Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File:                     faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier:          etHdDPBNpXJjqjShRj2sl6bSZ8wrwm5zJL9X/fRDfBo=
Subject key identifier:   57:69:60:AC:47:09:73:06:10:69:B9:02:7B:51:A7:F6:72:2A:BD:D1
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer:       /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial:       01962E98AB7AF50E6A5198063E5FDD144184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number:          0CD8
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (hash: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=)
                          2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: hMXcUQmu6KUWE4XAl7dK5F/BZZBAgup/M37DiI9XfKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ab:7a:f5:0e:6a:51:98:06:3e:5f:dd:14:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=576960ac470973061069b9027b51a7f6722abdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:6f:22:44:96:44:4b:33:b9:f6:2e:21:1e:
                    62:1e:c2:be:58:25:1a:22:a8:f7:1d:e2:17:11:69:
                    a8:2d:52:4d:c7:75:71:69:e6:6e:c0:74:9d:2f:de:
                    99:30:da:25:ee:00:c4:5a:50:08:4b:f6:7b:0e:d5:
                    c1:43:ff:d6:ed:a1:fd:11:85:04:01:05:79:b2:4f:
                    85:1c:6b:bb:86:2c:6a:48:39:cd:85:9f:80:0a:3a:
                    0e:fb:e0:d8:bc:e5:af:0b:d1:46:69:49:1f:17:95:
                    17:46:fa:d1:7c:e0:fd:65:e3:14:4d:3d:91:40:9f:
                    21:e0:b1:0a:9e:23:e8:3e:59:7c:f3:d9:9f:7f:de:
                    e7:30:86:7b:3e:46:1b:20:1a:bd:87:0e:83:d8:13:
                    27:96:83:83:37:c6:ae:7d:68:fc:51:aa:5e:03:b1:
                    c5:e9:a6:f2:8a:41:b0:b6:d2:a0:0f:6a:a6:bc:6b:
                    9b:63:ad:cc:09:46:13:0d:6c:37:e5:e6:d1:65:55:
                    46:bc:aa:86:0a:48:3a:74:c3:03:00:24:44:a8:d7:
                    44:86:e9:d1:04:66:ab:68:65:fe:ae:58:63:f5:7d:
                    81:15:63:2e:1c:de:eb:72:06:5b:e9:db:71:b4:f3:
                    7c:5f:4c:b5:fe:97:3b:c8:7e:78:4d:aa:50:f9:65:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:60:AC:47:09:73:06:10:69:B9:02:7B:51:A7:F6:72:2A:BD:D1
            X509v3 Authority Key Identifier:
                keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:22:9d:38:34:9a:e1:6b:42:f7:bc:65:41:0e:01:52:70:63:
         a0:92:be:23:71:d3:d2:4a:8f:24:e9:c3:8f:81:eb:12:1f:64:
         da:04:92:57:ff:ad:ef:39:1c:8b:d1:1f:0a:68:5a:4e:d2:08:
         3d:69:e3:bf:17:e0:4c:ec:ca:27:34:ed:8f:cd:21:5e:b6:8a:
         1d:89:54:62:03:14:02:b4:3f:6c:7a:12:7e:a5:e4:77:3d:6d:
         9c:3a:0f:9d:eb:41:da:b1:fb:41:38:21:eb:7c:ec:f6:9a:f4:
         06:53:7c:37:c6:e8:68:21:f0:63:20:48:23:27:46:b8:c2:22:
         59:96:16:bd:77:ab:e9:40:8f:b8:51:19:23:fb:0f:eb:88:b4:
         9c:8d:24:e9:c7:ab:fb:b5:fb:23:78:3b:b6:9e:24:3e:2b:60:
         9b:f3:b2:c5:62:d8:08:c2:04:2c:88:d0:3d:c0:e6:03:ad:46:
         b1:30:77:cb:eb:c7:cb:9d:b8:eb:4f:17:83:7a:e9:ff:71:e1:
         21:a3:a2:dc:5f:ff:e0:73:85:01:0f:19:91:47:3d:bc:83:d7:
         8c:af:fd:da:5f:c1:ae:a5:c3:f4:64:48:bd:87:b6:83:aa:a3:
         2c:86:9e:03:8e:7f:58:ed:cb:03:e9:0a:97:93:41:83:35:b1:
         d2:12:55:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKt69Q5qUZgGPl/dFEGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTQ5YTlhZWYyMTg0ZWMwYmI2ZWYwZmRlOTAxYzViMjg0
MWJhNjQwHhcNMjUwNDEzMTAwMTE5WhcNMjUwNDE0MTAwMTE5WjAzMTEwLwYDVQQD
Eyg1NzY5NjBhYzQ3MDk3MzA2MTA2OWI5MDI3YjUxYTdmNjcyMmFiZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgRvIkSWREszufYuIR5iHsK+WCUa
Iqj3HeIXEWmoLVJNx3VxaeZuwHSdL96ZMNol7gDEWlAIS/Z7DtXBQ//W7aH9EYUE
AQV5sk+FHGu7hixqSDnNhZ+ACjoO++DYvOWvC9FGaUkfF5UXRvrRfOD9ZeMUTT2R
QJ8h4LEKniPoPll889mff97nMIZ7PkYbIBq9hw6D2BMnloODN8aufWj8UapeA7HF
6abyikGwttKgD2qmvGubY63MCUYTDWw35ebRZVVGvKqGCkg6dMMDACREqNdEhunR
BGaraGX+rlhj9X2BFWMuHN7rcgZb6dtxtPN8X0y1/pc7yH54TapQ+WX9pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdpYKxHCXMGEGm5AntRp/ZyKr3RMB8GA1UdIwQY
MBaAFH2kmprvIYTsC7bvD96QHFsoQbpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgt
NjNhMWNlMzMzMDdmLzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mZjA3NDItNzMxMy00ZTk0LTk2MTgtNjNhMWNlMzMzMDdm
LzEvZmFTYW11OGhoT3dMdHU4UDNwQWNXeWhCdW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyKdODSa
4WtC97xlQQ4BUnBjoJK+I3HT0kqPJOnDj4HrEh9k2gSSV/+t7zkci9EfCmhaTtII
PWnjvxfgTOzKJzTtj80hXraKHYlUYgMUArQ/bHoSfqXkdz1tnDoPnetB2rH7QTgh
63zs9pr0BlN8N8boaCHwYyBIIydGuMIiWZYWvXer6UCPuFEZI/sP64i0nI0k6cer
+7X7I3g7tp4kPitgm/OyxWLYCMIELIjQPcDmA61GsTB3y+vHy524608Xg3rp/3Hh
IaOi3F//4HOFAQ8ZkUc9vIPXjK/92l/BrqXD9GRIvYe2g6qjLIaeA45/WO3LA+kK
l5NBgzWx0hJVgg==
-----END CERTIFICATE-----