Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File:                     m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier:          o8LgJBfcYnwGiT3f0q1slbUL6L7w1MlIaWMJpV88cVE=
Subject key identifier:   23:31:1E:5E:40:0D:86:1D:4F:5E:2C:F8:0B:92:8F:5D:0D:1A:3F:94
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer:       /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial:       01962F74DFB22FF9A0D84C1EB328AD1C9777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number:          0750
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: est2c0vu53qKv5sg43uY8XUX94xP2kjf+PjCIsMu208=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:df:b2:2f:f9:a0:d8:4c:1e:b3:28:ad:1c:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=23311e5e400d861d4f5e2cf80b928f5d0d1a3f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:ff:74:bb:3b:fe:10:38:4c:6d:cd:c6:89:
                    e0:68:3a:a5:73:59:63:fa:42:19:21:ae:a6:38:9e:
                    05:f8:34:e2:ad:4b:8a:1b:e8:50:d6:cd:13:5a:07:
                    a4:89:36:51:b2:58:50:f8:f3:2a:2d:30:06:98:05:
                    66:cc:08:1b:9d:54:42:6a:01:bc:46:0b:5a:c8:3d:
                    5f:c9:ae:79:17:d1:a0:c8:24:de:cb:b7:d3:2d:21:
                    c4:73:71:e4:90:00:55:0a:cc:2c:6f:1a:a7:6b:fd:
                    74:b4:14:91:b2:cb:2e:e4:a3:88:52:48:36:8a:0d:
                    e7:77:5f:e6:5d:da:4d:81:b4:3e:83:2a:02:32:cc:
                    75:92:32:64:5e:47:3d:4a:a4:5d:69:c6:a2:21:19:
                    a4:90:b0:94:34:a1:10:0e:e3:8a:11:0b:4b:24:db:
                    1c:65:23:44:fa:cd:82:69:53:41:9a:c6:fc:50:e1:
                    17:ef:54:13:97:a0:d4:0e:fa:65:a3:dd:44:9f:31:
                    1f:56:25:7f:f7:e2:62:cb:23:34:32:b1:54:b4:c1:
                    95:87:1b:57:aa:54:0e:dc:ce:93:09:6e:33:1a:fb:
                    84:b8:2f:ef:e8:a4:cb:23:ee:a1:40:94:bb:ef:cf:
                    83:86:a0:5c:c6:b5:45:f2:3a:55:0e:b1:7c:c8:04:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:31:1E:5E:40:0D:86:1D:4F:5E:2C:F8:0B:92:8F:5D:0D:1A:3F:94
            X509v3 Authority Key Identifier:
                keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:34:8f:da:d4:e2:dc:a3:30:1b:5c:cc:ee:d3:fd:f8:f5:
         93:21:77:f5:9e:b0:6a:08:91:b9:b3:ee:83:72:f6:33:80:79:
         a5:1f:77:14:dd:16:26:f5:79:ab:bb:0f:8e:ce:a2:ac:1d:1e:
         6b:22:5a:78:b1:b2:85:bb:bc:15:35:75:25:b5:f5:02:51:41:
         b5:f5:4c:95:7d:9c:50:08:d6:7c:c0:a2:23:00:fb:c2:4d:a3:
         ca:44:71:d6:9b:bb:9b:2f:12:4c:42:e5:b6:6d:b9:c5:3a:f7:
         a9:7c:0e:4a:d9:11:41:a3:7f:6a:b5:68:93:4e:94:6f:76:ae:
         d5:da:a8:e4:24:8f:3e:25:73:10:05:51:9b:51:ef:fe:a7:86:
         2e:e6:9d:0e:5e:4d:b2:ac:b8:70:94:98:b4:21:46:9e:76:39:
         5d:38:3e:0e:de:4f:cc:f4:b8:d1:f0:56:97:00:00:e8:77:fe:
         57:86:b7:23:fb:e2:07:78:f1:19:bc:29:89:3c:1c:d9:01:55:
         65:86:d3:4e:b7:80:a8:9f:81:43:5f:c0:ab:58:ae:7b:52:5a:
         db:94:2b:44:c3:42:15:d6:14:c2:f4:b6:28:62:cf:26:ba:3a:
         b8:9a:22:54:95:8a:c8:09:09:37:e6:b2:f1:08:96:ff:56:d3:
         1d:60:a0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdN+yL/mg2EwesyitHJd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl
MzEzYjAwHhcNMjUwNDEzMTQwMTUwWhcNMjUwNDE0MTQwMTUwWjAzMTEwLwYDVQQD
EygyMzMxMWU1ZTQwMGQ4NjFkNGY1ZTJjZjgwYjkyOGY1ZDBkMWEzZjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p//dLs7/hA4TG3NxongaDqlc1lj
+kIZIa6mOJ4F+DTirUuKG+hQ1s0TWgekiTZRslhQ+PMqLTAGmAVmzAgbnVRCagG8
RgtayD1fya55F9GgyCTey7fTLSHEc3HkkABVCswsbxqna/10tBSRsssu5KOIUkg2
ig3nd1/mXdpNgbQ+gyoCMsx1kjJkXkc9SqRdacaiIRmkkLCUNKEQDuOKEQtLJNsc
ZSNE+s2CaVNBmsb8UOEX71QTl6DUDvplo91EnzEfViV/9+JiyyM0MrFUtMGVhxtX
qlQO3M6TCW4zGvuEuC/v6KTLI+6hQJS778+DhqBcxrVF8jpVDrF8yATorQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMxHl5ADYYdT14s+AuSj10NGj+UMB8GA1UdIwQY
MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt
YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4
LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF80j9rU
4tyjMBtczO7T/fj1kyF39Z6wagiRubPug3L2M4B5pR93FN0WJvV5q7sPjs6irB0e
ayJaeLGyhbu8FTV1JbX1AlFBtfVMlX2cUAjWfMCiIwD7wk2jykRx1pu7my8STELl
tm25xTr3qXwOStkRQaN/arVok06Ub3au1dqo5CSPPiVzEAVRm1Hv/qeGLuadDl5N
sqy4cJSYtCFGnnY5XTg+Dt5PzPS40fBWlwAA6Hf+V4a3I/viB3jxGbwpiTwc2QFV
ZYbTTreAqJ+BQ1/Aq1iue1Ja25QrRMNCFdYUwvS2KGLPJro6uJoiVJWKyAkJN+ay
8QiW/1bTHWCgYQ==
-----END CERTIFICATE-----