuDQZBYsuOGhTqOu8IAqG9E4ET5tjcPycggXqTCnIzJDZ6Z8/u5xXBaAq5w9VJsO
xgwnKENw2hi8ThcX+gYQU4OACU+oZ9LweftKgW9fzr7zwcJNpSfVsRud95/eSL2l
vrBSTLc1lRG8CvmQJqSdx57GJV17adWIc6ZbpwqbH/VpNW69lqn2o0wsNvzoyreG
r0oGgEQ7yfNG16nuuewLtrjl6I4veC1HIxZ7I68NRw1MvLPXE7cppl/5MZdMFhbS
fgi2BvIQR2wtyg==
-----END CERTIFICATE-----