Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File:                     eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier:          RKeKO5KB6/g8eq0dt7rYhduf8Q1v3HqN1ll6MxIBNlg=
Subject key identifier:   21:7F:F8:40:3E:A9:19:31:FD:9B:CB:A9:C2:40:8B:F8:51:F2:B2:DF
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer:       /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial:       01962F06511D2C4508D5C906C7E2E5BBED91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: IrV/cVJh4lVsEw/+mMZjeqZ7bYBrfGv9iUQezitT2qs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:1d:2c:45:08:d5:c9:06:c7:e2:e5:bb:ed:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=217ff8403ea91931fd9bcba9c2408bf851f2b2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:ae:82:b9:aa:d0:df:a6:d7:c4:df:1b:3e:
                    fa:9d:bb:37:84:9f:5a:0f:ce:7a:c3:1e:a2:49:33:
                    b9:e4:df:64:61:ec:a1:74:58:5f:66:7f:b2:7d:d6:
                    4c:7e:a7:d5:9b:c9:48:1e:b3:7b:ee:18:bb:50:c6:
                    e3:d6:14:bb:db:7f:65:2f:a2:a5:6a:23:c3:98:ad:
                    64:dc:d2:f8:53:ea:97:a9:f1:8f:e5:50:19:9e:0f:
                    10:68:86:61:5a:65:90:2e:9a:47:d2:0e:2b:4a:38:
                    70:d1:73:9d:47:9b:79:51:aa:59:8e:ae:29:44:6a:
                    ea:5d:91:da:f0:2a:cb:37:c9:38:85:1e:de:fc:d0:
                    3d:37:e3:12:30:ea:a1:46:86:53:74:80:f9:a2:b1:
                    34:33:85:07:78:71:29:67:aa:b9:4b:4c:23:c1:19:
                    59:40:b8:dd:7e:bc:11:87:f8:8c:cf:da:4c:0c:40:
                    c6:04:42:ef:cb:ff:64:19:c1:c1:db:a8:82:84:de:
                    c6:9e:e9:0b:01:c8:37:5d:ac:18:eb:39:73:a9:86:
                    92:db:d0:68:c0:7a:c5:bd:6d:0e:da:0f:77:0d:2a:
                    4b:8d:9b:a2:68:53:3d:84:cb:81:d6:32:a0:a0:4f:
                    89:d0:1a:a8:9c:a2:9e:80:42:6e:8a:94:75:69:da:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7F:F8:40:3E:A9:19:31:FD:9B:CB:A9:C2:40:8B:F8:51:F2:B2:DF
            X509v3 Authority Key Identifier:
                keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b8:46:97:d1:3b:98:c9:7d:48:09:7f:bf:ea:de:38:a6:40:
         98:d0:b3:99:8e:64:a6:5a:9e:1d:ed:a8:4e:e4:d4:3a:f5:98:
         13:81:5d:1f:dd:59:7a:42:16:33:4d:43:32:cf:7f:55:31:98:
         d5:dc:b3:05:b0:41:ed:64:a5:81:6a:7a:0d:11:32:6a:72:80:
         9a:7b:6d:22:3c:62:a2:c3:d2:37:be:b5:f0:2c:8e:ea:e3:b2:
         3a:97:69:b4:7b:1a:c4:d2:23:36:b1:70:22:1a:b8:ee:1c:61:
         83:b0:a8:4d:dd:df:25:4e:64:f1:0b:64:be:ca:a6:a2:45:65:
         a2:a4:7b:ee:96:6f:c2:fa:f7:b9:1e:5b:67:23:a1:42:53:ef:
         c4:2e:f6:c5:09:13:61:f4:6f:f7:d1:ea:cb:c5:00:10:2a:ba:
         76:f1:a7:9a:f0:5c:2a:18:4b:da:3d:df:aa:0a:52:2e:ba:7d:
         f3:78:20:73:68:27:e8:27:7c:40:18:56:78:bd:3e:7a:ac:94:
         b5:14:00:ef:ea:87:16:ec:13:60:7f:10:45:0f:56:1c:ff:6d:
         a4:25:5b:66:92:24:90:d4:37:3c:2f:eb:01:a5:9e:cd:cb:8b:
         5e:4c:69:82:71:e8:44:97:fc:b2:89:6a:9a:a8:e9:c1:bd:29:
         21:71:46:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlEdLEUI1ckGx+Llu+2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmVmZWRmYmI5NmRjYWFkMTU2NWQyMWJmNGFhODU2N2Iw
YjY0OWYwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
EygyMTdmZjg0MDNlYTkxOTMxZmQ5YmNiYTljMjQwOGJmODUxZjJiMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Kugrmq0N+m18TfGz76nbs3hJ9a
D856wx6iSTO55N9kYeyhdFhfZn+yfdZMfqfVm8lIHrN77hi7UMbj1hS7239lL6Kl
aiPDmK1k3NL4U+qXqfGP5VAZng8QaIZhWmWQLppH0g4rSjhw0XOdR5t5UapZjq4p
RGrqXZHa8CrLN8k4hR7e/NA9N+MSMOqhRoZTdID5orE0M4UHeHEpZ6q5S0wjwRlZ
QLjdfrwRh/iMz9pMDEDGBELvy/9kGcHB26iChN7GnukLAcg3XawY6zlzqYaS29Bo
wHrFvW0O2g93DSpLjZuiaFM9hMuB1jKgoE+J0BqonKKegEJuipR1adrtNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF/+EA+qRkx/ZvLqcJAi/hR8rLfMB8GA1UdIwQY
MBaAFHku/t+7ltyq0VZdIb9KqFZ7C2SfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kOGFjYTItNGE4Zi00MWYxLWJkOWUt
N2VhYjA0ODVkMzRkLzEvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kOGFjYTItNGE4Zi00MWYxLWJkOWUtN2VhYjA0ODVkMzRk
LzEvZVM3LTM3dVczS3JSVmwwaHYwcW9WbnNMWko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrhGl9E7
mMl9SAl/v+reOKZAmNCzmY5kplqeHe2oTuTUOvWYE4FdH91ZekIWM01DMs9/VTGY
1dyzBbBB7WSlgWp6DREyanKAmnttIjxiosPSN7618CyO6uOyOpdptHsaxNIjNrFw
Ihq47hxhg7CoTd3fJU5k8QtkvsqmokVloqR77pZvwvr3uR5bZyOhQlPvxC72xQkT
YfRv99Hqy8UAECq6dvGnmvBcKhhL2j3fqgpSLrp983ggc2gn6Cd8QBhWeL0+eqyU
tRQA7+qHFuwTYH8QRQ9WHP9tpCVbZpIkkNQ3PC/rAaWezcuLXkxpgnHoRJf8solq
mqjpwb0pIXFGEg==
-----END CERTIFICATE-----