Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          DoWVkwhf+n1S60xpiwDQEUtIZ4iRwEEB7+OysN0LPKU=
Subject key identifier:   35:70:72:8D:F3:0C:45:84:A0:C5:5C:EA:98:9E:8E:F5:D9:6A:5A:E4
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       01962DF3D7785BF61974BE8290CD3E2F7824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
                          2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
                          3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: nExLHLjpQplO0gpLNdKir5JqOHHj/XU+iHkBMO2FMrA=)
                          4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
                          5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
                          6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
                          7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
                          8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:78:5b:f6:19:74:be:82:90:cd:3e:2f:78:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=3570728df30c4584a0c55cea989e8ef5d96a5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:98:d2:83:ea:39:53:4a:97:a2:fd:75:e7:
                    96:60:72:b3:25:3e:04:d8:5b:c5:92:5c:55:aa:c0:
                    16:82:ce:a9:da:5d:f5:ff:a2:f6:bb:cf:4e:3d:33:
                    c8:95:77:b7:ff:85:43:9a:f6:2c:95:b7:c8:7e:87:
                    7d:d6:da:94:14:97:61:16:84:a2:d1:28:23:eb:9e:
                    17:56:37:53:dc:53:74:c9:5d:0c:fe:88:7c:4f:c9:
                    b2:1a:c7:70:68:d8:a3:7f:be:07:31:67:94:02:07:
                    4e:54:e0:05:f2:fd:b8:52:46:de:7f:48:78:14:8f:
                    fe:41:82:58:85:fd:ee:ef:01:9d:fc:c2:06:e6:5d:
                    0d:4b:69:8e:66:35:0c:ab:25:c8:92:3f:b1:ae:81:
                    cd:22:5b:04:0a:2f:67:c3:ef:8f:15:66:b5:39:34:
                    f5:4a:4b:dc:3f:09:03:84:62:eb:62:3a:75:08:d7:
                    df:40:8e:ab:42:34:ca:ca:eb:09:d6:63:7b:56:81:
                    27:32:50:4e:e7:6b:f0:be:01:d8:61:a3:ee:db:5b:
                    36:63:8e:3c:58:d8:50:35:b7:54:9b:b2:72:08:12:
                    c0:4e:de:6c:a8:6d:ed:13:a7:95:00:76:ee:1e:da:
                    71:7f:e1:76:d1:65:da:6a:e1:8a:11:1d:a0:ed:d4:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:70:72:8D:F3:0C:45:84:A0:C5:5C:EA:98:9E:8E:F5:D9:6A:5A:E4
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:29:3b:4f:ef:ee:00:35:46:d7:16:0e:79:c9:f8:12:23:
         3a:7b:76:f8:f0:56:54:e1:4e:72:e6:5f:a2:f5:99:a7:f2:c9:
         e8:45:3a:7f:33:5b:68:e9:1f:04:2f:f9:ba:f9:39:7b:f5:b5:
         21:7f:9c:30:b2:ce:43:65:aa:b7:27:30:55:c2:b1:5d:ab:f9:
         4c:d3:77:b2:c9:d1:c3:4b:26:1c:df:58:e5:bb:ff:c4:fc:a4:
         fc:2c:02:51:89:06:e8:62:fa:47:d3:af:dc:7b:33:c3:e2:a6:
         29:36:e5:41:43:15:a9:34:08:b6:78:e8:85:8b:40:4b:1b:21:
         e6:fe:9e:bd:c8:f8:d1:de:89:5e:5b:89:36:88:9d:07:fc:95:
         4d:81:0b:5c:1d:de:f7:27:07:dc:95:24:fd:3d:1e:eb:9f:26:
         29:10:25:da:0f:1e:2c:e1:8b:85:b9:ce:12:2e:a3:94:c3:03:
         29:f3:bb:51:be:8e:3f:29:d7:51:22:46:1d:c8:3e:4c:22:a9:
         89:76:dc:32:3e:3e:a7:3f:b2:43:91:2a:58:e0:62:da:45:fc:
         7c:fd:8c:1a:9a:f6:99:d9:8a:71:b0:7a:02:77:fb:88:f4:0a:
         4e:10:63:99:eb:92:13:45:48:be:c5:8e:7e:7e:a9:7e:f2:f5:
         44:04:e9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89d4W/YZdL6CkM0+L3gkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
EygzNTcwNzI4ZGYzMGM0NTg0YTBjNTVjZWE5ODllOGVmNWQ5NmE1YWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmeY0oPqOVNKl6L9deeWYHKzJT4E
2FvFklxVqsAWgs6p2l31/6L2u89OPTPIlXe3/4VDmvYslbfIfod91tqUFJdhFoSi
0Sgj654XVjdT3FN0yV0M/oh8T8myGsdwaNijf74HMWeUAgdOVOAF8v24Ukbef0h4
FI/+QYJYhf3u7wGd/MIG5l0NS2mOZjUMqyXIkj+xroHNIlsECi9nw++PFWa1OTT1
SkvcPwkDhGLrYjp1CNffQI6rQjTKyusJ1mN7VoEnMlBO52vwvgHYYaPu21s2Y448
WNhQNbdUm7JyCBLATt5sqG3tE6eVAHbuHtpxf+F20WXaauGKER2g7dS1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVwco3zDEWEoMVc6piejvXZalrkMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2gpO0/v
7gA1RtcWDnnJ+BIjOnt2+PBWVOFOcuZfovWZp/LJ6EU6fzNbaOkfBC/5uvk5e/W1
IX+cMLLOQ2WqtycwVcKxXav5TNN3ssnRw0smHN9Y5bv/xPyk/CwCUYkG6GL6R9Ov
3Hszw+KmKTblQUMVqTQItnjohYtASxsh5v6evcj40d6JXluJNoidB/yVTYELXB3e
9ycH3JUk/T0e658mKRAl2g8eLOGLhbnOEi6jlMMDKfO7Ub6OPynXUSJGHcg+TCKp
iXbcMj4+pz+yQ5EqWOBi2kX8fP2MGpr2mdmKcbB6Anf7iPQKThBjmeuSE0VIvsWO
fn6pfvL1RATpSw==
-----END CERTIFICATE-----