Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          12JhNU97ZLlQeFjxvq3KnwaNH5jC9fXTeuo/rNT122Y=
Subject key identifier:   6B:72:D6:31:8D:2E:6F:A2:47:30:A7:29:78:B1:94:60:AE:F2:C5:C4
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       01962F750A0D8BAF8D3C095056A50157E336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0BD2
Signing time:             Sun 13 Apr 2025 14:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:01 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: uTWlhBeMmsU0HFeYVvZmqKVq2Sypo3w49LqFjy6mJfo=)
                          2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0a:0d:8b:af:8d:3c:09:50:56:a5:01:57:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Apr 13 14:02:01 2025 GMT
            Not After : Apr 14 14:02:01 2025 GMT
        Subject: CN=6b72d6318d2e6fa24730a72978b19460aef2c5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:c2:3a:26:21:c5:34:f7:4c:c5:47:fb:be:
                    43:db:93:39:60:ef:8c:20:ba:87:cb:8c:23:2e:14:
                    70:37:ec:05:e2:c0:cc:f3:60:9c:3a:59:86:5e:d4:
                    30:e1:49:b3:47:c8:5a:62:f8:8b:d7:72:64:f7:8d:
                    48:e1:5c:c7:fe:40:9f:d5:bd:2f:7e:28:9a:da:7e:
                    fc:ec:ee:c6:c3:fd:ba:2f:08:6b:a4:19:22:cd:f5:
                    4e:c0:cc:99:f4:c4:06:6e:2c:68:97:07:79:51:25:
                    1a:0e:b3:77:5b:1c:9d:47:45:70:0d:ce:8e:a3:a9:
                    18:67:57:44:5a:94:de:ff:20:29:5e:af:5d:44:86:
                    c8:29:24:e0:93:dd:15:27:b8:e9:93:84:e7:cb:4b:
                    09:da:02:f3:bf:ad:b4:a5:87:46:43:cc:5c:c6:8b:
                    50:ee:f3:e9:46:5f:86:13:8c:6c:ba:2e:db:c9:89:
                    93:a9:47:50:6d:6e:f6:4f:c7:6e:54:09:b9:95:c0:
                    c9:28:ec:13:f7:38:a6:3a:68:28:41:2f:ea:80:a5:
                    e3:30:3b:89:09:91:28:f6:1f:83:a8:68:31:b6:9d:
                    c5:cc:62:ed:a0:0f:34:2b:0c:36:d6:b2:8c:a7:bc:
                    3d:63:b7:61:64:b4:bc:8a:c2:e2:a1:da:85:9d:39:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:D6:31:8D:2E:6F:A2:47:30:A7:29:78:B1:94:60:AE:F2:C5:C4
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:cb:e8:88:c7:cc:18:85:90:09:71:d7:b2:92:ee:27:ce:
         8c:59:d4:f5:9f:bf:a0:b4:37:9a:bd:a4:fd:02:8d:2f:e1:81:
         e1:5d:ae:ca:09:be:15:bf:5b:f2:79:68:72:72:c4:0d:69:be:
         74:c6:db:73:b3:bc:cd:3b:e6:f3:96:db:f6:14:34:cf:fa:ac:
         51:18:e2:76:ba:1f:c0:0a:40:39:b4:bf:08:ca:83:56:b4:45:
         ea:a3:a9:af:58:c8:c6:65:a3:bf:15:9e:d2:cd:66:df:72:a4:
         34:28:0b:c0:2a:b0:07:9d:e9:9c:b1:60:5a:3c:c2:4a:a3:97:
         05:e0:39:66:1a:ec:a2:95:e5:c5:24:3e:cc:0b:8d:66:36:23:
         9c:79:15:c3:04:bb:ac:22:76:44:3e:75:68:22:f9:5a:9e:ec:
         c7:6c:a8:d7:2c:b3:c9:48:35:9b:0b:84:80:ee:52:f2:3e:b8:
         f8:08:8f:e7:8a:9f:7a:08:88:21:86:e4:de:fb:f7:2a:ed:73:
         41:ae:29:bb:f6:57:5e:5b:1f:62:39:f7:eb:b0:6e:11:5d:81:
         e9:cf:3d:5e:00:00:ba:8e:75:4e:31:53:c4:a4:ec:a8:b8:7a:
         02:2a:23:d3:7a:04:78:ef:f9:de:c7:7d:fd:98:8c:4e:8f:c4:
         3b:75:3e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQoNi6+NPAlQVqUBV+M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjUwNDEzMTQwMjAxWhcNMjUwNDE0MTQwMjAxWjAzMTEwLwYDVQQD
Eyg2YjcyZDYzMThkMmU2ZmEyNDczMGE3Mjk3OGIxOTQ2MGFlZjJjNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiXCOiYhxTT3TMVH+75D25M5YO+M
ILqHy4wjLhRwN+wF4sDM82CcOlmGXtQw4UmzR8haYviL13Jk941I4VzH/kCf1b0v
fiia2n787O7Gw/26LwhrpBkizfVOwMyZ9MQGbixolwd5USUaDrN3WxydR0VwDc6O
o6kYZ1dEWpTe/yApXq9dRIbIKSTgk90VJ7jpk4Tny0sJ2gLzv620pYdGQ8xcxotQ
7vPpRl+GE4xsui7byYmTqUdQbW72T8duVAm5lcDJKOwT9zimOmgoQS/qgKXjMDuJ
CZEo9h+DqGgxtp3FzGLtoA80Kww21rKMp7w9Y7dhZLS8isLiodqFnTm9VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGty1jGNLm+iRzCnKXixlGCu8sXEMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC/L6IjH
zBiFkAlx17KS7ifOjFnU9Z+/oLQ3mr2k/QKNL+GB4V2uygm+Fb9b8nlocnLEDWm+
dMbbc7O8zTvm85bb9hQ0z/qsURjidrofwApAObS/CMqDVrRF6qOpr1jIxmWjvxWe
0s1m33KkNCgLwCqwB53pnLFgWjzCSqOXBeA5ZhrsopXlxSQ+zAuNZjYjnHkVwwS7
rCJ2RD51aCL5Wp7sx2yo1yyzyUg1mwuEgO5S8j64+AiP54qfegiIIYbk3vv3Ku1z
Qa4pu/ZXXlsfYjn367BuEV2B6c89XgAAuo51TjFTxKTsqLh6Aioj03oEeO/53sd9
/ZiMTo/EO3U+4A==
-----END CERTIFICATE-----