Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File:                     EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier:          qeaMmuI4IiSin1g8u4TeLXQJv+RSl6sjsUIKvPkukzg=
Subject key identifier:   C6:7F:DE:66:DB:4F:D3:10:56:F6:65:98:00:80:40:DB:00:97:1F:62
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer:       /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial:       01962ECFF04402176686F99A7DBD95F60354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:41 +0000
Files and hashes:         1: 4QR_9ICDY1eAjAMQinzDvd_fSbM.roa (hash: QOGIl5yTiA09+cvbQSor4wKyODpGweFUOGDGmoa5Fkw=)
                          2: 4TPUxBZQjPMFC7b1mfrFjCvLGlY.roa (hash: JkcUiwxVUZ6Y1IABb79mPduZ40ATbeXmGRW1UsM28Lg=)
                          3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: w8ntLEUnc0RmYB/q9+hFnHyoVpBed/G4rG6dttb50eQ=)
                          4: Wo-dX3lQK__8wGgqhbqIC_egjRY.roa (hash: Kje1K6kIBEP6yfvrAyyBJragoqmu73LHVFRq0DMX108=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:f0:44:02:17:66:86:f9:9a:7d:bd:95:f6:03:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
        Validity
            Not Before: Apr 13 11:01:41 2025 GMT
            Not After : Apr 14 11:01:41 2025 GMT
        Subject: CN=c67fde66db4fd31056f66598008040db00971f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:82:a2:82:99:8c:87:a2:cd:8c:da:c6:a8:
                    cb:88:11:33:cf:b2:04:e5:fd:a4:5e:a2:f7:ec:f3:
                    70:85:91:a9:22:be:ff:f4:9b:d3:96:c3:91:8a:e7:
                    d1:ee:d1:78:66:1a:04:eb:3f:71:ee:c0:c7:a6:59:
                    90:c9:0c:2e:1d:1a:d6:e9:38:e2:93:51:f4:f9:bd:
                    a2:fc:7e:56:70:0c:40:c7:a0:0a:53:39:94:c4:09:
                    d1:3d:d5:6a:24:b3:b8:4e:1e:6f:c5:48:4d:88:42:
                    da:a1:b0:f4:16:8e:41:37:b6:b4:21:ad:1e:f3:f5:
                    d5:a5:c6:c3:44:b9:09:86:d1:4b:5f:55:e2:87:00:
                    04:1a:70:cd:dd:11:ca:9c:f8:a6:6f:58:19:6c:88:
                    14:e4:a7:cb:37:42:bd:cf:04:e7:fe:83:16:ce:96:
                    46:ca:34:b7:a7:85:dc:a8:92:aa:d5:da:e1:cc:8d:
                    bd:7d:36:48:23:f8:72:10:e1:31:ac:02:9c:53:c3:
                    ef:b8:bf:ef:0e:19:80:3c:ea:1b:fc:bf:fb:83:9e:
                    8b:6d:66:b8:c8:4b:39:d5:15:82:d3:e6:8f:c3:00:
                    de:55:ef:8d:05:d8:7d:5e:6d:57:0c:55:23:76:56:
                    d1:3a:6b:e3:28:17:b5:39:8d:cf:31:77:8b:e1:56:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:DE:66:DB:4F:D3:10:56:F6:65:98:00:80:40:DB:00:97:1F:62
            X509v3 Authority Key Identifier:
                keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:14:f4:83:a8:e1:82:2f:f3:9a:e3:48:ab:4c:89:e0:ed:
         70:21:80:19:81:6b:68:e4:01:34:a8:62:68:4f:e1:3d:ff:5a:
         25:43:10:f5:9b:68:3b:f4:2a:c0:02:a6:87:2d:37:76:81:e6:
         c3:04:ce:5e:68:2d:08:0d:05:60:87:23:07:c9:a4:8c:de:99:
         c4:48:6b:a5:bc:fd:57:26:c3:57:af:ca:75:d0:dd:12:dc:a0:
         a5:40:c7:e1:66:77:c2:26:e2:be:0f:70:23:1d:1b:4f:ed:a5:
         64:98:07:7d:04:f3:bb:e3:70:1a:a4:d1:72:61:59:33:13:f2:
         cd:cf:14:69:d2:b4:ae:ab:63:7f:76:d0:74:e4:e1:d6:66:0a:
         16:32:ca:75:c2:42:fb:c1:a9:f8:d9:54:21:ca:22:03:89:50:
         7a:e1:ad:b4:8a:ad:34:7e:8d:7d:90:8c:ee:f6:f4:24:b4:b6:
         2e:d0:05:0d:a8:66:04:c8:51:24:a9:97:fc:63:b7:35:84:c3:
         99:0f:03:53:b7:dc:e7:7f:c2:39:d3:4c:d9:4e:64:38:22:6a:
         21:02:ef:66:ff:40:4f:01:6f:0a:0a:73:e6:9b:c6:58:c4:2f:
         8d:09:5a:e0:17:21:53:a3:62:b4:c9:38:f3:7c:ac:7b:0c:01:
         03:9a:7a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz/BEAhdmhvmafb2V9gNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm
YWY0OTYwHhcNMjUwNDEzMTEwMTQxWhcNMjUwNDE0MTEwMTQxWjAzMTEwLwYDVQQD
EyhjNjdmZGU2NmRiNGZkMzEwNTZmNjY1OTgwMDgwNDBkYjAwOTcxZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn6CooKZjIeizYzaxqjLiBEzz7IE
5f2kXqL37PNwhZGpIr7/9JvTlsORiufR7tF4ZhoE6z9x7sDHplmQyQwuHRrW6Tji
k1H0+b2i/H5WcAxAx6AKUzmUxAnRPdVqJLO4Th5vxUhNiELaobD0Fo5BN7a0Ia0e
8/XVpcbDRLkJhtFLX1XihwAEGnDN3RHKnPimb1gZbIgU5KfLN0K9zwTn/oMWzpZG
yjS3p4XcqJKq1drhzI29fTZII/hyEOExrAKcU8PvuL/vDhmAPOob/L/7g56LbWa4
yEs51RWC0+aPwwDeVe+NBdh9Xm1XDFUjdlbROmvjKBe1OY3PMXeL4Va85wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ/3mbbT9MQVvZlmACAQNsAlx9iMB8GA1UdIwQY
MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt
NzNhNDUyYmFmYjQ2LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2
LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUW0U9IOo
4YIv85rjSKtMieDtcCGAGYFraOQBNKhiaE/hPf9aJUMQ9ZtoO/QqwAKmhy03doHm
wwTOXmgtCA0FYIcjB8mkjN6ZxEhrpbz9VybDV6/KddDdEtygpUDH4WZ3wibivg9w
Ix0bT+2lZJgHfQTzu+NwGqTRcmFZMxPyzc8UadK0rqtjf3bQdOTh1mYKFjLKdcJC
+8Gp+NlUIcoiA4lQeuGttIqtNH6NfZCM7vb0JLS2LtAFDahmBMhRJKmX/GO3NYTD
mQ8DU7fc53/COdNM2U5kOCJqIQLvZv9ATwFvCgpz5pvGWMQvjQla4BchU6NitMk4
83ysewwBA5p6Ew==
-----END CERTIFICATE-----