Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
File:                     egoGVk08cX0tbaoegzxJWXawuto.mft (raw, json)
Hash identifier:          Wr1TQBXS4pROEmHVHlnn10o8J6sIsEX/XZ8mvSZMFPg=
Subject key identifier:   BD:2F:08:C6:EB:46:16:39:A1:79:83:B4:52:BE:0E:CC:43:EF:C7:0F
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Certificate issuer:       /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial:       01962DF3CF8A70F582A900003B25177536D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
Manifest number:          1389
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 2bWZH-siKv9yamXLxhMW4gBTBXs.roa (hash: xWCLh4hIiubp753R08bjE0GaWYotTbdn6hf3WZPct+A=)
                          2: 7IdkztL4D2rd1OWu-Fwdy4TrVLU.roa (hash: dbyo4ZfaUk/gfa7oD7KrfiLAvIhYyozL2QxpQuJXGrE=)
                          3: egoGVk08cX0tbaoegzxJWXawuto.crl (hash: /aYpoNsqrAPG5WREh5OYHtBSXfn+/zV/HEiKtexGmVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cf:8a:70:f5:82:a9:00:00:3b:25:17:75:36:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=bd2f08c6eb461639a17983b452be0ecc43efc70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:b5:f2:34:d9:5d:01:a3:32:f5:40:d3:c2:
                    22:13:da:da:6b:96:f0:e3:43:a7:52:21:ff:98:76:
                    c8:a2:d3:a0:f5:8a:28:17:b3:81:66:02:11:a9:5c:
                    20:ab:c2:49:33:e4:e0:8b:ef:27:c1:3b:f3:a3:e4:
                    24:93:05:a7:bf:73:a0:c8:f9:46:a9:df:99:39:fc:
                    26:b4:02:9d:cd:ea:e7:88:d9:6b:36:f7:69:f9:2c:
                    56:60:ba:63:c1:a1:ae:68:f9:80:35:a0:3c:55:ee:
                    2a:52:4c:09:96:47:61:30:e6:f6:03:59:fa:38:c7:
                    ef:1e:23:a9:48:3f:dd:29:41:24:88:37:c4:7d:b9:
                    17:bf:e9:b6:7d:1b:91:98:0a:8c:41:8d:1e:3a:b7:
                    70:46:45:a3:7e:9a:9a:28:c7:d5:f8:45:38:b5:0e:
                    a6:00:c5:69:54:7a:a9:06:99:d2:0d:c9:1f:3e:be:
                    dc:e8:35:4b:88:f5:17:d6:0f:6b:73:5f:3d:0e:74:
                    cf:90:7f:c9:67:15:5d:43:62:cc:68:75:c4:67:46:
                    91:59:7e:15:c1:01:22:9a:08:b9:5f:fc:5d:7b:9d:
                    bb:fc:7a:d6:7c:c9:1b:87:c9:93:7d:d4:b7:c5:dc:
                    27:00:7d:5a:e6:3a:6f:36:61:3b:b2:98:f8:96:b4:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:08:C6:EB:46:16:39:A1:79:83:B4:52:BE:0E:CC:43:EF:C7:0F
            X509v3 Authority Key Identifier:
                keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:0c:5c:ce:47:26:64:be:ef:ca:25:85:71:f6:92:43:48:
         60:f0:87:a5:8a:89:90:81:ef:ef:4d:57:f6:f3:73:95:15:9a:
         a7:dd:56:42:a2:a6:cb:b1:e4:f1:8a:d6:12:b5:a1:c5:fc:6c:
         81:38:84:a9:b7:27:a5:df:34:95:fd:88:11:ac:dd:8f:21:7a:
         54:f4:1d:48:98:10:dd:25:41:a1:20:df:8c:c1:2e:81:15:63:
         f1:0d:08:cc:2e:b2:cd:68:38:14:9f:4c:65:fb:36:de:e3:ea:
         04:8e:71:78:33:e3:1a:17:b2:d9:0f:bd:90:a4:71:ba:1c:3b:
         12:dd:ae:72:8a:4c:ab:9c:30:8b:96:cb:8d:2c:9a:48:df:21:
         ef:ce:eb:50:50:d2:46:9c:30:f8:60:e0:c7:3d:4e:fa:b7:57:
         75:11:c4:ee:ac:28:b1:d3:2b:5d:ca:20:e5:4a:4e:f1:6f:0b:
         ab:1b:8d:42:3b:84:74:56:7c:5a:92:31:a5:87:eb:c2:bc:36:
         2f:a8:4f:72:9b:d7:93:d4:6c:aa:7b:a6:b2:83:d8:c5:06:db:
         6b:09:a8:7f:b8:ca:02:3f:6c:f9:2d:52:fc:9f:30:c4:96:1e:
         96:54:b4:21:82:33:ab:93:cc:85:73:04:a0:93:c6:85:93:f7:
         dc:ac:84:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88+KcPWCqQAAOyUXdTbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGEwNjU2NGQzYzcxN2QyZDZkYWExZTgzM2M0OTU5NzZi
MGJhZGEwHhcNMjUwNDEzMDcwMTE1WhcNMjUwNDE0MDcwMTE1WjAzMTEwLwYDVQQD
EyhiZDJmMDhjNmViNDYxNjM5YTE3OTgzYjQ1MmJlMGVjYzQzZWZjNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArny18jTZXQGjMvVA08IiE9raa5bw
40OnUiH/mHbIotOg9YooF7OBZgIRqVwgq8JJM+Tgi+8nwTvzo+QkkwWnv3OgyPlG
qd+ZOfwmtAKdzerniNlrNvdp+SxWYLpjwaGuaPmANaA8Ve4qUkwJlkdhMOb2A1n6
OMfvHiOpSD/dKUEkiDfEfbkXv+m2fRuRmAqMQY0eOrdwRkWjfpqaKMfV+EU4tQ6m
AMVpVHqpBpnSDckfPr7c6DVLiPUX1g9rc189DnTPkH/JZxVdQ2LMaHXEZ0aRWX4V
wQEimgi5X/xde527/HrWfMkbh8mTfdS3xdwnAH1a5jpvNmE7spj4lrT8+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0vCMbrRhY5oXmDtFK+DsxD78cPMB8GA1UdIwQY
MBaAFHoKBlZNPHF9LW2qHoM8SVl2sLraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAt
NTQ4MjYzZWI2ZmI0LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82ZjU5OGQtYTVjNS00Yzk5LWExZjAtNTQ4MjYzZWI2ZmI0
LzEvZWdvR1ZrMDhjWDB0YmFvZWd6eEpXWGF3dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWoMXM5H
JmS+78olhXH2kkNIYPCHpYqJkIHv701X9vNzlRWap91WQqKmy7Hk8YrWErWhxfxs
gTiEqbcnpd80lf2IEazdjyF6VPQdSJgQ3SVBoSDfjMEugRVj8Q0IzC6yzWg4FJ9M
Zfs23uPqBI5xeDPjGhey2Q+9kKRxuhw7Et2ucopMq5wwi5bLjSyaSN8h787rUFDS
Rpww+GDgxz1O+rdXdRHE7qwosdMrXcog5UpO8W8LqxuNQjuEdFZ8WpIxpYfrwrw2
L6hPcpvXk9RsqnumsoPYxQbbawmof7jKAj9s+S1S/J8wxJYellS0IYIzq5PMhXME
oJPGhZP33KyErw==
-----END CERTIFICATE-----