Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          XKSFtDUJWP+sySfoS93CfE8D6sAfu5ykxDDef0sLLoI=
Subject key identifier:   28:CE:DA:A0:D8:5C:7F:00:E0:FF:2D:0F:87:B9:AF:A8:7D:C9:F3:13
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       01962F3D8F0CF3BB6D4D8C0DE4DF5A043E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          026E
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: PbPgJY79t9VzipmSZeUyMVqt+abGzRyqmRIfl9ZaMcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:0c:f3:bb:6d:4d:8c:0d:e4:df:5a:04:3e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=28cedaa0d85c7f00e0ff2d0f87b9afa87dc9f313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:cf:7e:2c:01:46:e7:71:07:74:32:66:fa:
                    7b:d7:04:cc:ea:1e:44:eb:74:a6:74:4c:bf:cf:f3:
                    64:32:c0:6c:c9:83:53:6e:05:16:e2:c6:9f:e6:c8:
                    3c:6f:24:d7:53:d6:1e:65:1b:7c:32:b3:13:82:cf:
                    a4:99:3d:13:cf:4d:30:be:9e:b8:fc:0c:53:43:3a:
                    31:89:8d:cd:dc:35:a6:a3:ec:40:2b:09:68:d9:81:
                    bf:ab:bb:eb:d5:88:02:5c:16:98:0b:f8:33:46:13:
                    21:f1:3b:c3:c7:6f:d6:7e:e0:d0:06:55:e8:a1:36:
                    30:ca:df:4d:4b:af:8f:5f:54:02:b8:8f:20:19:91:
                    70:15:4c:32:99:70:ec:bb:c2:ca:6e:7a:99:7b:f5:
                    85:fd:c5:7b:9a:2b:f8:76:aa:f7:d7:ee:43:19:06:
                    5c:d2:e4:86:d6:6c:dc:a2:6f:28:7b:de:5e:c4:8d:
                    f2:73:ce:14:c8:a1:b0:35:ac:2e:51:a6:9b:86:5c:
                    bc:78:cf:44:02:72:e7:11:e7:d5:ee:a3:5f:dc:2d:
                    2d:a9:20:8d:c1:2f:e8:cb:33:12:75:c2:e9:91:43:
                    4c:40:02:05:35:38:11:ed:17:07:2d:86:b3:95:f8:
                    1b:3b:dc:3c:6b:af:5c:e5:d3:01:d3:5c:e7:18:e0:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CE:DA:A0:D8:5C:7F:00:E0:FF:2D:0F:87:B9:AF:A8:7D:C9:F3:13
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:a0:fd:7a:50:f4:da:d3:d0:80:60:6e:7f:f8:ca:eb:b2:
         ef:ab:c0:97:ba:b5:a9:6f:65:24:4c:aa:06:09:08:90:3d:70:
         e8:74:91:36:f5:1c:39:05:f9:d0:57:3e:b4:d6:2c:d5:21:55:
         32:d8:02:95:b1:33:34:b1:21:fd:b8:d3:fe:52:55:77:3f:1c:
         e6:a7:02:62:42:db:c3:64:4f:f6:ae:a6:68:87:41:41:0c:7d:
         a3:6d:3d:e8:13:e3:87:2a:1a:27:9f:a7:32:be:d3:c9:df:93:
         02:fd:a3:55:8b:08:3e:42:ca:6d:43:5a:f4:b6:1b:59:bf:95:
         28:b9:f8:65:af:71:ea:6b:2a:5b:98:0f:3c:ad:4f:f2:1f:14:
         e1:44:b9:a6:68:27:26:a7:6c:4e:e3:1f:7c:97:c0:21:23:7c:
         e3:64:de:60:f9:fb:df:93:fc:cd:b6:04:ec:6d:1d:8f:dd:d0:
         46:80:b0:41:a6:f1:ee:e2:a7:7d:a7:4f:45:23:28:22:bf:09:
         0e:04:e2:67:10:f2:e3:b7:c3:4c:d3:42:b1:ea:d5:70:3d:f0:
         b9:3c:f1:ec:ac:e9:7e:56:a6:ae:d4:e9:be:0b:ff:d3:dd:27:
         c4:e9:86:84:ca:97:c4:ab:cf:41:9c:45:29:e7:78:58:16:e8:
         90:0f:b8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPY8M87ttTYwN5N9aBD4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNjQzYjRmYTNmMGUxM2NjYTgwNTU4MzNhYzcwYzY5ZGQx
Y2E4ZTEwHhcNMjUwNDEzMTMwMTI1WhcNMjUwNDE0MTMwMTI1WjAzMTEwLwYDVQQD
EygyOGNlZGFhMGQ4NWM3ZjAwZTBmZjJkMGY4N2I5YWZhODdkYzlmMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutLPfiwBRudxB3QyZvp71wTM6h5E
63SmdEy/z/NkMsBsyYNTbgUW4saf5sg8byTXU9YeZRt8MrMTgs+kmT0Tz00wvp64
/AxTQzoxiY3N3DWmo+xAKwlo2YG/q7vr1YgCXBaYC/gzRhMh8TvDx2/WfuDQBlXo
oTYwyt9NS6+PX1QCuI8gGZFwFUwymXDsu8LKbnqZe/WF/cV7miv4dqr31+5DGQZc
0uSG1mzcom8oe95exI3yc84UyKGwNawuUaabhly8eM9EAnLnEefV7qNf3C0tqSCN
wS/oyzMSdcLpkUNMQAIFNTgR7RcHLYazlfgbO9w8a69c5dMB01znGODRTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjO2qDYXH8A4P8tD4e5r6h9yfMTMB8GA1UdIwQY
MBaAFOxkO0+j8OE8yoBVgzrHDGndHKjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMt
NzllNzQ2MzgzZjhkLzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83NGQ0OTAtYjg1YS00OTM5LTkwZGMtNzllNzQ2MzgzZjhk
LzEvN0dRN1Q2UHc0VHpLZ0ZXRE9zY01hZDBjcU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuag/XpQ
9NrT0IBgbn/4yuuy76vAl7q1qW9lJEyqBgkIkD1w6HSRNvUcOQX50Fc+tNYs1SFV
MtgClbEzNLEh/bjT/lJVdz8c5qcCYkLbw2RP9q6maIdBQQx9o2096BPjhyoaJ5+n
Mr7Tyd+TAv2jVYsIPkLKbUNa9LYbWb+VKLn4Za9x6msqW5gPPK1P8h8U4US5pmgn
JqdsTuMffJfAISN842TeYPn735P8zbYE7G0dj93QRoCwQabx7uKnfadPRSMoIr8J
DgTiZxDy47fDTNNCserVcD3wuTzx7KzpflamrtTpvgv/090nxOmGhMqXxKvPQZxF
Ked4WBbokA+47Q==
-----END CERTIFICATE-----