Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
File:                     EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft (raw, json)
Hash identifier:          fUztcfy2/sHzkAJor705dA2pesCW73wF/GSWLX5Cc4c=
Subject key identifier:   11:69:04:C4:E9:5F:98:48:30:EC:DC:EB:31:92:43:1C:93:6E:D5:6A
Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
Certificate issuer:       /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Certificate serial:       01962FAB0867AC800411288A6EC3924BBC4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
Manifest number:          10F7
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl (hash: CaI7gofbHHr3DQztUo1K02fPqF+Zk+R5HbDLwzL98VU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:08:67:ac:80:04:11:28:8a:6e:c3:92:4b:bc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=116904c4e95f984830ecdceb3192431c936ed56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:a0:f8:fb:d0:81:da:0f:9f:51:7c:5b:00:
                    db:76:d8:e6:ed:f5:a8:6c:a7:f7:df:1b:78:72:33:
                    0f:64:20:dc:9a:0e:1e:90:04:76:f7:cc:0a:1c:d4:
                    4e:8b:47:29:50:ff:00:08:80:9e:2c:74:c5:b2:2e:
                    16:a2:94:b2:92:6a:2b:eb:ac:93:df:1e:87:23:43:
                    ca:64:0a:76:9d:8d:8b:f1:4a:df:6b:a1:14:9b:7d:
                    ab:da:bc:ee:63:49:bd:c8:d4:59:85:02:40:6c:9e:
                    8b:3e:1a:0f:5a:b7:d9:f5:b6:6e:79:30:0c:7d:81:
                    14:6d:ef:3d:5c:36:80:93:95:f8:ef:4f:5a:a2:cd:
                    b8:1f:be:23:9e:60:05:91:dc:89:aa:ea:d0:73:1d:
                    2d:3f:9d:bd:2d:53:50:1e:8d:e3:54:ef:44:e1:92:
                    d8:94:4f:0d:94:0e:99:0d:43:3f:f7:af:3c:8f:0f:
                    af:cb:df:55:2e:b7:b6:cb:25:31:95:40:ca:aa:67:
                    ca:93:3f:fd:04:bf:b9:81:9b:49:c9:08:9c:86:ff:
                    9b:d0:52:1f:c4:e1:e8:81:bb:d4:54:86:cb:2b:ba:
                    a9:c3:af:d4:60:f1:9e:ed:0f:8f:10:ae:4f:23:08:
                    d0:7b:b7:3e:75:6a:99:e8:4f:f9:f6:2f:a5:a5:60:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:04:C4:E9:5F:98:48:30:EC:DC:EB:31:92:43:1C:93:6E:D5:6A
            X509v3 Authority Key Identifier:
                keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0d:31:e9:08:a9:77:7f:7c:2d:89:ca:8c:df:1a:4d:42:5d:
         7d:33:d8:ae:db:3e:a2:01:7e:46:05:78:2f:f2:33:e1:a9:a3:
         41:95:47:b6:77:53:0b:56:e6:0c:35:c7:7e:8c:79:f5:81:6e:
         d8:1f:ec:fc:3a:a2:34:2c:63:a9:ed:f7:ca:d6:04:0c:4d:10:
         19:70:72:b7:04:37:8c:e8:3f:37:2f:68:a7:1f:40:cc:b2:56:
         22:49:e8:1e:ff:0f:8d:81:fa:38:66:87:26:68:ca:74:17:e6:
         b7:78:36:e8:94:86:3f:fb:09:1a:df:72:4a:0a:a0:26:ae:b5:
         20:7a:73:34:03:82:81:c5:cc:a2:ac:6c:24:96:48:33:4f:29:
         63:42:15:0e:d9:98:f4:64:aa:30:f8:32:3c:fb:eb:ba:dd:1f:
         09:e1:18:a6:e5:5e:4c:28:5c:d1:b7:fd:56:cc:1f:ff:c9:5e:
         36:08:30:83:2f:27:f8:66:d2:65:8e:79:93:6c:1a:9d:92:1f:
         e5:06:e5:1b:13:2b:c7:95:31:e5:66:5f:51:ea:df:47:a0:02:
         09:2b:11:b7:ad:8d:4e:3a:e5:27:a9:95:4e:02:7a:93:24:fe:
         cc:af:4d:93:78:b2:fc:43:c6:ab:a9:0e:74:19:94:43:b3:c7:
         89:df:bc:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwhnrIAEESiKbsOSS7xLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTEwOGI0NmMyNWQ5MzJiNjUwNmMzZWYwYTg3ZThiODIx
MmVhMTgwHhcNMjUwNDEzMTUwMDU5WhcNMjUwNDE0MTUwMDU5WjAzMTEwLwYDVQQD
EygxMTY5MDRjNGU5NWY5ODQ4MzBlY2RjZWIzMTkyNDMxYzkzNmVkNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7eg+PvQgdoPn1F8WwDbdtjm7fWo
bKf33xt4cjMPZCDcmg4ekAR298wKHNROi0cpUP8ACICeLHTFsi4WopSykmor66yT
3x6HI0PKZAp2nY2L8Urfa6EUm32r2rzuY0m9yNRZhQJAbJ6LPhoPWrfZ9bZueTAM
fYEUbe89XDaAk5X4709aos24H74jnmAFkdyJqurQcx0tP529LVNQHo3jVO9E4ZLY
lE8NlA6ZDUM/9688jw+vy99VLre2yyUxlUDKqmfKkz/9BL+5gZtJyQichv+b0FIf
xOHogbvUVIbLK7qpw6/UYPGe7Q+PEK5PIwjQe7c+dWqZ6E/59i+lpWC/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFpBMTpX5hIMOzc6zGSQxyTbtVqMB8GA1UdIwQY
MBaAFBLhCLRsJdkytlBsPvCofouCEuoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjkt
ZWE0YTZkYzE2M2M5LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjktZWE0YTZkYzE2M2M5
LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnw0x6Qip
d398LYnKjN8aTUJdfTPYrts+ogF+RgV4L/Iz4amjQZVHtndTC1bmDDXHfox59YFu
2B/s/DqiNCxjqe33ytYEDE0QGXBytwQ3jOg/Ny9opx9AzLJWIknoHv8PjYH6OGaH
JmjKdBfmt3g26JSGP/sJGt9ySgqgJq61IHpzNAOCgcXMoqxsJJZIM08pY0IVDtmY
9GSqMPgyPPvrut0fCeEYpuVeTChc0bf9Vswf/8leNggwgy8n+GbSZY55k2wanZIf
5QblGxMrx5Ux5WZfUerfR6ACCSsRt62NTjrlJ6mVTgJ6kyT+zK9Nk3iy/EPGq6kO
dBmUQ7PHid+8Aw==
-----END CERTIFICATE-----