Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File:                     eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier:          eyWRY3qLQE+Ki0h5RGSNXsgPkB9nhrZ8H8dqXg5VmFU=
Subject key identifier:   22:E6:1F:CB:4D:2A:0D:C1:05:EE:C0:5E:87:15:F7:13:99:5D:2B:6A
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer:       /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial:       01962F74EB0841A703C0B42955B45DF8E123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number:          122B
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: JjCf8gZaf8TqyhB1nEW+wYeBEuUn6WdKSrTG3s0sdk8=)
                          2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:08:41:a7:03:c0:b4:29:55:b4:5d:f8:e1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=22e61fcb4d2a0dc105eec05e8715f713995d2b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:1e:91:19:9d:fc:ec:7d:56:4a:d2:d1:29:
                    5e:5f:ae:29:86:b8:b7:22:fc:d4:3c:d7:e8:cc:44:
                    40:2f:51:c9:fb:e0:47:d0:4f:ce:6d:34:06:40:e4:
                    93:b3:f6:d9:e3:62:4a:e3:49:1e:22:94:e6:06:83:
                    a2:ef:1e:b3:45:b9:a7:a0:e3:40:8e:15:1a:6d:26:
                    3e:1f:f1:13:2d:c5:ca:85:51:d1:b2:a1:04:55:b8:
                    23:1f:a6:fc:eb:c2:9a:f0:40:e0:49:74:29:f6:ea:
                    5e:be:fb:a9:87:be:d7:4c:b0:5b:0e:2a:a9:f9:6e:
                    23:44:17:61:64:de:58:38:f9:70:a5:55:7f:25:65:
                    62:4b:83:cb:48:37:d6:d9:b9:e9:90:25:29:dd:52:
                    b7:3f:ac:fc:cb:2a:dd:b9:ef:2d:0d:a0:55:15:02:
                    8e:3b:93:8e:80:47:a9:ef:8a:66:a1:6b:4a:90:b2:
                    22:d4:1c:60:8d:88:a6:58:05:ef:24:fd:c3:83:e2:
                    bb:09:e7:86:fa:e7:9d:e6:12:61:66:c7:5e:c5:4e:
                    76:6a:ff:70:1d:c7:7e:ea:b2:fd:74:a0:c4:41:db:
                    4b:83:11:dd:e1:89:f7:c2:6d:a5:ea:a6:15:65:ef:
                    70:7f:93:a9:37:14:9b:0f:80:5a:3d:21:37:2d:0a:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:1F:CB:4D:2A:0D:C1:05:EE:C0:5E:87:15:F7:13:99:5D:2B:6A
            X509v3 Authority Key Identifier:
                keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b9:3e:13:ab:59:8b:0e:ab:2b:1f:7d:dd:67:b0:75:9d:f9:
         e0:d0:bc:5b:2d:72:c9:d9:bf:b1:40:ce:27:c9:6c:f2:1d:13:
         18:92:6d:17:5c:15:7d:d2:12:ac:fe:66:64:5d:a6:77:fd:9b:
         80:ed:ef:22:31:7c:00:7e:25:ea:86:c4:e6:47:e2:7c:33:3f:
         8c:e1:77:f5:52:66:4d:13:d1:de:5e:ea:5e:b0:cf:ee:b2:1d:
         64:c9:e6:aa:17:88:48:43:34:0b:dc:09:c6:90:de:57:54:97:
         9a:a2:5c:bd:83:50:c3:a3:7e:04:ff:8f:08:6a:e8:1c:5f:cb:
         a9:06:fa:2b:78:ab:af:13:cf:e1:69:43:3e:86:9e:fc:c3:fa:
         b3:ae:e4:b4:a4:90:b7:8c:71:dd:b0:b8:b4:a4:7c:c0:81:8d:
         3d:02:eb:3c:7e:66:79:49:47:8c:a8:37:aa:92:d2:81:2e:44:
         4f:66:5c:7d:39:8e:1d:ff:3d:44:53:10:64:21:e6:ef:bb:b2:
         63:5a:dc:56:03:90:66:a9:51:83:47:cb:d7:1c:6a:3f:d1:80:
         ee:1f:dd:65:58:f6:09:91:6f:92:6b:4f:85:cf:b4:4f:f1:31:
         51:20:20:d9:93:a9:ac:66:42:32:07:1c:61:84:2b:fd:55:52:
         8a:22:60:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOsIQacDwLQpVbRd+OEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw
ZjIyNjMwHhcNMjUwNDEzMTQwMTUzWhcNMjUwNDE0MTQwMTUzWjAzMTEwLwYDVQQD
EygyMmU2MWZjYjRkMmEwZGMxMDVlZWMwNWU4NzE1ZjcxMzk5NWQyYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUYekRmd/Ox9VkrS0SleX64phri3
IvzUPNfozERAL1HJ++BH0E/ObTQGQOSTs/bZ42JK40keIpTmBoOi7x6zRbmnoONA
jhUabSY+H/ETLcXKhVHRsqEEVbgjH6b868Ka8EDgSXQp9upevvuph77XTLBbDiqp
+W4jRBdhZN5YOPlwpVV/JWViS4PLSDfW2bnpkCUp3VK3P6z8yyrdue8tDaBVFQKO
O5OOgEep74pmoWtKkLIi1BxgjYimWAXvJP3Dg+K7CeeG+ued5hJhZsdexU52av9w
Hcd+6rL9dKDEQdtLgxHd4Yn3wm2l6qYVZe9wf5OpNxSbD4BaPSE3LQqqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLmH8tNKg3BBe7AXocV9xOZXStqMB8GA1UdIwQY
MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt
ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz
LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7k+E6tZ
iw6rKx993WewdZ354NC8Wy1yydm/sUDOJ8ls8h0TGJJtF1wVfdISrP5mZF2md/2b
gO3vIjF8AH4l6obE5kfifDM/jOF39VJmTRPR3l7qXrDP7rIdZMnmqheISEM0C9wJ
xpDeV1SXmqJcvYNQw6N+BP+PCGroHF/LqQb6K3irrxPP4WlDPoae/MP6s67ktKSQ
t4xx3bC4tKR8wIGNPQLrPH5meUlHjKg3qpLSgS5ET2ZcfTmOHf89RFMQZCHm77uy
Y1rcVgOQZqlRg0fL1xxqP9GA7h/dZVj2CZFvkmtPhc+0T/ExUSAg2ZOprGZCMgcc
YYQr/VVSiiJgFA==
-----END CERTIFICATE-----