Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
File:                     ehDuIoBzMoosIIHLsqls0SZNvvE.mft (raw, json)
Hash identifier:          w3DnbTfkGk8igLmMUYc9O0gEkZFWRbXe3dUW5bjuTMk=
Subject key identifier:   BA:73:F1:9B:EC:42:3C:DB:83:3F:49:BB:65:5A:7E:EE:3E:AB:1D:54
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Certificate issuer:       /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial:       01962FAB763EE069E89768E8BC7653466FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
Manifest number:          04D3
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 9SFdi7V4q-05lNgfIa-K_CLlxc0.roa (hash: Kxe5R+STpor8dRXj7m0AfgFUBqqAzp8M8cMC2zERYAE=)
                          2: YOoATeftAqa3NPiX4GaHabwS1wo.roa (hash: DFj5QH8pLrMMR4sLFXByWiOjYdjY2qX4JxhZH4EeUc8=)
                          3: ehDuIoBzMoosIIHLsqls0SZNvvE.crl (hash: fmUTGFBURZGRtuJnSG7puVNt6/YtzD8s6oe4+tXPmZc=)
                          4: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (hash: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=)
                          5: nGtIZ1A0r3xiykXpIIhUDVqM2rM.roa (hash: GlsG6Os9dw7nPxzZGJzrKgTYWqeKyXt9Ngu3pmbbKe4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:3e:e0:69:e8:97:68:e8:bc:76:53:46:6f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=ba73f19bec423cdb833f49bb655a7eee3eab1d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:97:fb:96:9d:3e:c1:15:13:18:ce:ea:45:
                    03:95:de:71:b3:5b:bd:a2:08:71:75:ec:ff:f2:43:
                    ab:d5:94:d0:9a:db:ef:e5:95:41:3f:be:ea:81:a4:
                    2a:db:1f:56:71:b2:b6:b4:02:45:4b:5d:f6:a0:69:
                    e2:df:06:2a:ed:c9:cb:e3:fa:6a:09:95:f8:5f:a0:
                    86:2f:08:4b:b5:cc:b7:f1:af:1e:d6:6f:3e:4b:f5:
                    ca:db:48:a4:a0:f6:01:11:68:23:b4:d6:b5:bd:13:
                    c3:3c:08:3c:7c:34:b3:27:20:d0:f4:f4:e1:e0:29:
                    6d:ba:90:11:da:92:ca:7d:c6:d8:a9:1a:bb:c4:85:
                    a5:c7:4e:8b:5c:7d:30:60:27:8b:5a:9d:ee:a6:0f:
                    38:9d:bb:cc:c8:aa:9a:4f:53:8d:cb:8e:f7:95:57:
                    6a:4c:1b:c2:bb:81:1c:13:7b:f9:be:ac:8c:af:ce:
                    cc:66:9a:84:1f:bf:5b:5b:e9:a7:c8:58:89:e4:d5:
                    be:6b:b7:c3:53:f9:35:0f:08:06:04:6b:51:3a:88:
                    6c:84:6d:e6:9d:89:06:e6:ad:9d:95:d0:fa:78:23:
                    9a:c4:7d:de:c0:36:7d:17:f0:12:49:6c:70:ae:28:
                    39:82:9d:58:98:84:51:d0:e2:b3:9d:39:29:a5:77:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:73:F1:9B:EC:42:3C:DB:83:3F:49:BB:65:5A:7E:EE:3E:AB:1D:54
            X509v3 Authority Key Identifier:
                keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:41:df:f6:44:58:6d:d9:76:4d:60:eb:5d:35:c5:bb:15:
         01:f8:9f:39:0b:e3:e5:3f:0e:b2:dc:cf:d7:81:44:e9:a5:db:
         66:3b:3c:05:65:39:5a:f1:4f:ec:a3:18:fe:3d:22:9e:be:a6:
         d6:2d:1b:b6:1c:cf:ea:a8:27:95:35:de:db:e0:91:90:70:9c:
         f6:ab:d5:63:9b:34:c7:d7:da:6b:d7:13:42:0e:22:4f:ee:01:
         b0:67:bb:ed:ea:bf:9b:e9:bd:75:5d:ec:ea:ba:1f:44:f8:40:
         cf:fb:39:81:9f:5b:af:49:9e:7f:e5:49:bb:32:e5:33:ce:9d:
         4b:6d:69:70:69:ad:ea:dc:36:f1:28:37:5c:36:5c:5b:67:1e:
         4f:a0:0a:38:6c:49:2c:21:e3:69:10:3b:63:0d:81:80:2c:c7:
         41:c0:da:51:5a:49:27:5c:e3:59:0e:79:6d:ee:68:c9:1a:f0:
         2e:cc:e0:f4:d4:b4:31:5b:b4:fa:37:7d:6e:ee:79:81:ca:47:
         1f:45:cc:60:51:6b:fb:85:f8:fe:dd:d6:93:41:e6:87:b4:f5:
         ff:cd:b2:a8:7d:8e:c3:b8:7d:61:9d:3b:e0:1e:93:db:fa:cd:
         52:9f:bc:14:a5:3a:08:20:15:5a:ce:09:40:cd:8d:17:28:45:
         b3:6a:13:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3Y+4Gnol2jovHZTRm+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTBlZTIyODA3MzMyOGEyYzIwODFjYmIyYTk2Y2QxMjY0
ZGJlZjEwHhcNMjUwNDEzMTUwMTI4WhcNMjUwNDE0MTUwMTI4WjAzMTEwLwYDVQQD
EyhiYTczZjE5YmVjNDIzY2RiODMzZjQ5YmI2NTVhN2VlZTNlYWIxZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7uX+5adPsEVExjO6kUDld5xs1u9
oghxdez/8kOr1ZTQmtvv5ZVBP77qgaQq2x9WcbK2tAJFS132oGni3wYq7cnL4/pq
CZX4X6CGLwhLtcy38a8e1m8+S/XK20ikoPYBEWgjtNa1vRPDPAg8fDSzJyDQ9PTh
4CltupAR2pLKfcbYqRq7xIWlx06LXH0wYCeLWp3upg84nbvMyKqaT1ONy473lVdq
TBvCu4EcE3v5vqyMr87MZpqEH79bW+mnyFiJ5NW+a7fDU/k1DwgGBGtROohshG3m
nYkG5q2dldD6eCOaxH3ewDZ9F/ASSWxwrig5gp1YmIRR0OKznTkppXcuaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpz8ZvsQjzbgz9Ju2Vafu4+qx1UMB8GA1UdIwQY
MBaAFHoQ7iKAczKKLCCBy7KpbNEmTb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMt
NzZlMDdhNTc3ZTRkLzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMtNzZlMDdhNTc3ZTRk
LzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoBB3/ZE
WG3Zdk1g6101xbsVAfifOQvj5T8OstzP14FE6aXbZjs8BWU5WvFP7KMY/j0inr6m
1i0bthzP6qgnlTXe2+CRkHCc9qvVY5s0x9faa9cTQg4iT+4BsGe77eq/m+m9dV3s
6rofRPhAz/s5gZ9br0mef+VJuzLlM86dS21pcGmt6tw28Sg3XDZcW2ceT6AKOGxJ
LCHjaRA7Yw2BgCzHQcDaUVpJJ1zjWQ55be5oyRrwLszg9NS0MVu0+jd9bu55gcpH
H0XMYFFr+4X4/t3Wk0Hmh7T1/82yqH2Ow7h9YZ074B6T2/rNUp+8FKU6CCAVWs4J
QM2NFyhFs2oTVA==
-----END CERTIFICATE-----