Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File:                     aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier:          sngcPQNZA5PeTrPDADPy128KIKNx4vVZ7Qi9l0p7fDo=
Subject key identifier:   61:F8:7A:BC:48:9D:4C:D0:BC:40:8F:3F:BB:9E:1D:E8:79:E1:92:1F
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer:       /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial:       01962ECF8E55B1427E1DF048304DABED40F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number:          13CC
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
                          2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: 8BTL+emOI+asU8BbxtaZCzg4t7aDqr2aChvBF7uqy3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:55:b1:42:7e:1d:f0:48:30:4d:ab:ed:40:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=61f87abc489d4cd0bc408f3fbb9e1de879e1921f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:34:98:a7:f2:f4:90:18:f1:d7:07:ad:95:
                    cc:a6:68:7a:c1:62:92:6e:b5:67:ee:6e:50:b7:d4:
                    f4:e1:6b:25:c4:b6:cc:ca:a3:74:ca:15:aa:10:45:
                    f2:4d:5a:0d:3b:07:21:d7:5e:f7:3f:dd:ee:b4:ac:
                    09:54:65:c1:76:61:74:8c:41:ca:7d:e6:47:25:fe:
                    03:c0:36:9c:da:b4:b2:19:f1:87:d0:92:b1:28:e9:
                    2c:88:c7:75:35:8f:34:da:8f:5a:fa:a5:b2:95:ce:
                    0e:26:88:12:67:5b:02:ec:67:a8:59:7d:3e:2b:81:
                    2c:42:d8:61:84:e1:f8:9c:22:ac:2d:67:b0:c5:3c:
                    64:35:23:b0:bf:f7:32:eb:67:96:01:37:9f:6b:a8:
                    c0:ae:3d:c7:bb:10:2c:1f:0d:bf:7c:f2:d1:ec:48:
                    3c:88:79:0d:de:c3:83:97:1d:2d:0c:4a:28:21:67:
                    23:ac:a3:76:3d:db:99:c7:a4:9f:c6:61:ef:81:f1:
                    63:2d:ee:21:7e:91:66:4e:42:17:45:e0:ec:b1:e1:
                    58:0a:da:f6:06:6b:7a:67:43:7a:49:0a:a4:cc:1a:
                    5b:b3:d1:fe:3e:74:c8:5d:53:65:79:e4:fe:aa:4b:
                    00:3a:9f:72:fd:a5:b8:df:53:48:78:a4:75:11:b2:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F8:7A:BC:48:9D:4C:D0:BC:40:8F:3F:BB:9E:1D:E8:79:E1:92:1F
            X509v3 Authority Key Identifier:
                keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b2:a9:1c:c0:d0:f6:a9:16:6f:89:80:70:22:78:06:c8:7c:
         74:16:3d:41:8d:fc:fc:a6:e3:7a:c1:0b:7c:ce:ba:84:c7:9d:
         43:0b:ef:67:a7:a7:35:86:a3:1e:bb:ca:51:0b:31:b5:eb:ae:
         aa:18:9c:49:ae:9f:39:0e:a8:07:c5:72:c2:51:0e:c4:78:2b:
         f3:9a:09:ec:00:bc:98:04:59:d3:e9:13:f8:a2:95:c0:6c:bd:
         1d:6d:ce:14:52:03:73:5c:29:86:33:5e:f0:4b:95:d3:cb:9e:
         ef:2e:b3:b2:63:42:9d:5b:55:bb:70:56:a3:d1:98:b1:2d:6e:
         04:f7:92:90:0f:da:50:af:f9:14:7d:7e:9c:60:26:06:9b:3f:
         c9:08:93:5f:24:c1:8d:86:0e:a3:d5:4f:e9:d9:19:84:b5:3f:
         f8:55:35:ac:ba:40:ea:66:f5:72:6e:a7:f5:54:2d:17:dd:6f:
         40:0f:49:e0:77:25:94:44:50:fc:ad:83:7b:c7:cb:c5:c7:e7:
         f6:7d:91:f2:63:3a:35:4d:2d:9b:bd:71:00:de:8a:e1:0b:41:
         91:42:f1:b2:7c:9b:f1:c0:2b:c2:be:8d:77:55:df:22:9c:37:
         08:1c:d5:24:eb:c1:72:75:e3:4c:95:a0:81:66:21:eb:74:56:
         68:9a:2b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz45VsUJ+HfBIME2r7UD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZmVkNTA4Y2NhNWY3MTZlNGRkOTc0ZGUzNTAwZTdkZDE5
YmFhMTUwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
Eyg2MWY4N2FiYzQ4OWQ0Y2QwYmM0MDhmM2ZiYjllMWRlODc5ZTE5MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjig0mKfy9JAY8dcHrZXMpmh6wWKS
brVn7m5Qt9T04WslxLbMyqN0yhWqEEXyTVoNOwch1173P93utKwJVGXBdmF0jEHK
feZHJf4DwDac2rSyGfGH0JKxKOksiMd1NY802o9a+qWylc4OJogSZ1sC7GeoWX0+
K4EsQthhhOH4nCKsLWewxTxkNSOwv/cy62eWATefa6jArj3HuxAsHw2/fPLR7Eg8
iHkN3sODlx0tDEooIWcjrKN2PduZx6SfxmHvgfFjLe4hfpFmTkIXReDsseFYCtr2
Bmt6Z0N6SQqkzBpbs9H+PnTIXVNleeT+qksAOp9y/aW431NIeKR1EbI6/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH4erxInUzQvECPP7ueHeh54ZIfMB8GA1UdIwQY
MBaAFGj+1QjMpfcW5N2XTeNQDn3Rm6oVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMt
NDFhMzVlN2MyMmY4LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNWVhMzEtN2JjMS00NzdhLThiZGMtNDFhMzVlN2MyMmY4
LzEvYVA3VkNNeWw5eGJrM1pkTjQxQU9mZEdicWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirKpHMDQ
9qkWb4mAcCJ4Bsh8dBY9QY38/KbjesELfM66hMedQwvvZ6enNYajHrvKUQsxteuu
qhicSa6fOQ6oB8VywlEOxHgr85oJ7AC8mARZ0+kT+KKVwGy9HW3OFFIDc1wphjNe
8EuV08ue7y6zsmNCnVtVu3BWo9GYsS1uBPeSkA/aUK/5FH1+nGAmBps/yQiTXyTB
jYYOo9VP6dkZhLU/+FU1rLpA6mb1cm6n9VQtF91vQA9J4HcllERQ/K2De8fLxcfn
9n2R8mM6NU0tm71xAN6K4QtBkULxsnyb8cArwr6Nd1XfIpw3CBzVJOvBcnXjTJWg
gWYh63RWaJormQ==
-----END CERTIFICATE-----