Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft
File:                     eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft (raw, json)
Hash identifier:          rQmyz1ShQVEOFPGTyeoPBFR3cv5LSnxbCttKh9frxcg=
Subject key identifier:   D2:39:93:3B:1D:D6:94:C2:CA:C1:1E:84:76:1D:59:9C:61:DA:FF:E7
Authority key identifier: 78:2A:09:A8:3C:E3:99:33:92:F2:93:44:EF:84:3B:70:8A:90:62:83
Certificate issuer:       /CN=782a09a83ce3993392f29344ef843b708a906283
Certificate serial:       01948998B3ED69F86B4E7FC51B564F15316E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCoJqDzjmTOS8pNE74Q7cIqQYoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft
Manifest number:          058B
Signing time:             Tue 21 Jan 2025 16:01:13 +0000
Manifest this update:     Tue 21 Jan 2025 16:01:13 +0000
Manifest next update:     Wed 22 Jan 2025 16:01:13 +0000
Files and hashes:         1: eCoJqDzjmTOS8pNE74Q7cIqQYoM.crl (hash: oBfV1/O3eO7st06hua5Cl7GbjVpIDTe+sdGfJ399eWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:89:98:b3:ed:69:f8:6b:4e:7f:c5:1b:56:4f:15:31:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782a09a83ce3993392f29344ef843b708a906283
        Validity
            Not Before: Jan 21 16:01:13 2025 GMT
            Not After : Jan 22 16:01:13 2025 GMT
        Subject: CN=d239933b1dd694c2cac11e84761d599c61daffe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:bb:53:66:98:77:c1:06:26:43:14:31:b1:
                    99:44:75:ed:74:de:65:5b:af:84:35:a0:a6:2a:53:
                    cf:6d:66:b2:4e:2e:98:3d:b4:89:da:0a:58:6e:1a:
                    e8:af:53:db:f2:25:fe:14:79:3b:46:8b:db:ef:84:
                    16:e5:fc:20:3a:bf:0d:f2:f7:8f:4a:ab:f8:ad:0c:
                    20:36:0a:c8:1f:b3:f4:f0:23:f1:6c:b9:9c:9e:8a:
                    ce:6f:bf:4d:7f:55:5b:4f:af:2b:cf:03:51:ef:b8:
                    59:33:31:6f:51:2b:d2:8a:c5:f9:1f:41:6a:63:8b:
                    20:37:76:4b:22:a5:28:3d:b8:36:4a:e8:65:a5:d3:
                    ae:ba:cf:ff:98:a0:55:e5:2f:db:2b:84:83:c5:a6:
                    4c:77:85:c9:f6:5f:79:93:ee:77:d3:c4:73:8f:e3:
                    73:6b:00:8d:f4:69:4a:1a:f1:e1:93:a7:8e:93:a7:
                    17:b7:17:34:71:fd:77:69:48:7c:ca:47:5f:e6:ab:
                    fe:3a:d0:c7:94:9d:a2:15:2c:50:d1:56:a0:be:f9:
                    8b:08:0e:cc:3a:e7:b2:88:9c:18:99:b6:9b:3d:87:
                    52:c0:5f:bc:60:19:c7:fe:c2:3b:48:e4:2c:52:2e:
                    d2:b2:f8:21:ff:66:7a:38:4b:ec:d4:36:a4:66:66:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:93:3B:1D:D6:94:C2:CA:C1:1E:84:76:1D:59:9C:61:DA:FF:E7
            X509v3 Authority Key Identifier:
                keyid:78:2A:09:A8:3C:E3:99:33:92:F2:93:44:EF:84:3B:70:8A:90:62:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCoJqDzjmTOS8pNE74Q7cIqQYoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77faf5-ee05-40ee-a49f-f33753748951/1/eCoJqDzjmTOS8pNE74Q7cIqQYoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:61:de:67:47:6b:74:e0:08:b5:af:ba:5f:e6:cd:94:c7:
         d2:35:e4:1e:44:03:66:f0:68:97:52:e7:39:6c:16:9a:09:62:
         98:bd:a0:32:0e:19:91:a1:e5:8e:8f:17:a4:9b:c4:9a:4f:d2:
         6e:d7:d5:ff:ab:dd:49:80:ed:09:3b:d5:e1:62:3b:a3:86:9a:
         37:4f:ba:d2:e7:64:b6:03:50:d5:0b:cc:0a:2d:93:d4:2e:39:
         95:e2:98:29:e7:9e:1e:69:85:0a:d1:82:fa:0d:11:ea:10:d2:
         d4:70:49:5f:34:95:40:51:39:73:89:cf:34:97:25:45:bd:b0:
         c3:62:c0:dd:dd:4c:f4:6b:7d:4b:d2:a0:e7:01:15:9e:c5:20:
         62:2a:64:11:21:da:04:60:1d:fe:bb:34:27:54:c4:96:1d:3f:
         b7:44:24:68:df:e4:6d:4c:04:08:e7:a6:54:a7:a5:fd:be:54:
         d3:5a:6e:ef:c6:94:8a:96:f0:41:82:dc:dd:c1:4a:c9:c9:60:
         08:f7:55:d9:1f:0c:a4:d3:e3:56:37:ff:ef:36:24:98:86:1a:
         5d:a0:1b:14:29:f9:8d:b0:6f:91:37:09:a6:bd:ae:5c:2c:dd:
         41:fd:f4:ba:88:eb:86:61:37:a9:b3:67:40:42:48:05:e1:ce:
         60:58:32:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSJmLPtafhrTn/FG1ZPFTFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MmEwOWE4M2NlMzk5MzM5MmYyOTM0NGVmODQzYjcwOGE5
MDYyODMwHhcNMjUwMTIxMTYwMTEzWhcNMjUwMTIyMTYwMTEzWjAzMTEwLwYDVQQD
EyhkMjM5OTMzYjFkZDY5NGMyY2FjMTFlODQ3NjFkNTk5YzYxZGFmZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7O7U2aYd8EGJkMUMbGZRHXtdN5l
W6+ENaCmKlPPbWayTi6YPbSJ2gpYbhror1Pb8iX+FHk7Rovb74QW5fwgOr8N8veP
Sqv4rQwgNgrIH7P08CPxbLmcnorOb79Nf1VbT68rzwNR77hZMzFvUSvSisX5H0Fq
Y4sgN3ZLIqUoPbg2SuhlpdOuus//mKBV5S/bK4SDxaZMd4XJ9l95k+5308Rzj+Nz
awCN9GlKGvHhk6eOk6cXtxc0cf13aUh8ykdf5qv+OtDHlJ2iFSxQ0VagvvmLCA7M
OueyiJwYmbabPYdSwF+8YBnH/sI7SOQsUi7Ssvgh/2Z6OEvs1DakZmYLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI5kzsd1pTCysEehHYdWZxh2v/nMB8GA1UdIwQY
MBaAFHgqCag845kzkvKTRO+EO3CKkGKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNvSnFEemptVE9TOHBORTc0UTdjSXFRWW9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83N2ZhZjUtZWUwNS00MGVlLWE0OWYt
ZjMzNzUzNzQ4OTUxLzEvZUNvSnFEemptVE9TOHBORTc0UTdjSXFRWW9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83N2ZhZjUtZWUwNS00MGVlLWE0OWYtZjMzNzUzNzQ4OTUx
LzEvZUNvSnFEemptVE9TOHBORTc0UTdjSXFRWW9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB01h3mdH
a3TgCLWvul/mzZTH0jXkHkQDZvBol1LnOWwWmglimL2gMg4ZkaHljo8XpJvEmk/S
btfV/6vdSYDtCTvV4WI7o4aaN0+60udktgNQ1QvMCi2T1C45leKYKeeeHmmFCtGC
+g0R6hDS1HBJXzSVQFE5c4nPNJclRb2ww2LA3d1M9Gt9S9Kg5wEVnsUgYipkESHa
BGAd/rs0J1TElh0/t0QkaN/kbUwECOemVKel/b5U01pu78aUipbwQYLc3cFKyclg
CPdV2R8MpNPjVjf/7zYkmIYaXaAbFCn5jbBvkTcJpr2uXCzdQf30uojrhmE3qbNn
QEJIBeHOYFgyBg==
-----END CERTIFICATE-----