Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          AYVnfqy4d7ZYoXDdY54Hf+RiOOtcAlTk7Lad2paG+Nw=
Subject key identifier:   2B:F7:AB:BD:43:8B:1C:C4:76:F8:7C:7F:FC:41:6C:C9:40:23:ED:DC
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       01962F744A84651DC5F4725C24C54213E621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          0CAB
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: IxpxMqz/lbdQ5vE/AqGndgrzWj9n/qYxVYj3TCgMyjI=)
                          2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4a:84:65:1d:c5:f4:72:5c:24:c5:42:13:e6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=2bf7abbd438b1cc476f87c7ffc416cc94023eddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:fb:27:2c:db:a5:15:fc:e6:e9:23:de:b5:
                    6a:0a:b6:bf:82:4a:c9:b6:c8:1a:9a:5d:8d:6c:e6:
                    bb:69:14:a4:5e:0d:2f:0f:42:be:91:62:d6:2c:a1:
                    b0:8f:f6:a0:c9:77:fc:4b:81:53:7c:1d:3a:8c:35:
                    a6:1a:31:d3:dc:ce:c2:6f:36:19:b6:82:c2:85:bd:
                    48:d8:15:28:76:e0:09:77:eb:5e:6f:4b:59:d8:28:
                    e8:72:09:b2:e5:29:82:79:af:5f:8d:ab:ae:31:26:
                    94:eb:ea:a5:a0:d2:21:a8:66:09:75:34:bc:7a:af:
                    18:99:9e:a6:90:5b:b1:f8:25:43:9d:c9:59:eb:af:
                    b1:7e:9e:51:27:c4:49:74:db:c7:f6:0f:c1:9b:01:
                    0c:72:c9:d9:44:77:5b:c2:4c:e5:ff:3b:d5:79:b7:
                    61:fb:85:54:12:11:a6:22:30:49:25:e5:a2:5c:bc:
                    12:7d:5b:76:01:f3:86:9f:11:df:35:81:51:fa:e0:
                    92:a0:29:f9:0a:a7:0b:38:cf:e4:36:71:41:28:d8:
                    fb:70:b0:93:d7:ea:7e:df:04:ce:bf:5a:5c:65:62:
                    62:3f:c3:05:e7:76:57:ed:c1:fc:73:ba:dc:00:b0:
                    3d:12:57:93:3e:89:ef:6d:bb:b7:eb:5c:c7:0d:e0:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:AB:BD:43:8B:1C:C4:76:F8:7C:7F:FC:41:6C:C9:40:23:ED:DC
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:4a:eb:40:8c:a5:21:18:dd:e9:a0:73:69:20:7c:64:36:
         4b:be:26:6b:c7:dc:f2:37:0d:7b:03:23:ed:f0:de:7d:ce:01:
         61:78:61:ee:ea:2b:9e:da:40:55:19:fa:3a:76:7b:fa:27:24:
         e0:72:e5:c7:79:f2:10:4f:b6:8e:c9:c0:92:5d:4a:ea:4c:88:
         93:47:28:8a:2d:ce:9a:57:64:77:49:5d:0f:7f:8b:12:23:af:
         94:60:c8:60:59:41:af:b3:bd:35:17:53:80:1d:ea:ec:35:86:
         e1:f4:8d:d4:32:9f:85:21:c1:a0:e9:ca:71:c8:69:41:8f:88:
         dd:0c:61:b3:97:ea:c3:38:d3:27:25:85:6c:5d:0d:be:c6:34:
         6f:63:63:89:a2:11:ab:f5:61:ca:62:e3:65:a9:c9:d4:67:5d:
         eb:55:d8:67:f4:68:34:37:e3:c0:ed:0d:a6:83:ed:3a:b2:d1:
         18:88:2b:ed:4f:a0:7b:a6:5d:a4:50:b7:75:9e:38:a9:91:17:
         db:4d:4b:6c:93:50:2c:e8:41:73:11:1f:c5:cb:dc:0e:e7:cc:
         ae:4f:13:96:cb:05:2e:d9:30:25:3b:6a:01:45:77:96:d1:d3:
         9c:24:0c:a8:8a:6c:18:cc:85:a6:b0:ea:27:e5:20:be:5f:2c:
         51:aa:be:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEqEZR3F9HJcJMVCE+YhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh
NWY2MDUwHhcNMjUwNDEzMTQwMTEyWhcNMjUwNDE0MTQwMTEyWjAzMTEwLwYDVQQD
EygyYmY3YWJiZDQzOGIxY2M0NzZmODdjN2ZmYzQxNmNjOTQwMjNlZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/L7JyzbpRX85ukj3rVqCra/gkrJ
tsgaml2NbOa7aRSkXg0vD0K+kWLWLKGwj/agyXf8S4FTfB06jDWmGjHT3M7CbzYZ
toLChb1I2BUoduAJd+teb0tZ2Cjocgmy5SmCea9fjauuMSaU6+qloNIhqGYJdTS8
eq8YmZ6mkFux+CVDnclZ66+xfp5RJ8RJdNvH9g/BmwEMcsnZRHdbwkzl/zvVebdh
+4VUEhGmIjBJJeWiXLwSfVt2AfOGnxHfNYFR+uCSoCn5CqcLOM/kNnFBKNj7cLCT
1+p+3wTOv1pcZWJiP8MF53ZX7cH8c7rcALA9EleTPonvbbu361zHDeAsbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCv3q71DixzEdvh8f/xBbMlAI+3cMB8GA1UdIwQY
MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt
YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh
LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyRK60CM
pSEY3emgc2kgfGQ2S74ma8fc8jcNewMj7fDefc4BYXhh7uorntpAVRn6OnZ7+ick
4HLlx3nyEE+2jsnAkl1K6kyIk0coii3Omldkd0ldD3+LEiOvlGDIYFlBr7O9NRdT
gB3q7DWG4fSN1DKfhSHBoOnKcchpQY+I3Qxhs5fqwzjTJyWFbF0NvsY0b2NjiaIR
q/VhymLjZanJ1Gdd61XYZ/RoNDfjwO0NpoPtOrLRGIgr7U+ge6ZdpFC3dZ44qZEX
201LbJNQLOhBcxEfxcvcDufMrk8TlssFLtkwJTtqAUV3ltHTnCQMqIpsGMyFprDq
J+Ugvl8sUaq+zA==
-----END CERTIFICATE-----