Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
File:                     7GV-idqz-xXjuuDrGsf6yT32OF0.mft (raw, json)
Hash identifier:          EQZQcbspohkgeM+q9MjPrCFwalRIx1gVldhYApwx+QY=
Subject key identifier:   9B:9D:82:CF:D7:54:FA:04:BD:FB:F2:92:26:EC:7C:56:B7:0B:B0:B9
Authority key identifier: EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D
Certificate issuer:       /CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
Certificate serial:       01962FAB6AC2954062BD0FA0F99CDF16C699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft
Manifest number:          04DC
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: 7GV-idqz-xXjuuDrGsf6yT32OF0.crl (hash: YALPTGrgtBKuOJSy6JnCsIalr/IuouszB9W1bWq1LxA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:c2:95:40:62:bd:0f:a0:f9:9c:df:16:c6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec657e89dab3fb15e3bae0eb1ac7fac93df6385d
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=9b9d82cfd754fa04bdfbf29226ec7c56b70bb0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:6e:ce:74:d9:0a:38:42:65:f0:94:a4:34:
                    d1:57:8f:f0:58:b5:95:55:d9:5f:5c:5f:7d:9b:ca:
                    36:b3:77:fe:45:35:0d:a5:5e:14:ad:5a:ab:12:4d:
                    e5:ad:eb:67:e8:27:f2:31:8a:40:27:05:40:de:36:
                    de:e5:89:b8:8b:a0:c0:c2:0e:0f:23:cc:1d:95:3b:
                    4b:84:33:88:62:8c:80:3f:be:6c:d9:4e:43:46:04:
                    ad:63:6d:93:cc:55:b1:f3:3f:e7:c8:3d:cb:50:5b:
                    69:ed:12:0d:e3:a6:c3:b5:39:b0:23:98:6b:1b:9a:
                    76:d8:fe:4d:98:ae:26:20:82:6e:fc:58:6f:cd:75:
                    9a:c6:20:93:6d:6f:9b:a7:b1:2a:7c:9b:40:6c:81:
                    22:1f:61:c2:14:b0:52:48:a1:9f:8e:19:89:90:fb:
                    7c:8f:a2:cd:d2:39:65:2e:54:ff:04:e9:c0:db:fd:
                    80:3d:bc:54:0c:e8:11:13:50:1b:6e:92:bb:b4:00:
                    f6:9b:f7:9a:26:62:96:8d:4b:de:5a:ad:f7:02:5b:
                    de:33:29:e2:66:26:b3:22:46:3c:6c:9d:57:0a:f4:
                    67:1e:dc:f5:c5:97:a5:a1:0f:77:17:bf:c6:ad:bb:
                    4e:65:d3:a4:98:00:24:91:01:cb:73:97:66:7e:6a:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9D:82:CF:D7:54:FA:04:BD:FB:F2:92:26:EC:7C:56:B7:0B:B0:B9
            X509v3 Authority Key Identifier:
                keyid:EC:65:7E:89:DA:B3:FB:15:E3:BA:E0:EB:1A:C7:FA:C9:3D:F6:38:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GV-idqz-xXjuuDrGsf6yT32OF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/391c70-c3bc-407f-935b-fd70867bc334/1/7GV-idqz-xXjuuDrGsf6yT32OF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:2e:5e:6f:ec:a8:4e:f6:d1:88:25:31:ee:54:e7:d1:24:
         29:c6:1a:7f:02:56:1b:36:01:30:ef:42:d9:89:4b:08:d0:b4:
         5a:59:75:0f:fc:bf:d1:02:ff:f7:90:51:17:56:ba:72:ab:0f:
         64:9b:dc:d2:06:29:67:e9:23:75:8c:32:a4:06:5c:c1:89:4a:
         52:06:11:20:27:69:e5:68:92:3e:f1:09:cf:a7:01:63:bd:0b:
         b1:99:00:16:c9:2b:ec:6d:5f:0e:80:71:86:12:b5:7b:13:e8:
         a6:77:04:23:fc:da:c7:67:48:20:48:c9:c7:c0:60:7f:a7:25:
         60:5e:9f:3e:2c:ed:7e:d0:4e:16:d2:11:da:7e:37:7a:6f:24:
         bc:8e:31:62:57:06:ef:a3:af:f0:f5:b8:1e:b6:fe:f6:58:a5:
         26:1f:18:29:db:b6:a9:47:76:98:85:ca:24:1f:78:9d:27:03:
         fa:86:26:cd:c2:6b:b6:c2:11:0d:51:2b:90:d7:26:95:54:0d:
         90:56:46:71:11:bf:83:83:e1:a4:02:3d:9a:64:e9:04:f1:5a:
         ec:6b:3c:54:2a:a3:bd:20:8b:b8:33:a8:a1:c5:a4:87:26:a2:
         6c:8c:92:ab:9e:80:d8:7d:94:71:22:cc:b0:e2:46:a0:56:ac:
         71:3d:32:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2rClUBivQ+g+ZzfFsaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjU3ZTg5ZGFiM2ZiMTVlM2JhZTBlYjFhYzdmYWM5M2Rm
NjM4NWQwHhcNMjUwNDEzMTUwMTI1WhcNMjUwNDE0MTUwMTI1WjAzMTEwLwYDVQQD
Eyg5YjlkODJjZmQ3NTRmYTA0YmRmYmYyOTIyNmVjN2M1NmI3MGJiMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbZuznTZCjhCZfCUpDTRV4/wWLWV
VdlfXF99m8o2s3f+RTUNpV4UrVqrEk3lretn6CfyMYpAJwVA3jbe5Ym4i6DAwg4P
I8wdlTtLhDOIYoyAP75s2U5DRgStY22TzFWx8z/nyD3LUFtp7RIN46bDtTmwI5hr
G5p22P5NmK4mIIJu/FhvzXWaxiCTbW+bp7EqfJtAbIEiH2HCFLBSSKGfjhmJkPt8
j6LN0jllLlT/BOnA2/2APbxUDOgRE1AbbpK7tAD2m/eaJmKWjUveWq33AlveMyni
ZiazIkY8bJ1XCvRnHtz1xZeloQ93F7/GrbtOZdOkmAAkkQHLc5dmfmqxDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJudgs/XVPoEvfvykibsfFa3C7C5MB8GA1UdIwQY
MBaAFOxlfonas/sV47rg6xrH+sk99jhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWIt
ZmQ3MDg2N2JjMzM0LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8zOTFjNzAtYzNiYy00MDdmLTkzNWItZmQ3MDg2N2JjMzM0
LzEvN0dWLWlkcXoteFhqdXVEckdzZjZ5VDMyT0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDMuXm/s
qE720YglMe5U59EkKcYafwJWGzYBMO9C2YlLCNC0Wll1D/y/0QL/95BRF1a6cqsP
ZJvc0gYpZ+kjdYwypAZcwYlKUgYRICdp5WiSPvEJz6cBY70LsZkAFskr7G1fDoBx
hhK1exPopncEI/zax2dIIEjJx8Bgf6clYF6fPiztftBOFtIR2n43em8kvI4xYlcG
76Ov8PW4Hrb+9lilJh8YKdu2qUd2mIXKJB94nScD+oYmzcJrtsIRDVErkNcmlVQN
kFZGcRG/g4PhpAI9mmTpBPFa7Gs8VCqjvSCLuDOoocWkhyaibIySq56A2H2UcSLM
sOJGoFascT0yQA==
-----END CERTIFICATE-----