Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File:                     fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier:          4S9KgzAcr1Iq87Gou7+l+tl3A4s0xUQaCAiE4ZYt6Cw=
Subject key identifier:   29:3F:A1:22:B3:A2:0A:A9:59:AD:AC:DD:B7:77:8B:4C:CD:4A:3D:8D
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer:       /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial:       01962F743B8D7BB1E4C4AEE0C87BB3AADE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: G/SJ5xEPsUIExZgmW8NEOOC3xd1KNOnriaLCoM7uBk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3b:8d:7b:b1:e4:c4:ae:e0:c8:7b:b3:aa:de:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=293fa122b3a20aa959adacddb7778b4ccd4a3d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:b2:e1:f0:d2:ce:63:32:5f:dc:a3:72:28:
                    62:d3:42:2b:c3:11:99:bc:47:86:a9:a1:2f:02:b7:
                    d9:93:54:fa:f2:c1:a9:5a:21:3b:73:d1:4e:30:c1:
                    9d:28:dd:aa:91:9c:10:c9:63:9c:40:62:81:91:36:
                    dc:04:ed:bb:44:4c:70:fa:52:15:83:13:c4:f5:c2:
                    2d:ad:db:6d:8b:19:30:e4:19:ed:93:ec:2b:17:74:
                    85:d7:85:50:90:72:47:d5:60:ac:00:00:84:4d:5d:
                    98:17:58:a1:6a:75:2c:ad:2b:e0:32:78:3c:42:54:
                    e8:83:4e:33:12:06:9e:00:ad:2f:a9:17:ea:44:db:
                    76:fa:65:af:5a:9f:2e:6c:58:c8:7e:b3:a8:e7:e2:
                    e1:51:44:dd:2b:d3:83:b2:5d:09:f5:a4:16:55:29:
                    d8:90:e9:27:67:a3:38:b0:1e:de:1f:fa:8f:0f:b3:
                    d1:1f:e0:26:c7:20:86:dc:ce:9d:61:52:95:4f:59:
                    d4:b4:e3:2b:46:bf:c8:7a:f3:ee:f3:41:8a:f5:d5:
                    8f:fa:96:ea:06:46:40:07:63:bc:34:6b:76:60:ca:
                    80:fd:97:2e:ff:73:e0:be:e3:16:0f:50:3a:09:a9:
                    02:59:b7:93:73:e9:e9:78:dd:91:d2:33:b7:89:c9:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3F:A1:22:B3:A2:0A:A9:59:AD:AC:DD:B7:77:8B:4C:CD:4A:3D:8D
            X509v3 Authority Key Identifier:
                keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:7b:d6:8e:35:2a:53:b1:8a:98:86:09:ed:b2:fe:ac:cc:47:
         aa:34:b0:fd:46:cc:4f:33:74:87:0b:eb:f6:02:8f:af:58:90:
         6d:34:25:09:23:de:88:2a:d8:fa:27:c9:d2:2c:1f:3d:3a:28:
         30:84:c9:f8:37:8f:6e:65:5c:14:1b:fe:7e:6b:41:86:9c:2a:
         cc:a9:b4:10:d9:93:d4:31:df:94:e1:b4:10:c5:1a:97:57:7f:
         53:81:76:2b:e9:e3:58:c1:40:ef:df:b0:31:9b:91:18:64:8d:
         0e:35:a5:13:9e:fe:61:88:bd:cf:7c:ea:9e:5a:db:33:cc:37:
         bb:46:68:38:f9:1f:eb:ef:60:03:31:15:69:cc:ef:1d:9d:70:
         03:0c:ae:93:7c:e3:7b:43:0d:61:38:c1:eb:d5:56:80:e5:da:
         b7:2e:97:21:fa:1a:8e:31:a6:b8:78:20:70:41:e6:a1:63:c8:
         cb:d9:e9:22:ef:48:4f:84:fb:cf:70:c1:3d:63:6c:ab:fe:30:
         d2:62:e1:f5:44:1c:ec:a9:24:ce:5a:6c:b4:f2:1d:dc:1c:ff:
         89:e4:46:aa:6f:43:ea:1b:fd:fa:2d:bf:03:88:43:af:37:5a:
         a4:62:f6:af:26:c6:7e:94:c8:db:28:bb:8a:3c:e7:6a:ee:a9:
         9d:bd:39:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDuNe7HkxK7gyHuzqt4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi
MTdkOWMwHhcNMjUwNDEzMTQwMTA4WhcNMjUwNDE0MTQwMTA4WjAzMTEwLwYDVQQD
EygyOTNmYTEyMmIzYTIwYWE5NTlhZGFjZGRiNzc3OGI0Y2NkNGEzZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5may4fDSzmMyX9yjcihi00IrwxGZ
vEeGqaEvArfZk1T68sGpWiE7c9FOMMGdKN2qkZwQyWOcQGKBkTbcBO27RExw+lIV
gxPE9cItrdttixkw5Bntk+wrF3SF14VQkHJH1WCsAACETV2YF1ihanUsrSvgMng8
QlTog04zEgaeAK0vqRfqRNt2+mWvWp8ubFjIfrOo5+LhUUTdK9ODsl0J9aQWVSnY
kOknZ6M4sB7eH/qPD7PRH+AmxyCG3M6dYVKVT1nUtOMrRr/IevPu80GK9dWP+pbq
BkZAB2O8NGt2YMqA/Zcu/3PgvuMWD1A6CakCWbeTc+npeN2R0jO3icniiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk/oSKzogqpWa2s3bd3i0zNSj2NMB8GA1UdIwQY
MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt
YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx
LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3XvWjjUq
U7GKmIYJ7bL+rMxHqjSw/UbMTzN0hwvr9gKPr1iQbTQlCSPeiCrY+ifJ0iwfPToo
MITJ+DePbmVcFBv+fmtBhpwqzKm0ENmT1DHflOG0EMUal1d/U4F2K+njWMFA79+w
MZuRGGSNDjWlE57+YYi9z3zqnlrbM8w3u0ZoOPkf6+9gAzEVaczvHZ1wAwyuk3zj
e0MNYTjB69VWgOXaty6XIfoajjGmuHggcEHmoWPIy9npIu9IT4T7z3DBPWNsq/4w
0mLh9UQc7KkkzlpstPId3Bz/ieRGqm9D6hv9+i2/A4hDrzdapGL2rybGfpTI2yi7
ijznau6pnb05aA==
-----END CERTIFICATE-----