Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File:                     ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier:          H4/5f70zBHpB3LaEmlXC5qKTBO8E1B6mbhARSBCdJ8Q=
Subject key identifier:   3E:E8:C9:51:BD:1E:BF:81:D1:B4:1D:F7:3B:EC:47:CB:B4:9D:C3:63
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer:       /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial:       01962FAB74C0683C4DA593E6C0604BAD20B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number:          14D8
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: 9VQMtDXoBdF92yW2WAdxkGBdDDcviaBnlFConbzQXY4=)
                          2: irIscEtMW7wUDwc_jX73mZGmgDY.roa (hash: GYzHbNbhG0WM1T4likEpev4kbQzCpDdQtfyeZ8vI/B4=)
                          3: ydbrje3UPVm8R15QS_gI4G8JkZ8.roa (hash: 9YZIlSpD5UZTI51LVS8V+r0vUFmlrJTcDfEwmIT9Rlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:c0:68:3c:4d:a5:93:e6:c0:60:4b:ad:20:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=3ee8c951bd1ebf81d1b41df73bec47cbb49dc363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:a4:88:09:3d:72:92:67:85:6a:79:a6:18:
                    8f:d9:52:f4:df:97:ff:b4:2e:ba:f0:39:19:cf:d3:
                    18:13:33:ff:e1:2b:1d:14:6c:cd:92:56:b2:93:e7:
                    e9:58:8d:54:a4:8c:ca:65:89:9b:52:8b:e1:ac:f5:
                    07:92:16:62:71:27:02:34:3c:e2:d9:7b:5f:4b:bc:
                    8e:1d:d0:48:99:b9:21:c7:75:3a:1b:0d:58:14:d8:
                    bc:88:72:4e:d0:cc:70:8a:8e:86:4d:92:a1:38:04:
                    cd:66:e5:55:31:a4:85:ca:73:2b:98:aa:ec:4c:e0:
                    b7:1a:89:a9:82:ab:44:25:52:25:ba:67:f4:97:6c:
                    29:ed:68:56:5b:fb:8a:50:21:83:3c:eb:92:f2:77:
                    98:61:f2:2b:d6:90:00:09:5e:83:2c:4c:ff:a3:7b:
                    62:21:d1:2b:c2:6a:e6:a8:af:d1:b0:da:23:b9:9c:
                    06:5a:1a:65:bb:4f:d1:22:ad:46:04:cc:ed:ec:a9:
                    b0:1c:6f:e8:6d:38:20:7f:59:b1:8a:fc:63:81:10:
                    51:30:9e:bb:6e:97:38:4c:ae:e5:ee:06:8d:90:4b:
                    75:9b:8a:e2:3c:da:7f:ec:8f:ef:62:43:bb:b7:5c:
                    65:c8:ba:82:45:70:0b:20:b6:ba:59:59:3a:a0:a4:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:C9:51:BD:1E:BF:81:D1:B4:1D:F7:3B:EC:47:CB:B4:9D:C3:63
            X509v3 Authority Key Identifier:
                keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:4a:69:93:25:dc:c0:a9:13:dc:a8:63:d5:a0:d5:8a:0e:
         31:d8:34:75:2c:04:19:89:9b:cc:7e:24:62:69:6c:cc:c7:3b:
         48:bf:7b:06:dd:a4:40:61:30:85:b8:8c:d9:d1:33:a4:92:6a:
         0c:20:4a:14:b5:82:41:b1:0c:e9:8b:4a:e0:8e:6b:49:23:f7:
         e7:e2:ca:c9:13:f3:0e:20:27:9c:fb:ef:5c:99:43:71:07:de:
         91:ea:9a:ad:f8:0f:f0:31:30:6f:b8:0a:65:27:e4:0a:dd:bc:
         f4:3a:65:89:d1:48:0d:f5:f0:d4:03:b0:1f:7a:0f:d9:e7:23:
         df:e0:77:fe:87:19:5a:9b:4d:57:db:ab:9e:c4:b7:ac:4a:85:
         a8:7e:10:2b:22:54:9d:ae:b9:13:bd:1b:c7:a5:72:69:c0:da:
         55:4f:fd:63:db:75:69:6f:7f:6d:a7:5b:07:84:38:23:5f:da:
         88:97:b1:5a:2b:bc:bd:b0:9a:37:72:84:1e:d3:eb:21:11:aa:
         32:d6:f4:bc:00:e9:c1:01:90:53:0a:39:7a:86:9b:2f:f2:ce:
         e3:5d:ea:86:42:31:43:ab:27:fd:56:34:a1:c0:cd:96:b0:0f:
         5f:72:a4:5b:85:27:2d:f7:6f:bd:e5:3f:fb:f4:e1:bb:e5:35:
         d2:61:93:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3TAaDxNpZPmwGBLrSCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YWQwNzRhZmFjZTkxYWMzZmRkMGEzZWJkNjBmYWRiYzE2
ZGU0ZmMwHhcNMjUwNDEzMTUwMTI3WhcNMjUwNDE0MTUwMTI3WjAzMTEwLwYDVQQD
EygzZWU4Yzk1MWJkMWViZjgxZDFiNDFkZjczYmVjNDdjYmI0OWRjMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWkiAk9cpJnhWp5phiP2VL035f/
tC668DkZz9MYEzP/4SsdFGzNklayk+fpWI1UpIzKZYmbUovhrPUHkhZicScCNDzi
2XtfS7yOHdBImbkhx3U6Gw1YFNi8iHJO0Mxwio6GTZKhOATNZuVVMaSFynMrmKrs
TOC3GompgqtEJVIlumf0l2wp7WhWW/uKUCGDPOuS8neYYfIr1pAACV6DLEz/o3ti
IdErwmrmqK/RsNojuZwGWhplu0/RIq1GBMzt7KmwHG/obTggf1mxivxjgRBRMJ67
bpc4TK7l7gaNkEt1m4riPNp/7I/vYkO7t1xlyLqCRXALILa6WVk6oKQSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7oyVG9Hr+B0bQd9zvsR8u0ncNjMB8GA1UdIwQY
MBaAFHmtB0r6zpGsP90KPr1g+tvBbeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEt
MGEyZTkzMzZkNmQwLzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEtMGEyZTkzMzZkNmQw
LzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOBKaZMl
3MCpE9yoY9Wg1YoOMdg0dSwEGYmbzH4kYmlszMc7SL97Bt2kQGEwhbiM2dEzpJJq
DCBKFLWCQbEM6YtK4I5rSSP35+LKyRPzDiAnnPvvXJlDcQfekeqarfgP8DEwb7gK
ZSfkCt289DplidFIDfXw1AOwH3oP2ecj3+B3/ocZWptNV9urnsS3rEqFqH4QKyJU
na65E70bx6VyacDaVU/9Y9t1aW9/badbB4Q4I1/aiJexWiu8vbCaN3KEHtPrIRGq
Mtb0vADpwQGQUwo5eoabL/LO413qhkIxQ6sn/VY0ocDNlrAPX3KkW4UnLfdvveU/
+/Thu+U10mGT7A==
-----END CERTIFICATE-----