Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File:                     rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier:          rb9fq4DvlNs36guSsBNow2vvjpnj2byhqlSzL24UGiQ=
Subject key identifier:   D8:34:6B:BB:D5:A0:73:C5:A2:F0:BF:95:F8:89:AA:6D:7D:20:8C:DD
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer:       /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial:       01962F74543A38C41C0DE85CD094984CDD65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number:          07D0
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
                          2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: JJiu0dTGK9/ERKPgmmQVQn02wtSqDuyklXBCUrL7dDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:3a:38:c4:1c:0d:e8:5c:d0:94:98:4c:dd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=d8346bbbd5a073c5a2f0bf95f889aa6d7d208cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:1a:ce:c5:22:60:b3:23:ec:51:5c:b4:3b:
                    49:f2:c0:fd:e5:61:a9:73:9e:cf:88:13:c2:82:2e:
                    dc:bb:df:0f:24:8c:c7:55:fd:d7:9e:9b:f7:c5:38:
                    cc:4b:90:20:b4:81:a4:43:bf:fc:a0:a9:01:3c:72:
                    58:a9:6f:6a:3c:1e:f4:89:e8:4e:d4:a8:86:3b:70:
                    f9:35:70:4b:64:76:e4:14:92:4b:db:89:d3:8b:70:
                    1f:b6:0a:bf:b1:28:55:57:8a:8c:c4:27:98:ce:c0:
                    2f:3b:b1:dc:36:c9:b4:a1:36:99:e2:42:04:68:33:
                    f1:ea:45:45:6e:c5:95:15:f7:8d:63:99:3b:5b:ac:
                    f2:95:18:11:5d:6e:9f:f1:09:b9:b8:cf:2a:a8:79:
                    8e:e9:46:e9:c2:73:07:5b:d6:0f:d2:28:06:c3:af:
                    28:85:dd:a2:f7:da:e4:b2:bb:7c:f7:40:b2:cf:d5:
                    c5:cb:2b:4e:ca:73:25:e3:79:19:55:9d:6c:7d:c5:
                    10:a1:e1:2c:ae:8c:68:e5:13:6f:69:66:45:a5:17:
                    1f:33:d3:79:16:b0:ea:26:23:39:f5:56:86:a8:c6:
                    bc:7b:4c:dd:93:1b:a6:ae:34:13:e0:66:13:a3:49:
                    b6:15:a2:b8:df:75:91:19:de:83:13:5d:b8:12:d7:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:6B:BB:D5:A0:73:C5:A2:F0:BF:95:F8:89:AA:6D:7D:20:8C:DD
            X509v3 Authority Key Identifier:
                keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c6:a2:d3:03:6a:a1:05:be:69:59:eb:23:76:ab:8f:c6:cc:
         3d:65:d4:2c:77:51:44:6c:7d:25:55:f0:7a:80:b0:2d:0b:29:
         e9:55:9b:19:5b:c9:49:68:b1:c7:53:36:64:d6:8a:68:14:22:
         aa:ca:5f:b6:df:9c:1a:eb:e0:06:56:f8:0f:43:f1:0a:6c:5c:
         5e:96:f1:d6:98:41:26:7e:0d:d5:33:00:da:0e:d0:ba:96:a3:
         1e:6d:d1:1e:fd:31:f2:e3:6d:30:a0:8b:29:b0:4d:23:b9:6c:
         d9:68:77:5a:83:2e:ed:17:34:3c:45:76:82:d6:21:df:a9:8b:
         0f:33:52:3f:b9:2c:8a:ae:3a:98:7c:12:94:cd:f1:47:76:bf:
         22:1a:a9:80:6b:78:92:79:0f:d2:e2:d1:67:98:47:83:9d:4b:
         d1:13:30:c8:01:a6:c9:33:e6:2b:b6:d3:18:dc:8d:4a:05:a6:
         4c:bf:b5:ab:fb:91:32:d6:48:fa:9a:5e:b2:15:e4:27:95:6f:
         b6:9c:5b:e2:05:c6:cc:f1:f2:36:5c:f1:49:05:e6:5b:36:e3:
         15:a5:f1:0c:87:ed:5e:e0:f7:61:58:9b:70:b9:73:e1:61:8e:
         7a:cb:90:f9:89:db:6b:05:6e:e2:84:7e:10:2b:e2:f0:06:51:
         e6:4a:2d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFQ6OMQcDehc0JSYTN1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2
MzA1YTgwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EyhkODM0NmJiYmQ1YTA3M2M1YTJmMGJmOTVmODg5YWE2ZDdkMjA4Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44oazsUiYLMj7FFctDtJ8sD95WGp
c57PiBPCgi7cu98PJIzHVf3Xnpv3xTjMS5AgtIGkQ7/8oKkBPHJYqW9qPB70iehO
1KiGO3D5NXBLZHbkFJJL24nTi3Aftgq/sShVV4qMxCeYzsAvO7HcNsm0oTaZ4kIE
aDPx6kVFbsWVFfeNY5k7W6zylRgRXW6f8Qm5uM8qqHmO6UbpwnMHW9YP0igGw68o
hd2i99rksrt890Cyz9XFyytOynMl43kZVZ1sfcUQoeEsroxo5RNvaWZFpRcfM9N5
FrDqJiM59VaGqMa8e0zdkxumrjQT4GYTo0m2FaK433WRGd6DE124Ete+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg0a7vVoHPFovC/lfiJqm19IIzdMB8GA1UdIwQY
MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt
YWQ0M2NjZDdhYWU4LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4
LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMai0wNq
oQW+aVnrI3arj8bMPWXULHdRRGx9JVXweoCwLQsp6VWbGVvJSWixx1M2ZNaKaBQi
qspftt+cGuvgBlb4D0PxCmxcXpbx1phBJn4N1TMA2g7QupajHm3RHv0x8uNtMKCL
KbBNI7ls2Wh3WoMu7Rc0PEV2gtYh36mLDzNSP7ksiq46mHwSlM3xR3a/IhqpgGt4
knkP0uLRZ5hHg51L0RMwyAGmyTPmK7bTGNyNSgWmTL+1q/uRMtZI+ppeshXkJ5Vv
tpxb4gXGzPHyNlzxSQXmWzbjFaXxDIftXuD3YVibcLlz4WGOesuQ+YnbawVu4oR+
ECvi8AZR5kotzw==
-----END CERTIFICATE-----