Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File:                     fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier:          1vvceaPBNdCvHmuOxWX/rXqD7y98sXoCsAZBsP/dKSw=
Subject key identifier:   79:F8:38:23:9F:CD:87:4F:42:4B:41:7B:79:8C:A8:0F:7E:58:A1:7E
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer:       /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial:       01962DF425B71F508136F90B95B6260F67C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: 9G0Oz8xgnd4s3qG+X2EDyED4LlyY9/Gw/qGV+ku7eGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:b7:1f:50:81:36:f9:0b:95:b6:26:0f:67:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=79f838239fcd874f424b417b798ca80f7e58a17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:cc:b8:d1:90:13:79:1c:62:b3:ac:96:85:
                    60:ae:34:dd:ce:1e:82:1c:2d:a2:b7:40:03:e2:19:
                    9c:fb:f5:98:7d:6f:af:81:8f:04:22:f4:dc:31:ac:
                    f0:3f:85:a6:41:37:f6:35:c8:9e:5d:53:c8:16:7d:
                    80:5b:b7:8d:4f:88:db:19:b4:78:ed:30:b4:84:dd:
                    b9:eb:8a:19:6a:e9:81:07:3b:a8:d4:e6:76:eb:62:
                    e7:3a:06:50:11:a4:6e:e8:46:d2:d5:20:60:4e:9d:
                    c5:41:7a:0e:73:e3:76:27:0e:0d:0c:dc:12:18:2e:
                    6e:ea:37:99:83:4a:47:49:1b:09:58:63:39:27:94:
                    7c:ec:1f:24:f0:ad:01:31:5d:9c:d6:cf:6e:5f:ac:
                    14:1d:7c:29:18:d0:20:1c:ab:f7:9c:bb:42:e2:2d:
                    60:7b:85:80:28:19:c9:b4:47:77:c4:35:0b:af:8e:
                    f2:84:72:d2:89:82:ff:af:a0:38:fd:51:67:5c:e4:
                    ef:ba:f7:a9:b3:cb:30:64:8c:9c:c2:e5:36:d6:86:
                    61:b2:fc:89:8a:72:a2:41:2f:cf:1d:41:6c:a6:97:
                    d1:1d:e0:66:96:20:31:8e:87:90:a1:43:c5:c1:98:
                    cd:d3:ba:a2:32:1d:92:9b:bc:6d:c0:85:78:62:1b:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F8:38:23:9F:CD:87:4F:42:4B:41:7B:79:8C:A8:0F:7E:58:A1:7E
            X509v3 Authority Key Identifier:
                keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:78:4c:79:26:53:74:1e:b9:dd:d6:5f:70:da:6a:2d:67:
         11:73:75:ed:95:7c:b7:1b:9e:ff:45:95:3e:b8:08:7a:1f:af:
         f7:e3:35:e8:a0:94:c7:93:2f:00:62:db:0f:b5:d0:60:a8:c5:
         fc:87:1b:b5:1f:43:5c:14:23:78:a6:0b:85:6c:82:f7:f2:24:
         38:47:db:29:00:40:a0:fb:2a:9b:22:f9:22:2e:d1:59:ed:5e:
         9a:bd:15:5e:c4:98:a2:69:f2:ea:1a:2d:69:ba:35:8f:a6:a0:
         f2:3a:93:a8:41:e0:88:6b:7a:75:8b:ec:e1:c4:58:e2:14:e0:
         0e:f5:03:27:dc:c1:d4:0e:67:54:df:6e:19:eb:5d:27:b2:07:
         9a:2c:99:bf:d3:71:d3:43:35:88:99:8e:cb:f2:5d:46:45:b1:
         18:11:d7:7f:f6:16:e0:20:92:a8:3b:37:7b:96:f8:1f:37:47:
         44:03:fc:a8:63:cd:49:31:a9:2b:66:55:08:33:db:0c:94:23:
         d6:5b:db:ea:c5:dd:7c:bd:89:c6:b9:eb:24:6f:1d:e2:9e:3f:
         d2:ad:67:6b:08:0e:c1:b2:f2:1c:c0:c6:20:90:bf:e6:f7:48:
         43:37:5d:1d:91:50:78:bd:eb:4c:71:b2:19:f5:49:e9:00:99:
         d7:63:7a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CW3H1CBNvkLlbYmD2fIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0
NTkwZWIwHhcNMjUwNDEzMDcwMTM3WhcNMjUwNDE0MDcwMTM3WjAzMTEwLwYDVQQD
Eyg3OWY4MzgyMzlmY2Q4NzRmNDI0YjQxN2I3OThjYTgwZjdlNThhMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrzMuNGQE3kcYrOsloVgrjTdzh6C
HC2it0AD4hmc+/WYfW+vgY8EIvTcMazwP4WmQTf2NcieXVPIFn2AW7eNT4jbGbR4
7TC0hN2564oZaumBBzuo1OZ262LnOgZQEaRu6EbS1SBgTp3FQXoOc+N2Jw4NDNwS
GC5u6jeZg0pHSRsJWGM5J5R87B8k8K0BMV2c1s9uX6wUHXwpGNAgHKv3nLtC4i1g
e4WAKBnJtEd3xDULr47yhHLSiYL/r6A4/VFnXOTvuveps8swZIycwuU21oZhsvyJ
inKiQS/PHUFsppfRHeBmliAxjoeQoUPFwZjN07qiMh2Sm7xtwIV4YhuDeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn4OCOfzYdPQktBe3mMqA9+WKF+MB8GA1UdIwQY
MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt
NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw
LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrx4THkm
U3Qeud3WX3Daai1nEXN17ZV8txue/0WVPrgIeh+v9+M16KCUx5MvAGLbD7XQYKjF
/IcbtR9DXBQjeKYLhWyC9/IkOEfbKQBAoPsqmyL5Ii7RWe1emr0VXsSYomny6hot
abo1j6ag8jqTqEHgiGt6dYvs4cRY4hTgDvUDJ9zB1A5nVN9uGetdJ7IHmiyZv9Nx
00M1iJmOy/JdRkWxGBHXf/YW4CCSqDs3e5b4HzdHRAP8qGPNSTGpK2ZVCDPbDJQj
1lvb6sXdfL2JxrnrJG8d4p4/0q1nawgOwbLyHMDGIJC/5vdIQzddHZFQeL3rTHGy
GfVJ6QCZ12N6pQ==
-----END CERTIFICATE-----