Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          1n2KD67HokujgpEjLUComiT+xHzKKpbV/8AGStmBfbU=
Subject key identifier:   F6:15:C8:18:39:34:A7:DB:43:81:8A:70:A7:53:30:5D:91:7C:97:93
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       01962F071CA8805A61C9F6B76A16FE190381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          0DE0
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 1jyVG685LkAasuEJLUPQjxJIjx8.roa (hash: DWYO2Mf6OexFPHlvZ0RE64fO/e9+/+xwtyYXQHGkjEU=)
                          2: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: 2zF6RZA1+KKorxhWTfAMHyVm3DxwV7L8HiD9Hdo2M24=)
                          3: JmhavQCJc5YnIlopAxHIw2DUMUU.roa (hash: v4gVDRFKxyXMWebq6LZbmBqGUeq2Q/D6ShHZHU8b8+s=)
                          4: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (hash: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:a8:80:5a:61:c9:f6:b7:6a:16:fe:19:03:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=f615c8183934a7db43818a70a753305d917c9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:4d:7a:70:b5:88:b5:7a:85:13:ff:3f:b8:
                    24:73:a4:be:14:59:b2:1c:45:bf:56:f2:ae:00:a5:
                    1c:f8:4c:d1:75:6d:1a:2f:0d:17:f0:f1:80:7a:c9:
                    53:1e:f2:1e:7a:26:6a:28:ae:1d:94:39:13:36:1f:
                    19:b6:f8:72:7f:9d:42:cf:4f:4a:7c:7b:2e:c9:99:
                    a1:e5:b4:ed:96:4a:f7:d4:32:5f:8b:9f:82:51:12:
                    bf:bc:ef:0c:a9:35:10:56:75:b2:5e:46:47:d2:a3:
                    76:d3:83:18:cc:85:71:56:f4:bd:ab:9f:bf:88:83:
                    41:25:62:a9:1d:e6:16:16:9b:f0:b6:c4:77:4d:a4:
                    ad:57:aa:18:a1:80:be:39:83:1e:49:0a:a7:d9:ef:
                    1e:50:3f:8d:fb:c8:cd:2c:c7:2f:32:ac:b4:7c:c5:
                    2d:8e:c1:fb:dd:b7:c2:2e:63:89:cd:02:45:d8:3b:
                    35:40:ed:90:31:3c:bc:90:ad:10:96:52:24:98:6b:
                    ec:f2:91:ab:c8:7a:ab:ff:e2:81:61:5c:4e:a8:10:
                    3c:8b:4b:cc:b6:2b:85:6e:fa:42:00:17:74:64:ba:
                    cd:72:95:c8:98:f9:12:11:74:a7:5d:bd:42:c4:18:
                    ed:41:b7:a4:cf:53:af:76:dd:25:7d:ef:a3:bc:52:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:15:C8:18:39:34:A7:DB:43:81:8A:70:A7:53:30:5D:91:7C:97:93
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:ff:f7:2e:e7:14:64:6d:61:de:b5:ab:4e:72:d8:c0:f9:
         f1:b8:5b:b0:a2:cc:e4:ca:88:02:47:ed:b8:d5:3d:ad:47:5c:
         d0:5e:d2:93:f1:4a:87:2a:04:65:fa:19:b0:32:24:a2:55:9c:
         af:21:4b:98:e1:8e:c5:7f:83:37:e4:f0:a3:44:66:b0:f1:18:
         af:de:fc:f5:97:d8:50:24:08:a2:c8:5b:76:bf:1f:f1:6f:5e:
         df:28:6b:f8:c6:96:57:6f:a0:2c:1a:ab:0f:72:e0:6b:a1:1e:
         f0:9a:6b:e7:92:37:da:cd:52:55:5b:9b:f5:59:9a:14:95:7f:
         a3:f2:83:fe:97:5c:b0:48:f4:fe:d9:95:e8:fa:61:73:10:98:
         a4:6c:54:74:6d:84:68:6e:91:b0:94:53:18:6b:91:54:38:f3:
         f9:27:45:63:77:90:5f:5a:53:dd:8e:b3:5e:a9:1d:19:cb:6a:
         6a:f9:cd:53:14:a3:ca:ef:67:66:77:56:74:a4:0d:06:06:05:
         9f:0f:64:b8:1e:48:73:19:39:59:bb:e4:e2:2f:25:53:b2:36:
         94:ad:ba:f7:bb:fb:e1:a6:72:b7:38:b4:38:f6:e3:90:4e:b9:
         50:11:cf:b2:f3:8f:a9:ba:55:95:4c:06:5a:2a:b6:6c:1a:2d:
         a7:40:7c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxyogFphyfa3ahb+GQOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjUwNDEzMTIwMTU3WhcNMjUwNDE0MTIwMTU3WjAzMTEwLwYDVQQD
EyhmNjE1YzgxODM5MzRhN2RiNDM4MThhNzBhNzUzMzA1ZDkxN2M5NzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8JNenC1iLV6hRP/P7gkc6S+FFmy
HEW/VvKuAKUc+EzRdW0aLw0X8PGAeslTHvIeeiZqKK4dlDkTNh8Ztvhyf51Cz09K
fHsuyZmh5bTtlkr31DJfi5+CURK/vO8MqTUQVnWyXkZH0qN204MYzIVxVvS9q5+/
iINBJWKpHeYWFpvwtsR3TaStV6oYoYC+OYMeSQqn2e8eUD+N+8jNLMcvMqy0fMUt
jsH73bfCLmOJzQJF2Ds1QO2QMTy8kK0QllIkmGvs8pGryHqr/+KBYVxOqBA8i0vM
tiuFbvpCABd0ZLrNcpXImPkSEXSnXb1CxBjtQbekz1Ovdt0lfe+jvFKiiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYVyBg5NKfbQ4GKcKdTMF2RfJeTMB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKL/9y7n
FGRtYd61q05y2MD58bhbsKLM5MqIAkftuNU9rUdc0F7Sk/FKhyoEZfoZsDIkolWc
ryFLmOGOxX+DN+Two0RmsPEYr9789ZfYUCQIoshbdr8f8W9e3yhr+MaWV2+gLBqr
D3Lga6Ee8Jpr55I32s1SVVub9VmaFJV/o/KD/pdcsEj0/tmV6PphcxCYpGxUdG2E
aG6RsJRTGGuRVDjz+SdFY3eQX1pT3Y6zXqkdGctqavnNUxSjyu9nZndWdKQNBgYF
nw9kuB5Icxk5Wbvk4i8lU7I2lK2697v74aZytzi0OPbjkE65UBHPsvOPqbpVlUwG
Wiq2bBotp0B8vQ==
-----END CERTIFICATE-----