Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File:                     7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier:          wks8DR02Y+MmyMfqGzxMqy0Vwv/X9ex802q+9yRvofs=
Subject key identifier:   08:79:32:B2:A2:4C:5F:34:FC:F7:1E:11:7D:F7:9C:9B:A4:53:36:24
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer:       /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial:       01962F06B6F45D2001F4A01290F61C3C2579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number:          0F07
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: t892uZbNS0yAwsfEmdHnWc1fnm8eO+9upq9M8ZK2rG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b6:f4:5d:20:01:f4:a0:12:90:f6:1c:3c:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=087932b2a24c5f34fcf71e117df79c9ba4533624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:7c:93:bf:6d:48:03:c9:4e:dc:d9:09:e4:
                    f4:44:a9:37:e0:86:e0:f8:07:40:88:3a:6c:c6:74:
                    b7:3f:1a:03:dc:d2:32:7e:dd:20:a2:6b:14:ae:06:
                    b9:fb:9b:ca:fb:b1:f4:66:4f:93:7f:c7:80:5a:b4:
                    a4:13:61:12:89:77:ff:0c:88:9c:1b:ca:79:25:b8:
                    cb:21:b0:9c:07:0d:ca:82:a9:51:85:bf:d9:1c:70:
                    b9:f2:06:a7:03:c5:18:f9:75:c7:4e:2d:64:ba:bb:
                    d4:4e:95:a9:d7:f2:81:40:e5:2b:4a:29:6e:e5:8f:
                    c3:07:5a:48:24:3b:c8:38:fc:43:70:91:63:25:fc:
                    db:ad:4c:84:47:1c:ae:48:c0:49:d0:3e:cb:6a:99:
                    84:f3:75:c4:c2:8e:e7:f9:77:0d:f0:34:c7:22:0c:
                    e1:34:d0:c7:1e:86:41:19:ed:77:61:53:94:2b:80:
                    bb:1a:93:a6:ad:38:77:65:31:fc:cb:2d:ba:e1:3f:
                    00:64:da:33:b7:27:8f:33:ca:24:b5:e2:c4:fc:66:
                    e9:6a:ca:49:19:0c:82:aa:14:10:25:dc:be:b9:51:
                    70:44:bd:7d:fd:7a:e7:8b:b0:a3:05:d7:97:83:9e:
                    47:4d:28:e5:99:67:19:c2:a9:e5:06:78:71:bb:14:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:32:B2:A2:4C:5F:34:FC:F7:1E:11:7D:F7:9C:9B:A4:53:36:24
            X509v3 Authority Key Identifier:
                keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:1a:69:7c:05:96:30:12:f8:ba:21:2c:d1:64:7d:ec:3b:
         01:93:b1:27:dc:3a:4f:6f:fc:66:ed:f2:90:56:ea:7e:6a:a8:
         fc:c3:fc:7b:72:ed:84:ce:ac:b1:29:a7:9e:db:91:25:91:3a:
         bd:1a:01:59:18:d6:74:d3:82:e2:b7:5a:d2:28:e2:78:86:0a:
         d0:ad:be:89:ba:07:82:3f:ba:c8:51:43:bb:44:73:b5:1c:54:
         4d:59:52:18:2f:19:8f:57:c7:af:44:d4:6b:45:cc:0e:d2:6e:
         a0:5b:07:d9:47:8c:76:71:0f:5f:20:a7:d6:87:4a:0a:32:05:
         bd:a3:42:98:ef:7b:c3:a2:5a:c3:dd:7c:fe:a4:62:d3:b5:e1:
         0a:45:84:a2:29:a9:f8:3d:c9:3c:87:71:b5:94:bd:df:72:ca:
         dd:7e:1a:84:88:df:57:53:4e:41:03:63:ff:03:f7:f8:bd:e4:
         47:c7:20:74:32:af:cc:7e:9b:d8:02:7f:8d:35:7b:f5:1e:bf:
         77:9d:d5:22:60:c3:22:b9:f9:e9:91:5f:29:5c:7f:2c:d2:fd:
         94:bf:1f:f0:f7:ab:86:f7:0b:df:83:df:50:9f:d9:b2:35:4d:
         2f:5d:41:c7:ba:23:96:44:9b:9d:a0:8e:c0:7e:0f:06:c6:ca:
         96:20:ef:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrb0XSAB9KASkPYcPCV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy
ODFiZGQwHhcNMjUwNDEzMTIwMTMxWhcNMjUwNDE0MTIwMTMxWjAzMTEwLwYDVQQD
EygwODc5MzJiMmEyNGM1ZjM0ZmNmNzFlMTE3ZGY3OWM5YmE0NTMzNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLh8k79tSAPJTtzZCeT0RKk34Ibg
+AdAiDpsxnS3PxoD3NIyft0gomsUrga5+5vK+7H0Zk+Tf8eAWrSkE2ESiXf/DIic
G8p5JbjLIbCcBw3KgqlRhb/ZHHC58ganA8UY+XXHTi1kurvUTpWp1/KBQOUrSilu
5Y/DB1pIJDvIOPxDcJFjJfzbrUyERxyuSMBJ0D7LapmE83XEwo7n+XcN8DTHIgzh
NNDHHoZBGe13YVOUK4C7GpOmrTh3ZTH8yy264T8AZNoztyePM8okteLE/GbpaspJ
GQyCqhQQJdy+uVFwRL19/Xrni7CjBdeXg55HTSjlmWcZwqnlBnhxuxSDjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh5MrKiTF80/PceEX33nJukUzYkMB8GA1UdIwQY
MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt
NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2
LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP0aaXwF
ljAS+LohLNFkfew7AZOxJ9w6T2/8Zu3ykFbqfmqo/MP8e3LthM6ssSmnntuRJZE6
vRoBWRjWdNOC4rda0ijieIYK0K2+iboHgj+6yFFDu0RztRxUTVlSGC8Zj1fHr0TU
a0XMDtJuoFsH2UeMdnEPXyCn1odKCjIFvaNCmO97w6Jaw918/qRi07XhCkWEoimp
+D3JPIdxtZS933LK3X4ahIjfV1NOQQNj/wP3+L3kR8cgdDKvzH6b2AJ/jTV79R6/
d53VImDDIrn56ZFfKVx/LNL9lL8f8PerhvcL34PfUJ/ZsjVNL11Bx7ojlkSbnaCO
wH4PBsbKliDvmQ==
-----END CERTIFICATE-----