Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          V3xM2LgcPLCQmcdEOiKh7rq9F1sq+Nx0Jvrb2ZVohlg=
Subject key identifier:   4F:DA:2C:3D:6E:D8:FC:8C:D2:3B:B1:59:18:6B:DC:FD:13:D2:2C:7F
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       01962F06A9E52DEEAEA3CA096810EC0291AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: gyDQcARFniU3qTX1momeY2/ZJUMjm8b0VzxldMHVhBE=)
                          2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a9:e5:2d:ee:ae:a3:ca:09:68:10:ec:02:91:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=4fda2c3d6ed8fc8cd23bb159186bdcfd13d22c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:94:32:93:b5:09:33:92:5e:73:b2:4f:57:
                    f8:d9:f6:cf:f4:89:1e:6d:92:5e:91:33:98:5b:32:
                    32:32:63:d7:df:76:df:b7:65:e9:05:2a:c0:8a:48:
                    35:81:c8:1c:1a:76:2c:72:26:58:31:4a:41:86:6b:
                    54:d8:1b:fc:c2:de:83:55:6f:d4:06:27:ed:fd:c3:
                    8e:70:11:32:c3:68:4b:9f:f7:32:f5:7e:df:05:cb:
                    29:c1:73:dc:45:4a:21:1f:f1:93:d4:1b:c6:21:21:
                    ac:b3:71:d0:d7:78:1e:21:30:b2:13:31:51:86:ed:
                    c8:d2:0b:97:55:d9:e5:3a:60:3d:95:de:70:6d:c2:
                    63:b7:87:c0:4a:68:d8:93:5c:ca:47:9b:4a:ee:0c:
                    9a:a9:0e:34:8c:aa:11:37:f2:ff:6a:8e:68:3b:7b:
                    11:98:6c:47:70:34:e9:91:79:2c:ff:95:91:33:1e:
                    62:40:92:4e:22:72:dc:f5:95:70:dd:cc:58:bf:ba:
                    3c:88:13:d1:f9:00:8d:0e:fe:1f:fa:20:94:0b:95:
                    74:05:e5:7a:7c:10:d2:2d:69:5d:3f:e8:e6:57:d8:
                    98:e8:93:ef:b0:11:e2:9a:a0:4e:2d:9d:58:4a:7e:
                    bd:6d:e6:be:11:8c:34:ad:b5:f3:6a:a2:3f:f9:53:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:2C:3D:6E:D8:FC:8C:D2:3B:B1:59:18:6B:DC:FD:13:D2:2C:7F
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:d4:c1:12:64:19:28:a4:43:c5:5b:7e:48:bd:41:9d:98:
         68:27:2a:0e:83:07:d9:84:40:b3:8c:01:8e:e3:e2:26:9d:09:
         54:7e:27:af:c7:ab:34:f3:1d:09:e6:7b:83:70:b7:88:d1:4f:
         20:4b:59:f4:ca:61:22:94:af:f9:a3:de:0e:5a:46:92:3a:76:
         f4:72:6b:3d:1b:6c:36:21:36:27:51:ba:84:af:46:76:a4:07:
         1b:fe:29:47:c7:c5:9e:0c:17:a7:5b:06:bf:26:63:8f:4f:2e:
         4f:af:f1:40:f3:e0:14:26:5b:cc:87:06:3f:ac:d2:d0:73:78:
         6a:dc:cc:67:50:92:64:e3:24:2f:5d:8f:78:58:25:e1:36:33:
         a9:af:9a:d8:76:a0:60:a1:ca:5d:28:46:07:13:31:1b:1c:f5:
         db:72:16:2d:98:58:68:c2:88:b7:d2:d3:cb:7d:83:08:12:5d:
         14:72:f6:d9:79:46:46:9f:b4:e5:42:58:aa:6b:6d:72:2c:4a:
         d1:dc:0f:c1:2f:be:70:64:f4:3e:a5:41:f5:60:de:4e:15:94:
         0f:45:0a:a5:10:b0:af:6e:c7:83:d7:e5:bb:24:5b:0c:f6:75:
         1a:7d:56:78:59:39:cb:9e:8d:93:bd:08:f5:cd:eb:04:58:95:
         12:9f:8d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqnlLe6uo8oJaBDsApGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1
OWQxMDUwHhcNMjUwNDEzMTIwMTI3WhcNMjUwNDE0MTIwMTI3WjAzMTEwLwYDVQQD
Eyg0ZmRhMmMzZDZlZDhmYzhjZDIzYmIxNTkxODZiZGNmZDEzZDIyYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1+UMpO1CTOSXnOyT1f42fbP9Ike
bZJekTOYWzIyMmPX33bft2XpBSrAikg1gcgcGnYsciZYMUpBhmtU2Bv8wt6DVW/U
Bift/cOOcBEyw2hLn/cy9X7fBcspwXPcRUohH/GT1BvGISGss3HQ13geITCyEzFR
hu3I0guXVdnlOmA9ld5wbcJjt4fASmjYk1zKR5tK7gyaqQ40jKoRN/L/ao5oO3sR
mGxHcDTpkXks/5WRMx5iQJJOInLc9ZVw3cxYv7o8iBPR+QCNDv4f+iCUC5V0BeV6
fBDSLWldP+jmV9iY6JPvsBHimqBOLZ1YSn69bea+EYw0rbXzaqI/+VP+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/aLD1u2PyM0juxWRhr3P0T0ix/MB8GA1UdIwQY
MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt
OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0
LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwrUwRJk
GSikQ8Vbfki9QZ2YaCcqDoMH2YRAs4wBjuPiJp0JVH4nr8erNPMdCeZ7g3C3iNFP
IEtZ9MphIpSv+aPeDlpGkjp29HJrPRtsNiE2J1G6hK9GdqQHG/4pR8fFngwXp1sG
vyZjj08uT6/xQPPgFCZbzIcGP6zS0HN4atzMZ1CSZOMkL12PeFgl4TYzqa+a2Hag
YKHKXShGBxMxGxz123IWLZhYaMKIt9LTy32DCBJdFHL22XlGRp+05UJYqmttcixK
0dwPwS++cGT0PqVB9WDeThWUD0UKpRCwr27Hg9fluyRbDPZ1Gn1WeFk5y56Nk70I
9c3rBFiVEp+Nqw==
-----END CERTIFICATE-----