Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
File:                     s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft (raw, json)
Hash identifier:          BUHUCBx3jcLhMSpRGeibd01gpnUvYsDCGWBQP8JF9oM=
Subject key identifier:   67:F8:9B:2C:ED:40:59:29:31:D9:AC:7A:19:AC:50:D2:82:1B:15:DD
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Certificate issuer:       /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial:       01962DF3FD74FF508F91E585F8F45A6CD703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 5APXg_wiW_V1QU4DTTNO_V06dfg.roa (hash: TZwqI4bOTkCy7vwcX2/rFQxdaiYIWAZfVHV4G7nb07k=)
                          2: s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl (hash: szwp8tiGd1ZUAaY+KFn95N35uLBigJYfUVtS5n4QlqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fd:74:ff:50:8f:91:e5:85:f8:f4:5a:6c:d7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=67f89b2ced40592931d9ac7a19ac50d2821b15dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:7e:4f:82:8f:a4:cc:01:74:06:8f:2c:96:
                    da:6e:c8:51:9d:fe:37:fd:eb:60:2f:27:16:31:fe:
                    5b:85:24:75:f2:06:60:05:c5:99:8a:15:79:3e:52:
                    02:54:9c:27:96:09:96:54:ff:97:d0:af:58:49:bd:
                    b7:63:f9:3f:ec:d1:33:58:36:25:51:43:80:0d:e0:
                    95:92:92:ea:e7:37:32:f2:d3:99:a3:f1:45:b5:77:
                    28:4f:c8:76:61:61:a1:a3:ef:6a:f8:f0:76:b3:33:
                    09:cb:e4:ec:e4:56:f6:f6:7a:6a:e8:d1:69:88:09:
                    44:14:f2:f6:09:09:85:e1:fc:bc:a0:df:08:7e:60:
                    b5:d2:39:10:71:ce:c2:9d:16:5f:43:5b:4e:15:9a:
                    95:4e:91:e6:96:ce:5e:e5:b7:61:85:aa:72:8b:34:
                    99:61:21:cf:a6:27:3b:23:a7:85:9a:8c:13:8e:3b:
                    05:64:83:0f:33:da:29:ef:b7:ae:5b:ee:e1:66:c6:
                    a6:0b:68:f9:4c:14:18:9d:87:67:0e:be:4b:98:a5:
                    67:49:fe:c8:4c:c0:f5:e6:aa:f9:a1:6f:62:7b:69:
                    49:51:63:ea:8d:5a:88:e3:47:9b:93:a5:0a:c6:10:
                    65:66:84:1b:f7:7c:56:58:f5:57:42:6d:75:b0:63:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:9B:2C:ED:40:59:29:31:D9:AC:7A:19:AC:50:D2:82:1B:15:DD
            X509v3 Authority Key Identifier:
                keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:44:16:9c:ec:d6:16:ab:88:9e:2f:7f:55:97:54:8c:e5:
         c5:27:0d:ba:f1:73:77:84:96:b9:82:73:a9:19:cb:e3:ef:ef:
         7d:51:24:3a:e4:eb:a0:4a:8a:ca:af:2d:48:10:ea:88:21:d4:
         bd:b9:c6:8c:08:5f:70:9e:eb:3e:06:d1:ad:7f:95:1c:33:49:
         f2:db:8c:93:90:ee:3a:fa:90:5b:dc:bb:d3:41:3c:c3:81:98:
         02:89:f7:39:dc:a9:2f:da:fa:31:bf:79:e9:5f:e4:4a:43:2c:
         f5:6c:2c:11:2d:b6:ee:25:10:3d:bd:a6:70:cc:64:06:2d:ac:
         7a:99:44:01:f1:67:90:5e:5b:a1:a1:ed:ff:8e:d0:02:75:08:
         64:67:31:32:5f:5c:cf:d5:4a:70:31:67:5c:32:b6:66:6c:f0:
         86:9a:86:c4:6a:56:14:0f:b7:ee:01:18:fd:91:75:55:9a:18:
         9d:a7:6d:fe:b3:40:06:2b:0f:c8:44:46:92:01:11:05:8c:88:
         52:1c:6e:24:07:45:0e:52:dc:5e:08:ae:93:31:a4:88:86:bd:
         33:36:47:55:d9:0e:f1:43:1e:90:c4:59:0e:71:3a:39:78:75:
         c8:17:31:87:fe:ed:6b:5f:0d:f0:7a:53:96:83:67:ab:9a:14:
         94:16:c0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/10/1CPkeWF+PRabNcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVkMmI0M2FjYzBkOWYwN2FhMDBhYTkwZjAyNWM5NmQ1
Y2VjMjUwHhcNMjUwNDEzMDcwMTI2WhcNMjUwNDE0MDcwMTI2WjAzMTEwLwYDVQQD
Eyg2N2Y4OWIyY2VkNDA1OTI5MzFkOWFjN2ExOWFjNTBkMjgyMWIxNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJF+T4KPpMwBdAaPLJbabshRnf43
/etgLycWMf5bhSR18gZgBcWZihV5PlICVJwnlgmWVP+X0K9YSb23Y/k/7NEzWDYl
UUOADeCVkpLq5zcy8tOZo/FFtXcoT8h2YWGho+9q+PB2szMJy+Ts5Fb29npq6NFp
iAlEFPL2CQmF4fy8oN8IfmC10jkQcc7CnRZfQ1tOFZqVTpHmls5e5bdhhapyizSZ
YSHPpic7I6eFmowTjjsFZIMPM9op77euW+7hZsamC2j5TBQYnYdnDr5LmKVnSf7I
TMD15qr5oW9ie2lJUWPqjVqI40ebk6UKxhBlZoQb93xWWPVXQm11sGOAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf4myztQFkpMdmsehmsUNKCGxXdMB8GA1UdIwQY
MBaAFLO10rQ6zA2fB6oAqpDwJcltXOwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmIt
MjRiOGMwMmZhODJhLzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wYTkyZGYtYzUwOS00ZTkyLThlMmItMjRiOGMwMmZhODJh
LzEvczdYU3REck1EWjhIcWdDcWtQQWx5VzFjN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN5EFpzs
1hariJ4vf1WXVIzlxScNuvFzd4SWuYJzqRnL4+/vfVEkOuTroEqKyq8tSBDqiCHU
vbnGjAhfcJ7rPgbRrX+VHDNJ8tuMk5DuOvqQW9y700E8w4GYAon3OdypL9r6Mb95
6V/kSkMs9WwsES227iUQPb2mcMxkBi2seplEAfFnkF5boaHt/47QAnUIZGcxMl9c
z9VKcDFnXDK2ZmzwhpqGxGpWFA+37gEY/ZF1VZoYnadt/rNABisPyERGkgERBYyI
UhxuJAdFDlLcXgiukzGkiIa9MzZHVdkO8UMekMRZDnE6OXh1yBcxh/7ta18N8HpT
loNnq5oUlBbAOQ==
-----END CERTIFICATE-----