Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
File:                     ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json)
Hash identifier:          9lpkZt98fV9EAF4wPG5NxVk2ARY9mYvvMSuXslry+xE=
Subject key identifier:   9D:9C:4D:4B:6C:40:59:AC:1A:59:C3:2E:C0:EB:55:0D:87:88:C3:C1
Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10
Certificate issuer:       /CN=79cb91394b790781d3a8773a855e5a9a3af20810
Certificate serial:       01962FAB694E5BF9CFB53F84B24194E186DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft
Manifest number:          30
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 5YkjXXO1-roWgSaa-VjH_Qj1GQk.roa (hash: zhJALOAXOJL7mF2t5wg9TLqnLmZcgXJJ2Y83N1a9W4U=)
                          2: LMHD5jghEaDQC9_G7jF8XWal8ps.roa (hash: jxKicmXNBewinH9/ixPIJjvckHeRxlb2ek2Hy+28d80=)
                          3: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: n9ivOqlXI9YpG4O8/IZE6gLuhqtazATPGIlY8DJObCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:4e:5b:f9:cf:b5:3f:84:b2:41:94:e1:86:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=9d9c4d4b6c4059ac1a59c32ec0eb550d8788c3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:08:cc:75:be:f7:ef:53:0d:99:df:af:18:
                    fe:95:f4:b0:e2:39:ba:dd:7a:85:33:4c:ae:22:c2:
                    0d:56:c2:0c:33:1a:62:a9:df:1a:1f:de:e6:6b:44:
                    4f:36:20:ba:71:4e:f3:08:43:b3:bb:48:ee:bc:84:
                    ee:14:39:a3:0a:e0:f0:9c:e3:18:4c:a8:68:ef:92:
                    98:31:8d:6f:b4:fa:4b:a7:1e:d8:95:0f:99:b0:a8:
                    8f:a8:3e:c3:a7:fb:0f:50:13:21:90:ca:87:3f:0f:
                    9c:03:97:ed:21:ea:09:ac:4f:25:8d:d8:61:e1:8c:
                    f9:77:b7:e4:e5:4a:53:ec:7b:62:f0:ad:c2:55:1b:
                    d9:9f:4d:a2:ff:b3:24:89:6f:5b:16:73:b5:ab:17:
                    e9:af:70:b6:7a:00:3e:39:11:2f:f4:ab:94:97:b9:
                    7c:de:1a:e8:59:44:9f:82:ee:24:f9:ee:3f:7c:76:
                    c5:7b:46:11:90:22:e6:02:35:55:63:1a:a3:e5:7b:
                    d1:d1:3a:31:0b:ef:b8:23:d2:27:7b:27:85:73:9a:
                    27:68:40:e9:32:ef:40:96:d8:6d:1a:f4:17:97:5c:
                    1a:d1:19:de:d0:bd:ab:d3:58:f0:08:d4:e6:bf:c2:
                    df:e8:2f:4d:58:8c:e8:bb:5e:88:8d:e4:84:72:f0:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:4D:4B:6C:40:59:AC:1A:59:C3:2E:C0:EB:55:0D:87:88:C3:C1
            X509v3 Authority Key Identifier:
                keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:de:ae:89:a8:d6:4b:8e:41:13:f5:cb:82:17:90:11:04:
         1f:8a:9b:34:56:d9:5f:83:6b:6e:ba:83:4e:82:3e:4a:d3:67:
         a0:7f:b1:a6:fd:e1:5b:77:b1:02:82:f0:cf:af:57:d9:d5:ba:
         11:00:cd:e4:b4:b1:60:0b:6c:19:48:f6:00:40:68:7d:81:24:
         ae:b6:49:ba:77:75:d0:4e:5a:da:51:32:13:c0:4c:9f:ed:7b:
         91:37:7e:70:61:8d:db:9d:bf:9a:96:76:32:5f:9a:a8:07:f5:
         7a:30:ae:84:68:ad:81:bc:67:01:08:40:e4:59:f5:cd:7d:99:
         e6:ae:6a:91:04:8f:45:3e:60:8c:89:6e:fb:cd:27:ab:1d:55:
         62:d8:61:01:f4:8c:c5:ab:bf:98:ad:ce:42:66:92:ac:af:02:
         47:78:b8:cf:16:b3:8f:c6:df:f4:55:e9:75:fb:68:dc:78:90:
         5d:eb:c7:a5:75:3e:cb:e0:68:f6:49:6a:4e:26:bc:63:84:57:
         35:3f:e0:d1:1a:16:17:58:3b:d1:5d:4f:c1:99:ef:38:95:ab:
         ab:c4:ec:9b:66:7e:bc:3d:f7:d9:01:f7:a7:f5:0e:3b:27:46:
         43:03:e5:c0:a0:ea:b3:84:87:b3:0e:4b:18:e0:47:3b:22:5f:
         2e:86:b2:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2lOW/nPtT+EskGU4YbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Y2I5MTM5NGI3OTA3ODFkM2E4NzczYTg1NWU1YTlhM2Fm
MjA4MTAwHhcNMjUwNDEzMTUwMTI0WhcNMjUwNDE0MTUwMTI0WjAzMTEwLwYDVQQD
Eyg5ZDljNGQ0YjZjNDA1OWFjMWE1OWMzMmVjMGViNTUwZDg3ODhjM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplwIzHW+9+9TDZnfrxj+lfSw4jm6
3XqFM0yuIsINVsIMMxpiqd8aH97ma0RPNiC6cU7zCEOzu0juvITuFDmjCuDwnOMY
TKho75KYMY1vtPpLpx7YlQ+ZsKiPqD7Dp/sPUBMhkMqHPw+cA5ftIeoJrE8ljdhh
4Yz5d7fk5UpT7Hti8K3CVRvZn02i/7MkiW9bFnO1qxfpr3C2egA+OREv9KuUl7l8
3hroWUSfgu4k+e4/fHbFe0YRkCLmAjVVYxqj5XvR0ToxC++4I9IneyeFc5onaEDp
Mu9AlthtGvQXl1wa0Rne0L2r01jwCNTmv8Lf6C9NWIzou16IjeSEcvAdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2cTUtsQFmsGlnDLsDrVQ2HiMPBMB8GA1UdIwQY
MBaAFHnLkTlLeQeB06h3OoVeWpo68ggQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmIt
ZjExNzEyMTQ5OTY2LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmItZjExNzEyMTQ5OTY2
LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvreromo
1kuOQRP1y4IXkBEEH4qbNFbZX4NrbrqDToI+StNnoH+xpv3hW3exAoLwz69X2dW6
EQDN5LSxYAtsGUj2AEBofYEkrrZJund10E5a2lEyE8BMn+17kTd+cGGN252/mpZ2
Ml+aqAf1ejCuhGitgbxnAQhA5Fn1zX2Z5q5qkQSPRT5gjIlu+80nqx1VYthhAfSM
xau/mK3OQmaSrK8CR3i4zxazj8bf9FXpdfto3HiQXevHpXU+y+Bo9klqTia8Y4RX
NT/g0RoWF1g70V1PwZnvOJWrq8Tsm2Z+vD332QH3p/UOOydGQwPlwKDqs4SHsw5L
GOBHOyJfLoayFw==
-----END CERTIFICATE-----