Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
File:                     7fzt7cfFrbhf27efSx14BN_QED4.mft (raw, json)
Hash identifier:          4xitmyfjK3yjKoH6oSaujOydtiI3AVJx9b7UaqozQSM=
Subject key identifier:   D1:92:18:DD:44:A7:0A:BF:20:04:31:4E:85:2B:B1:E5:15:D6:3C:B3
Authority key identifier: ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E
Certificate issuer:       /CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
Certificate serial:       01962FAB4181C3341C922710B77297157799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft
Manifest number:          046C
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 7fzt7cfFrbhf27efSx14BN_QED4.crl (hash: dcCwyyLmhhkfypSXIYAAOr1wRY1iXUjUg10o4Yb3Ago=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:81:c3:34:1c:92:27:10:b7:72:97:15:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfcededc7c5adb85fdbb79f4b1d7804dfd0103e
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=d19218dd44a70abf2004314e852bb1e515d63cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:87:ea:e7:f2:fd:4c:32:1a:28:66:84:31:
                    89:eb:00:8b:58:24:40:fe:c3:27:17:6c:07:f3:88:
                    c4:3d:27:44:39:d0:41:f5:c0:2a:f5:64:2f:cb:fe:
                    b3:15:4f:df:33:50:e3:15:09:7f:db:76:9e:90:cc:
                    a4:85:ae:fb:b7:bc:d8:7a:c8:28:e2:2d:2b:16:25:
                    58:6d:f9:5d:61:30:20:cd:84:4c:14:b7:53:3e:34:
                    c2:e7:da:ac:57:6c:eb:cf:d0:ba:90:d1:9b:de:cc:
                    c4:c0:10:24:4c:b7:86:95:c3:48:b2:e2:b6:0c:ca:
                    18:76:dd:46:28:1c:ad:eb:4f:2f:2a:3b:43:df:86:
                    48:44:38:39:47:c7:8e:ac:0c:69:bc:6b:a8:dc:f4:
                    78:21:ee:4e:c9:18:e0:75:36:82:0b:ee:ee:52:35:
                    e0:5d:08:b8:8e:d7:13:1c:4d:63:87:75:c9:81:59:
                    1d:26:c7:f9:00:31:90:16:7d:27:58:93:7d:b1:56:
                    fd:47:a0:79:d6:98:4c:11:94:c6:52:e3:3c:aa:c6:
                    26:e0:9b:65:2a:12:76:aa:3b:4c:32:c7:46:6c:1d:
                    cc:83:7b:3c:51:f6:67:ca:3a:14:62:cf:ea:a8:9d:
                    58:14:97:c8:58:21:e4:af:11:cd:70:d6:3d:a0:46:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:92:18:DD:44:A7:0A:BF:20:04:31:4E:85:2B:B1:E5:15:D6:3C:B3
            X509v3 Authority Key Identifier:
                keyid:ED:FC:ED:ED:C7:C5:AD:B8:5F:DB:B7:9F:4B:1D:78:04:DF:D0:10:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fzt7cfFrbhf27efSx14BN_QED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6af542-ae97-43c2-a35e-45606ee06767/1/7fzt7cfFrbhf27efSx14BN_QED4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:e0:85:e0:82:84:54:eb:11:b6:e7:d3:59:86:a9:e9:ef:
         c6:8a:2f:2b:e7:6c:fe:dd:fa:e6:21:4b:9d:39:76:fd:b0:19:
         1c:be:c1:4f:ee:a6:a4:37:82:a2:dc:42:2c:53:db:30:d4:7c:
         80:87:fd:2b:c1:39:6c:93:3c:4d:3b:f2:e8:9c:b6:0e:a7:5b:
         43:30:7d:8c:0d:c5:3f:30:c7:3d:d7:9b:8f:7b:cf:48:0b:6c:
         f9:9f:9a:c6:78:8c:80:cd:0e:43:a4:00:f4:ac:3f:66:d7:9f:
         d0:3e:9b:50:88:bd:5e:9e:51:41:dc:2b:1a:da:3e:b3:b7:91:
         78:91:11:c3:2e:da:16:38:5e:cf:c6:07:91:ca:7a:19:72:dd:
         dd:10:29:48:92:99:c9:6d:2f:8a:88:a5:8c:c7:b7:22:41:a4:
         5c:ae:68:f7:ea:b6:82:f3:5f:73:7b:6b:23:79:2a:80:dc:d8:
         9b:7c:cf:c4:05:e6:09:ca:21:e3:9f:ca:14:85:cb:1a:f1:dc:
         42:16:fc:cf:84:85:1f:d9:b9:78:b3:29:5a:a9:b0:65:5b:17:
         4f:9d:39:fa:bd:fb:24:90:d5:e4:73:f9:6d:00:8d:94:f2:c5:
         d8:a0:73:31:28:0b:84:a8:7b:40:0b:96:3f:ac:41:6a:1f:6e:
         b8:2a:6f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0GBwzQckicQt3KXFXeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmNlZGVkYzdjNWFkYjg1ZmRiYjc5ZjRiMWQ3ODA0ZGZk
MDEwM2UwHhcNMjUwNDEzMTUwMTE0WhcNMjUwNDE0MTUwMTE0WjAzMTEwLwYDVQQD
EyhkMTkyMThkZDQ0YTcwYWJmMjAwNDMxNGU4NTJiYjFlNTE1ZDYzY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZKH6ufy/UwyGihmhDGJ6wCLWCRA
/sMnF2wH84jEPSdEOdBB9cAq9WQvy/6zFU/fM1DjFQl/23aekMykha77t7zYesgo
4i0rFiVYbfldYTAgzYRMFLdTPjTC59qsV2zrz9C6kNGb3szEwBAkTLeGlcNIsuK2
DMoYdt1GKByt608vKjtD34ZIRDg5R8eOrAxpvGuo3PR4Ie5OyRjgdTaCC+7uUjXg
XQi4jtcTHE1jh3XJgVkdJsf5ADGQFn0nWJN9sVb9R6B51phMEZTGUuM8qsYm4Jtl
KhJ2qjtMMsdGbB3Mg3s8UfZnyjoUYs/qqJ1YFJfIWCHkrxHNcNY9oEantwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGSGN1Epwq/IAQxToUrseUV1jyzMB8GA1UdIwQY
MBaAFO387e3Hxa24X9u3n0sdeATf0BA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUt
NDU2MDZlZTA2NzY3LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82YWY1NDItYWU5Ny00M2MyLWEzNWUtNDU2MDZlZTA2NzY3
LzEvN2Z6dDdjZkZyYmhmMjdlZlN4MTRCTl9RRUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAzgheCC
hFTrEbbn01mGqenvxoovK+ds/t365iFLnTl2/bAZHL7BT+6mpDeCotxCLFPbMNR8
gIf9K8E5bJM8TTvy6Jy2DqdbQzB9jA3FPzDHPdebj3vPSAts+Z+axniMgM0OQ6QA
9Kw/Ztef0D6bUIi9Xp5RQdwrGto+s7eReJERwy7aFjhez8YHkcp6GXLd3RApSJKZ
yW0vioiljMe3IkGkXK5o9+q2gvNfc3trI3kqgNzYm3zPxAXmCcoh45/KFIXLGvHc
Qhb8z4SFH9m5eLMpWqmwZVsXT505+r37JJDV5HP5bQCNlPLF2KBzMSgLhKh7QAuW
P6xBah9uuCpvyw==
-----END CERTIFICATE-----