Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          WB5HzXYzWyD1OGm7siLiPMRFjH5ZRZGbqYH4tm/AV0Y=
Subject key identifier:   8C:B2:24:FA:DF:99:A1:02:35:2A:1C:25:DD:53:A2:1D:1C:75:7A:58
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       01962F3D6320056CC0702FB34C8D8252D0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          0DE9
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: wH+PIx98FywftwtkMgjnc80ZADTwzmiCVHezdcN5TFA=)
                          2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
                          3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:20:05:6c:c0:70:2f:b3:4c:8d:82:52:d0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=8cb224fadf99a102352a1c25dd53a21d1c757a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:ec:6e:51:a2:2f:f5:1a:c5:0d:f8:a2:14:
                    9d:0e:3b:b9:6a:20:71:ed:73:28:a3:49:80:2a:9c:
                    2d:4a:4b:ab:ea:86:02:b5:8a:c9:2c:ad:3e:5a:05:
                    2e:a4:e5:4d:e7:f0:be:6c:2a:e4:4f:63:d8:d4:ce:
                    7a:82:8f:70:07:5a:15:e5:1f:7c:ac:f9:dc:5b:1e:
                    e4:a4:cf:81:ff:e8:53:01:de:d5:82:6e:37:ff:7c:
                    44:22:70:51:11:1b:73:49:5a:ad:05:f5:57:88:74:
                    03:07:75:65:79:5d:49:5a:f9:e4:c4:af:f3:0b:9a:
                    84:e3:2d:b2:48:e8:2b:aa:a0:1a:7d:25:27:c5:dc:
                    6a:96:d6:83:b5:47:6b:7d:d9:52:5f:84:24:a0:ab:
                    ab:c1:5a:01:88:4b:5c:57:eb:63:5f:90:96:77:6e:
                    4c:37:0d:3d:d5:43:a7:03:f0:2d:3c:69:32:06:5d:
                    fa:f6:f5:6e:ec:90:ae:ce:b2:ff:2e:b6:0b:d2:ac:
                    29:35:85:68:5f:b2:4e:08:92:39:05:5e:6f:01:a3:
                    a3:e0:24:ed:df:48:35:0e:c0:ee:09:7e:5a:db:1e:
                    86:4b:9d:ee:63:6d:e3:ba:9e:60:62:da:b7:2e:13:
                    33:e8:e6:f9:7b:f1:81:cb:ad:50:39:3b:04:77:04:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:24:FA:DF:99:A1:02:35:2A:1C:25:DD:53:A2:1D:1C:75:7A:58
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:66:dd:f3:c9:46:b4:d2:e2:e7:3a:b3:80:1e:ad:6e:f6:
         64:60:e1:12:53:bd:00:6e:b6:0a:cc:58:6a:6b:f4:61:56:c0:
         f8:58:14:b0:d5:57:37:2d:c9:42:5f:a9:cf:f2:df:80:10:1b:
         0a:96:3d:d8:39:c7:d8:3e:e5:45:db:5c:4a:54:a4:4d:31:e1:
         97:be:d2:93:0f:91:76:6c:23:c4:98:41:cf:d9:45:e3:36:45:
         8c:9e:f2:b3:86:8b:c1:c4:bf:7c:12:bd:1b:9d:f6:a1:6c:8f:
         fd:35:97:07:79:ae:fa:5f:2e:1a:98:38:40:7f:c0:26:72:f9:
         c8:cc:b9:f5:da:ac:88:aa:c5:6d:f5:c8:33:02:49:35:8d:d1:
         6d:64:d0:45:f8:d0:b5:94:5c:b5:0b:58:0d:75:87:3a:71:64:
         f3:3a:1b:ae:56:5c:28:76:e6:5a:74:83:8f:b1:5b:3b:27:48:
         63:6b:d6:a8:19:47:a6:08:56:41:0f:50:f4:e7:be:92:8b:ab:
         c0:74:92:b3:77:2e:8a:75:7a:8e:3c:4f:44:66:2c:b4:6f:1c:
         ec:06:2f:41:4c:5d:0b:c0:2d:85:04:63:5e:54:fa:02:6a:b5:
         aa:23:34:7c:2e:35:ee:88:c4:46:c5:6a:65:36:22:99:48:42:
         93:e5:50:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWMgBWzAcC+zTI2CUtDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjUwNDEzMTMwMTE0WhcNMjUwNDE0MTMwMTE0WjAzMTEwLwYDVQQD
Eyg4Y2IyMjRmYWRmOTlhMTAyMzUyYTFjMjVkZDUzYTIxZDFjNzU3YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9fsblGiL/UaxQ34ohSdDju5aiBx
7XMoo0mAKpwtSkur6oYCtYrJLK0+WgUupOVN5/C+bCrkT2PY1M56go9wB1oV5R98
rPncWx7kpM+B/+hTAd7Vgm43/3xEInBRERtzSVqtBfVXiHQDB3VleV1JWvnkxK/z
C5qE4y2ySOgrqqAafSUnxdxqltaDtUdrfdlSX4QkoKurwVoBiEtcV+tjX5CWd25M
Nw091UOnA/AtPGkyBl369vVu7JCuzrL/LrYL0qwpNYVoX7JOCJI5BV5vAaOj4CTt
30g1DsDuCX5a2x6GS53uY23jup5gYtq3LhMz6Ob5e/GBy61QOTsEdwSWJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyyJPrfmaECNSocJd1Toh0cdXpYMB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBdm3fPJ
RrTS4uc6s4AerW72ZGDhElO9AG62CsxYamv0YVbA+FgUsNVXNy3JQl+pz/LfgBAb
CpY92DnH2D7lRdtcSlSkTTHhl77Skw+RdmwjxJhBz9lF4zZFjJ7ys4aLwcS/fBK9
G532oWyP/TWXB3mu+l8uGpg4QH/AJnL5yMy59dqsiKrFbfXIMwJJNY3RbWTQRfjQ
tZRctQtYDXWHOnFk8zobrlZcKHbmWnSDj7FbOydIY2vWqBlHpghWQQ9Q9Oe+kour
wHSSs3cuinV6jjxPRGYstG8c7AYvQUxdC8AthQRjXlT6Amq1qiM0fC417ojERsVq
ZTYimUhCk+VQNQ==
-----END CERTIFICATE-----