Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          eNMu4oJWKMdPiBNqAg4XUFuQP9UmSa4Ee4Pbbukla/o=
Subject key identifier:   D1:1C:A8:EE:D3:EF:D7:C8:FB:A7:3E:B5:41:39:00:FC:45:47:E4:C8
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       01962FAB9D358C8A3B494EA507F917C1AF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          02D7
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: XoQsWNoGunG5M3PEZIeJAd3MdQGEFgMmjpKOivFc8ro=)
                          2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:35:8c:8a:3b:49:4e:a5:07:f9:17:c1:af:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=d11ca8eed3efd7c8fba73eb5413900fc4547e4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:00:78:00:f0:35:da:37:ec:84:11:07:f0:
                    e3:5d:7d:c1:71:c7:31:ab:cd:e0:2f:d2:2a:7f:ce:
                    a4:42:0c:d6:96:e2:19:6e:d0:e0:8c:a4:a3:10:4e:
                    b9:db:47:44:3e:0c:1b:d1:6b:63:94:81:13:f8:66:
                    f4:06:93:8b:a9:29:9e:42:f6:6b:25:8a:2e:04:7b:
                    88:b5:0b:8b:fb:7a:7f:a8:58:d8:53:ae:92:43:19:
                    76:1c:c3:b4:fc:93:73:e1:d1:60:3b:99:51:ef:ff:
                    9a:a4:d5:12:30:cd:6c:df:28:34:a5:b3:4a:d7:56:
                    e4:30:9f:1a:88:f9:54:25:10:aa:3b:4a:ea:a0:7b:
                    ed:0b:d1:3e:fe:29:9f:28:bf:54:3e:ae:74:e0:21:
                    a7:25:1c:f1:b2:84:fd:17:40:f5:93:b7:19:d1:a9:
                    de:1f:45:55:e7:b9:f4:b2:55:fd:5d:ae:a0:7a:b9:
                    fa:85:b3:61:0c:98:b6:83:28:f1:95:60:94:22:94:
                    20:a1:df:88:8b:d2:e1:62:25:b1:0a:d0:ef:49:89:
                    0f:7b:ec:b9:89:ad:e1:fa:25:b1:4e:1e:d6:23:72:
                    62:ec:35:b5:29:83:26:4d:00:50:b9:a8:b3:8f:b7:
                    bf:a5:15:87:e8:ed:1c:28:d0:3c:d0:bc:ea:4c:16:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:A8:EE:D3:EF:D7:C8:FB:A7:3E:B5:41:39:00:FC:45:47:E4:C8
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:05:ad:30:06:08:b6:38:03:2b:a7:9b:aa:49:00:dd:35:
         6e:1b:56:9b:70:b8:85:f2:42:a2:13:41:08:92:fe:81:cc:50:
         55:29:a5:17:69:03:8f:63:34:f5:c4:3e:39:4f:59:d8:c4:81:
         24:2f:55:04:97:e3:e3:d7:53:90:7b:0e:71:46:42:a6:b0:bd:
         84:07:40:19:00:7a:19:1d:6f:93:d0:b2:71:ca:35:3a:ee:b4:
         ef:3f:8f:05:26:3b:f8:2c:5b:4b:81:85:79:c7:ae:05:cc:03:
         24:ed:8c:b5:7e:8a:ee:49:4e:25:0d:aa:c1:4e:b0:4d:3f:f3:
         6a:2f:86:fc:94:a8:2e:db:d0:16:a9:21:18:97:ce:02:bf:e2:
         46:d2:e5:a5:d5:f4:eb:f1:c6:d5:2d:6b:aa:47:1c:40:3d:18:
         ef:aa:ad:f4:c8:d3:48:46:3c:98:6a:2b:b2:15:ed:8a:e4:25:
         30:d5:18:b4:15:16:b9:f3:d3:f2:72:6c:42:bf:16:93:48:12:
         e5:d6:69:1f:c2:08:f4:e2:78:17:ac:d0:76:f8:05:4b:59:b8:
         fe:12:40:40:2a:1e:87:9f:b7:6f:68:54:4d:75:71:c8:16:39:
         1a:17:9f:48:0a:8c:fe:aa:46:c5:1b:88:9c:ad:55:7d:1f:87:
         44:d4:a3:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq501jIo7SU6lB/kXwa8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy
ZTMwM2IwHhcNMjUwNDEzMTUwMTM4WhcNMjUwNDE0MTUwMTM4WjAzMTEwLwYDVQQD
EyhkMTFjYThlZWQzZWZkN2M4ZmJhNzNlYjU0MTM5MDBmYzQ1NDdlNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE8AeADwNdo37IQRB/DjXX3Bcccx
q83gL9Iqf86kQgzWluIZbtDgjKSjEE6520dEPgwb0WtjlIET+Gb0BpOLqSmeQvZr
JYouBHuItQuL+3p/qFjYU66SQxl2HMO0/JNz4dFgO5lR7/+apNUSMM1s3yg0pbNK
11bkMJ8aiPlUJRCqO0rqoHvtC9E+/imfKL9UPq504CGnJRzxsoT9F0D1k7cZ0ane
H0VV57n0slX9Xa6gern6hbNhDJi2gyjxlWCUIpQgod+Ii9LhYiWxCtDvSYkPe+y5
ia3h+iWxTh7WI3Ji7DW1KYMmTQBQuaizj7e/pRWH6O0cKNA80LzqTBbaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEcqO7T79fI+6c+tUE5APxFR+TIMB8GA1UdIwQY
MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt
YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2
LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHgFrTAG
CLY4Ayunm6pJAN01bhtWm3C4hfJCohNBCJL+gcxQVSmlF2kDj2M09cQ+OU9Z2MSB
JC9VBJfj49dTkHsOcUZCprC9hAdAGQB6GR1vk9Cycco1Ou607z+PBSY7+CxbS4GF
eceuBcwDJO2MtX6K7klOJQ2qwU6wTT/zai+G/JSoLtvQFqkhGJfOAr/iRtLlpdX0
6/HG1S1rqkccQD0Y76qt9MjTSEY8mGorshXtiuQlMNUYtBUWufPT8nJsQr8Wk0gS
5dZpH8II9OJ4F6zQdvgFS1m4/hJAQCoeh5+3b2hUTXVxyBY5GhefSAqM/qpGxRuI
nK1VfR+HRNSjzg==
-----END CERTIFICATE-----