Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File:                     EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier:          4f9RqIknVqBha2Gp8J1OzXyg7URTKkhC7iQP5impKCg=
Subject key identifier:   98:B3:79:39:88:76:46:7F:B3:54:14:6A:D0:69:0E:9B:28:41:68:AE
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer:       /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial:       01962ECFB5FCDC581C2E52F79B5D077C02AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number:          0FF4
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: YsVk110Lv6Q9bug6RDSeYRYAXE9nUEcBd0KzOzQsUt0=)
                          2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b5:fc:dc:58:1c:2e:52:f7:9b:5d:07:7c:02:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=98b379398876467fb354146ad0690e9b284168ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:3a:3b:fc:2a:0f:c4:86:ca:ae:c8:f7:26:
                    e8:51:ca:54:1f:c2:b0:60:e0:69:24:ab:50:bc:0f:
                    06:78:e6:be:57:df:df:0b:36:b3:5f:dd:e2:2e:a5:
                    ce:f3:05:22:40:00:24:87:c7:f0:0a:39:70:eb:0f:
                    ef:1f:05:de:2a:94:90:dc:6d:0f:1a:32:f3:5c:a0:
                    98:9c:51:1f:b4:6b:24:94:4e:a3:78:8b:e6:cd:8d:
                    82:42:4a:9b:bf:16:43:1c:3d:2f:6c:2d:df:e0:6c:
                    77:9e:f0:ef:0e:01:d3:dd:ef:46:a4:93:20:df:d0:
                    aa:a2:c0:ed:57:5c:1a:3f:03:80:4a:b0:14:57:57:
                    e9:4d:f7:03:ee:6f:1f:76:1d:00:15:da:74:72:6e:
                    ad:20:08:ef:56:44:55:33:11:e1:a3:da:01:d7:29:
                    c9:0b:fd:ff:f2:2b:ab:3a:84:23:13:56:39:b2:38:
                    bc:37:fb:71:d9:80:38:ec:b9:bd:1d:5e:10:a9:91:
                    e9:e6:4a:0f:91:d7:54:44:b7:68:f4:51:6f:24:16:
                    d3:98:a4:32:75:1e:7e:0f:86:d2:76:a1:24:69:4c:
                    b0:cd:05:9b:11:6b:ac:da:40:3c:5e:3a:ab:5b:94:
                    57:5a:7e:69:a3:05:9a:1c:ec:dc:bc:41:e1:bb:1b:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:79:39:88:76:46:7F:B3:54:14:6A:D0:69:0E:9B:28:41:68:AE
            X509v3 Authority Key Identifier:
                keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:d7:0f:d6:cf:cb:4a:74:85:8b:a7:56:01:5f:6b:1b:6c:
         07:50:02:a6:51:da:d6:bd:3f:c5:5b:7e:ef:88:85:f9:75:25:
         78:e6:1f:68:00:29:4f:bd:b7:ae:ec:27:c4:af:7d:2a:e5:83:
         67:5f:25:55:57:e3:a1:86:8c:71:f1:41:91:b7:39:13:73:70:
         13:fb:1b:42:68:bb:03:3a:0a:db:12:41:3a:05:9a:41:7f:f6:
         e8:b1:ce:b1:ad:e8:a1:76:57:d7:04:7b:77:c3:60:65:71:4f:
         7b:52:31:68:77:f9:71:56:3e:c3:c6:38:31:cd:08:da:d9:6f:
         47:74:6c:7b:5d:91:80:97:6c:86:cf:2a:be:2b:31:48:cd:56:
         7d:c9:c2:57:d2:0a:9d:b5:8a:f4:b3:fa:fc:4e:10:8a:8b:79:
         dd:73:d0:cf:a6:67:d5:81:a2:3c:0c:c0:c1:54:3f:d5:21:27:
         7b:e8:3e:cc:d9:8b:75:ec:0a:6c:ed:80:77:af:1f:c9:96:8f:
         20:2a:16:cf:b8:51:e9:9f:d9:80:35:51:ca:53:fb:7e:b1:0f:
         d5:5b:69:f7:72:a7:a7:58:0a:6b:50:2a:40:82:74:ef:5c:b1:
         69:04:9f:8a:54:83:db:16:3a:f4:7e:f9:a9:06:88:a6:0c:14:
         38:08:93:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7X83FgcLlL3m10HfAKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjUwNDEzMTEwMTI2WhcNMjUwNDE0MTEwMTI2WjAzMTEwLwYDVQQD
Eyg5OGIzNzkzOTg4NzY0NjdmYjM1NDE0NmFkMDY5MGU5YjI4NDE2OGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIQ6O/wqD8SGyq7I9yboUcpUH8Kw
YOBpJKtQvA8GeOa+V9/fCzazX93iLqXO8wUiQAAkh8fwCjlw6w/vHwXeKpSQ3G0P
GjLzXKCYnFEftGsklE6jeIvmzY2CQkqbvxZDHD0vbC3f4Gx3nvDvDgHT3e9GpJMg
39CqosDtV1waPwOASrAUV1fpTfcD7m8fdh0AFdp0cm6tIAjvVkRVMxHho9oB1ynJ
C/3/8iurOoQjE1Y5sji8N/tx2YA47Lm9HV4QqZHp5koPkddURLdo9FFvJBbTmKQy
dR5+D4bSdqEkaUywzQWbEWus2kA8XjqrW5RXWn5powWaHOzcvEHhuxtosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJizeTmIdkZ/s1QUatBpDpsoQWiuMB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgzXD9bP
y0p0hYunVgFfaxtsB1ACplHa1r0/xVt+74iF+XUleOYfaAApT723ruwnxK99KuWD
Z18lVVfjoYaMcfFBkbc5E3NwE/sbQmi7AzoK2xJBOgWaQX/26LHOsa3ooXZX1wR7
d8NgZXFPe1IxaHf5cVY+w8Y4Mc0I2tlvR3Rse12RgJdshs8qvisxSM1WfcnCV9IK
nbWK9LP6/E4Qiot53XPQz6Zn1YGiPAzAwVQ/1SEne+g+zNmLdewKbO2Ad68fyZaP
ICoWz7hR6Z/ZgDVRylP7frEP1Vtp93Knp1gKa1AqQIJ071yxaQSfilSD2xY69H75
qQaIpgwUOAiTKw==
-----END CERTIFICATE-----