Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
File:                     7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft (raw, json)
Hash identifier:          4HtlbpaCgqyGkPFFrHpwbftQg8X8MHxU9jlIKzbr7r8=
Subject key identifier:   40:23:70:62:66:37:DC:D0:1B:34:28:6F:2A:CD:64:83:67:1B:CD:41
Authority key identifier: ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C
Certificate issuer:       /CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
Certificate serial:       01962ECFDEAB5D441439F1D8C1F2855844D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft
Manifest number:          0465
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl (hash: VnpE8biR0dj7XpRJvIJR4nB9L69Ahnt4WKyrS+0TWQc=)
                          2: ph4TcOIZbEQDwoxIlVRI4f-t_yg.roa (hash: I5D0ovDZGZlRmOfOF4fYKNNsYs4EU8p2jyxoinIP2U4=)
                          3: vZaHpkts3TjqsPjS8msZ10JjtWU.roa (hash: G1otwZGxfTUi6xjTYZ7QeCW5+jjbNs8UtP3BujI7U6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:ab:5d:44:14:39:f1:d8:c1:f2:85:58:44:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed624c590027a5a8c9eeb369726e4a630cdf414c
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=402370626637dcd01b34286f2acd6483671bcd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:68:2e:0e:8d:a9:8c:d3:56:8a:81:ac:74:
                    cc:58:09:f9:ea:a1:49:91:1d:49:47:63:6b:93:28:
                    c8:7e:18:3f:4d:f5:74:d5:ce:25:c8:0a:cf:b0:38:
                    5b:73:7d:0c:38:21:af:25:bd:88:5e:2d:8c:11:51:
                    14:5e:e6:9e:4b:3e:17:f9:1c:ef:03:77:86:80:74:
                    cd:c7:ff:a3:4c:b2:a8:41:27:ef:ef:e2:67:ca:7e:
                    1b:78:28:f5:e0:99:fb:ee:92:88:9c:65:91:39:27:
                    5a:d6:19:47:56:e1:0d:68:4c:1c:c7:c3:da:c6:69:
                    3d:3d:ac:85:e1:bf:41:f3:8d:17:af:6d:c9:58:d8:
                    c6:0d:ed:54:10:a3:2c:a0:a2:86:f1:f2:71:67:54:
                    12:aa:eb:a2:a4:b7:c2:15:1c:3e:3c:77:dc:37:9b:
                    d1:e1:f3:eb:43:91:e2:f0:50:62:de:c2:ba:29:0e:
                    2d:15:67:21:ce:83:4a:b7:72:96:6a:71:a8:e4:97:
                    ac:92:8b:68:c4:eb:f7:30:2a:27:45:5e:8d:1e:0a:
                    4d:9d:cb:6f:0e:1d:24:ad:14:5f:de:39:74:f0:df:
                    9f:dd:b9:56:da:ed:c4:0b:59:60:48:b1:01:59:7a:
                    c9:1b:b5:25:2a:21:69:b9:86:5c:07:75:eb:81:b0:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:70:62:66:37:DC:D0:1B:34:28:6F:2A:CD:64:83:67:1B:CD:41
            X509v3 Authority Key Identifier:
                keyid:ED:62:4C:59:00:27:A5:A8:C9:EE:B3:69:72:6E:4A:63:0C:DF:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WJMWQAnpajJ7rNpcm5KYwzfQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8db67a-c4fc-4c2c-9978-a7be5fa0ff65/1/7WJMWQAnpajJ7rNpcm5KYwzfQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:ee:69:25:7c:b4:70:f9:1f:d0:e6:d9:90:e0:06:b4:b0:
         42:e0:8d:54:c3:88:41:01:37:80:5b:12:a9:c9:95:47:29:62:
         31:de:0e:9d:1e:5d:ff:79:10:de:b8:36:fc:fe:a8:21:7a:38:
         a0:ad:bc:f6:2d:25:81:a0:83:7a:de:e0:fe:cc:7b:04:ec:95:
         61:12:ab:e1:12:a7:2a:f3:5b:69:14:25:9a:af:4a:0a:95:ec:
         bb:41:21:f1:dc:13:b5:6d:e7:40:ec:06:e2:de:cc:12:a1:14:
         bd:bd:4e:23:6a:13:c5:5a:66:27:26:c6:12:3a:e1:89:5e:c6:
         fa:6d:0d:0b:61:45:27:2f:ec:22:b4:59:87:f5:45:b0:41:ef:
         4c:f1:77:f0:6d:c3:3f:b0:cb:6d:fb:6b:c8:a6:d0:67:54:90:
         79:c4:46:34:be:45:79:6c:e3:7b:e6:1a:3c:ba:86:31:d8:ee:
         07:3c:23:2c:0c:e8:9d:7b:e2:1e:de:01:b9:8b:52:f2:a6:5a:
         bc:2d:f4:3c:bd:2e:e4:d9:53:f4:44:12:7e:28:79:7d:98:b3:
         d2:90:1a:49:40:cd:fa:8f:5c:89:20:73:8d:47:02:9a:77:d9:
         09:4f:c3:c6:56:5f:fc:c3:67:1c:8e:c5:2a:5c:c3:b1:d6:31:
         95:13:b4:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz96rXUQUOfHYwfKFWETUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjI0YzU5MDAyN2E1YThjOWVlYjM2OTcyNmU0YTYzMGNk
ZjQxNGMwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
Eyg0MDIzNzA2MjY2MzdkY2QwMWIzNDI4NmYyYWNkNjQ4MzY3MWJjZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr5oLg6NqYzTVoqBrHTMWAn56qFJ
kR1JR2NrkyjIfhg/TfV01c4lyArPsDhbc30MOCGvJb2IXi2MEVEUXuaeSz4X+Rzv
A3eGgHTNx/+jTLKoQSfv7+Jnyn4beCj14Jn77pKInGWROSda1hlHVuENaEwcx8Pa
xmk9PayF4b9B840Xr23JWNjGDe1UEKMsoKKG8fJxZ1QSquuipLfCFRw+PHfcN5vR
4fPrQ5Hi8FBi3sK6KQ4tFWchzoNKt3KWanGo5JeskotoxOv3MConRV6NHgpNnctv
Dh0krRRf3jl08N+f3blW2u3EC1lgSLEBWXrJG7UlKiFpuYZcB3XrgbChmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAjcGJmN9zQGzQobyrNZINnG81BMB8GA1UdIwQY
MBaAFO1iTFkAJ6Woye6zaXJuSmMM30FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5Nzgt
YTdiZTVmYTBmZjY1LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy84ZGI2N2EtYzRmYy00YzJjLTk5NzgtYTdiZTVmYTBmZjY1
LzEvN1dKTVdRQW5wYWpKN3JOcGNtNUtZd3pmUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDDuaSV8
tHD5H9Dm2ZDgBrSwQuCNVMOIQQE3gFsSqcmVRyliMd4OnR5d/3kQ3rg2/P6oIXo4
oK289i0lgaCDet7g/sx7BOyVYRKr4RKnKvNbaRQlmq9KCpXsu0Eh8dwTtW3nQOwG
4t7MEqEUvb1OI2oTxVpmJybGEjrhiV7G+m0NC2FFJy/sIrRZh/VFsEHvTPF38G3D
P7DLbftryKbQZ1SQecRGNL5FeWzje+YaPLqGMdjuBzwjLAzonXviHt4BuYtS8qZa
vC30PL0u5NlT9EQSfih5fZiz0pAaSUDN+o9ciSBzjUcCmnfZCU/DxlZf/MNnHI7F
KlzDsdYxlRO0IQ==
-----END CERTIFICATE-----