Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File:                     7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier:          ek/dUKedhseKJebHRQ7jRqsOf5COupBbq1pdPLC3HxQ=
Subject key identifier:   D0:37:BA:A8:94:B1:C7:B5:EF:62:9A:BB:84:63:7B:C6:D1:52:07:4B
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer:       /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial:       01962E6196B5989FA4C70B956DB216835EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number:          0DAC
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: YqrF9zxDC8VpTnza6IAt5fWdTyACtzw/vN5Y8Mej18o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:b5:98:9f:a4:c7:0b:95:6d:b2:16:83:5e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=d037baa894b1c7b5ef629abb84637bc6d152074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:de:d6:ab:2e:45:13:db:8a:3c:0d:84:16:
                    af:d2:ad:51:e1:db:d6:22:da:89:ef:4a:2b:ef:21:
                    1b:10:e8:b5:2d:38:2e:df:29:69:3d:50:cd:3a:f6:
                    7f:d4:e6:15:73:36:d1:ac:16:32:6a:a9:b8:cf:eb:
                    6c:a2:9a:96:9f:5a:8d:86:13:94:af:bc:0b:86:71:
                    9e:70:92:66:f5:9d:c1:6a:1e:10:3d:27:0a:35:1c:
                    9f:19:fc:99:fe:2f:11:23:42:8f:7a:2a:89:a2:bb:
                    60:44:cb:43:f8:89:c1:8d:e5:8a:e9:6b:b9:dc:1f:
                    11:2d:d1:fa:11:d8:c6:94:70:94:a4:d3:40:c0:53:
                    ca:1d:e5:1f:cd:6a:ef:0f:da:57:58:41:6a:8d:a9:
                    8e:64:13:79:e0:2e:aa:30:1e:9e:d7:ec:8f:a1:1b:
                    f0:d8:89:03:86:af:37:3a:5e:1c:64:e3:38:4f:4b:
                    68:6d:26:39:24:91:98:d8:e2:de:cd:88:d4:98:01:
                    fd:2a:45:70:c0:1f:65:81:88:04:6d:84:8b:ad:15:
                    98:c7:fa:ed:e1:5d:21:3a:18:8c:90:e7:2e:29:ae:
                    98:f1:bc:14:db:11:ae:21:8c:34:5f:48:9e:9e:b4:
                    16:bf:ac:31:24:3a:a4:27:e5:12:a3:41:95:3b:af:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:37:BA:A8:94:B1:C7:B5:EF:62:9A:BB:84:63:7B:C6:D1:52:07:4B
            X509v3 Authority Key Identifier:
                keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:dc:10:f4:82:cd:6a:fa:cb:e3:0c:8a:de:47:e4:85:08:52:
         37:63:0a:0b:23:ee:4d:b5:bf:22:52:dc:fb:5f:2c:be:46:74:
         b7:17:cf:3b:6c:9c:ba:3c:b3:3f:f2:aa:5e:4b:b5:05:c0:be:
         96:5c:67:90:c9:f1:8f:18:ae:0b:d1:c9:2a:2a:5d:25:00:4e:
         29:a1:76:c0:36:4d:9a:7d:91:40:7d:82:3b:ea:97:19:3d:b6:
         6b:4a:5b:8b:78:6b:98:1b:dd:7b:1a:e5:2e:c0:00:2f:fc:b9:
         36:98:6e:2f:fa:6a:d8:88:1d:3f:9b:f3:07:ca:c5:11:e8:55:
         9a:18:7a:f4:30:12:82:46:61:23:e1:4a:65:8c:1a:4f:13:77:
         7e:4d:03:a0:53:97:5e:69:ff:71:07:0b:75:8c:94:f6:34:d0:
         fd:0f:b8:30:aa:71:79:f6:56:01:46:ff:60:c9:b9:b6:36:9c:
         f2:e6:15:e8:55:46:4b:86:03:85:d7:cc:36:48:1c:ed:d0:76:
         e9:a7:1c:83:0c:65:c4:64:d5:db:7a:83:9c:e0:87:9f:fe:1d:
         bb:b3:b0:5f:c6:be:00:6f:a7:a6:ab:a7:c8:b0:a7:0f:2c:4f:
         f1:3c:bd:8c:48:b8:3f:c7:f2:19:b9:31:69:89:cd:8e:5b:e2:
         d1:bc:89:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZa1mJ+kxwuVbbIWg17jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1
ZDcyMjAwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
EyhkMDM3YmFhODk0YjFjN2I1ZWY2MjlhYmI4NDYzN2JjNmQxNTIwNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlze1qsuRRPbijwNhBav0q1R4dvW
ItqJ70or7yEbEOi1LTgu3ylpPVDNOvZ/1OYVczbRrBYyaqm4z+tsopqWn1qNhhOU
r7wLhnGecJJm9Z3Bah4QPScKNRyfGfyZ/i8RI0KPeiqJortgRMtD+InBjeWK6Wu5
3B8RLdH6EdjGlHCUpNNAwFPKHeUfzWrvD9pXWEFqjamOZBN54C6qMB6e1+yPoRvw
2IkDhq83Ol4cZOM4T0tobSY5JJGY2OLezYjUmAH9KkVwwB9lgYgEbYSLrRWYx/rt
4V0hOhiMkOcuKa6Y8bwU2xGuIYw0X0ienrQWv6wxJDqkJ+USo0GVO68qBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA3uqiUsce172Kau4Rje8bRUgdLMB8GA1UdIwQY
MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt
YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2
LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdwQ9ILN
avrL4wyK3kfkhQhSN2MKCyPuTbW/IlLc+18svkZ0txfPO2ycujyzP/KqXku1BcC+
llxnkMnxjxiuC9HJKipdJQBOKaF2wDZNmn2RQH2CO+qXGT22a0pbi3hrmBvdexrl
LsAAL/y5NphuL/pq2IgdP5vzB8rFEehVmhh69DASgkZhI+FKZYwaTxN3fk0DoFOX
Xmn/cQcLdYyU9jTQ/Q+4MKpxefZWAUb/YMm5tjac8uYV6FVGS4YDhdfMNkgc7dB2
6accgwxlxGTV23qDnOCHn/4du7OwX8a+AG+npqunyLCnDyxP8Ty9jEi4P8fyGbkx
aYnNjlvi0byJYg==
-----END CERTIFICATE-----