Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          LejbkECdcg7jPxxIkxz2d0nqQ0acw1BujrWrclC7ysk=
Subject key identifier:   A6:57:47:B1:BC:9E:B7:4D:B0:41:B6:09:61:87:5C:9B:1E:0B:C8:F8
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01962E99519F1D2D10AA930270990610E3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          0EB2
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: RsX4iEi1DGFqVcA63iq5sP59oWp6xrGO9a2ax6eZEDU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:9f:1d:2d:10:aa:93:02:70:99:06:10:e3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=a65747b1bc9eb74db041b60961875c9b1e0bc8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:08:07:06:8d:27:75:99:58:62:0c:69:ce:
                    be:45:13:9e:37:38:c4:cd:63:13:4f:a9:7e:b1:0d:
                    bd:1e:28:7d:39:09:45:c1:a2:39:17:2c:81:31:af:
                    33:26:20:8d:58:9e:2a:aa:6a:16:cc:ae:a6:7c:b0:
                    a9:af:d8:23:e0:12:62:37:37:28:2f:bc:e4:51:db:
                    a9:0a:f1:c0:89:93:78:34:8c:e8:50:fc:b1:eb:db:
                    b5:e3:04:24:b0:c3:dc:40:8b:0a:f7:b2:52:62:5a:
                    05:ee:ea:f7:dc:4a:94:44:eb:cf:14:25:c6:57:62:
                    0d:82:65:11:42:f4:9a:e2:4c:4f:db:94:3a:cc:bb:
                    5b:3d:0b:5e:c9:c0:2c:3f:bc:2f:b2:c2:b3:53:c6:
                    72:3e:7a:dc:10:e9:03:e3:89:6a:7b:03:3e:e3:c1:
                    fc:eb:1d:f8:46:fe:29:c2:e1:9c:7f:f6:d3:e5:21:
                    cf:cc:6e:7e:75:fa:05:d8:db:9f:69:f2:25:60:f0:
                    30:65:fe:a9:6c:e9:43:bd:6d:ca:2b:1f:a9:16:5b:
                    de:6e:16:25:27:1d:6d:1a:d9:fa:d9:e9:af:98:fe:
                    2e:87:5b:9b:42:6e:46:de:0a:7f:fd:c1:4d:bb:6e:
                    5e:05:8d:22:c4:e4:f9:bb:9d:e5:cc:62:94:96:71:
                    97:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:57:47:B1:BC:9E:B7:4D:B0:41:B6:09:61:87:5C:9B:1E:0B:C8:F8
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:c0:66:79:69:62:ec:04:67:3c:09:99:12:ff:43:57:ba:
         97:1e:b7:cd:91:44:04:7a:00:84:60:df:73:d5:b3:14:48:c6:
         82:7c:cb:b4:53:b1:d5:ca:e7:b4:c3:a1:be:83:8f:ca:ce:08:
         10:d0:52:0f:25:bb:d0:95:4f:64:6d:53:f7:a1:9e:53:66:90:
         95:ec:23:da:9b:93:1a:fe:45:88:4c:6e:b5:04:66:59:03:cd:
         75:e8:4b:fd:6a:b4:cc:d2:cc:e0:e5:89:4a:16:2b:0d:c1:1b:
         71:be:ba:bf:2c:fb:38:bb:2c:45:fe:b3:74:96:46:1a:f3:cd:
         4e:a8:0b:40:4a:88:e6:55:45:ad:a8:a2:9b:df:5e:e5:d7:12:
         c8:22:4c:9e:ef:2c:fd:95:3d:ba:d9:4a:59:4e:78:2d:2c:73:
         0f:2b:c4:8b:a9:d0:d2:15:57:f7:5b:e4:c7:2d:04:75:da:a6:
         07:d3:48:2f:b3:57:66:18:e6:29:23:e9:b8:c6:7f:f3:6b:72:
         e2:85:5d:74:53:87:3b:78:5b:8d:57:72:02:eb:68:fa:ec:3c:
         dc:94:f2:70:16:e8:3a:3f:13:b6:04:3d:bd:5d:13:06:f2:75:
         54:63:1f:5f:93:b1:4a:a7:64:c2:fa:ff:5d:78:c0:9f:f5:56:
         40:f4:ce:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVGfHS0QqpMCcJkGEOO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJjYzQ0MDA2NjRiYWIwYjA5MWJjMzk5OGMwZGUxZmVm
NzE1OWIwHhcNMjUwNDEzMTAwMjAxWhcNMjUwNDE0MTAwMjAxWjAzMTEwLwYDVQQD
EyhhNjU3NDdiMWJjOWViNzRkYjA0MWI2MDk2MTg3NWM5YjFlMGJjOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ4IBwaNJ3WZWGIMac6+RROeNzjE
zWMTT6l+sQ29Hih9OQlFwaI5FyyBMa8zJiCNWJ4qqmoWzK6mfLCpr9gj4BJiNzco
L7zkUdupCvHAiZN4NIzoUPyx69u14wQksMPcQIsK97JSYloF7ur33EqUROvPFCXG
V2INgmURQvSa4kxP25Q6zLtbPQteycAsP7wvssKzU8ZyPnrcEOkD44lqewM+48H8
6x34Rv4pwuGcf/bT5SHPzG5+dfoF2NufafIlYPAwZf6pbOlDvW3KKx+pFlvebhYl
Jx1tGtn62emvmP4uh1ubQm5G3gp//cFNu25eBY0ixOT5u53lzGKUlnGXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZXR7G8nrdNsEG2CWGHXJseC8j4MB8GA1UdIwQY
MBaAFOyyzEQAZkurCwkbw5mMDeH+9xWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEt
ODk4NDZkZGQ5NDFjLzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jY2MzODUtMjBlMS00YzY4LTliYTEtODk4NDZkZGQ5NDFj
LzEvN0xMTVJBQm1TNnNMQ1J2RG1Zd040ZjczRlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC/AZnlp
YuwEZzwJmRL/Q1e6lx63zZFEBHoAhGDfc9WzFEjGgnzLtFOx1crntMOhvoOPys4I
ENBSDyW70JVPZG1T96GeU2aQlewj2puTGv5FiExutQRmWQPNdehL/Wq0zNLM4OWJ
ShYrDcEbcb66vyz7OLssRf6zdJZGGvPNTqgLQEqI5lVFraiim99e5dcSyCJMnu8s
/ZU9utlKWU54LSxzDyvEi6nQ0hVX91vkxy0EddqmB9NIL7NXZhjmKSPpuMZ/82ty
4oVddFOHO3hbjVdyAuto+uw83JTycBboOj8TtgQ9vV0TBvJ1VGMfX5OxSqdkwvr/
XXjAn/VWQPTOfA==
-----END CERTIFICATE-----