Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File:                     ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier:          AZ2vCnOGsUPUWBQHO5a6uTo3YFPwTTAoQH512wSYKK4=
Subject key identifier:   7B:86:39:70:A6:03:B4:31:ED:0A:77:6E:91:6E:E4:5C:B1:5D:AC:4F
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer:       /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial:       01962F06875BB939A4C6D47EDA800D2290C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: OgP+LxFdCXvC/+NC+56yc6RM1NmsENfVJ2hIaswsTRI=)
                          2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:87:5b:b9:39:a4:c6:d4:7e:da:80:0d:22:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=7b863970a603b431ed0a776e916ee45cb15dac4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:bc:9f:9b:63:e8:6c:5e:07:b8:a0:59:1a:
                    07:94:b2:0f:95:f0:6b:59:f8:d8:b0:36:ea:67:fe:
                    d5:dc:fe:c5:c3:f9:b6:24:da:e3:b7:19:e0:2b:d0:
                    cb:77:8d:61:14:19:2d:d1:69:bb:d8:c0:af:eb:dc:
                    be:6c:cb:dd:e1:1b:53:53:e3:d3:47:ae:f3:ba:9b:
                    34:3b:91:d6:cd:dd:26:2f:aa:4f:35:ba:6a:a1:5d:
                    76:8b:eb:1b:7f:d9:c2:45:1e:64:85:be:af:6c:aa:
                    86:d8:2f:e4:fe:f5:ed:d9:88:05:c5:c5:00:ea:e4:
                    5d:0a:c7:fd:a8:2c:a5:43:33:c0:b4:5f:1b:e8:2f:
                    c5:f7:8c:15:48:5b:e8:2d:5e:0f:56:30:40:21:d9:
                    7a:a6:e9:40:b2:f0:82:49:d1:98:7d:7f:46:b1:e0:
                    64:63:01:7b:6d:11:ef:30:f7:ff:74:ff:01:e0:72:
                    9b:8b:5c:50:f8:08:f8:ff:f1:f3:61:96:be:08:b8:
                    bb:56:eb:46:90:b2:3f:d7:bf:83:cc:5c:a4:6f:05:
                    a0:64:24:72:39:10:ce:3b:31:f6:e8:49:a5:b3:a3:
                    cc:c8:19:d4:5c:ab:eb:06:6e:57:05:01:9f:97:25:
                    89:79:91:0b:ff:4c:7d:a6:d2:96:d7:99:c7:92:1d:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:39:70:A6:03:B4:31:ED:0A:77:6E:91:6E:E4:5C:B1:5D:AC:4F
            X509v3 Authority Key Identifier:
                keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:5d:72:61:ec:d0:c1:c9:18:60:7a:c7:17:5e:74:5d:db:
         50:32:f8:a4:de:28:22:16:18:db:87:79:fa:71:b6:d4:51:af:
         ae:a3:a3:ac:77:68:73:fb:97:a6:0f:26:b1:5a:be:f1:9d:79:
         a8:f4:0b:b6:15:50:cb:3f:ba:6b:d6:bd:38:a0:99:cc:ae:d0:
         c8:93:69:23:79:f4:3b:b0:10:76:28:35:65:4c:b0:d6:c1:0b:
         ea:7a:20:47:5b:0e:81:29:51:3f:06:82:1c:71:bb:81:90:fc:
         d7:0f:f9:3a:d8:6a:03:45:33:38:ae:44:cd:b8:42:0b:e3:44:
         59:52:5d:5a:8f:59:ba:3d:20:0d:17:0e:18:c1:89:61:cd:80:
         3a:77:2c:9b:89:b7:39:a8:cb:28:e6:d5:f2:d2:13:e8:ad:da:
         c8:fc:53:c8:6a:4a:f2:a6:c3:e9:9b:89:96:b5:93:e4:b9:61:
         7e:44:04:52:01:59:e7:9e:3d:ca:ab:ac:1d:ce:73:80:80:82:
         ac:17:60:fa:72:d4:28:ae:c4:74:7f:ac:59:64:ed:4a:20:67:
         1d:f7:e0:78:bd:b1:c6:44:86:05:28:83:a1:db:0b:03:39:ec:
         14:62:26:6d:df:84:50:a1:84:f6:ae:a3:9c:d7:29:0c:c7:f8:
         ee:67:1f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBodbuTmkxtR+2oANIpDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDQ5YjczY2FkYTAxZWU4NTE4MTJlYzQ0MGI3YTFlYzk4
NjQ4YjMwHhcNMjUwNDEzMTIwMTE5WhcNMjUwNDE0MTIwMTE5WjAzMTEwLwYDVQQD
Eyg3Yjg2Mzk3MGE2MDNiNDMxZWQwYTc3NmU5MTZlZTQ1Y2IxNWRhYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHm8n5tj6GxeB7igWRoHlLIPlfBr
WfjYsDbqZ/7V3P7Fw/m2JNrjtxngK9DLd41hFBkt0Wm72MCv69y+bMvd4RtTU+PT
R67zups0O5HWzd0mL6pPNbpqoV12i+sbf9nCRR5khb6vbKqG2C/k/vXt2YgFxcUA
6uRdCsf9qCylQzPAtF8b6C/F94wVSFvoLV4PVjBAIdl6pulAsvCCSdGYfX9GseBk
YwF7bRHvMPf/dP8B4HKbi1xQ+Aj4//HzYZa+CLi7VutGkLI/17+DzFykbwWgZCRy
ORDOOzH26Emls6PMyBnUXKvrBm5XBQGflyWJeZEL/0x9ptKW15nHkh1nWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuGOXCmA7Qx7Qp3bpFu5FyxXaxPMB8GA1UdIwQY
MBaAFBDUm3PK2gHuhRgS7EQLeh7JhkizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDIt
YWEwM2VjNjYyOTBmLzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDItYWEwM2VjNjYyOTBm
LzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEddcmHs
0MHJGGB6xxdedF3bUDL4pN4oIhYY24d5+nG21FGvrqOjrHdoc/uXpg8msVq+8Z15
qPQLthVQyz+6a9a9OKCZzK7QyJNpI3n0O7AQdig1ZUyw1sEL6nogR1sOgSlRPwaC
HHG7gZD81w/5OthqA0UzOK5EzbhCC+NEWVJdWo9Zuj0gDRcOGMGJYc2AOncsm4m3
OajLKObV8tIT6K3ayPxTyGpK8qbD6ZuJlrWT5LlhfkQEUgFZ5549yqusHc5zgICC
rBdg+nLUKK7EdH+sWWTtSiBnHffgeL2xxkSGBSiDodsLAznsFGImbd+EUKGE9q6j
nNcpDMf47mcf2g==
-----END CERTIFICATE-----