Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File:                     Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier:          Sc9xYm7er8k9XbGrYmBv1JoIeqGyth8elV3FGPpHOLM=
Subject key identifier:   51:A8:24:3E:56:83:46:A7:DF:E9:01:04:F6:0F:68:60:70:A0:BB:97
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer:       /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial:       01962F0646B440FEFD30815D697A1351506D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: p15vpYxXjhL97pHb3u30vOyIacsJUeV3oTsqsPQD1H0=)
                          2: UkP4jKKKyGHBawn8RPGOoI0g86k.roa (hash: t1NCQU9kIDrxSOL+gI05c500j4/UZOaC1oFaRb7Gluw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:46:b4:40:fe:fd:30:81:5d:69:7a:13:51:50:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=51a8243e568346a7dfe90104f60f686070a0bb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:da:2e:82:10:6c:b8:c0:11:ad:b3:38:b2:
                    c0:01:56:59:dd:1f:44:61:d6:34:53:ab:9d:d1:5d:
                    21:a2:d8:7c:27:ee:95:e3:4d:9b:ec:f9:90:bc:60:
                    8b:70:18:35:41:04:f9:93:5a:0e:74:33:00:c3:90:
                    14:c2:d7:48:dd:1f:2a:1c:63:3d:31:c4:ec:46:97:
                    18:52:00:26:89:c9:f2:5a:b3:26:51:ba:35:57:38:
                    ff:22:f2:ac:39:17:25:dc:f1:26:06:d8:cf:39:f1:
                    6e:86:b4:56:79:f8:ec:6c:09:29:51:4e:f4:da:3c:
                    85:a2:3f:95:d9:78:3d:bb:8f:25:b4:25:5b:43:05:
                    e5:92:5a:61:21:19:bf:2c:ec:a2:3d:15:70:8b:5c:
                    0a:61:dd:b3:a6:72:aa:c4:49:7a:6b:9c:c0:69:d5:
                    22:fa:37:9a:92:b6:38:8c:2c:88:4c:70:2f:93:38:
                    c9:7d:ff:3f:f6:62:38:b2:45:b3:27:40:88:88:a8:
                    bc:af:3e:89:75:ba:99:c9:3a:ef:a3:e8:37:25:25:
                    3e:81:bf:a6:e3:f3:4c:57:e7:9a:ff:fb:00:24:19:
                    15:3b:7f:8e:b1:f8:2c:36:be:4f:6f:9b:1f:25:ac:
                    7d:35:67:4a:2f:9b:7e:16:c8:cd:53:c3:e7:3b:04:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A8:24:3E:56:83:46:A7:DF:E9:01:04:F6:0F:68:60:70:A0:BB:97
            X509v3 Authority Key Identifier:
                keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ca:ed:f5:cc:30:b7:fe:8b:28:9f:97:96:03:96:16:ef:8e:
         1c:20:c4:95:26:35:17:87:67:23:1b:fe:a1:60:5d:1f:f1:61:
         fb:5f:8f:ba:11:ef:a5:13:ec:58:83:76:ad:45:5b:f0:3b:76:
         62:24:5c:de:75:39:f3:a3:bb:0b:ca:03:ae:96:ac:26:92:b9:
         19:0e:cb:ab:02:af:94:ca:23:9c:1e:12:c1:d7:2d:60:02:b0:
         ad:6f:92:85:39:eb:cf:16:d6:26:55:76:81:21:5a:14:63:ab:
         85:83:71:50:36:ca:7d:dd:e1:7f:74:d1:b0:bd:9e:82:d5:6a:
         5a:31:27:03:9e:41:f6:d7:25:a9:34:0e:ba:b2:26:12:ae:30:
         37:7e:38:42:59:41:a2:ed:1a:ce:95:00:94:e4:52:7c:ba:c1:
         38:ea:a9:c7:fd:3b:25:66:0e:32:2d:f1:54:db:79:a9:8f:44:
         dd:0d:cb:df:b3:0a:ec:2c:a5:37:69:d2:55:33:f9:58:06:84:
         56:f5:11:6f:83:e1:1d:65:fa:e9:78:fd:c2:58:d2:9a:25:d8:
         30:1a:79:f7:21:95:88:d9:bb:ea:de:75:e6:72:83:e4:15:d8:
         69:a0:28:be:bf:1a:5f:43:28:21:cc:22:59:4b:0e:a0:e3:21:
         0f:5f:01:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBka0QP79MIFdaXoTUVBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YjdlZGVmNjE4NTg3MjNjNGFkZWJlM2VlNWE4OWY3MDA1
OGQ1ZmUwHhcNMjUwNDEzMTIwMTAyWhcNMjUwNDE0MTIwMTAyWjAzMTEwLwYDVQQD
Eyg1MWE4MjQzZTU2ODM0NmE3ZGZlOTAxMDRmNjBmNjg2MDcwYTBiYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hzaLoIQbLjAEa2zOLLAAVZZ3R9E
YdY0U6ud0V0hoth8J+6V402b7PmQvGCLcBg1QQT5k1oOdDMAw5AUwtdI3R8qHGM9
McTsRpcYUgAmicnyWrMmUbo1Vzj/IvKsORcl3PEmBtjPOfFuhrRWefjsbAkpUU70
2jyFoj+V2Xg9u48ltCVbQwXlklphIRm/LOyiPRVwi1wKYd2zpnKqxEl6a5zAadUi
+jeakrY4jCyITHAvkzjJff8/9mI4skWzJ0CIiKi8rz6JdbqZyTrvo+g3JSU+gb+m
4/NMV+ea//sAJBkVO3+OsfgsNr5Pb5sfJax9NWdKL5t+FsjNU8PnOwTe6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGoJD5Wg0an3+kBBPYPaGBwoLuXMB8GA1UdIwQY
MBaAFAa37e9hhYcjxK3r4+5aifcAWNX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUt
ODk1NTFlOGNjZTEyLzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wMTBjYTEtNWIzMC00YmFmLTgzMWUtODk1NTFlOGNjZTEy
LzEvQnJmdDcyR0ZoeVBFcmV2ajdscUo5d0JZMWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisrt9cww
t/6LKJ+XlgOWFu+OHCDElSY1F4dnIxv+oWBdH/Fh+1+PuhHvpRPsWIN2rUVb8Dt2
YiRc3nU586O7C8oDrpasJpK5GQ7LqwKvlMojnB4SwdctYAKwrW+ShTnrzxbWJlV2
gSFaFGOrhYNxUDbKfd3hf3TRsL2egtVqWjEnA55B9tclqTQOurImEq4wN344QllB
ou0azpUAlORSfLrBOOqpx/07JWYOMi3xVNt5qY9E3Q3L37MK7CylN2nSVTP5WAaE
VvURb4PhHWX66Xj9wljSmiXYMBp59yGViNm76t515nKD5BXYaaAovr8aX0MoIcwi
WUsOoOMhD18BoQ==
-----END CERTIFICATE-----