Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File:                     EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier:          s1SpUXAud7hq1gzHRz3LNcYYnSW6qaNjrnGHpAXgAg8=
Subject key identifier:   70:63:B8:71:C4:43:85:79:D7:46:83:C9:EA:A5:B2:21:80:FF:47:20
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       01962E61DF5D69BE745C403EE375ABBD7D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=)
                          2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: Lf4bpRN6lvX/eSkDfFko+SeJxcJrEJ5MVUpAMYtSCOo=)
                          3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=)
                          4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=)
                          5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=)
                          6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=)
                          7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:5d:69:be:74:5c:40:3e:e3:75:ab:bd:7d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=7063b871c4438579d74683c9eaa5b22180ff4720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:62:4a:f9:e0:f2:56:4d:b5:44:71:9a:1d:
                    33:fe:e6:7f:80:cf:bd:10:61:d6:43:ec:95:31:5b:
                    0d:0b:63:13:59:b3:64:81:bb:33:8d:5e:a1:dd:fd:
                    8c:83:df:0e:21:73:bf:3b:c4:cc:c8:6c:bd:f0:a7:
                    ec:6e:0e:48:90:32:fc:31:55:ec:fb:b0:ae:b4:8c:
                    f4:19:7a:0f:c6:0d:d4:8a:75:0b:92:7b:2b:b9:b8:
                    de:5c:51:2a:df:de:86:7e:76:b7:2d:f6:08:92:db:
                    75:e8:b3:5f:7d:a2:64:a9:f2:32:00:bf:2d:2b:5d:
                    23:43:12:86:bc:46:a6:7a:5e:52:83:cb:24:50:1e:
                    79:9f:a2:ab:e2:90:af:92:cf:4c:74:e0:3f:a9:b5:
                    98:c6:ee:1f:80:2f:d6:0c:b0:79:ed:ba:b6:fd:34:
                    97:35:3d:f9:e0:bc:b7:b4:79:1c:db:40:8e:37:fb:
                    83:f8:00:83:3d:f4:46:ec:d3:11:16:8b:e9:f2:59:
                    3a:f7:70:dc:f6:ad:a9:18:cb:c0:90:f3:4c:51:df:
                    d0:2c:39:75:ed:3f:f4:fe:c4:99:bd:57:17:8d:95:
                    c6:6f:20:61:95:b2:2f:01:47:ff:30:60:c8:dc:74:
                    e2:94:08:27:c5:b6:1f:56:74:77:08:22:cd:f0:c2:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:B8:71:C4:43:85:79:D7:46:83:C9:EA:A5:B2:21:80:FF:47:20
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:69:05:3b:45:0e:df:eb:49:f9:3a:b1:87:1d:57:2a:ca:58:
         1b:91:87:d2:c3:62:fa:08:79:d0:24:35:b3:73:8c:7b:c1:70:
         0c:a2:b4:df:7b:0b:1e:96:0f:80:35:74:83:94:26:64:d3:45:
         80:f3:d6:b1:0a:0c:e1:05:1a:c1:76:99:25:66:67:3b:75:4d:
         16:09:d4:44:04:08:04:f8:aa:de:3b:84:5b:ee:53:42:d9:78:
         a3:cb:89:04:56:d7:ed:e5:68:37:88:88:14:ad:2c:5b:dc:f1:
         40:f3:0b:cc:5c:4d:6b:3c:5b:b7:6c:d2:f4:6f:bf:a4:8a:5c:
         61:22:06:f6:64:9e:96:de:c6:69:70:00:a1:18:5b:ed:85:3a:
         c0:bb:fa:fa:21:a7:4a:4b:27:45:bd:18:4d:87:da:3a:29:87:
         be:b2:e8:47:92:1a:0e:7d:04:e6:7c:02:06:4f:50:7e:b9:8e:
         64:de:03:ef:36:56:6b:49:e9:47:66:81:67:a7:bc:cb:32:c8:
         74:17:d7:4e:2d:cb:b3:28:f3:7b:73:aa:3e:f1:1e:30:5c:63:
         22:79:1f:76:11:f0:5e:a1:e4:91:02:31:b2:69:c4:f1:a8:f3:
         56:67:f4:24:c0:19:f9:27:31:9a:e9:b7:3b:a0:b0:ee:07:cb:
         2d:31:2a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd9dab50XEA+43WrvX0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm
YjYzMmYwHhcNMjUwNDEzMDkwMTI3WhcNMjUwNDE0MDkwMTI3WjAzMTEwLwYDVQQD
Eyg3MDYzYjg3MWM0NDM4NTc5ZDc0NjgzYzllYWE1YjIyMTgwZmY0NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX1iSvng8lZNtURxmh0z/uZ/gM+9
EGHWQ+yVMVsNC2MTWbNkgbszjV6h3f2Mg98OIXO/O8TMyGy98Kfsbg5IkDL8MVXs
+7CutIz0GXoPxg3UinULknsrubjeXFEq396Gfna3LfYIktt16LNffaJkqfIyAL8t
K10jQxKGvEamel5Sg8skUB55n6Kr4pCvks9MdOA/qbWYxu4fgC/WDLB57bq2/TSX
NT354Ly3tHkc20CON/uD+ACDPfRG7NMRFovp8lk693Dc9q2pGMvAkPNMUd/QLDl1
7T/0/sSZvVcXjZXGbyBhlbIvAUf/MGDI3HTilAgnxbYfVnR3CCLN8MLjPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBjuHHEQ4V510aDyeqlsiGA/0cgMB8GA1UdIwQY
MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt
MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl
LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWkFO0UO
3+tJ+Tqxhx1XKspYG5GH0sNi+gh50CQ1s3OMe8FwDKK033sLHpYPgDV0g5QmZNNF
gPPWsQoM4QUawXaZJWZnO3VNFgnURAQIBPiq3juEW+5TQtl4o8uJBFbX7eVoN4iI
FK0sW9zxQPMLzFxNazxbt2zS9G+/pIpcYSIG9mSelt7GaXAAoRhb7YU6wLv6+iGn
SksnRb0YTYfaOimHvrLoR5IaDn0E5nwCBk9QfrmOZN4D7zZWa0npR2aBZ6e8yzLI
dBfXTi3Lsyjze3OqPvEeMFxjInkfdhHwXqHkkQIxsmnE8ajzVmf0JMAZ+Scxmum3
O6Cw7gfLLTEqIw==
-----END CERTIFICATE-----