Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File:                     fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier:          ILZ3V7AvWVOXoKyhwEAiJDvbBR+YQUeCkprB6l7KGr8=
Subject key identifier:   BE:C0:9A:50:99:1B:E3:A9:57:99:E1:53:E4:8F:76:F2:05:33:F0:3D
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer:       /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial:       01962F06BCAEB2F4E85DB3599E2CBE3A57FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number:          0BE7
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: ugSYgCTf0Hy1AEny34nQd/FeN347idJDPplP33FLqIQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:ae:b2:f4:e8:5d:b3:59:9e:2c:be:3a:57:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=bec09a50991be3a95799e153e48f76f20533f03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:47:28:72:97:52:9d:66:19:dc:40:ed:81:
                    fb:f4:54:fa:0f:b8:02:08:84:76:3f:2c:0a:c5:e6:
                    e0:a7:ba:4e:4b:3e:92:82:0b:01:34:09:0e:62:09:
                    17:d1:7c:4e:e0:bc:ef:76:53:14:65:e5:b7:69:98:
                    b2:ed:b3:fa:44:f6:34:a6:0c:85:64:b8:c3:48:27:
                    60:5e:34:2c:0e:61:17:23:00:b4:2e:e7:e8:ae:aa:
                    58:4c:34:d0:80:80:08:4c:96:36:d5:cf:0b:d9:3e:
                    30:85:0a:c8:10:77:a5:e5:3c:43:13:19:6a:f3:8e:
                    98:00:06:b6:2c:5c:5a:18:d4:76:27:ba:58:0a:1f:
                    72:63:72:a7:98:f5:37:40:76:ee:08:1e:90:d0:c6:
                    f3:9c:38:0b:9a:b6:cb:1a:1f:0f:50:e2:34:c3:83:
                    bf:ff:cb:b2:e3:13:f5:6c:7c:34:11:12:24:5d:b0:
                    6c:6a:bf:43:2c:2f:95:4b:df:5a:76:87:87:9e:a0:
                    ce:f8:1d:c5:e1:93:64:16:bc:7d:b2:35:fb:70:df:
                    b5:d6:e7:ce:e7:ae:b2:87:bb:ad:06:3a:c5:26:af:
                    98:94:e6:eb:e2:eb:07:4c:ef:8a:a0:27:38:64:a0:
                    f4:05:ff:1e:a2:3e:22:0a:a6:44:88:4d:59:6a:2f:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:9A:50:99:1B:E3:A9:57:99:E1:53:E4:8F:76:F2:05:33:F0:3D
            X509v3 Authority Key Identifier:
                keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:c8:3b:9b:af:44:00:ef:8f:a2:a1:6a:47:eb:10:86:72:
         d3:e3:18:d9:5d:39:45:43:5a:35:26:4f:df:68:d1:64:20:06:
         d7:58:90:78:bf:e5:04:9d:ef:4a:72:c5:d1:fc:9f:e6:0a:d2:
         81:70:20:56:7f:f6:b7:b8:a5:e1:89:d5:d6:61:74:e7:26:31:
         1f:0d:24:34:1d:1b:1b:58:2a:2a:da:68:c2:52:83:ec:77:98:
         2a:1d:67:71:76:0c:2e:dc:c6:26:d4:2a:65:25:d9:08:ed:6c:
         eb:af:98:7b:1d:66:5b:2c:36:75:c7:17:c0:cb:e5:c1:88:d4:
         07:08:c0:81:a8:3d:6f:22:99:60:53:2b:70:4b:26:5b:e0:36:
         22:61:8e:fc:e4:3c:70:6e:21:8e:28:de:4d:76:e9:88:75:be:
         7e:08:48:1c:cd:49:8c:fa:b2:35:d8:fe:54:48:2d:64:f3:65:
         2e:57:73:48:95:a4:6e:11:e2:65:1b:0d:65:eb:72:b5:96:68:
         7b:1c:38:c3:b2:0f:60:b5:c3:45:c8:e1:51:77:d1:41:84:36:
         27:88:a9:e2:94:e2:9b:13:65:fe:8e:c6:af:a1:4c:ed:0c:5e:
         91:fe:1a:12:54:e3:2a:5b:48:e1:a3:2c:7a:5d:84:1a:e5:2c:
         f8:40:98:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBryusvToXbNZniy+Olf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGVlMjg2YWMyNGM1ZjI1OWYwYTcyYjNiNDhjMjQzNmRk
MzRjZjcwHhcNMjUwNDEzMTIwMTMyWhcNMjUwNDE0MTIwMTMyWjAzMTEwLwYDVQQD
EyhiZWMwOWE1MDk5MWJlM2E5NTc5OWUxNTNlNDhmNzZmMjA1MzNmMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1HKHKXUp1mGdxA7YH79FT6D7gC
CIR2PywKxebgp7pOSz6SggsBNAkOYgkX0XxO4LzvdlMUZeW3aZiy7bP6RPY0pgyF
ZLjDSCdgXjQsDmEXIwC0LuforqpYTDTQgIAITJY21c8L2T4whQrIEHel5TxDExlq
846YAAa2LFxaGNR2J7pYCh9yY3KnmPU3QHbuCB6Q0MbznDgLmrbLGh8PUOI0w4O/
/8uy4xP1bHw0ERIkXbBsar9DLC+VS99adoeHnqDO+B3F4ZNkFrx9sjX7cN+11ufO
566yh7utBjrFJq+YlObr4usHTO+KoCc4ZKD0Bf8eoj4iCqZEiE1Zai/UWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7AmlCZG+OpV5nhU+SPdvIFM/A9MB8GA1UdIwQY
MBaAFHxO4oasJMXyWfCnKztIwkNt00z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUt
MGIxNDFjOGY1YTNiLzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUtMGIxNDFjOGY1YTNi
LzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJnIO5uv
RADvj6KhakfrEIZy0+MY2V05RUNaNSZP32jRZCAG11iQeL/lBJ3vSnLF0fyf5grS
gXAgVn/2t7il4YnV1mF05yYxHw0kNB0bG1gqKtpowlKD7HeYKh1ncXYMLtzGJtQq
ZSXZCO1s66+Yex1mWyw2dccXwMvlwYjUBwjAgag9byKZYFMrcEsmW+A2ImGO/OQ8
cG4hjijeTXbpiHW+fghIHM1JjPqyNdj+VEgtZPNlLldzSJWkbhHiZRsNZetytZZo
exw4w7IPYLXDRcjhUXfRQYQ2J4ip4pTimxNl/o7Gr6FM7Qxekf4aElTjKltI4aMs
el2EGuUs+ECYOA==
-----END CERTIFICATE-----