Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          nvNvj3D1k46hdwh7+MBBel4716VWa7WbSS9dHPBxCCc=
Subject key identifier:   96:5E:9F:88:84:C2:C9:A9:3D:8B:39:0B:77:BC:73:BB:0A:1F:AE:E7
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       01962F74BE88C30C7E29993D6FF4C6DAF2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          0494
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: sEnGQUEt/8RezKHccC8+fSvJOzUilVExAZOnyO89H/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:88:c3:0c:7e:29:99:3d:6f:f4:c6:da:f2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=965e9f8884c2c9a93d8b390b77bc73bb0a1faee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:ae:47:83:17:de:8b:45:dc:c2:c8:be:dd:
                    cf:28:34:d8:02:ce:87:de:91:4f:f9:d5:3e:ce:10:
                    b3:cd:35:f6:5b:ee:be:45:1a:36:75:a3:e5:e1:1a:
                    d1:0d:7e:8d:18:61:d6:f6:f9:b1:af:8a:52:d1:20:
                    08:b1:84:2d:72:63:33:f9:f5:c0:d2:c5:72:84:73:
                    68:1f:3a:ba:40:2a:8b:8f:e6:13:79:cd:68:dc:a6:
                    b8:c2:06:d7:4a:17:59:19:66:31:92:4a:b8:2e:95:
                    05:12:ba:41:3d:c8:7c:d1:e3:04:f2:05:9d:1b:c0:
                    fc:b2:72:e6:f5:c5:28:9d:46:57:6d:24:62:c0:c7:
                    51:e2:de:91:13:13:13:2e:fe:d2:7f:44:24:04:b1:
                    65:a5:9e:f7:a3:38:02:78:5a:ec:3d:11:f3:8c:1a:
                    91:bc:4d:05:33:24:a1:0e:03:cf:41:24:c5:7b:e9:
                    45:cc:4f:cd:d7:4a:60:42:05:12:17:45:6a:5f:50:
                    a5:35:72:c2:ab:b0:d0:9e:46:bf:28:7e:50:f5:3c:
                    d8:9e:e1:36:6a:6e:5b:d5:88:83:54:46:ed:16:78:
                    33:ba:b5:ae:f5:2a:be:f0:99:21:44:36:72:5f:74:
                    bd:31:18:16:fa:47:84:ee:8a:81:94:ba:88:40:ae:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5E:9F:88:84:C2:C9:A9:3D:8B:39:0B:77:BC:73:BB:0A:1F:AE:E7
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:39:a3:b5:98:08:4a:4d:8f:0c:72:c0:a9:78:66:d8:2a:
         dd:e3:a6:4b:08:b3:ba:82:a5:b9:aa:63:26:79:6f:ce:53:a0:
         09:2b:0d:f8:8a:58:43:68:98:25:4e:6b:7b:6f:b7:14:71:09:
         1c:7a:0b:b0:0e:5e:d8:18:6b:f0:16:22:f7:df:ce:c4:1e:3d:
         eb:aa:64:e6:22:08:02:23:cf:da:12:ca:04:26:1f:ce:14:e5:
         37:b8:b2:7d:7b:97:d4:93:f3:37:5b:d8:8d:84:45:ff:e9:9f:
         88:08:43:57:dc:c3:00:34:9b:8f:d4:ea:89:91:b4:ad:dc:91:
         df:5c:6b:f3:6d:e1:fd:1f:1e:ae:30:17:fc:f3:79:25:12:04:
         3a:4e:dd:e0:7a:bd:50:58:3f:98:d9:f8:bd:2b:ea:c0:a9:10:
         24:0d:38:d3:40:4d:b0:8a:ff:a7:f1:b8:93:a1:c4:86:7b:f2:
         ee:dc:57:ba:53:3c:7b:55:46:c3:5c:bd:97:57:7a:af:89:6f:
         7d:ef:9e:d4:d2:06:66:78:ca:b0:a7:39:69:7f:c3:50:9b:d0:
         bb:a1:06:27:b3:ee:07:b0:7d:b9:33:ab:90:98:f7:f1:88:2e:
         5d:06:24:20:0f:f0:ed:c9:7a:52:d7:31:c3:a9:89:5e:89:c5:
         80:39:10:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdL6Iwwx+KZk9b/TG2vLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmY5Yzc5MDY5NDBlM2Q0NDM3YzZiZGNkZTE2NGQwNjVh
ODBlYTUwHhcNMjUwNDEzMTQwMTQyWhcNMjUwNDE0MTQwMTQyWjAzMTEwLwYDVQQD
Eyg5NjVlOWY4ODg0YzJjOWE5M2Q4YjM5MGI3N2JjNzNiYjBhMWZhZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY2uR4MX3otF3MLIvt3PKDTYAs6H
3pFP+dU+zhCzzTX2W+6+RRo2daPl4RrRDX6NGGHW9vmxr4pS0SAIsYQtcmMz+fXA
0sVyhHNoHzq6QCqLj+YTec1o3Ka4wgbXShdZGWYxkkq4LpUFErpBPch80eME8gWd
G8D8snLm9cUonUZXbSRiwMdR4t6RExMTLv7Sf0QkBLFlpZ73ozgCeFrsPRHzjBqR
vE0FMyShDgPPQSTFe+lFzE/N10pgQgUSF0VqX1ClNXLCq7DQnka/KH5Q9TzYnuE2
am5b1YiDVEbtFngzurWu9Sq+8JkhRDZyX3S9MRgW+keE7oqBlLqIQK7NewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZen4iEwsmpPYs5C3e8c7sKH67nMB8GA1UdIwQY
MBaAFO1vnHkGlA49RDfGvc3hZNBlqA6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMt
NjY1ZGFmYTMwNTViLzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9kYTUwZGUtMjU2OS00Y2JjLTgwNDMtNjY1ZGFmYTMwNTVi
LzEvN1ctY2VRYVVEajFFTjhhOXplRmswR1dvRHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWY5o7WY
CEpNjwxywKl4Ztgq3eOmSwizuoKluapjJnlvzlOgCSsN+IpYQ2iYJU5re2+3FHEJ
HHoLsA5e2Bhr8BYi99/OxB4966pk5iIIAiPP2hLKBCYfzhTlN7iyfXuX1JPzN1vY
jYRF/+mfiAhDV9zDADSbj9TqiZG0rdyR31xr823h/R8erjAX/PN5JRIEOk7d4Hq9
UFg/mNn4vSvqwKkQJA0400BNsIr/p/G4k6HEhnvy7txXulM8e1VGw1y9l1d6r4lv
fe+e1NIGZnjKsKc5aX/DUJvQu6EGJ7PuB7B9uTOrkJj38YguXQYkIA/w7cl6Utcx
w6mJXonFgDkQEw==
-----END CERTIFICATE-----