Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File:                     68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier:          5liK6MQxkdkB6g1yM1ZKgzws70RN89QtnrE+YeWV7ZY=
Subject key identifier:   FD:77:A8:09:B1:81:AB:4B:96:04:46:FD:2B:BC:E3:74:B3:21:BF:28
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer:       /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial:       01962F071065979AC9C292EE869DDC68A637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number:          0DF7
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: aHaqNb79E0CIRZEWns9S/jS2A/FZY2Lwg835n34HpOs=)
                          2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:10:65:97:9a:c9:c2:92:ee:86:9d:dc:68:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=fd77a809b181ab4b960446fd2bbce374b321bf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:1d:09:d5:0d:99:05:97:0d:f4:74:e6:38:
                    12:4a:0d:a8:0e:59:02:37:5e:5c:18:ab:7a:47:b7:
                    54:ab:de:fe:8f:05:9b:d4:54:89:ab:7e:d5:28:4c:
                    ec:76:74:34:d9:9e:07:e5:66:13:9b:7a:26:81:71:
                    db:e8:3c:ed:72:52:e7:26:68:a7:8a:2c:2d:77:bc:
                    fe:dd:72:ff:a3:0e:9e:af:5b:c6:d0:86:8f:86:7d:
                    ad:5e:18:bd:fb:99:38:b9:21:7f:9b:12:13:74:3f:
                    8a:45:28:96:a0:73:d5:8e:f5:49:84:29:1b:86:a1:
                    b1:de:92:18:3d:ca:fd:6f:a7:20:13:ae:41:bf:77:
                    ba:fc:31:10:c7:72:85:e9:98:6c:88:e0:3e:80:db:
                    ed:71:f6:a5:ee:9a:41:97:14:44:7b:36:0f:70:2a:
                    2b:ee:92:a8:d9:1c:e7:87:62:25:25:02:20:da:a5:
                    18:b4:bd:25:d6:d8:76:5f:a3:e3:03:a3:6a:0e:a3:
                    ad:71:9b:5b:53:33:8f:07:86:7a:e4:91:61:b9:a3:
                    48:e4:66:5c:25:3f:d8:b4:92:36:c2:58:1a:ac:29:
                    df:c7:6e:8a:a9:fd:b5:1b:4d:a8:24:ba:ef:cd:c5:
                    33:4c:7b:74:93:db:b3:c8:df:53:9c:b0:5b:b8:58:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:A8:09:B1:81:AB:4B:96:04:46:FD:2B:BC:E3:74:B3:21:BF:28
            X509v3 Authority Key Identifier:
                keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:3b:d5:68:85:f7:cd:4e:e5:3b:2c:aa:b4:bd:56:ff:29:
         e8:d4:2a:80:04:6b:0f:6a:19:f1:d8:d6:1e:53:10:ce:73:df:
         ba:1f:48:62:79:0c:fd:ec:7c:52:33:42:21:0c:c1:61:b3:32:
         49:ff:16:97:63:4c:80:cf:3c:bd:69:66:39:f4:e6:a0:eb:12:
         f0:2b:a6:8e:62:30:e6:83:9e:72:a2:18:2e:3a:79:5d:16:37:
         ca:5d:8f:05:bb:30:8f:c0:cd:a5:ee:88:2d:8d:17:ac:f2:55:
         23:11:46:e2:a3:20:86:da:1d:86:da:68:9c:4e:d9:43:e3:c0:
         b9:99:a5:1b:4f:56:a4:6f:f0:02:8f:92:01:4e:c7:fd:a9:33:
         1a:db:3f:4e:93:8e:0e:42:38:53:6a:a3:f1:20:b1:b3:29:40:
         b6:9e:e4:61:45:0a:f2:00:9c:3c:08:92:c2:34:6f:8f:22:02:
         fa:c8:10:39:88:bb:e4:da:e5:87:08:24:a2:63:48:cb:69:cd:
         a3:3d:5f:a0:fa:1f:98:c3:41:3e:45:34:f5:22:4d:03:a3:e4:
         5a:5c:16:dd:ed:05:32:dc:a8:c4:22:23:76:df:32:1f:66:81:
         be:2e:85:69:29:9b:f2:98:5b:c2:b1:55:1f:7d:02:27:86:ab:
         41:1a:dc:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxBll5rJwpLuhp3caKY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw
ZGUwNTQwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EyhmZDc3YTgwOWIxODFhYjRiOTYwNDQ2ZmQyYmJjZTM3NGIzMjFiZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wYdCdUNmQWXDfR05jgSSg2oDlkC
N15cGKt6R7dUq97+jwWb1FSJq37VKEzsdnQ02Z4H5WYTm3omgXHb6DztclLnJmin
iiwtd7z+3XL/ow6er1vG0IaPhn2tXhi9+5k4uSF/mxITdD+KRSiWoHPVjvVJhCkb
hqGx3pIYPcr9b6cgE65Bv3e6/DEQx3KF6ZhsiOA+gNvtcfal7ppBlxREezYPcCor
7pKo2Rznh2IlJQIg2qUYtL0l1th2X6PjA6NqDqOtcZtbUzOPB4Z65JFhuaNI5GZc
JT/YtJI2wlgarCnfx26Kqf21G02oJLrvzcUzTHt0k9uzyN9TnLBbuFjeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP13qAmxgatLlgRG/Su843SzIb8oMB8GA1UdIwQY
MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt
NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi
LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqM71WiF
981O5TssqrS9Vv8p6NQqgARrD2oZ8djWHlMQznPfuh9IYnkM/ex8UjNCIQzBYbMy
Sf8Wl2NMgM88vWlmOfTmoOsS8CumjmIw5oOecqIYLjp5XRY3yl2PBbswj8DNpe6I
LY0XrPJVIxFG4qMghtodhtponE7ZQ+PAuZmlG09WpG/wAo+SAU7H/akzGts/TpOO
DkI4U2qj8SCxsylAtp7kYUUK8gCcPAiSwjRvjyIC+sgQOYi75NrlhwgkomNIy2nN
oz1foPofmMNBPkU09SJNA6PkWlwW3e0FMtyoxCIjdt8yH2aBvi6FaSmb8phbwrFV
H30CJ4arQRrcZA==
-----END CERTIFICATE-----