Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File:                     eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier:          e2WmVY2sQ+OvO2R0PPCfhkGG9mBYJ3iGREOy7qwPYxM=
Subject key identifier:   EB:9D:D2:48:EE:88:E6:AC:6F:0C:FE:31:7E:81:1F:4B:D4:25:13:AA
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer:       /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial:       01962E998FA6BFD6DB4BED81CAD7B0E72752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
                          2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: uSDt4lkLrvRU806SWqZGWMeR/YsBCNZpKD/Q5Lt/MpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8f:a6:bf:d6:db:4b:ed:81:ca:d7:b0:e7:27:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=eb9dd248ee88e6ac6f0cfe317e811f4bd42513aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:3f:7e:b7:6b:e8:4d:70:69:39:14:14:b5:
                    9e:84:c2:7d:12:43:62:3b:3e:69:a4:b6:47:ed:93:
                    2a:cd:d2:8c:48:08:cb:99:95:c9:30:81:74:0f:11:
                    3a:94:7b:48:75:24:8a:6f:97:7e:8b:a1:ce:01:66:
                    1b:26:2b:09:f6:03:b4:78:4f:4f:8a:0e:21:5c:b6:
                    eb:b3:08:ce:e6:5e:67:10:d4:d9:c1:df:6f:86:f4:
                    6c:2e:95:0e:3c:8f:82:2f:ae:d7:5b:6f:5c:c8:e3:
                    34:62:e5:51:56:eb:f1:c2:6a:38:6c:f7:c2:c9:fe:
                    9d:b2:53:01:6e:3e:49:99:81:6a:53:95:80:81:a3:
                    d6:c4:54:0d:87:88:de:64:ac:26:76:cd:37:7c:a6:
                    ce:e2:3d:25:68:07:a6:3b:b1:ae:46:fa:dc:f0:31:
                    69:53:0a:4d:37:34:0e:6b:30:b8:68:23:85:91:3c:
                    2b:6f:46:a7:b4:8f:44:80:c9:45:88:be:e6:d8:e6:
                    13:43:15:d5:92:11:4c:5e:27:26:bf:b0:8a:d3:b5:
                    02:fb:5f:27:2d:be:2a:5f:b5:49:66:1f:53:4a:71:
                    30:7e:98:6b:99:3d:71:0a:ff:be:9c:8c:4a:cf:2d:
                    50:82:bf:2e:d5:7d:46:90:58:bf:e6:28:14:cd:87:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9D:D2:48:EE:88:E6:AC:6F:0C:FE:31:7E:81:1F:4B:D4:25:13:AA
            X509v3 Authority Key Identifier:
                keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a3:46:c4:92:0e:7d:65:48:0e:bd:63:f2:90:98:58:e0:7b:
         25:b9:6a:3c:48:8f:34:a1:9a:ee:b5:69:d8:1d:44:ba:33:f5:
         2b:86:b9:e2:fb:36:53:2c:a6:3b:99:9e:d4:06:34:9a:f6:62:
         fb:d6:74:8b:75:e6:74:22:74:a0:69:82:93:98:c8:73:c3:ee:
         53:b7:85:3a:55:a9:c8:57:3e:eb:e7:2a:86:f7:ff:e7:d0:32:
         1b:e7:2b:7a:e6:bb:fb:88:ab:95:d7:2f:7d:a9:c2:23:f5:c1:
         fc:e4:2d:47:e1:0e:25:c8:04:60:98:a0:d7:3f:6b:6c:44:b9:
         3e:b1:df:70:33:5d:9c:6d:45:65:45:e0:e9:2c:8e:44:3d:16:
         86:4c:07:8b:a2:e9:52:f7:52:13:97:28:15:2e:c8:35:d0:ca:
         87:83:a3:f3:bf:07:fd:5e:90:9b:78:cd:7c:07:cf:79:b2:74:
         f0:74:71:3d:63:4f:48:09:0e:12:c1:8b:92:02:16:55:58:b2:
         80:9e:d0:58:3e:bc:d5:6f:69:d2:4b:b5:80:af:e1:f0:fb:42:
         51:1c:93:48:7c:38:5b:df:46:a7:6a:c6:66:52:fb:ef:f5:85:
         31:76:73:05:6d:36:e8:0b:55:be:d6:8a:a4:66:d3:16:23:51:
         03:92:80:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumY+mv9bbS+2Bytew5ydSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi
ZDg1N2QwHhcNMjUwNDEzMTAwMjE3WhcNMjUwNDE0MTAwMjE3WjAzMTEwLwYDVQQD
EyhlYjlkZDI0OGVlODhlNmFjNmYwY2ZlMzE3ZTgxMWY0YmQ0MjUxM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UI/frdr6E1waTkUFLWehMJ9EkNi
Oz5ppLZH7ZMqzdKMSAjLmZXJMIF0DxE6lHtIdSSKb5d+i6HOAWYbJisJ9gO0eE9P
ig4hXLbrswjO5l5nENTZwd9vhvRsLpUOPI+CL67XW29cyOM0YuVRVuvxwmo4bPfC
yf6dslMBbj5JmYFqU5WAgaPWxFQNh4jeZKwmds03fKbO4j0laAemO7GuRvrc8DFp
UwpNNzQOazC4aCOFkTwrb0antI9EgMlFiL7m2OYTQxXVkhFMXicmv7CK07UC+18n
Lb4qX7VJZh9TSnEwfphrmT1xCv++nIxKzy1Qgr8u1X1GkFi/5igUzYeBfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOud0kjuiOasbwz+MX6BH0vUJROqMB8GA1UdIwQY
MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt
NmQ2ZjU1OGE3ZDY1LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1
LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaNGxJIO
fWVIDr1j8pCYWOB7JblqPEiPNKGa7rVp2B1EujP1K4a54vs2UyymO5me1AY0mvZi
+9Z0i3XmdCJ0oGmCk5jIc8PuU7eFOlWpyFc+6+cqhvf/59AyG+creua7+4irldcv
fanCI/XB/OQtR+EOJcgEYJig1z9rbES5PrHfcDNdnG1FZUXg6SyORD0WhkwHi6Lp
UvdSE5coFS7INdDKh4Oj878H/V6Qm3jNfAfPebJ08HRxPWNPSAkOEsGLkgIWVViy
gJ7QWD681W9p0ku1gK/h8PtCURyTSHw4W99Gp2rGZlL77/WFMXZzBW026AtVvtaK
pGbTFiNRA5KA1g==
-----END CERTIFICATE-----