Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File:                     CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier:          6zA2qkdMpmDUDD8iHymdW/qo5xH2q9Uud4T26CuEvVw=
Subject key identifier:   E9:5A:1C:A1:B9:DF:AB:82:2C:6B:87:28:5E:27:90:DD:AB:B2:6B:7E
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       01962FAB72F0A03ABC7A206806E82C0DB532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number:          0E7F
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=)
                          2: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=)
                          3: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=)
                          4: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: F1HSOyV6BxT2R60D78oKjgzikrabMMequlBqmM3SaFE=)
                          5: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=)
                          6: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=)
                          7: MiY_UqV9XxTUP--p5MMXKEdvpoA.roa (hash: cejTZWCl258xJNR53TSPL/OafZfqazlim61BbS6tvNE=)
                          8: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=)
                          9: Ws2J4aPdEb_raZV_Q6WLZuYq9bw.roa (hash: UJOhfpK9rLA1rrtLAae9ZE03f0fN+dWFgn6AnwjjtWM=)
                          10: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=)
                          11: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=)
                          12: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=)
                          13: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (hash: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=)
                          14: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=)
                          15: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=)
                          16: xBZNSEvhDpAM1D0pY3qScT-0BUc.roa (hash: DvZnOP9131lTN6eFpOmfx2mnihzdQJETBW3zsjhHDtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:72:f0:a0:3a:bc:7a:20:68:06:e8:2c:0d:b5:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=e95a1ca1b9dfab822c6b87285e2790ddabb26b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:62:5a:52:0b:41:1a:c1:ce:42:5d:9d:66:
                    44:6e:fc:04:1d:02:d0:de:4d:96:ef:d8:d6:fc:ac:
                    a4:01:4d:17:81:c5:24:40:53:dc:ca:ad:a4:57:72:
                    84:91:a8:d3:23:ff:52:6e:68:ec:e2:26:d9:d2:3f:
                    7f:41:c5:50:60:8d:f5:2d:41:11:9b:ca:d1:cd:24:
                    91:ed:ad:31:e3:48:67:a8:1a:84:26:45:2b:8b:3b:
                    75:30:7b:9c:3c:05:c6:f0:89:c1:41:f2:f8:d6:3e:
                    b4:87:e5:ce:cf:cf:f2:ed:92:66:2d:41:44:75:f7:
                    4a:bf:7c:72:84:e0:cb:10:8b:24:f4:e8:50:32:6b:
                    5f:28:30:d8:d1:48:6d:d4:3a:76:53:20:16:21:44:
                    c7:da:7b:6e:48:fd:9e:4e:d8:fa:18:b9:26:e0:ba:
                    cc:aa:16:c8:11:2b:87:fe:95:27:3e:05:61:02:89:
                    85:8d:4e:a6:dc:43:5c:46:b6:e7:ce:d1:5c:8c:81:
                    79:f6:e7:0b:7c:35:5b:4c:51:2e:a8:a2:c3:13:df:
                    c1:82:11:da:25:21:25:ad:09:2b:fa:4e:9b:d9:c1:
                    9e:41:23:f3:e1:a9:7f:73:27:04:21:e2:3e:5c:a7:
                    aa:af:ee:3e:f9:ae:ab:64:95:7c:d3:63:9c:24:fc:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:1C:A1:B9:DF:AB:82:2C:6B:87:28:5E:27:90:DD:AB:B2:6B:7E
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:c9:be:41:14:78:72:75:3c:b2:47:56:e6:0a:3e:a7:06:
         5c:2c:bf:ef:4e:2f:9b:17:72:46:f7:34:ef:aa:7f:38:0b:98:
         28:cb:7c:69:fc:f2:49:cb:42:9f:8c:6d:38:04:27:e2:7b:b6:
         30:d5:b7:a8:75:63:83:82:b4:ff:a3:7d:9a:48:33:3e:42:25:
         ca:92:bb:9c:5d:59:6e:fe:b5:83:3f:f7:eb:69:76:d3:f8:11:
         a6:78:87:c2:58:b3:d2:a8:a7:cb:c5:27:75:d3:5f:ec:0a:21:
         c8:2e:c8:79:1c:bf:33:31:87:9f:6c:cc:42:ad:95:d6:4b:1e:
         36:d0:9a:7d:02:c5:40:23:70:1e:2c:df:65:4c:fb:7d:f9:5a:
         a5:89:fe:35:2f:2b:eb:1f:a2:5b:aa:ae:9a:31:0b:2a:81:60:
         ab:c9:b9:d9:4c:35:40:a2:63:61:ba:50:bc:22:9b:7a:d2:bb:
         7a:e5:47:33:24:e7:7f:fa:70:c0:15:8e:44:05:11:3e:a7:fa:
         1e:02:3e:f3:3d:bc:75:fd:75:a1:d3:88:8b:0c:87:76:01:29:
         bb:77:85:bc:ae:af:f1:24:0a:fd:18:bc:08:ae:31:43:48:8d:
         a0:d1:d1:ff:6d:a1:77:d3:45:34:ff:f2:7b:db:a5:ef:15:17:
         75:09:19:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3LwoDq8eiBoBugsDbUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjUwNDEzMTUwMTI3WhcNMjUwNDE0MTUwMTI3WjAzMTEwLwYDVQQD
EyhlOTVhMWNhMWI5ZGZhYjgyMmM2Yjg3Mjg1ZTI3OTBkZGFiYjI2YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxiWlILQRrBzkJdnWZEbvwEHQLQ
3k2W79jW/KykAU0XgcUkQFPcyq2kV3KEkajTI/9Sbmjs4ibZ0j9/QcVQYI31LUER
m8rRzSSR7a0x40hnqBqEJkUrizt1MHucPAXG8InBQfL41j60h+XOz8/y7ZJmLUFE
dfdKv3xyhODLEIsk9OhQMmtfKDDY0Uht1Dp2UyAWIUTH2ntuSP2eTtj6GLkm4LrM
qhbIESuH/pUnPgVhAomFjU6m3ENcRrbnztFcjIF59ucLfDVbTFEuqKLDE9/BghHa
JSElrQkr+k6b2cGeQSPz4al/cycEIeI+XKeqr+4++a6rZJV802OcJPygxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlaHKG536uCLGuHKF4nkN2rsmt+MB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqnJvkEU
eHJ1PLJHVuYKPqcGXCy/704vmxdyRvc076p/OAuYKMt8afzySctCn4xtOAQn4nu2
MNW3qHVjg4K0/6N9mkgzPkIlypK7nF1Zbv61gz/362l20/gRpniHwliz0qiny8Un
ddNf7AohyC7IeRy/MzGHn2zMQq2V1kseNtCafQLFQCNwHizfZUz7fflapYn+NS8r
6x+iW6qumjELKoFgq8m52Uw1QKJjYbpQvCKbetK7euVHMyTnf/pwwBWORAURPqf6
HgI+8z28df11odOIiwyHdgEpu3eFvK6v8SQK/Ri8CK4xQ0iNoNHR/22hd9NFNP/y
e9ul7xUXdQkZwA==
-----END CERTIFICATE-----