Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File:                     EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier:          ddvQNhqrhyOICVj4YMn4EDoDOSbY75lFFopcZ6cB4h4=
Subject key identifier:   EA:0E:B7:2C:6D:90:58:DA:98:CA:82:47:68:44:26:D0:E7:62:A9:10
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer:       /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial:       01962E61EF20B5AAF9B4543B0B92D7BAB090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number:          06F8
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
                          2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: zsDvbAq/tKBZk5XbJD7WBuvBkQQ11SMNwm0ylBrYJL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ef:20:b5:aa:f9:b4:54:3b:0b:92:d7:ba:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=ea0eb72c6d9058da98ca8247684426d0e762a910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:1b:d5:88:3b:db:00:a1:7b:7f:13:57:a9:
                    89:fb:4d:22:2a:a0:c3:86:f6:00:43:f7:98:64:ed:
                    3c:27:72:92:1f:42:b4:16:04:28:3d:f2:77:02:64:
                    b3:f6:38:af:17:21:9e:0f:f8:ff:df:52:52:4e:ed:
                    d7:cb:fd:b4:e6:f5:75:55:b5:d3:68:ea:9f:5c:0f:
                    d1:94:52:73:98:42:7a:20:ff:fd:c3:be:74:81:c0:
                    26:d9:24:02:ab:21:02:9b:a2:db:03:a3:f7:94:94:
                    ec:30:de:79:9a:56:03:4f:ab:f5:78:1e:62:ec:10:
                    c7:a7:2d:01:00:00:89:c8:5a:c1:c3:af:c6:08:02:
                    8b:29:16:f5:c0:90:89:c6:24:1d:9b:a1:8e:a0:dd:
                    7f:37:91:27:e2:02:28:69:7c:2d:0e:5d:56:17:f1:
                    49:84:7a:28:56:e2:f8:1f:ab:1e:2b:b0:05:5e:90:
                    f2:25:6b:4d:a0:c1:bf:76:77:ab:54:12:28:ae:1e:
                    b5:86:af:19:d9:ba:95:6c:fa:f7:1b:b0:7d:04:1d:
                    cb:04:a9:bb:d8:7e:45:12:fa:5e:6f:e7:c2:b5:6a:
                    fc:34:bc:ed:98:73:2e:38:39:0d:60:3e:b2:87:a5:
                    d8:21:e7:58:51:78:fb:7c:c4:3a:c3:68:00:96:d9:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:B7:2C:6D:90:58:DA:98:CA:82:47:68:44:26:D0:E7:62:A9:10
            X509v3 Authority Key Identifier:
                keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:6e:6e:4c:f3:8d:27:ed:7a:0b:25:f7:35:53:2e:80:ac:
         61:b2:26:98:3f:a4:f9:cf:38:e8:ae:f9:ad:46:4c:78:18:e4:
         b1:b2:ac:88:3c:1c:be:13:54:c0:77:7e:31:1e:b4:bb:35:74:
         23:2a:93:b5:4f:27:e5:6c:8f:f3:d3:68:c0:04:f6:0c:bd:05:
         fa:30:bc:c6:aa:4f:b7:04:4c:a7:b8:15:10:d1:37:70:59:41:
         92:32:1a:7c:2a:75:68:72:23:1e:66:97:07:80:b9:04:8e:e0:
         a5:e0:b8:53:09:2c:d1:8a:54:01:01:2b:d1:43:25:32:32:b4:
         b9:62:57:fb:e1:21:5e:c1:41:0a:f2:54:0a:3e:52:7d:9a:e0:
         3a:06:6a:a3:31:50:ea:1f:70:c8:61:59:1c:0d:a1:0a:28:05:
         c6:4c:66:cf:48:4a:9e:6e:7a:68:ef:fb:22:fa:84:14:84:4b:
         09:1e:20:73:7d:bd:74:fb:37:6c:1b:ec:72:af:0d:0e:20:9e:
         24:2f:7f:6e:38:ca:da:c0:6c:37:85:79:aa:7c:7e:59:4f:19:
         2a:41:6a:46:c2:8b:ee:bf:81:39:0f:59:c7:b0:a0:69:e3:09:
         ca:d5:32:20:f5:f8:b4:a6:e6:ae:f6:0d:80:44:64:70:00:4f:
         d2:cd:3f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYe8gtar5tFQ7C5LXurCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWI1N2FiMGU5NjUxODY3OTExNGNiZjBlZThhZjU0YmJm
ZGE1ZjUwHhcNMjUwNDEzMDkwMTMyWhcNMjUwNDE0MDkwMTMyWjAzMTEwLwYDVQQD
EyhlYTBlYjcyYzZkOTA1OGRhOThjYTgyNDc2ODQ0MjZkMGU3NjJhOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5wb1Yg72wChe38TV6mJ+00iKqDD
hvYAQ/eYZO08J3KSH0K0FgQoPfJ3AmSz9jivFyGeD/j/31JSTu3Xy/205vV1VbXT
aOqfXA/RlFJzmEJ6IP/9w750gcAm2SQCqyECm6LbA6P3lJTsMN55mlYDT6v1eB5i
7BDHpy0BAACJyFrBw6/GCAKLKRb1wJCJxiQdm6GOoN1/N5En4gIoaXwtDl1WF/FJ
hHooVuL4H6seK7AFXpDyJWtNoMG/dnerVBIorh61hq8Z2bqVbPr3G7B9BB3LBKm7
2H5FEvpeb+fCtWr8NLztmHMuODkNYD6yh6XYIedYUXj7fMQ6w2gAltmtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoOtyxtkFjamMqCR2hEJtDnYqkQMB8GA1UdIwQY
MBaAFBCrV6sOllGGeRFMvw7or1S7/aX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUt
ZjM4MGJmMGZkZDg0LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUtZjM4MGJmMGZkZDg0
LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM1ubkzz
jSftegsl9zVTLoCsYbImmD+k+c846K75rUZMeBjksbKsiDwcvhNUwHd+MR60uzV0
IyqTtU8n5WyP89NowAT2DL0F+jC8xqpPtwRMp7gVENE3cFlBkjIafCp1aHIjHmaX
B4C5BI7gpeC4Uwks0YpUAQEr0UMlMjK0uWJX++EhXsFBCvJUCj5SfZrgOgZqozFQ
6h9wyGFZHA2hCigFxkxmz0hKnm56aO/7IvqEFIRLCR4gc329dPs3bBvscq8NDiCe
JC9/bjjK2sBsN4V5qnx+WU8ZKkFqRsKL7r+BOQ9Zx7CgaeMJytUyIPX4tKbmrvYN
gERkcABP0s0/PQ==
-----END CERTIFICATE-----