Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File:                     0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier:          pciDoRudJjAj8RhOm3SJTMFm6cXVebea8O6HJsMfAsM=
Subject key identifier:   4E:CD:8D:34:23:AB:4B:C9:00:05:68:AF:99:C5:E1:7B:4D:85:EE:82
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer:       /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial:       01962F742B74132D057335AFA89CFB7FFCD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number:          0D9C
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
                          2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: vog2Cl0Z7aKssDo5ItPo++7b/5NeCDvaCYQLvpjybns=)
                          3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:74:13:2d:05:73:35:af:a8:9c:fb:7f:fc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=4ecd8d3423ab4bc9000568af99c5e17b4d85ee82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:75:f5:42:87:e5:5c:0d:fc:49:96:a8:12:
                    65:a6:f6:83:6e:48:00:ab:c3:22:48:f6:6e:01:5e:
                    dd:4d:33:9f:ed:dc:af:f1:d3:1f:09:85:9f:d0:c3:
                    96:22:20:b2:8e:15:cd:be:50:b4:67:fa:87:82:6c:
                    03:01:4e:b0:6c:ea:00:36:d4:b1:e0:d4:cd:ef:71:
                    01:5a:1b:34:e9:9e:7c:68:fb:af:79:92:73:db:79:
                    c7:49:62:b9:2e:8c:ba:59:a4:f6:60:a0:98:59:8e:
                    9a:4b:3c:c3:48:ab:71:aa:42:1c:39:1a:d2:79:f5:
                    1a:23:60:51:b8:76:6b:07:f0:bc:fa:41:87:ad:63:
                    d2:bb:89:36:e1:9f:0e:85:3c:eb:a8:55:92:f2:e0:
                    57:34:c4:73:d3:fd:fb:ee:a1:69:e3:ef:21:9a:52:
                    74:08:4b:61:c1:3c:fd:0f:17:d3:cf:1c:ec:c8:34:
                    f0:de:a5:46:d9:c4:64:34:c9:d7:1e:63:b5:61:fe:
                    fb:69:73:d3:ac:30:c6:d8:c4:cf:6a:ad:fc:6e:72:
                    b7:10:6f:61:34:1f:e5:e4:c7:64:34:4f:dc:e7:b1:
                    fa:4c:de:84:6a:b4:20:cf:ce:82:2a:55:63:50:d8:
                    7c:e0:ac:f8:8e:1d:1b:88:c1:97:dc:08:42:ef:af:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:8D:34:23:AB:4B:C9:00:05:68:AF:99:C5:E1:7B:4D:85:EE:82
            X509v3 Authority Key Identifier:
                keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9c:43:e4:d7:ea:36:35:45:31:d3:b1:b1:e6:03:bf:ff:6a:
         19:ce:52:36:85:8c:f7:57:91:4f:c8:a6:cb:96:ac:c2:56:aa:
         24:e4:bc:f3:bf:bd:f1:9c:5f:01:2f:80:da:22:bf:49:b6:f9:
         ee:40:e4:70:b4:bd:68:d7:7d:88:d8:43:7e:8d:30:17:d1:15:
         27:17:0d:b4:1a:4f:14:db:ce:6a:83:36:f4:a0:cc:57:c6:31:
         a6:a9:57:66:cf:5d:07:cf:5d:0a:4d:7e:b1:4a:96:c8:24:2f:
         d6:0d:1c:1a:43:81:9b:c6:89:ba:aa:17:d2:f7:da:50:94:4e:
         90:ca:27:16:09:a7:d6:3e:3f:5c:f6:d3:7f:02:84:1d:ed:65:
         ce:3d:b6:a4:a1:25:1e:1d:7b:06:80:2c:f8:c8:23:88:1c:73:
         e4:af:da:40:fa:ea:77:74:23:8f:7c:60:26:f0:b4:4b:47:83:
         ab:75:a6:05:fc:ac:49:d1:ae:a2:48:db:3d:5d:f9:b9:5c:1b:
         26:e8:1b:e7:7e:fb:43:6e:bf:be:4d:f4:76:00:c4:f9:cf:c1:
         9f:84:0e:cc:85:ae:9d:1f:c8:46:4d:ac:1c:db:23:b5:cf:d9:
         3b:4c:7d:d2:e7:bb:3d:47:90:18:f8:09:b2:6f:a9:b1:57:86:
         80:f5:3b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCt0Ey0FczWvqJz7f/zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDY4N2EzZWU2MzIyYjc1N2RlODFlN2Y1M2M1ZDMyZWVi
ZTMzYTYwHhcNMjUwNDEzMTQwMTA0WhcNMjUwNDE0MTQwMTA0WjAzMTEwLwYDVQQD
Eyg0ZWNkOGQzNDIzYWI0YmM5MDAwNTY4YWY5OWM1ZTE3YjRkODVlZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvId19UKH5VwN/EmWqBJlpvaDbkgA
q8MiSPZuAV7dTTOf7dyv8dMfCYWf0MOWIiCyjhXNvlC0Z/qHgmwDAU6wbOoANtSx
4NTN73EBWhs06Z58aPuveZJz23nHSWK5Loy6WaT2YKCYWY6aSzzDSKtxqkIcORrS
efUaI2BRuHZrB/C8+kGHrWPSu4k24Z8OhTzrqFWS8uBXNMRz0/377qFp4+8hmlJ0
CEthwTz9DxfTzxzsyDTw3qVG2cRkNMnXHmO1Yf77aXPTrDDG2MTPaq38bnK3EG9h
NB/l5MdkNE/c57H6TN6EarQgz86CKlVjUNh84Kz4jh0biMGX3AhC76/9KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7NjTQjq0vJAAVor5nF4XtNhe6CMB8GA1UdIwQY
MBaAFNBGh6PuYyK3V96B5/U8XTLuvjOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYt
OTdiZTQyNmEyMzM0LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYtOTdiZTQyNmEyMzM0
LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5xD5Nfq
NjVFMdOxseYDv/9qGc5SNoWM91eRT8imy5aswlaqJOS887+98ZxfAS+A2iK/Sbb5
7kDkcLS9aNd9iNhDfo0wF9EVJxcNtBpPFNvOaoM29KDMV8YxpqlXZs9dB89dCk1+
sUqWyCQv1g0cGkOBm8aJuqoX0vfaUJROkMonFgmn1j4/XPbTfwKEHe1lzj22pKEl
Hh17BoAs+MgjiBxz5K/aQPrqd3Qjj3xgJvC0S0eDq3WmBfysSdGuokjbPV35uVwb
Jugb5377Q26/vk30dgDE+c/Bn4QOzIWunR/IRk2sHNsjtc/ZO0x90ue7PUeQGPgJ
sm+psVeGgPU7mw==
-----END CERTIFICATE-----