Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File:                     7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier:          LA1jgrq8J6IoMOq1iupDWlkjIsh/tWxbXL3qi381YyA=
Subject key identifier:   1D:45:A6:3F:16:EF:24:44:9A:39:E0:14:20:0B:D6:8F:72:AC:20:8A
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer:       /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial:       01962E6195319146BB9249D48E3146BC66F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: sBkKzTXuKvBRFxk6H4tveCj1mSL35YW/SSoIUGwFIqM=)
                          2: iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa (hash: xdKq+/ODUXejhJKyI2Ol9rOhJg9XTGoQZtrMhSTgxpw=)
                          3: pVu2j0EJCMMdBZE3gYcjdze0MJw.roa (hash: smTFngwmoe2BMrTIAR1rWR3m1Bo7KfOKZGk2cxj/sgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:95:31:91:46:bb:92:49:d4:8e:31:46:bc:66:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=1d45a63f16ef24449a39e014200bd68f72ac208a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:ae:a1:31:c0:b3:e0:35:00:75:c6:5f:6b:
                    f9:d1:b4:d1:ec:78:d5:fb:b9:12:6e:80:cf:4a:6b:
                    e7:5c:d5:53:83:08:3d:32:ba:e9:06:9e:bb:eb:e9:
                    38:e7:08:75:67:fa:2d:f7:23:ed:e4:5a:51:6f:81:
                    5b:4f:47:9f:f1:ec:8e:47:44:4d:f6:7a:70:f7:4d:
                    d4:ac:e0:96:53:4b:a8:89:c4:ca:34:cb:6b:80:2d:
                    45:11:d2:64:47:67:13:ee:e8:97:c6:d0:2c:96:57:
                    ec:45:c6:77:cf:32:1b:21:de:4a:50:f3:a7:ff:ea:
                    bf:73:8b:44:ee:ff:20:a7:b7:d9:a8:c5:b3:40:4d:
                    02:e0:71:97:b6:2a:68:ec:85:fb:a5:74:0e:cc:5b:
                    38:0d:97:ef:4b:3d:5b:62:8b:94:13:b6:54:38:9a:
                    c9:a0:4b:3d:e5:c4:63:3b:8e:83:c4:1c:21:a5:09:
                    f0:5b:65:83:77:b0:82:58:3c:b1:ba:6e:31:58:a0:
                    2e:41:63:83:46:85:e2:cf:4b:02:83:f7:58:a2:e8:
                    09:06:89:89:0e:38:2c:82:c8:ac:c2:59:69:33:d7:
                    57:86:a0:6d:4b:1a:bd:42:ec:1c:45:11:c5:79:ec:
                    5e:43:f2:02:ee:bd:84:0f:c9:fc:26:a8:85:59:ca:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:A6:3F:16:EF:24:44:9A:39:E0:14:20:0B:D6:8F:72:AC:20:8A
            X509v3 Authority Key Identifier:
                keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:72:bc:d2:b8:1e:87:25:c7:4a:4d:6e:7b:89:e7:f0:2f:
         bb:08:62:ee:f9:24:03:e5:a1:48:79:1f:34:82:85:05:36:67:
         81:44:2c:15:46:a8:b2:8e:81:b3:d5:a5:db:e9:09:3b:42:b6:
         d3:95:57:f8:f9:a5:a3:1d:4e:cb:10:af:f0:46:08:b9:df:f8:
         a4:aa:eb:da:9a:9e:81:5e:f0:57:a8:3b:68:9b:67:0b:28:7f:
         77:25:9b:de:5f:72:4c:b9:84:ed:3f:8e:f6:da:33:4d:ad:69:
         2f:ce:ac:d1:c5:c4:39:50:ff:f0:c9:63:dd:25:ec:66:42:f7:
         5e:85:e8:9b:94:3c:e5:04:ea:77:fd:ca:4d:99:17:a3:09:12:
         19:8b:4f:50:56:6f:25:2a:0d:cd:a8:23:05:ea:02:6f:2a:b3:
         a8:1e:33:ce:bf:2d:ec:90:25:0e:3a:5d:da:c6:c8:a0:9e:f3:
         2f:49:22:46:35:77:13:4a:0d:7c:72:e9:c2:1c:e9:4d:21:5e:
         04:13:38:24:41:79:c7:dc:e0:fb:66:0d:c4:d2:af:98:cb:08:
         1b:b0:c8:6c:82:85:f3:22:47:79:61:66:b3:5c:92:4e:ad:ab:
         b5:90:9c:80:db:21:6e:fa:04:68:c4:3b:ff:0a:20:dc:21:3a:
         e9:5e:1f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZUxkUa7kknUjjFGvGbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWMxMjJhOTI5MTdjZjk1M2ZmNWM1ZGU2YTFmZmUxMTk5
ZjEyMmMwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
EygxZDQ1YTYzZjE2ZWYyNDQ0OWEzOWUwMTQyMDBiZDY4ZjcyYWMyMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP2uoTHAs+A1AHXGX2v50bTR7HjV
+7kSboDPSmvnXNVTgwg9MrrpBp676+k45wh1Z/ot9yPt5FpRb4FbT0ef8eyOR0RN
9npw903UrOCWU0uoicTKNMtrgC1FEdJkR2cT7uiXxtAsllfsRcZ3zzIbId5KUPOn
/+q/c4tE7v8gp7fZqMWzQE0C4HGXtipo7IX7pXQOzFs4DZfvSz1bYouUE7ZUOJrJ
oEs95cRjO46DxBwhpQnwW2WDd7CCWDyxum4xWKAuQWODRoXiz0sCg/dYougJBomJ
DjgsgsiswllpM9dXhqBtSxq9QuwcRRHFeexeQ/IC7r2ED8n8JqiFWcpn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1Fpj8W7yREmjngFCAL1o9yrCCKMB8GA1UdIwQY
MBaAFO6sEiqSkXz5U/9cXeah/+EZnxIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUt
NDFkMmNjN2I3MDM0LzEvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZWU0NTEtZjYyNi00MzI0LTk4ZmUtNDFkMmNjN2I3MDM0
LzEvN3F3U0twS1JmUGxUXzF4ZDVxSF80Um1mRWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw9yvNK4
Hoclx0pNbnuJ5/Avuwhi7vkkA+WhSHkfNIKFBTZngUQsFUaoso6Bs9Wl2+kJO0K2
05VX+Pmlox1OyxCv8EYIud/4pKrr2pqegV7wV6g7aJtnCyh/dyWb3l9yTLmE7T+O
9tozTa1pL86s0cXEOVD/8Mlj3SXsZkL3XoXom5Q85QTqd/3KTZkXowkSGYtPUFZv
JSoNzagjBeoCbyqzqB4zzr8t7JAlDjpd2sbIoJ7zL0kiRjV3E0oNfHLpwhzpTSFe
BBM4JEF5x9zg+2YNxNKvmMsIG7DIbIKF8yJHeWFms1ySTq2rtZCcgNshbvoEaMQ7
/wog3CE66V4fhw==
-----END CERTIFICATE-----