Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File:                     EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier:          vG3+H5wznRZa7INUjL+DdSTU1d0K+EEd+GbTmMQUiLU=
Subject key identifier:   4E:69:08:2B:11:63:CE:40:A7:D4:F0:FC:5C:F6:55:84:CA:CA:D4:F1
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer:       /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial:       01962F74674231DB52B8522A42D7AD14B655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number:          1289
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
                          2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: 7wNP7B8DvViABl2F4I2kcQruaujajLD6cUcmIQpEl6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:67:42:31:db:52:b8:52:2a:42:d7:ad:14:b6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=4e69082b1163ce40a7d4f0fc5cf65584cacad4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:9f:97:b6:e8:38:76:da:89:e4:ad:47:8d:
                    ab:b6:10:43:03:38:06:c5:d0:71:9f:d7:e4:22:86:
                    d0:15:17:e9:9a:44:ac:45:d1:64:9c:1f:9a:4f:8c:
                    95:46:4f:2f:46:37:6f:f4:84:df:62:88:9b:a8:65:
                    13:36:fc:bf:51:2f:45:e5:3c:6c:36:e6:a6:d1:ac:
                    d5:c8:a5:8d:1a:b8:2b:50:4b:6d:e0:e2:7a:a1:7f:
                    ed:7c:4a:2a:4c:da:d9:64:5b:80:c0:fd:59:02:73:
                    9f:85:59:8a:68:53:84:a6:ac:b4:16:57:3d:21:54:
                    53:da:0c:47:fc:7a:7e:f0:6d:7c:9b:ad:c4:97:a3:
                    cf:3c:23:8a:6e:65:06:a9:bd:38:f3:41:be:2f:9f:
                    46:e6:12:cc:9e:cb:0e:d5:ae:64:a4:cf:b5:ac:67:
                    e9:be:e0:e6:15:26:73:d1:de:60:aa:42:80:b9:8e:
                    b6:d9:5d:39:da:4b:e2:4e:e1:a0:3c:c0:89:41:2a:
                    7d:ef:2c:df:63:43:cb:6a:66:28:01:92:d1:fe:bd:
                    e9:f8:52:8e:1f:2d:a0:5d:d3:e3:2c:7b:d8:bf:91:
                    c7:b7:17:4b:5a:ce:0e:c6:1b:05:27:ed:2e:21:b7:
                    cb:9c:f6:48:49:83:4f:05:2b:b9:51:21:af:62:73:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:69:08:2B:11:63:CE:40:A7:D4:F0:FC:5C:F6:55:84:CA:CA:D4:F1
            X509v3 Authority Key Identifier:
                keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bc:c3:fb:e0:fc:b7:5c:03:86:84:fb:df:36:35:38:94:d7:
         b3:85:cb:fe:11:cb:90:13:da:36:12:39:ca:c0:75:e4:62:41:
         36:a2:02:ad:47:f0:da:5e:ef:73:16:2b:b3:7c:20:db:89:d8:
         c8:ae:2c:e6:d9:0e:51:ba:99:4b:7a:ad:d7:4e:3f:9a:49:61:
         78:97:cf:e2:61:25:8a:21:26:a5:a7:43:df:1e:9b:31:6b:7d:
         ed:de:96:8e:4a:c3:a0:df:49:16:b0:9e:47:61:8d:ac:d3:e6:
         7f:bc:27:cf:f6:92:e7:5d:14:8e:a9:37:fa:7a:c3:cd:13:18:
         64:6e:57:a5:ff:55:0d:6a:03:7a:bd:9a:70:c1:bc:a7:0d:21:
         72:08:87:86:53:84:e0:54:b6:44:1d:8c:c2:e3:dc:5d:d1:47:
         e1:bc:00:88:29:84:75:29:b7:67:c7:8a:63:d6:ac:1b:b0:30:
         6c:f8:1d:3e:36:26:e8:09:54:b7:17:ea:62:e9:8b:a1:04:7e:
         3e:ce:4e:e1:46:28:62:3a:9c:4d:e7:cc:68:27:71:63:0c:f9:
         7d:5a:ea:2d:64:ac:de:84:5a:c0:c6:a1:06:7b:31:99:f9:8c:
         dd:55:ee:c1:99:3d:92:6a:bb:02:2c:9e:c3:6f:e4:36:00:bf:
         8e:e7:c3:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGdCMdtSuFIqQtetFLZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk
YmQ1MzEwHhcNMjUwNDEzMTQwMTE5WhcNMjUwNDE0MTQwMTE5WjAzMTEwLwYDVQQD
Eyg0ZTY5MDgyYjExNjNjZTQwYTdkNGYwZmM1Y2Y2NTU4NGNhY2FkNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjefl7boOHbaieStR42rthBDAzgG
xdBxn9fkIobQFRfpmkSsRdFknB+aT4yVRk8vRjdv9ITfYoibqGUTNvy/US9F5Txs
Nuam0azVyKWNGrgrUEtt4OJ6oX/tfEoqTNrZZFuAwP1ZAnOfhVmKaFOEpqy0Flc9
IVRT2gxH/Hp+8G18m63El6PPPCOKbmUGqb0480G+L59G5hLMnssO1a5kpM+1rGfp
vuDmFSZz0d5gqkKAuY622V052kviTuGgPMCJQSp97yzfY0PLamYoAZLR/r3p+FKO
Hy2gXdPjLHvYv5HHtxdLWs4OxhsFJ+0uIbfLnPZISYNPBSu5USGvYnM+4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5pCCsRY85Ap9Tw/Fz2VYTKytTxMB8GA1UdIwQY
MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt
Yjk5MzA1MTBkMGEwLzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmItYjk5MzA1MTBkMGEw
LzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7zD++D8
t1wDhoT73zY1OJTXs4XL/hHLkBPaNhI5ysB15GJBNqICrUfw2l7vcxYrs3wg24nY
yK4s5tkOUbqZS3qt104/mklheJfP4mEliiEmpadD3x6bMWt97d6WjkrDoN9JFrCe
R2GNrNPmf7wnz/aS510Ujqk3+nrDzRMYZG5Xpf9VDWoDer2acMG8pw0hcgiHhlOE
4FS2RB2MwuPcXdFH4bwAiCmEdSm3Z8eKY9asG7AwbPgdPjYm6AlUtxfqYumLoQR+
Ps5O4UYoYjqcTefMaCdxYwz5fVrqLWSs3oRawMahBnsxmfmM3VXuwZk9kmq7Aiye
w2/kNgC/jufDyg==
-----END CERTIFICATE-----