Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          0fBFozzo0Re7rfjHeVPHG0pOVWiDjeRgYOjzJVrMmQo=
Subject key identifier:   09:E9:AF:58:B4:2B:A7:8B:84:F2:CB:79:A2:A1:9C:46:51:B2:29:CC
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       01962DF3A0CF2AF66A7EA744926A071B9610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: 52J0BX8GyMgXNdNkq4VTfUaee1I.roa (hash: LxSMbtmqO4+rlUteg1TptU78C+skPNBOYr9gFEq1vgs=)
                          2: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: 52dFBCmNHxOvkPSrYIUHKqNh27GODUA9ZI3O3/TIGfw=)
                          3: DhrEeypsTDYQFqtn5MxSVP9RNeU.roa (hash: YbsKC7hbnZNHtFxguJmaXdHmEbB7PGi2yECVIv3in+Y=)
                          4: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (hash: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=)
                          5: bU9Ico-cyM-PvgK1SQj6vU4e1Ls.roa (hash: doVS673KgZlyTzdhMbWDR8Kab55ovw32HoLTIKOV1EA=)
                          6: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (hash: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:cf:2a:f6:6a:7e:a7:44:92:6a:07:1b:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=09e9af58b42ba78b84f2cb79a2a19c4651b229cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:ac:64:45:c7:fe:a0:67:44:46:ca:12:2b:
                    6b:fb:f4:d8:cf:d4:ef:45:5f:80:a1:56:ce:63:cd:
                    02:4e:8e:b0:ee:fa:5a:bb:30:93:09:b1:0d:21:90:
                    37:2f:d1:45:cb:a0:ff:c6:7b:82:ef:a1:c9:8a:1c:
                    05:b2:39:8f:f3:2c:07:35:d8:48:29:45:f3:dd:6e:
                    d7:cd:45:10:f3:50:4a:93:3c:f8:6d:62:46:04:53:
                    15:d4:30:25:66:1e:97:21:15:be:b9:2a:0b:30:20:
                    dc:83:71:d7:7e:c5:01:48:54:82:f6:54:98:7f:7c:
                    bd:cf:43:08:b8:0a:85:1f:dd:3a:ce:2f:12:a0:d0:
                    06:4d:cd:92:1d:ac:c9:37:4a:b2:b4:f6:09:29:18:
                    4f:2d:2f:b4:46:3b:a5:40:c0:dc:39:10:26:c4:a7:
                    ca:cf:f3:84:36:b3:56:0c:74:7e:f5:73:8b:d8:9c:
                    d6:82:a8:0b:c0:c9:28:73:3c:92:32:cd:8d:05:00:
                    95:ab:05:c2:9c:5a:2e:9d:54:06:ed:37:29:b1:f5:
                    d3:17:f3:cc:c6:c9:11:68:fe:e8:26:24:da:26:23:
                    82:a7:a5:66:eb:d0:0b:3f:69:e0:d5:cb:23:c6:d9:
                    9b:7a:86:a7:30:f8:a3:7a:d7:f2:02:27:83:16:8d:
                    6a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:AF:58:B4:2B:A7:8B:84:F2:CB:79:A2:A1:9C:46:51:B2:29:CC
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:2c:6c:62:9e:05:49:c8:19:1b:19:c9:f6:1e:3e:99:42:
         f3:ad:8b:35:73:a2:ec:29:45:db:cb:e5:c2:9f:90:a7:20:cd:
         49:76:98:fb:84:fa:82:9d:5a:51:79:91:77:f6:df:03:e2:ef:
         72:b3:a0:eb:b1:ab:a0:68:a0:3b:15:4b:bb:3c:64:08:97:af:
         79:be:d7:a6:49:f7:ca:ac:15:03:07:a0:b7:87:52:eb:45:55:
         fc:02:28:b7:d7:45:90:c4:22:d7:8e:e3:87:43:cc:06:87:e0:
         6e:8b:72:28:d1:79:d4:6a:c8:60:23:45:4f:7a:f2:ad:22:0f:
         0d:5b:c0:93:fd:65:86:7d:5b:56:58:dc:66:80:fb:aa:9f:bd:
         c6:9e:4b:7c:84:aa:9d:53:1f:a5:cb:84:11:c5:4d:81:6b:9d:
         d1:84:85:bb:5d:9f:aa:53:15:33:2a:f4:44:78:5b:c7:af:b0:
         0f:48:e1:d1:ae:ac:31:33:dc:84:95:36:d1:b2:36:5d:72:8d:
         62:31:63:0e:75:d7:9b:b5:48:43:84:b0:37:2e:ab:be:49:2f:
         e4:7b:86:3f:f5:ac:d9:e5:7f:22:09:61:89:66:62:96:ef:57:
         91:6b:45:5f:c9:d2:2b:4d:94:c3:2c:de:a8:2a:2c:0d:c4:18:
         50:9b:3e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86DPKvZqfqdEkmoHG5YQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy
ZWQ5MzEwHhcNMjUwNDEzMDcwMTAzWhcNMjUwNDE0MDcwMTAzWjAzMTEwLwYDVQQD
EygwOWU5YWY1OGI0MmJhNzhiODRmMmNiNzlhMmExOWM0NjUxYjIyOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTysZEXH/qBnREbKEitr+/TYz9Tv
RV+AoVbOY80CTo6w7vpauzCTCbENIZA3L9FFy6D/xnuC76HJihwFsjmP8ywHNdhI
KUXz3W7XzUUQ81BKkzz4bWJGBFMV1DAlZh6XIRW+uSoLMCDcg3HXfsUBSFSC9lSY
f3y9z0MIuAqFH906zi8SoNAGTc2SHazJN0qytPYJKRhPLS+0RjulQMDcORAmxKfK
z/OENrNWDHR+9XOL2JzWgqgLwMkoczySMs2NBQCVqwXCnFounVQG7TcpsfXTF/PM
xskRaP7oJiTaJiOCp6Vm69ALP2ng1csjxtmbeoanMPijetfyAieDFo1qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnpr1i0K6eLhPLLeaKhnEZRsinMMB8GA1UdIwQY
MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt
NWU1M2MyM2I1NWIwLzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw
LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmgsbGKe
BUnIGRsZyfYePplC862LNXOi7ClF28vlwp+QpyDNSXaY+4T6gp1aUXmRd/bfA+Lv
crOg67GroGigOxVLuzxkCJeveb7Xpkn3yqwVAwegt4dS60VV/AIot9dFkMQi147j
h0PMBofgbotyKNF51GrIYCNFT3ryrSIPDVvAk/1lhn1bVljcZoD7qp+9xp5LfISq
nVMfpcuEEcVNgWud0YSFu12fqlMVMyr0RHhbx6+wD0jh0a6sMTPchJU20bI2XXKN
YjFjDnXXm7VIQ4SwNy6rvkkv5HuGP/Ws2eV/IglhiWZilu9XkWtFX8nSK02Uwyze
qCosDcQYUJs+WA==
-----END CERTIFICATE-----