Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
File:                     EWU43_13zyOMTq65XKBUh8VnGrU.mft (raw, json)
Hash identifier:          q5xnnX+gB076frOpLWVOIP2hImD9Mi07NLQLekt/Gvg=
Subject key identifier:   FC:84:E9:BD:D6:C5:45:F8:EE:67:F6:9D:15:B3:C9:B7:8A:F5:8E:B7
Authority key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
Certificate issuer:       /CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Certificate serial:       01962FAB689DD1AB89B2257A2E681AB2EC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
Manifest number:          12F0
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: EWU43_13zyOMTq65XKBUh8VnGrU.crl (hash: S2jHlEK0AlOK/E7maYfBY7OxynPflu0/AsWrk5koOk0=)
                          2: HuQC2jA885BU0j4_LL5scjkpAao.roa (hash: EvlRJMUXmvL4+uCrMnz97o0wOcJ1RwBXa983YUf2PO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:9d:d1:ab:89:b2:25:7a:2e:68:1a:b2:ec:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=fc84e9bdd6c545f8ee67f69d15b3c9b78af58eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:67:61:6f:8b:0f:3f:1a:b2:26:f2:21:a0:
                    5f:c1:cb:62:18:48:b3:51:cb:31:0e:42:bd:ec:f8:
                    f8:71:dc:b2:7b:d0:c8:3d:3a:1d:49:56:ec:8a:f1:
                    d6:30:bc:c8:42:96:a8:5d:9b:ca:d7:a7:18:9a:52:
                    41:58:82:fc:bc:31:5f:f5:00:40:0e:fa:96:76:8c:
                    d1:aa:53:71:49:09:a7:bd:c5:b5:8c:05:36:b4:e2:
                    6d:85:b8:3a:52:fc:37:25:f7:47:06:02:fb:7f:d8:
                    21:11:ba:c7:ab:76:07:08:98:5f:28:2b:62:22:c5:
                    e9:13:4a:74:76:4b:d1:1b:15:ef:7c:48:3f:39:89:
                    19:cf:fd:5b:8e:b6:85:61:d7:68:1c:24:fc:7e:6a:
                    d1:f0:25:78:d8:df:d4:c3:83:ca:3e:c3:71:eb:69:
                    2c:38:f2:e4:4a:44:59:77:f9:7f:7c:de:b3:4b:ed:
                    74:7a:17:bd:d3:6f:07:c4:e8:09:54:cf:e5:07:87:
                    0d:f1:00:85:68:93:a2:ed:6a:c7:5f:fc:94:8e:49:
                    3f:9f:f5:e7:a6:d7:4e:93:59:b5:b2:99:1e:3c:d8:
                    17:6b:3d:96:7f:7b:8e:66:b9:64:f4:b0:16:06:a2:
                    07:85:ca:25:c3:97:ab:4e:42:ec:63:4d:26:28:7c:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:E9:BD:D6:C5:45:F8:EE:67:F6:9D:15:B3:C9:B7:8A:F5:8E:B7
            X509v3 Authority Key Identifier:
                keyid:11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:63:f4:5a:e0:34:3b:61:30:4a:a0:d3:b6:f5:b7:c8:77:
         6d:1c:3d:9e:0f:ab:d2:8d:80:c4:88:8e:6a:5d:73:61:2d:bd:
         a2:f5:20:09:22:f7:a3:b8:30:62:55:07:3e:17:2e:ca:c2:a7:
         f2:d6:77:b9:d5:03:63:f1:9b:6d:41:47:f4:9d:33:ef:1f:51:
         98:99:39:ce:64:4e:63:f6:cb:cc:7d:f7:9c:c6:70:94:6c:20:
         bb:60:4e:52:aa:52:b1:4d:8d:f8:3a:d2:74:e7:09:2f:45:14:
         25:3c:a8:52:a3:22:6e:95:b8:39:25:24:6a:9c:ee:55:64:17:
         37:f4:bc:ad:ce:4a:2b:48:12:7d:fb:fa:58:96:61:9a:ee:f0:
         f6:f3:c1:49:f9:48:9b:fb:74:a7:f8:b8:b4:60:ed:92:2c:38:
         b2:97:8d:23:5b:41:70:60:a7:08:79:6c:9f:db:ff:3b:b3:90:
         e9:93:b0:6c:bc:74:ac:74:25:9e:29:02:1c:71:93:46:8d:b8:
         c2:43:6f:22:3d:02:6f:c9:c7:48:40:5a:94:03:58:27:28:33:
         1a:e2:f3:3c:82:09:ec:74:60:95:70:20:f2:21:1a:26:79:66:
         ce:ec:8a:e6:d4:14:26:35:dc:78:a0:24:fa:04:31:90:a9:af:
         a2:ce:a8:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2id0auJsiV6LmgasuxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNjUzOGRmZmQ3N2NmMjM4YzRlYWViOTVjYTA1NDg3YzU2
NzFhYjUwHhcNMjUwNDEzMTUwMTI0WhcNMjUwNDE0MTUwMTI0WjAzMTEwLwYDVQQD
EyhmYzg0ZTliZGQ2YzU0NWY4ZWU2N2Y2OWQxNWIzYzliNzhhZjU4ZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj9nYW+LDz8asibyIaBfwctiGEiz
UcsxDkK97Pj4cdyye9DIPTodSVbsivHWMLzIQpaoXZvK16cYmlJBWIL8vDFf9QBA
DvqWdozRqlNxSQmnvcW1jAU2tOJthbg6Uvw3JfdHBgL7f9ghEbrHq3YHCJhfKCti
IsXpE0p0dkvRGxXvfEg/OYkZz/1bjraFYddoHCT8fmrR8CV42N/Uw4PKPsNx62ks
OPLkSkRZd/l/fN6zS+10ehe9028HxOgJVM/lB4cN8QCFaJOi7WrHX/yUjkk/n/Xn
ptdOk1m1spkePNgXaz2Wf3uOZrlk9LAWBqIHhcolw5erTkLsY00mKHz4DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyE6b3WxUX47mf2nRWzybeK9Y63MB8GA1UdIwQY
MBaAFBFlON/9d88jjE6uuVygVIfFZxq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kZThkODItOGUwYS00NDUyLWI4OWEt
NjUwOGMxZjRhNDQ1LzEvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kZThkODItOGUwYS00NDUyLWI4OWEtNjUwOGMxZjRhNDQ1
LzEvRVdVNDNfMTN6eU9NVHE2NVhLQlVoOFZuR3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+tj9Frg
NDthMEqg07b1t8h3bRw9ng+r0o2AxIiOal1zYS29ovUgCSL3o7gwYlUHPhcuysKn
8tZ3udUDY/GbbUFH9J0z7x9RmJk5zmROY/bLzH33nMZwlGwgu2BOUqpSsU2N+DrS
dOcJL0UUJTyoUqMibpW4OSUkapzuVWQXN/S8rc5KK0gSffv6WJZhmu7w9vPBSflI
m/t0p/i4tGDtkiw4speNI1tBcGCnCHlsn9v/O7OQ6ZOwbLx0rHQlnikCHHGTRo24
wkNvIj0Cb8nHSEBalANYJygzGuLzPIIJ7HRglXAg8iEaJnlmzuyK5tQUJjXceKAk
+gQxkKmvos6olA==
-----END CERTIFICATE-----