Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
File:                     E2a5YKbx8EQ58JGG-ez1ManOJkg.mft (raw, json)
Hash identifier:          sJmWScSonNOqfEGO290VMzXvIJh9/Epca1VowJsSAi0=
Subject key identifier:   D2:9A:11:FC:B5:96:BF:CF:E0:DB:B8:0A:4A:A6:8F:83:1D:B4:45:86
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Certificate issuer:       /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial:       01962E9996872004E0C0F933FDEAAA81C49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft
Manifest number:          150B
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: 5KU69xpItYQY0WxFGzbCaR_xF-I.roa (hash: nALEvmxEmiAuf2P9EYLZypsp4ZL3LnUKyRUMkW+WsNM=)
                          2: E2a5YKbx8EQ58JGG-ez1ManOJkg.crl (hash: eyyKDtivzzo4/W3y4LH8zvcuB531ULBeA5+UgP7vC5o=)
                          3: iCZ5LkRRabrQM8eb0h1397FNbPc.roa (hash: /PXtPb3g/8dNDvzzTJMTXsHm+K21xBEsZZ9tlSPaX0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:96:87:20:04:e0:c0:f9:33:fd:ea:aa:81:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=d29a11fcb596bfcfe0dbb80a4aa68f831db44586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:1e:38:14:c2:07:39:e4:af:94:7e:c6:b6:
                    ad:76:b5:e0:fa:64:3e:11:80:b0:0c:a8:9f:bb:d3:
                    07:a6:b3:80:9f:c9:ed:7f:dd:46:9e:af:c0:ed:4e:
                    3d:66:b8:c9:0b:2b:3b:a1:32:ca:0e:e2:ca:1d:5f:
                    5e:90:71:c5:bc:67:c3:07:f7:38:e1:2a:c6:c1:c1:
                    24:0e:17:25:ff:86:00:01:9d:11:70:db:6f:7e:12:
                    28:22:40:bc:1f:77:3d:af:fb:da:eb:09:da:32:e5:
                    57:84:10:da:8e:73:f4:08:43:c5:5e:d6:28:a4:29:
                    9e:04:f4:0e:96:65:ea:e8:6b:98:91:06:39:28:04:
                    27:22:a9:70:01:23:18:74:29:60:91:fe:df:8b:55:
                    f4:01:99:43:44:5f:69:a8:5c:15:c1:75:11:aa:aa:
                    bc:4a:1b:9d:af:8f:09:99:5d:b6:0f:6c:e4:a2:b4:
                    59:cd:76:87:00:80:8f:8b:e0:35:bc:63:c2:73:d1:
                    ed:c6:61:c5:27:ee:c0:ba:1d:cf:e4:d3:36:f3:18:
                    3d:6a:45:54:dc:d5:7b:0b:a6:d2:77:9c:a8:ef:d7:
                    3e:a8:ee:94:d0:9b:d8:c5:83:95:d1:af:10:76:c9:
                    05:31:d0:c1:5e:0e:b7:7b:7c:7d:2c:79:fe:7b:23:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9A:11:FC:B5:96:BF:CF:E0:DB:B8:0A:4A:A6:8F:83:1D:B4:45:86
            X509v3 Authority Key Identifier:
                keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:ac:83:d6:be:70:81:7f:94:60:cb:49:8d:66:70:56:3d:
         e0:74:53:53:95:50:79:4d:60:ea:50:5c:05:af:e6:05:72:42:
         78:44:ba:41:ee:0a:f5:23:4a:2d:3f:bd:77:94:29:02:21:06:
         44:b8:6a:18:67:17:f0:d8:1e:fe:c6:c6:cc:c1:b6:30:5c:a5:
         0f:b6:a7:37:66:8f:d3:56:60:7d:a4:ad:3b:52:62:f3:1b:d6:
         09:65:f3:8b:0b:50:b9:87:e0:be:aa:34:e7:b7:f5:2f:19:73:
         3f:75:ca:ba:b2:de:14:ab:d6:d5:c1:68:c7:27:78:37:dc:38:
         26:b5:f8:3e:8f:8a:5d:16:73:56:6a:f5:0a:17:22:7b:99:4f:
         13:bc:3c:36:8e:ed:5b:99:02:7b:b7:de:35:7c:4d:3d:e0:ed:
         50:4a:bf:44:c7:cb:b4:a8:d8:43:9e:09:b6:0e:e5:43:e7:e5:
         bb:85:36:9b:1c:5a:91:15:df:b6:c5:0a:88:bc:4d:36:fb:21:
         ff:9a:f3:36:68:7e:49:70:fd:74:f9:a9:bf:5e:91:54:35:4f:
         42:95:a9:08:c2:c3:26:a3:9d:8b:bc:63:57:23:4e:4e:95:e8:
         28:3e:dc:a3:ff:73:c6:57:52:de:67:5b:22:31:7e:56:7b:d4:
         54:66:17:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZaHIATgwPkz/eqqgcSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjUwNDEzMTAwMjE5WhcNMjUwNDE0MTAwMjE5WjAzMTEwLwYDVQQD
EyhkMjlhMTFmY2I1OTZiZmNmZTBkYmI4MGE0YWE2OGY4MzFkYjQ0NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPMeOBTCBznkr5R+xratdrXg+mQ+
EYCwDKifu9MHprOAn8ntf91Gnq/A7U49ZrjJCys7oTLKDuLKHV9ekHHFvGfDB/c4
4SrGwcEkDhcl/4YAAZ0RcNtvfhIoIkC8H3c9r/va6wnaMuVXhBDajnP0CEPFXtYo
pCmeBPQOlmXq6GuYkQY5KAQnIqlwASMYdClgkf7fi1X0AZlDRF9pqFwVwXURqqq8
Shudr48JmV22D2zkorRZzXaHAICPi+A1vGPCc9HtxmHFJ+7Auh3P5NM28xg9akVU
3NV7C6bSd5yo79c+qO6U0JvYxYOV0a8QdskFMdDBXg63e3x9LHn+eyPysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKaEfy1lr/P4Nu4Ckqmj4MdtEWGMB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB+sg9a+
cIF/lGDLSY1mcFY94HRTU5VQeU1g6lBcBa/mBXJCeES6Qe4K9SNKLT+9d5QpAiEG
RLhqGGcX8Nge/sbGzMG2MFylD7anN2aP01ZgfaStO1Ji8xvWCWXziwtQuYfgvqo0
57f1LxlzP3XKurLeFKvW1cFoxyd4N9w4JrX4Po+KXRZzVmr1Chcie5lPE7w8No7t
W5kCe7feNXxNPeDtUEq/RMfLtKjYQ54Jtg7lQ+flu4U2mxxakRXftsUKiLxNNvsh
/5rzNmh+SXD9dPmpv16RVDVPQpWpCMLDJqOdi7xjVyNOTpXoKD7co/9zxldS3mdb
IjF+VnvUVGYX1w==
-----END CERTIFICATE-----