Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          R/GpxGKRNZL3X856YamdTLHtPc7J9Vww1ntCKkulpFQ=
Subject key identifier:   AE:92:1C:75:D5:E7:21:92:8F:BB:2F:8F:9E:02:B6:52:F2:85:C2:61
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       01962E993698D649DDEA5F8CC268172F96DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          0323
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: 5O2EGTucIa0PdZ5Wp3NlUp8j2bffsFEiDAYFt+czyeU=)
                          2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:98:d6:49:dd:ea:5f:8c:c2:68:17:2f:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=ae921c75d5e721928fbb2f8f9e02b652f285c261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:c2:97:35:06:74:3d:a6:8e:d3:cf:e8:1b:
                    6a:24:32:eb:6c:6d:9f:d5:b9:80:0b:cc:f9:88:80:
                    1f:cd:11:a5:78:3f:e5:d0:7f:53:b0:85:70:a2:52:
                    49:56:e0:a4:f1:e7:f1:a6:0a:58:ba:b7:83:6d:c2:
                    8a:28:56:6d:e8:93:29:35:52:bf:17:41:ae:4f:14:
                    de:31:c8:9a:33:31:49:8b:84:42:bb:44:4a:f2:e6:
                    82:94:94:a6:b9:54:95:f3:53:2e:8a:d9:34:18:04:
                    7a:2d:01:86:d9:d6:9d:70:b0:c2:d5:3d:c9:2a:00:
                    be:94:a8:43:b4:b4:5d:0a:6b:e9:e1:cd:cc:66:93:
                    cd:77:a2:b5:76:0b:fc:6d:94:b5:91:9c:1c:67:bd:
                    ca:1c:1d:7a:af:7e:20:81:30:9a:be:ef:42:5c:ea:
                    5f:a7:5e:5e:8c:77:30:32:e5:42:d7:41:b5:c8:77:
                    8b:0c:5f:be:45:13:1a:23:86:5a:5a:f9:eb:3c:ec:
                    39:d7:ac:b9:3d:53:77:a4:e8:a7:00:1f:e0:d6:2c:
                    32:d2:f7:0c:82:d1:f1:9c:8f:f3:ed:1f:22:7a:f6:
                    6b:90:23:a8:ca:ce:27:f1:f0:73:85:50:a2:d6:6c:
                    7d:97:fb:db:cf:9d:d9:48:9c:0b:15:83:82:bf:ab:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:1C:75:D5:E7:21:92:8F:BB:2F:8F:9E:02:B6:52:F2:85:C2:61
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f4:cc:7b:51:87:5e:25:22:c0:25:98:1a:b8:73:b0:89:5e:
         73:9f:62:7c:63:35:8e:7c:7b:72:07:a8:7b:aa:51:f6:8d:08:
         b9:67:50:63:52:73:fd:89:4f:1a:a4:24:be:0b:d3:b4:2b:8b:
         5a:d1:ad:fb:e2:f2:b9:a7:b4:dd:79:88:81:f4:3a:bf:36:7c:
         b0:20:c1:ad:12:56:54:6c:cf:b5:d1:4a:d0:dd:a2:8f:aa:16:
         23:53:39:a2:96:1f:49:c9:52:e3:b1:63:f3:42:d1:43:a8:1c:
         46:09:34:56:6b:98:4c:f2:94:a8:5d:9b:4b:38:51:e3:a0:7c:
         d8:f2:28:8f:ef:e4:66:51:20:71:32:43:2f:a1:e1:f1:d4:3e:
         fa:db:43:32:72:7a:46:df:4b:21:85:1b:ba:4b:15:9a:1e:55:
         b6:ff:7a:a3:2d:67:39:a4:48:18:f1:d7:53:1d:63:da:7c:24:
         2c:e9:50:02:46:75:01:5e:b2:2a:5b:a6:5a:82:0f:c9:fd:40:
         8d:e4:0c:28:79:7a:b9:8c:ae:06:82:14:f2:29:3e:d3:1c:ed:
         ed:67:8f:b0:ca:30:6d:9a:9c:2c:c2:11:a2:75:01:f4:e0:58:
         db:c8:b1:97:44:8b:59:37:1e:56:ff:63:f3:4c:5d:69:05:f0:
         ef:10:2f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTaY1knd6l+MwmgXL5bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm
MGNjOWYwHhcNMjUwNDEzMTAwMTU1WhcNMjUwNDE0MTAwMTU1WjAzMTEwLwYDVQQD
EyhhZTkyMWM3NWQ1ZTcyMTkyOGZiYjJmOGY5ZTAyYjY1MmYyODVjMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuafClzUGdD2mjtPP6BtqJDLrbG2f
1bmAC8z5iIAfzRGleD/l0H9TsIVwolJJVuCk8efxpgpYureDbcKKKFZt6JMpNVK/
F0GuTxTeMciaMzFJi4RCu0RK8uaClJSmuVSV81Muitk0GAR6LQGG2dadcLDC1T3J
KgC+lKhDtLRdCmvp4c3MZpPNd6K1dgv8bZS1kZwcZ73KHB16r34ggTCavu9CXOpf
p15ejHcwMuVC10G1yHeLDF++RRMaI4ZaWvnrPOw516y5PVN3pOinAB/g1iwy0vcM
gtHxnI/z7R8ievZrkCOoys4n8fBzhVCi1mx9l/vbz53ZSJwLFYOCv6u1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6SHHXV5yGSj7svj54CtlLyhcJhMB8GA1UdIwQY
MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt
OGZhMDk4NzQxMTNlLzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl
LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvTMe1GH
XiUiwCWYGrhzsIlec59ifGM1jnx7cgeoe6pR9o0IuWdQY1Jz/YlPGqQkvgvTtCuL
WtGt++Lyuae03XmIgfQ6vzZ8sCDBrRJWVGzPtdFK0N2ij6oWI1M5opYfSclS47Fj
80LRQ6gcRgk0VmuYTPKUqF2bSzhR46B82PIoj+/kZlEgcTJDL6Hh8dQ++ttDMnJ6
Rt9LIYUbuksVmh5Vtv96oy1nOaRIGPHXUx1j2nwkLOlQAkZ1AV6yKlumWoIPyf1A
jeQMKHl6uYyuBoIU8ik+0xzt7WePsMowbZqcLMIRonUB9OBY28ixl0SLWTceVv9j
80xdaQXw7xAvig==
-----END CERTIFICATE-----