Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File:                     fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier:          x0dmvUw9fQzT8H8fvwki3xNMkUJITLEiwSeCixyfRrY=
Subject key identifier:   CD:17:67:F0:E8:FC:AD:DD:13:AB:5F:BE:E4:04:02:D0:87:FD:2F:2F
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer:       /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial:       01962F068A3B19ED23468AF2D5A6900E8719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
                          2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: 8inc0ecMp3E3uu35cs87YnWys74aVLpHv0LIOZmPylo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:3b:19:ed:23:46:8a:f2:d5:a6:90:0e:87:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=cd1767f0e8fcaddd13ab5fbee40402d087fd2f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:5e:da:04:5b:a3:68:41:b0:d9:fc:71:00:
                    c4:50:ea:65:62:12:81:4f:8a:c2:34:61:1f:16:79:
                    1a:d5:59:5d:e3:69:0d:43:20:95:8f:6b:be:71:31:
                    c7:d3:e8:19:09:b3:57:b1:92:0a:d0:df:24:13:b2:
                    98:f9:ab:58:43:8d:de:5c:b4:5a:2b:61:46:da:60:
                    5c:20:4c:39:d2:90:fd:18:f7:9c:65:3e:8d:b1:01:
                    f6:f4:68:5f:ce:34:19:d9:7d:63:44:81:c7:ff:91:
                    6a:bb:6d:0d:8f:a7:69:36:9e:04:c6:5f:ca:71:74:
                    9b:e6:41:f6:cc:f7:e0:d1:f0:03:37:f1:be:fb:22:
                    ee:07:2d:0f:63:5f:e7:ce:6e:29:42:83:ee:2c:21:
                    5c:76:a8:91:d1:97:dd:cd:bf:9c:ff:7e:df:1d:04:
                    02:3f:c8:5b:c2:e0:a7:44:77:70:f8:e8:26:89:e1:
                    e5:f9:ec:bf:7a:be:a1:05:a2:ed:a5:46:c8:97:04:
                    7d:6b:bd:72:c9:74:ae:a5:ec:bb:f2:33:93:ab:c2:
                    b4:eb:26:d4:43:e5:b1:ac:19:1c:6f:0d:24:38:af:
                    5e:8b:4a:e1:6c:17:f3:9e:42:1f:7b:1e:55:ed:fb:
                    3e:f2:2d:ce:89:38:6e:83:be:ce:8a:1c:13:11:6c:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:67:F0:E8:FC:AD:DD:13:AB:5F:BE:E4:04:02:D0:87:FD:2F:2F
            X509v3 Authority Key Identifier:
                keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:ac:c5:8c:57:6f:b7:ab:f6:87:e0:78:10:a9:e3:2c:d6:
         3d:7e:2b:de:1f:f8:97:18:9a:8a:7e:78:3f:11:01:b8:a7:51:
         cc:af:5a:8e:39:37:dd:5c:df:3b:67:78:03:e8:d7:fb:f8:78:
         80:d9:d1:28:d9:a1:48:ad:8b:0c:6d:2e:1e:12:a2:96:c6:5c:
         f1:7e:5f:bf:59:82:6c:ed:4f:eb:70:5a:dc:78:9c:83:59:73:
         05:4c:ae:1d:b5:02:3e:7c:ff:41:c6:bd:dc:9e:c6:b6:f7:19:
         2e:1d:1f:57:2d:f7:11:6d:0c:ff:e9:b9:80:46:0e:ab:1e:00:
         14:b7:10:71:c5:1b:9e:49:fd:4d:31:4b:6a:b8:17:76:55:a8:
         dc:1c:79:62:a2:53:10:12:a4:0a:55:b0:cc:d7:35:b9:ef:17:
         fa:2c:76:d9:68:9e:e2:83:d2:d3:44:51:c6:82:2a:2a:f2:fc:
         a6:35:13:4d:6d:a7:f4:28:8b:d4:ff:78:47:31:f9:55:90:07:
         d4:68:45:dd:65:63:e1:a3:e4:fe:6b:da:0e:2b:f6:2a:5c:5f:
         ec:05:ba:af:e5:0e:de:7a:0f:af:e8:ee:40:01:78:a2:4a:10:
         9d:90:02:7f:b3:95:00:36:05:31:79:31:4d:47:06:78:d0:f3:
         a7:b4:94:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoo7Ge0jRory1aaQDocZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWMyNzliMDUwMTczMDY5OGEzMGJjZGNlYTNhZTQ3N2M5
NTczMzEwHhcNMjUwNDEzMTIwMTE5WhcNMjUwNDE0MTIwMTE5WjAzMTEwLwYDVQQD
EyhjZDE3NjdmMGU4ZmNhZGRkMTNhYjVmYmVlNDA0MDJkMDg3ZmQyZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl5e2gRbo2hBsNn8cQDEUOplYhKB
T4rCNGEfFnka1Vld42kNQyCVj2u+cTHH0+gZCbNXsZIK0N8kE7KY+atYQ43eXLRa
K2FG2mBcIEw50pD9GPecZT6NsQH29GhfzjQZ2X1jRIHH/5Fqu20Nj6dpNp4Exl/K
cXSb5kH2zPfg0fADN/G++yLuBy0PY1/nzm4pQoPuLCFcdqiR0Zfdzb+c/37fHQQC
P8hbwuCnRHdw+OgmieHl+ey/er6hBaLtpUbIlwR9a71yyXSupey78jOTq8K06ybU
Q+WxrBkcbw0kOK9ei0rhbBfznkIfex5V7fs+8i3OiThug77OihwTEWwCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0XZ/Do/K3dE6tfvuQEAtCH/S8vMB8GA1UdIwQY
MBaAFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQt
ZDg5ZTY0MTE4M2YzLzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQtZDg5ZTY0MTE4M2Yz
LzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVqsxYxX
b7er9ofgeBCp4yzWPX4r3h/4lxiain54PxEBuKdRzK9ajjk33VzfO2d4A+jX+/h4
gNnRKNmhSK2LDG0uHhKilsZc8X5fv1mCbO1P63Ba3Hicg1lzBUyuHbUCPnz/Qca9
3J7GtvcZLh0fVy33EW0M/+m5gEYOqx4AFLcQccUbnkn9TTFLargXdlWo3Bx5YqJT
EBKkClWwzNc1ue8X+ix22Wie4oPS00RRxoIqKvL8pjUTTW2n9CiL1P94RzH5VZAH
1GhF3WVj4aPk/mvaDiv2Klxf7AW6r+UO3noPr+juQAF4okoQnZACf7OVADYFMXkx
TUcGeNDzp7SUgQ==
-----END CERTIFICATE-----