Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          fiq+SQs9Xg0QFeYiZGW5EtXy6cJaWWgGjjDszVjib7I=
Subject key identifier:   0A:CF:DB:D9:77:AD:D1:33:9B:4A:61:AB:B7:A5:95:BC:62:E8:AF:99
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       01962F070429599F2206B4B6FD283BB686D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: rk+E1t7j4dW23OVE6BvwV+l3+cI/hu9Nl9vX7eG36tU=)
                          2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:04:29:59:9f:22:06:b4:b6:fd:28:3b:b6:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=0acfdbd977add1339b4a61abb7a595bc62e8af99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:05:b7:e9:be:88:00:5c:43:65:7e:01:33:
                    f0:27:f9:53:8a:5c:94:9c:73:e3:f6:2a:b1:55:b4:
                    a3:6c:f4:22:f2:64:72:44:29:61:f9:fd:c7:9b:38:
                    40:2a:11:cf:ef:ba:f4:39:a1:2a:49:5a:55:77:c2:
                    61:05:0d:aa:f2:93:4d:bd:d4:d4:0c:88:82:df:d5:
                    aa:a3:7b:e1:6b:b7:ec:78:4d:22:0c:5d:37:45:86:
                    40:d2:7c:e8:26:12:d3:c4:d4:7c:90:d8:7b:59:6c:
                    20:9c:5c:72:d8:0b:c7:11:2c:9f:6a:94:5a:aa:ad:
                    42:5f:83:c3:8b:fe:c1:4c:ea:89:0d:52:09:36:ae:
                    7d:d4:64:63:47:d0:33:f2:a5:f2:64:e5:91:07:46:
                    9c:5b:7a:b6:d0:e3:35:e9:c4:64:9a:da:5b:d3:01:
                    fc:00:7f:16:e6:f8:08:cd:41:b7:20:cb:03:d3:b8:
                    c8:8a:28:5d:4a:38:57:05:7d:e5:fe:86:34:08:ff:
                    7e:8e:b8:51:5e:b7:a9:0f:21:62:17:b0:50:af:9b:
                    61:39:38:8c:0c:b0:bc:74:73:1b:1d:42:d7:3d:c9:
                    f4:12:1e:3c:51:9c:14:8b:b3:74:99:98:af:88:51:
                    b0:d3:40:31:18:2d:4d:ae:ef:cd:18:24:b1:00:74:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:DB:D9:77:AD:D1:33:9B:4A:61:AB:B7:A5:95:BC:62:E8:AF:99
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:71:e2:db:94:bb:c4:86:4c:0c:41:44:5e:03:e7:35:46:62:
         5b:bb:1a:8f:e9:b0:5e:00:5a:4b:62:af:2e:01:f1:fb:c9:cf:
         39:b1:52:9b:a0:d2:a7:4c:e1:5f:e4:62:3a:7f:6a:b0:dd:38:
         c2:47:49:aa:1e:9f:7e:90:a8:d1:6d:d0:0e:de:ab:04:89:77:
         6e:ee:e6:97:75:5a:57:5a:ed:aa:76:87:c4:f7:bf:7c:9d:53:
         35:e9:10:b8:d2:cd:e0:73:0e:1c:79:10:fc:8a:a0:34:82:71:
         b6:3b:7f:a1:72:ae:b4:78:43:cb:99:96:e7:b9:76:51:2e:78:
         01:aa:96:c3:14:51:a1:6e:ca:92:f4:d2:1e:04:af:bc:1e:30:
         a9:b5:de:00:b2:c5:fe:e1:e7:12:fc:ff:0e:7e:54:99:ba:7a:
         7f:0e:1c:b3:ae:cb:8e:06:4f:4b:6e:1f:d0:d2:ad:d3:de:47:
         74:ad:23:8b:49:85:f9:85:e8:21:c8:de:58:7b:0a:ea:58:b5:
         25:cd:81:29:d5:e3:aa:0f:08:bc:3b:38:e5:3c:87:2d:c4:03:
         3f:93:d4:63:66:39:c1:31:00:21:57:dd:77:9a:02:d3:46:45:
         5a:de:29:90:c0:b5:d3:0f:7c:e6:7d:e6:05:e0:80:e2:d4:2a:
         83:c2:a9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwQpWZ8iBrS2/Sg7tobQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODUwNDgzY2NlMTMzN2IxYzZjMmZkZGVhOWM1ZGJiNGE3
ZTE5MWEwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
EygwYWNmZGJkOTc3YWRkMTMzOWI0YTYxYWJiN2E1OTViYzYyZThhZjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmsFt+m+iABcQ2V+ATPwJ/lTilyU
nHPj9iqxVbSjbPQi8mRyRClh+f3HmzhAKhHP77r0OaEqSVpVd8JhBQ2q8pNNvdTU
DIiC39Wqo3vha7fseE0iDF03RYZA0nzoJhLTxNR8kNh7WWwgnFxy2AvHESyfapRa
qq1CX4PDi/7BTOqJDVIJNq591GRjR9Az8qXyZOWRB0acW3q20OM16cRkmtpb0wH8
AH8W5vgIzUG3IMsD07jIiihdSjhXBX3l/oY0CP9+jrhRXrepDyFiF7BQr5thOTiM
DLC8dHMbHULXPcn0Eh48UZwUi7N0mZiviFGw00AxGC1Nru/NGCSxAHT8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArP29l3rdEzm0phq7ellbxi6K+ZMB8GA1UdIwQY
MBaAFO2FBIPM4TN7HGwv3eqcXbtKfhkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUt
YjkxNTNiMzMyMGMxLzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81N2ZmYzUtNTg0Zi00YmZhLWFiODUtYjkxNTNiMzMyMGMx
LzEvN1lVRWc4emhNM3NjYkNfZDZweGR1MHAtR1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3Hi25S7
xIZMDEFEXgPnNUZiW7saj+mwXgBaS2KvLgHx+8nPObFSm6DSp0zhX+RiOn9qsN04
wkdJqh6ffpCo0W3QDt6rBIl3bu7ml3VaV1rtqnaHxPe/fJ1TNekQuNLN4HMOHHkQ
/IqgNIJxtjt/oXKutHhDy5mW57l2US54AaqWwxRRoW7KkvTSHgSvvB4wqbXeALLF
/uHnEvz/Dn5Umbp6fw4cs67LjgZPS24f0NKt095HdK0ji0mF+YXoIcjeWHsK6li1
Jc2BKdXjqg8IvDs45TyHLcQDP5PUY2Y5wTEAIVfdd5oC00ZFWt4pkMC10w985n3m
BeCA4tQqg8KpRA==
-----END CERTIFICATE-----