Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File:                     fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier:          k7muU8sXUvEfV7o2oAy5jcwUJ+IEPQz4MtQEq+kaIMA=
Subject key identifier:   05:8A:27:8C:52:6F:7C:5F:A2:F1:F5:36:BB:EA:42:CE:58:84:D3:B4
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer:       /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial:       01962E98A75FFB9FFB7B8B72B523E5ECBB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number:          0BD2
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: D1/itZKORswsI8FLezpZI7bpeL2+1B2HwU+xTTvLDxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a7:5f:fb:9f:fb:7b:8b:72:b5:23:e5:ec:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=058a278c526f7c5fa2f1f536bbea42ce5884d3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:23:99:80:66:95:59:84:4d:81:28:ca:ae:
                    4c:59:3a:b9:47:ed:14:26:58:db:4f:28:4b:52:b0:
                    df:54:9a:0d:a9:0b:08:22:a1:01:63:01:7c:46:f0:
                    e1:ca:30:bd:a1:a6:78:5e:4b:f1:3b:a3:ba:bd:f3:
                    ab:4b:b7:c4:dc:d1:eb:f8:ce:a4:43:f9:b0:94:c3:
                    7f:a8:10:5e:13:5c:a6:6f:9c:2f:d3:9d:96:07:de:
                    e6:78:17:0d:72:ff:96:0a:12:f8:52:37:d8:45:1e:
                    c6:01:1d:7f:d6:5c:82:eb:c1:78:ad:13:9b:93:e1:
                    fb:d2:0e:f6:01:4f:3f:16:95:57:77:b8:d6:3f:fc:
                    61:27:e4:1b:fc:a5:f9:0e:a2:af:ef:e5:ad:f2:a6:
                    5c:ab:8a:26:fa:a2:44:51:47:98:d8:2d:36:28:3a:
                    81:3a:33:26:a2:1a:ca:f8:d0:0b:07:7e:df:93:91:
                    d7:ee:c3:8d:0e:31:dc:3a:f1:62:2e:e8:11:67:dc:
                    4d:5c:6a:a0:d2:17:b8:07:20:9e:ba:fa:b6:d4:59:
                    9f:69:fc:bb:35:5a:1b:da:cb:39:ff:d1:b2:0c:de:
                    8f:04:9e:22:b3:a6:6f:d7:5a:32:72:28:0e:b7:f4:
                    b6:cc:6b:db:9b:33:a2:9e:74:16:ce:83:ec:7f:5b:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:27:8C:52:6F:7C:5F:A2:F1:F5:36:BB:EA:42:CE:58:84:D3:B4
            X509v3 Authority Key Identifier:
                keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:ad:6f:df:82:d7:b2:59:ba:9b:5a:04:e4:7d:4c:92:6b:
         e8:a4:f9:e1:84:21:f5:99:b7:44:ec:be:1b:54:78:c6:e4:b2:
         ff:99:2f:38:24:9f:62:c5:30:f8:00:ef:60:3e:55:04:45:2e:
         59:0b:7c:c2:37:a3:32:d0:4c:4c:7a:4f:06:12:79:c8:db:2d:
         69:e6:3e:9d:4c:71:61:b3:54:b4:b6:6b:c8:68:f7:73:c7:df:
         67:76:12:86:64:6b:66:76:14:d0:21:bc:3f:65:0f:a9:f4:29:
         0b:84:6e:26:6b:62:4e:bf:23:7b:d8:58:8e:e0:42:e5:8f:05:
         30:35:b0:14:75:65:01:17:0d:66:0e:1b:42:b8:02:4d:3e:1f:
         7f:30:e5:c4:2f:43:b1:a9:0d:9c:38:82:5d:a8:64:2c:34:82:
         d8:f3:2f:c3:75:be:35:8c:9e:dd:cd:fe:65:a8:99:55:02:f7:
         1f:26:ea:5f:c5:ee:a3:68:57:4e:c2:44:c3:b3:89:6c:d7:9c:
         a1:86:4d:bb:3a:42:37:d5:c8:b2:d7:7c:e8:7c:a7:34:96:0b:
         0b:42:b5:79:23:64:a0:cf:a7:ac:76:37:48:09:a4:f7:68:16:
         88:9d:1f:26:6c:e9:35:9e:bf:9d:63:d0:b7:1f:29:3b:f3:0e:
         5c:db:ad:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKdf+5/7e4tytSPl7Lt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYTQxZGQyZDUyNzVmYjZhNTk2YjI2MWEwMjdjYzhkN2Y5
ZjM0NmMwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
EygwNThhMjc4YzUyNmY3YzVmYTJmMWY1MzZiYmVhNDJjZTU4ODRkM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1skjmYBmlVmETYEoyq5MWTq5R+0U
JljbTyhLUrDfVJoNqQsIIqEBYwF8RvDhyjC9oaZ4XkvxO6O6vfOrS7fE3NHr+M6k
Q/mwlMN/qBBeE1ymb5wv052WB97meBcNcv+WChL4UjfYRR7GAR1/1lyC68F4rROb
k+H70g72AU8/FpVXd7jWP/xhJ+Qb/KX5DqKv7+Wt8qZcq4om+qJEUUeY2C02KDqB
OjMmohrK+NALB37fk5HX7sONDjHcOvFiLugRZ9xNXGqg0he4ByCeuvq21Fmfafy7
NVob2ss5/9GyDN6PBJ4is6Zv11oycigOt/S2zGvbmzOinnQWzoPsf1vMFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWKJ4xSb3xfovH1NrvqQs5YhNO0MB8GA1UdIwQY
MBaAFH6kHdLVJ1+2pZayYaAnzI1/nzRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYt
ZTBkOTkyOWI4ZDAxLzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYtZTBkOTkyOWI4ZDAx
LzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklitb9+C
17JZuptaBOR9TJJr6KT54YQh9Zm3ROy+G1R4xuSy/5kvOCSfYsUw+ADvYD5VBEUu
WQt8wjejMtBMTHpPBhJ5yNstaeY+nUxxYbNUtLZryGj3c8ffZ3YShmRrZnYU0CG8
P2UPqfQpC4RuJmtiTr8je9hYjuBC5Y8FMDWwFHVlARcNZg4bQrgCTT4ffzDlxC9D
sakNnDiCXahkLDSC2PMvw3W+NYye3c3+ZaiZVQL3HybqX8Xuo2hXTsJEw7OJbNec
oYZNuzpCN9XIstd86HynNJYLC0K1eSNkoM+nrHY3SAmk92gWiJ0fJmzpNZ6/nWPQ
tx8pO/MOXNutkw==
-----END CERTIFICATE-----