Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File:                     elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier:          blNgSqhldPp/USVPFAfEucGm6vc5O7yim1kk4U/vfaY=
Subject key identifier:   C5:D9:AB:5D:56:60:90:AE:0C:D8:71:ED:31:E2:FD:B5:10:82:1C:96
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       01962F7428F13C1377D2465296AF3C250F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number:          0542
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: TGEoQxRmlQ38EiYNIatYTvTH93M.roa (hash: QWHoHKjGgLkuoWxfCEDNTogSFC/uyVtmYm1jupJjvhQ=)
                          2: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: Vd7pbvEYqcuLtZ28jK6ngDFQCnqhINQBOkybRRu0WHg=)
                          3: iHMXX39pKFTmpCSIkM3KYruFykM.roa (hash: KD8CGVAAX5SZe35sI/CYcgZ0uCRVoDZr5Q7avFwAmN0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:28:f1:3c:13:77:d2:46:52:96:af:3c:25:0f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=c5d9ab5d566090ae0cd871ed31e2fdb510821c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:5a:6d:1c:e5:25:e2:f1:d5:bb:be:3a:65:
                    cd:88:bf:20:dc:e9:56:98:f4:89:5a:20:bd:60:bd:
                    e5:98:13:e1:8e:23:66:10:aa:b9:a5:62:ff:3e:3d:
                    a2:bb:5d:b4:59:d3:f0:74:a4:dd:d8:05:64:1b:2b:
                    c4:d3:a1:d5:16:36:e2:9a:5f:fa:67:ee:83:68:e5:
                    2d:fb:25:09:79:be:18:03:78:ed:2b:20:f0:40:11:
                    b4:27:e1:a7:29:0d:ab:18:aa:61:97:81:29:1b:f7:
                    46:ae:36:92:4c:63:df:45:c6:fa:f4:fd:e5:4c:f0:
                    30:06:5e:a0:12:ed:aa:9c:7f:e1:cf:23:03:33:a6:
                    67:92:82:ab:5b:a8:54:fd:1b:cd:22:8e:35:8f:6f:
                    7c:d1:41:ec:31:0c:49:15:94:db:8b:5f:ad:0c:4f:
                    9f:d2:59:88:5e:61:70:a0:43:e3:0e:cb:56:80:2c:
                    20:25:b7:f8:5e:22:12:9a:4b:72:8d:07:d3:f5:d6:
                    e1:78:7c:7f:87:25:10:02:9e:09:69:cb:c0:c7:b4:
                    b8:50:56:f7:86:ae:f4:79:c9:ee:07:b6:1e:27:38:
                    39:47:f9:dc:ce:98:ff:e7:e5:7a:32:65:f5:9e:cf:
                    d1:84:7e:bd:ea:89:92:ee:af:41:4f:90:de:07:96:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:AB:5D:56:60:90:AE:0C:D8:71:ED:31:E2:FD:B5:10:82:1C:96
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:ab:4e:4c:07:50:d5:82:54:57:38:c4:d1:e3:7c:6d:05:
         0d:f7:57:2d:41:b0:75:ba:4b:8e:c8:c1:80:4f:8c:d0:fb:70:
         7f:bf:d0:a6:4e:c3:b1:1f:8c:51:ae:9e:40:f3:fb:34:e7:19:
         5f:89:df:c2:59:47:87:4e:38:8f:85:7c:af:ee:be:f3:6a:54:
         9a:b2:be:8d:41:83:20:10:37:9e:a2:fa:e3:d7:4d:3c:1a:ce:
         06:00:0f:fa:05:a6:81:3d:11:ed:8d:d8:99:e7:00:4c:26:79:
         c0:6c:3f:b4:62:9d:95:af:19:3e:dd:16:da:7b:ea:f7:c4:0e:
         e8:d0:cd:42:25:6a:44:b7:c0:d1:0a:61:88:73:2e:c6:18:60:
         de:ee:de:63:cb:c1:04:26:05:34:93:78:1b:39:52:a0:80:d9:
         67:77:5c:32:f2:8a:eb:bf:b7:fb:2b:c7:08:cd:8f:64:e6:bf:
         ed:d1:23:c0:5b:99:95:5f:4b:e6:0b:16:cc:c8:8b:0d:58:05:
         94:2e:cd:22:ce:4b:3e:5b:50:c1:16:38:fa:83:c9:17:b6:e3:
         a3:fd:40:1c:4e:59:ed:a6:2c:ea:2d:75:09:f2:11:19:af:64:
         be:7b:38:30:46:74:31:cd:c0:be:0c:ac:a1:72:5f:2f:19:56:
         f9:21:54:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCjxPBN30kZSlq88JQ8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
EyhjNWQ5YWI1ZDU2NjA5MGFlMGNkODcxZWQzMWUyZmRiNTEwODIxYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB5abRzlJeLx1bu+OmXNiL8g3OlW
mPSJWiC9YL3lmBPhjiNmEKq5pWL/Pj2iu120WdPwdKTd2AVkGyvE06HVFjbiml/6
Z+6DaOUt+yUJeb4YA3jtKyDwQBG0J+GnKQ2rGKphl4EpG/dGrjaSTGPfRcb69P3l
TPAwBl6gEu2qnH/hzyMDM6ZnkoKrW6hU/RvNIo41j2980UHsMQxJFZTbi1+tDE+f
0lmIXmFwoEPjDstWgCwgJbf4XiISmktyjQfT9dbheHx/hyUQAp4JacvAx7S4UFb3
hq70ecnuB7YeJzg5R/nczpj/5+V6MmX1ns/RhH696omS7q9BT5DeB5baMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXZq11WYJCuDNhx7THi/bUQghyWMB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow6rTkwH
UNWCVFc4xNHjfG0FDfdXLUGwdbpLjsjBgE+M0Ptwf7/Qpk7DsR+MUa6eQPP7NOcZ
X4nfwllHh044j4V8r+6+82pUmrK+jUGDIBA3nqL649dNPBrOBgAP+gWmgT0R7Y3Y
mecATCZ5wGw/tGKdla8ZPt0W2nvq98QO6NDNQiVqRLfA0QphiHMuxhhg3u7eY8vB
BCYFNJN4GzlSoIDZZ3dcMvKK67+3+yvHCM2PZOa/7dEjwFuZlV9L5gsWzMiLDVgF
lC7NIs5LPltQwRY4+oPJF7bjo/1AHE5Z7aYs6i11CfIRGa9kvns4MEZ0Mc3Avgys
oXJfLxlW+SFUHQ==
-----END CERTIFICATE-----