Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          42r4S2er0rvGuVbK8iB0kgX0UtpnV9yaES2f0/HzZ0g=
Subject key identifier:   82:DF:99:0F:7C:48:77:A8:EB:D0:61:B4:63:36:DD:76:3B:AE:0E:F9
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       01962F748A293E44BC5955F204171D55A7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          1170
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: 9zQwo5d/XqT5lMn+QmID5UN70aLuCNDdxcEVF8W9PPw=)
                          2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:29:3e:44:bc:59:55:f2:04:17:1d:55:a7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=82df990f7c4877a8ebd061b46336dd763bae0ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:53:ea:e3:73:67:82:12:ba:f4:e5:73:9a:
                    f0:d3:01:76:6f:d6:15:41:b0:b3:f1:90:01:dd:0f:
                    85:96:bd:0e:e0:23:62:f4:d4:59:ed:52:93:48:bd:
                    d1:5d:7f:5d:e3:ac:4a:7d:f1:de:37:6a:3d:b0:49:
                    9a:c7:e1:4a:fa:44:a2:0b:ab:d9:08:3b:17:74:e9:
                    27:ec:30:87:79:bd:9f:d7:95:40:b9:99:8f:1c:e9:
                    d4:ed:41:4b:e0:af:29:47:7a:82:8d:b4:c6:31:bd:
                    b6:b1:a5:3b:75:6a:99:40:8a:d2:82:ae:db:13:06:
                    d9:f4:1d:9a:a4:a2:4e:9d:d9:c5:df:f7:93:4e:fb:
                    86:4b:ed:f4:79:5c:2d:86:c8:0b:10:ea:ac:5e:a3:
                    ce:77:d5:8a:cd:70:ac:c5:bd:05:a0:38:94:82:6f:
                    a5:4c:15:09:91:38:27:7f:18:f0:ee:1d:2e:89:ea:
                    73:af:74:5f:02:90:79:95:9d:f4:86:74:2c:91:45:
                    8e:0b:d5:d7:92:42:fc:f0:99:8b:ac:59:3a:48:e4:
                    cb:e7:60:1c:8b:d5:ac:0f:c7:e4:4c:54:4c:9d:cb:
                    12:f2:d1:d9:ab:7d:96:ca:b5:7d:d9:1f:80:e2:38:
                    f6:c5:4b:5f:92:ab:cb:e2:d4:52:c3:87:a3:f4:9d:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DF:99:0F:7C:48:77:A8:EB:D0:61:B4:63:36:DD:76:3B:AE:0E:F9
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:90:6f:c1:33:47:31:82:34:6f:1b:4d:13:16:18:a9:9a:
         5b:75:fe:de:92:33:90:8e:88:aa:ce:b4:8b:e3:ec:5e:20:59:
         24:54:d2:e6:84:cb:88:97:a2:f7:d4:45:a1:a1:27:c9:8f:78:
         c9:b2:3c:23:2e:d8:20:24:bb:fc:ae:fe:92:05:9f:08:7f:43:
         df:89:38:08:88:75:37:b6:bc:ac:93:a7:bd:18:3e:a9:9a:79:
         75:b3:03:a1:8f:55:ec:2a:a2:ee:f5:9f:b0:28:0d:09:50:3c:
         4d:bc:bb:9e:7b:0c:80:f8:9e:40:86:5c:07:22:06:a0:f4:9b:
         c1:ba:2f:11:a4:bb:56:35:34:a3:0e:1e:9d:ad:28:b3:d5:2b:
         fa:8c:e8:5a:d7:e8:62:f9:2c:e5:3f:f0:85:bf:bb:9f:d2:f5:
         97:a2:f1:19:5d:c8:a6:11:58:d7:07:f4:32:e9:01:4a:55:79:
         e8:ca:d9:3a:05:48:02:0c:5c:43:fc:f2:51:b1:42:c7:71:74:
         0c:1a:cb:06:09:e3:a7:51:85:90:25:c7:9d:cb:8b:33:ed:71:
         f8:69:68:0a:bb:d4:b4:13:21:43:a1:b2:53:37:58:50:3e:ad:
         58:ad:d9:35:b3:78:1b:f6:cd:73:ed:20:cc:33:62:87:65:7e:
         1b:c1:09:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIopPkS8WVXyBBcdVafsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjUwNDEzMTQwMTI4WhcNMjUwNDE0MTQwMTI4WjAzMTEwLwYDVQQD
Eyg4MmRmOTkwZjdjNDg3N2E4ZWJkMDYxYjQ2MzM2ZGQ3NjNiYWUwZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjdT6uNzZ4ISuvTlc5rw0wF2b9YV
QbCz8ZAB3Q+Flr0O4CNi9NRZ7VKTSL3RXX9d46xKffHeN2o9sEmax+FK+kSiC6vZ
CDsXdOkn7DCHeb2f15VAuZmPHOnU7UFL4K8pR3qCjbTGMb22saU7dWqZQIrSgq7b
EwbZ9B2apKJOndnF3/eTTvuGS+30eVwthsgLEOqsXqPOd9WKzXCsxb0FoDiUgm+l
TBUJkTgnfxjw7h0uiepzr3RfApB5lZ30hnQskUWOC9XXkkL88JmLrFk6SOTL52Ac
i9WsD8fkTFRMncsS8tHZq32WyrV92R+A4jj2xUtfkqvL4tRSw4ej9J3yawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILfmQ98SHeo69BhtGM23XY7rg75MB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSqQb8Ez
RzGCNG8bTRMWGKmaW3X+3pIzkI6Iqs60i+PsXiBZJFTS5oTLiJei99RFoaEnyY94
ybI8Iy7YICS7/K7+kgWfCH9D34k4CIh1N7a8rJOnvRg+qZp5dbMDoY9V7Cqi7vWf
sCgNCVA8Tby7nnsMgPieQIZcByIGoPSbwbovEaS7VjU0ow4ena0os9Ur+ozoWtfo
Yvks5T/whb+7n9L1l6LxGV3IphFY1wf0MukBSlV56MrZOgVIAgxcQ/zyUbFCx3F0
DBrLBgnjp1GFkCXHncuLM+1x+GloCrvUtBMhQ6GyUzdYUD6tWK3ZNbN4G/bNc+0g
zDNih2V+G8EJ7Q==
-----END CERTIFICATE-----