Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File:                     7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier:          by66W17REg68xP9ghaIfHEedCpKuklsh+bP7NubRRPA=
Subject key identifier:   28:2E:44:6E:16:BF:B6:A1:27:DB:A0:B7:EF:9E:11:60:CA:93:93:CB
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer:       /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial:       01962E9959624E1A23013618A5B8AC732D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number:          0A31
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: HiAD3xTARP36qJzHvaMw6G0jidlgk+12N7cHx5V+Y8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:59:62:4e:1a:23:01:36:18:a5:b8:ac:73:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=282e446e16bfb6a127dba0b7ef9e1160ca9393cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:42:96:74:26:47:45:27:83:be:44:3f:81:
                    c3:bd:36:fe:30:ea:52:80:61:5b:aa:7d:5f:f9:82:
                    79:cc:54:d1:5e:aa:cf:5b:31:72:23:90:3a:c7:0b:
                    fd:2a:73:77:94:48:d7:f7:e7:3e:ab:c8:e4:63:57:
                    21:5f:61:07:1a:db:a2:9d:37:1f:01:4f:29:df:ef:
                    a5:6c:46:fe:f0:e4:d8:86:82:43:9e:b0:27:9c:5c:
                    9c:95:b3:ce:88:2b:51:6a:e7:d1:0d:8f:b3:84:0d:
                    e9:78:da:7e:cf:dd:d3:ff:2e:1e:7a:60:78:90:1c:
                    2a:06:c3:bb:79:84:bf:dc:05:6e:2c:78:2f:f7:67:
                    c6:5b:08:84:e6:c7:43:1c:be:a9:c1:cb:d0:c7:9c:
                    96:d0:ca:f5:c0:4a:a9:19:4f:8f:54:22:e9:b0:ba:
                    c2:ca:2a:bb:fc:d2:bc:ac:25:c7:0a:49:64:6c:47:
                    b9:dc:1e:20:db:3a:c1:66:f6:4d:20:68:e8:9e:38:
                    ea:97:74:ff:36:74:35:a6:1f:b5:c3:16:c2:8e:2b:
                    20:bc:b4:93:14:80:21:ed:81:97:ad:19:31:54:a2:
                    41:23:5e:7b:5c:59:76:67:3e:94:19:80:3d:36:e6:
                    3b:de:3c:10:1e:86:3e:00:e3:f1:e5:cd:10:a0:cb:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:44:6E:16:BF:B6:A1:27:DB:A0:B7:EF:9E:11:60:CA:93:93:CB
            X509v3 Authority Key Identifier:
                keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cf:69:29:9e:f6:48:e0:52:7b:76:16:f3:7b:0b:d4:04:7e:
         db:29:23:0c:76:11:cc:de:09:74:1b:53:81:75:79:cd:1b:ce:
         fd:29:15:73:85:6e:89:8a:a8:9b:d2:b1:b2:5c:fe:ca:b8:ad:
         5a:10:8a:22:98:98:1f:d8:50:d4:69:ca:47:43:d4:87:3b:df:
         aa:11:06:d9:80:2d:8c:32:0b:8b:f1:1a:cc:55:7a:96:37:77:
         f5:32:3d:10:d2:68:4b:f1:6e:83:fc:bc:3e:e4:e8:8d:7d:2b:
         89:c6:29:48:15:f5:48:6b:db:44:62:44:be:0d:bc:de:a4:3a:
         d9:63:eb:02:5e:bf:f4:b2:d4:a0:b6:b0:35:59:ff:17:1a:73:
         bd:3c:b1:db:c3:a3:29:c2:39:62:d1:4f:42:0e:4a:a1:a0:e4:
         c7:16:9e:ee:c0:f5:56:a1:6a:c0:d6:af:f7:06:73:05:ff:5c:
         51:3a:e8:20:a9:40:a6:c9:9c:8d:9b:10:fc:f8:d2:7c:e7:73:
         be:82:e2:39:9a:33:87:ab:c6:65:b6:aa:71:ed:7f:0e:71:30:
         18:8e:1d:ed:1f:fa:03:9b:e5:59:35:95:8c:9c:73:c9:8a:ad:
         df:87:aa:ef:6d:ed:68:64:d2:0e:8a:c6:c5:21:d1:f8:98:1d:
         6f:40:d9:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVliThojATYYpbiscy0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGYyMDUzM2RjYzc5OTVhMjhjZjY3NzY3YTA0MTY5ODY2
N2M0Y2QwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EygyODJlNDQ2ZTE2YmZiNmExMjdkYmEwYjdlZjllMTE2MGNhOTM5M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSxClnQmR0Ung75EP4HDvTb+MOpS
gGFbqn1f+YJ5zFTRXqrPWzFyI5A6xwv9KnN3lEjX9+c+q8jkY1chX2EHGtuinTcf
AU8p3++lbEb+8OTYhoJDnrAnnFyclbPOiCtRaufRDY+zhA3peNp+z93T/y4eemB4
kBwqBsO7eYS/3AVuLHgv92fGWwiE5sdDHL6pwcvQx5yW0Mr1wEqpGU+PVCLpsLrC
yiq7/NK8rCXHCklkbEe53B4g2zrBZvZNIGjonjjql3T/NnQ1ph+1wxbCjisgvLST
FIAh7YGXrRkxVKJBI157XFl2Zz6UGYA9NuY73jwQHoY+AOPx5c0QoMvEGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCguRG4Wv7ahJ9ugt++eEWDKk5PLMB8GA1UdIwQY
MBaAFO8PIFM9zHmVooz2d2egQWmGZ8TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEt
ZDE0OTQ2ZTRmNWNkLzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZDg4M2QtZDI0My00YjFlLWEzMmEtZDE0OTQ2ZTRmNWNk
LzEvN3c4Z1V6M01lWldpalBaM1o2QkJhWVpueE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc9pKZ72
SOBSe3YW83sL1AR+2ykjDHYRzN4JdBtTgXV5zRvO/SkVc4VuiYqom9Kxslz+yrit
WhCKIpiYH9hQ1GnKR0PUhzvfqhEG2YAtjDILi/EazFV6ljd39TI9ENJoS/Fug/y8
PuTojX0ricYpSBX1SGvbRGJEvg283qQ62WPrAl6/9LLUoLawNVn/FxpzvTyx28Oj
KcI5YtFPQg5KoaDkxxae7sD1VqFqwNav9wZzBf9cUTroIKlApsmcjZsQ/PjSfOdz
voLiOZozh6vGZbaqce1/DnEwGI4d7R/6A5vlWTWVjJxzyYqt34eq723taGTSDorG
xSHR+Jgdb0DZhA==
-----END CERTIFICATE-----