Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File:                     E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier:          Uq8ud3quDGDCd9q5OgiAwW2nIjf3PKMyBKmHz6XBU+M=
Subject key identifier:   EE:E8:46:18:D3:F5:37:27:30:EB:72:4A:70:0C:C1:3D:79:B7:80:A3
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer:       /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial:       01962ECF8CFFAB70F245AFCD5690E92E4BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 9htWy01pg2D2zYDPH366mUte-18.roa (hash: EzJGaZ3hn2rEMiPwCBKqVw/ZKa/ezLWPSIlGniopSlk=)
                          2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: 6PCUz8lDkoipXMukEUkGMfZ0dU8H7MGKtRA9VhzwyJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:ff:ab:70:f2:45:af:cd:56:90:e9:2e:4b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=eee84618d3f5372730eb724a700cc13d79b780a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:67:a2:f3:6e:e6:8e:27:d4:ac:61:58:3d:
                    80:e4:da:ac:85:b2:a8:bc:d0:70:fb:c6:fc:0f:0b:
                    ca:c7:27:a4:fd:94:9b:b0:c7:a5:1b:ea:99:e8:92:
                    fc:1f:eb:94:c6:e3:f1:79:16:b3:17:84:46:37:c7:
                    eb:ac:a5:7c:ff:18:47:20:01:4a:18:75:e9:a9:af:
                    ea:2b:36:fe:8f:61:73:6a:9f:b5:d0:3d:77:b0:fd:
                    97:9d:f9:eb:46:c1:05:19:a9:c2:a4:c3:c8:97:a7:
                    48:db:3b:9f:0a:75:44:ce:65:22:1c:16:93:82:cf:
                    c7:ce:5d:19:59:c8:9b:3a:23:98:de:23:ad:d1:61:
                    64:90:f0:b6:ab:30:cd:b4:b7:df:75:e3:2b:af:5e:
                    6c:07:3b:6f:4c:a1:2f:6e:04:b5:a6:7c:85:d3:bc:
                    69:0d:25:1a:60:3f:c2:26:11:cb:62:e9:00:36:af:
                    d6:7a:65:ea:12:b8:4c:c2:96:90:91:d9:f5:f4:fa:
                    c6:94:8b:6b:30:48:a9:4f:cd:b7:da:c3:a8:14:f4:
                    ff:de:a6:67:67:32:a5:17:2b:a3:95:f8:27:b4:4a:
                    b5:5d:fd:29:36:46:10:3c:fb:ab:42:e8:af:d6:89:
                    83:5d:0c:1d:08:8e:b3:0c:ff:9c:01:c0:41:ab:ad:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E8:46:18:D3:F5:37:27:30:EB:72:4A:70:0C:C1:3D:79:B7:80:A3
            X509v3 Authority Key Identifier:
                keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e1:51:e0:46:c8:e8:c3:59:60:d3:79:88:11:5b:8d:b8:f3:
         a1:9b:cf:87:76:66:7d:17:2e:2a:57:4e:c1:fc:65:02:61:4b:
         82:48:0d:d7:d0:30:34:68:7c:19:f9:4d:74:c2:52:6d:1e:b6:
         38:a7:c9:05:ce:0d:16:f9:e1:97:c6:89:8b:93:4c:89:61:50:
         a8:c8:c7:6c:39:e6:82:29:63:36:30:a2:af:74:be:a0:34:62:
         eb:fe:4a:e5:1a:a8:3c:26:6a:fc:5f:4c:22:bb:b5:1b:1b:7c:
         9b:c1:74:37:f5:f6:ab:f3:dc:88:24:ca:66:f4:89:73:3f:49:
         ba:c5:42:ac:c0:ce:52:d5:8e:34:30:5c:b8:44:9f:58:88:25:
         6a:9c:ca:5c:fb:7b:87:5b:63:49:22:ad:1e:e0:0e:b8:96:48:
         57:1c:93:49:f1:85:d5:54:2e:7d:4f:d8:a9:11:be:25:39:78:
         db:2e:bc:96:c8:c2:02:ca:8b:f6:67:70:7a:91:f2:6a:9c:73:
         5f:8b:65:11:e9:4f:89:eb:2b:c1:08:ba:61:d7:30:ae:85:df:
         1f:49:fe:84:2a:d3:47:9f:bd:4c:d0:ba:c4:97:65:e0:7d:0b:
         be:35:0b:3b:e4:03:e5:da:47:d8:75:8f:74:47:8e:9b:bf:51:
         e3:47:76:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4z/q3DyRa/NVpDpLkvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj
MTVhNzQwHhcNMjUwNDEzMTEwMTE1WhcNMjUwNDE0MTEwMTE1WjAzMTEwLwYDVQQD
EyhlZWU4NDYxOGQzZjUzNzI3MzBlYjcyNGE3MDBjYzEzZDc5Yjc4MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KZnovNu5o4n1KxhWD2A5NqshbKo
vNBw+8b8DwvKxyek/ZSbsMelG+qZ6JL8H+uUxuPxeRazF4RGN8frrKV8/xhHIAFK
GHXpqa/qKzb+j2Fzap+10D13sP2XnfnrRsEFGanCpMPIl6dI2zufCnVEzmUiHBaT
gs/Hzl0ZWcibOiOY3iOt0WFkkPC2qzDNtLffdeMrr15sBztvTKEvbgS1pnyF07xp
DSUaYD/CJhHLYukANq/WemXqErhMwpaQkdn19PrGlItrMEipT8232sOoFPT/3qZn
ZzKlFyujlfgntEq1Xf0pNkYQPPurQuiv1omDXQwdCI6zDP+cAcBBq610vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7oRhjT9TcnMOtySnAMwT15t4CjMB8GA1UdIwQY
MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt
YjI1MTM3N2FkZDg2LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2
LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+FR4EbI
6MNZYNN5iBFbjbjzoZvPh3ZmfRcuKldOwfxlAmFLgkgN19AwNGh8GflNdMJSbR62
OKfJBc4NFvnhl8aJi5NMiWFQqMjHbDnmgiljNjCir3S+oDRi6/5K5RqoPCZq/F9M
Iru1Gxt8m8F0N/X2q/PciCTKZvSJcz9JusVCrMDOUtWONDBcuESfWIglapzKXPt7
h1tjSSKtHuAOuJZIVxyTSfGF1VQufU/YqRG+JTl42y68lsjCAsqL9mdwepHyapxz
X4tlEelPiesrwQi6YdcwroXfH0n+hCrTR5+9TNC6xJdl4H0LvjULO+QD5dpH2HWP
dEeOm79R40d2MQ==
-----END CERTIFICATE-----