Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File:                     z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier:          aek7tWq1YbSq541Wml0Y2lqe7PHNgI2vkEG7yH8JYV8=
Subject key identifier:   95:08:32:E4:2C:9C:DB:6C:13:ED:22:2D:29:0F:E1:17:0C:A9:D1:DE
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer:       /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial:       01962F749EF71979EFB53F309582917FD992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number:          0389
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: bnQnTZksyJ81LL86tgql170O4luLVgGM3FaElutC9PI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:f7:19:79:ef:b5:3f:30:95:82:91:7f:d9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=950832e42c9cdb6c13ed222d290fe1170ca9d1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:5e:d9:3c:b4:c8:46:06:60:ce:4b:b5:01:
                    04:32:11:49:fb:64:90:b0:e2:f6:fb:34:da:f6:ff:
                    34:cf:37:66:0d:5a:79:f4:bc:4b:eb:97:37:75:70:
                    d1:85:45:d1:b0:e7:92:b2:7e:14:3e:f0:8a:2b:5d:
                    8b:d2:e6:6e:15:19:26:9b:7b:e6:dc:7a:92:08:5b:
                    0c:cb:b7:57:4a:39:2a:85:74:69:de:22:de:b4:6b:
                    42:20:2c:2b:a7:fc:ed:14:8f:e9:e1:a7:32:7e:c5:
                    68:11:59:63:de:b5:bc:c2:4b:7a:42:cc:7b:b5:bc:
                    78:c7:fc:5a:70:4e:ed:e4:dc:cb:a9:be:88:d4:40:
                    e9:70:de:65:f8:cc:8b:71:ca:79:f1:c1:3f:9d:6b:
                    17:5b:29:40:7e:8e:63:93:74:64:f2:23:94:f4:ef:
                    d0:3a:26:d3:56:ed:ff:73:e5:c5:3d:0d:45:36:29:
                    37:ea:7b:98:2e:bb:2f:b5:55:72:a5:69:d8:d7:05:
                    52:b1:26:bb:68:05:8a:35:a5:03:35:3b:ff:5f:f4:
                    3f:91:74:c1:d4:2a:03:bf:bd:e4:ce:47:2a:e4:64:
                    a4:7b:ad:0c:e8:92:7b:d0:90:c0:25:99:3a:88:e4:
                    8a:c2:f2:c3:1f:62:4a:db:40:67:cf:cd:6a:f7:6e:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:32:E4:2C:9C:DB:6C:13:ED:22:2D:29:0F:E1:17:0C:A9:D1:DE
            X509v3 Authority Key Identifier:
                keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:26:29:2a:27:62:7a:65:4b:ed:98:b5:b8:ea:28:40:8d:
         d4:9c:e0:dd:4f:19:40:b8:8b:c1:53:0c:c2:3d:64:dd:8f:60:
         0a:70:13:14:68:fb:de:ec:b0:c9:e8:f2:7c:b1:8c:8e:6d:70:
         ff:5f:6c:bb:39:da:3d:97:2a:71:4c:8d:bc:d6:c6:da:da:55:
         a5:18:2f:1f:6f:13:72:71:57:c8:9e:ba:88:c9:c8:00:6f:c5:
         ef:78:e6:a4:cc:eb:64:23:3f:ea:dd:d4:a8:77:4f:6a:c1:f7:
         96:52:76:f9:21:eb:a1:74:05:3b:48:bd:23:cf:fe:ed:3e:e1:
         47:66:fb:01:7d:05:67:da:f8:1a:5c:86:ca:33:5f:7f:a7:72:
         b9:58:47:ab:b4:6f:3b:f1:4e:37:f5:b3:37:84:e3:76:e2:fd:
         8a:76:2d:c8:e6:70:b1:84:a5:4a:5e:6a:4e:51:c2:ae:13:0f:
         b7:76:1c:6a:5c:a7:f3:6a:7f:87:d4:3d:6e:d3:1f:61:d7:15:
         51:5e:32:07:a9:67:79:32:2c:ec:ac:76:b2:78:62:c1:78:53:
         c2:bc:a3:15:f1:84:75:79:c8:aa:7f:2a:be:81:08:84:7e:5c:
         c2:4d:d1:c7:9d:cd:6d:8a:77:01:28:41:72:53:2d:8d:71:dd:
         67:cd:ab:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJ73GXnvtT8wlYKRf9mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2Y1YzU5ODA1OWUxYWU1OTc2YzgxZWEyYjgyNjY5N2Vl
MTk5MDYwHhcNMjUwNDEzMTQwMTMzWhcNMjUwNDE0MTQwMTMzWjAzMTEwLwYDVQQD
Eyg5NTA4MzJlNDJjOWNkYjZjMTNlZDIyMmQyOTBmZTExNzBjYTlkMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRZe2Ty0yEYGYM5LtQEEMhFJ+2SQ
sOL2+zTa9v80zzdmDVp59LxL65c3dXDRhUXRsOeSsn4UPvCKK12L0uZuFRkmm3vm
3HqSCFsMy7dXSjkqhXRp3iLetGtCICwrp/ztFI/p4acyfsVoEVlj3rW8wkt6Qsx7
tbx4x/xacE7t5NzLqb6I1EDpcN5l+MyLccp58cE/nWsXWylAfo5jk3Rk8iOU9O/Q
OibTVu3/c+XFPQ1FNik36nuYLrsvtVVypWnY1wVSsSa7aAWKNaUDNTv/X/Q/kXTB
1CoDv73kzkcq5GSke60M6JJ70JDAJZk6iOSKwvLDH2JK20Bnz81q927MswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUIMuQsnNtsE+0iLSkP4RcMqdHeMB8GA1UdIwQY
MBaAFM9/XFmAWeGuWXbIHqK4Jml+4ZkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZjk0NzktMjk5NC00NDljLTlkOWMt
ZTFkYzY5ZTMzM2RmLzEvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZjk0NzktMjk5NC00NDljLTlkOWMtZTFkYzY5ZTMzM2Rm
LzEvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0EmKSon
YnplS+2YtbjqKECN1Jzg3U8ZQLiLwVMMwj1k3Y9gCnATFGj73uywyejyfLGMjm1w
/19suznaPZcqcUyNvNbG2tpVpRgvH28TcnFXyJ66iMnIAG/F73jmpMzrZCM/6t3U
qHdPasH3llJ2+SHroXQFO0i9I8/+7T7hR2b7AX0FZ9r4GlyGyjNff6dyuVhHq7Rv
O/FON/WzN4TjduL9inYtyOZwsYSlSl5qTlHCrhMPt3Ycalyn82p/h9Q9btMfYdcV
UV4yB6lneTIs7Kx2snhiwXhTwryjFfGEdXnIqn8qvoEIhH5cwk3Rx53NbYp3AShB
clMtjXHdZ82r6w==
-----END CERTIFICATE-----