Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File:                     EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier:          adtjklN9pfbG0j/qLcO9ni7TkpgqOOhOTd5KOhmQggw=
Subject key identifier:   EC:F1:4B:31:8D:20:08:A8:4B:74:47:AB:E0:B9:C1:5D:EE:20:3F:E3
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer:       /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial:       01962F74E3776E468C8E7D55AAAC56D28ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: 51SXE63Pg+WNrUvEYMbNhsbO7WrYeA4ceV//LAbpZjc=)
                          2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:77:6e:46:8c:8e:7d:55:aa:ac:56:d2:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=ecf14b318d2008a84b7447abe0b9c15dee203fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:20:e1:4a:4e:59:0e:a2:6a:76:0e:8a:98:
                    c6:6d:cc:43:fa:f8:db:e8:a8:6a:f8:e3:e7:8e:fd:
                    8b:6c:a5:30:71:92:a6:cb:2d:d9:af:3d:9a:64:90:
                    d2:d3:3b:27:9d:1d:63:3d:4b:62:68:5e:7a:84:19:
                    ef:4c:e2:70:3f:ee:a2:96:08:83:03:2d:21:ce:5d:
                    4f:8e:c1:f6:1d:08:58:d7:ae:f0:d8:84:7f:5d:82:
                    67:89:07:6b:ca:4e:c0:bc:0f:44:80:33:1d:5a:53:
                    8a:08:5b:06:e0:bf:8f:01:07:c2:10:c7:a8:46:7f:
                    80:b4:e4:44:eb:55:71:13:e6:2f:22:3e:bd:ea:c0:
                    09:f7:88:d3:c0:bf:7a:d4:b4:26:c9:cb:b3:a8:b2:
                    79:e4:df:12:1f:fb:f3:37:a7:ac:8c:36:1a:b6:f6:
                    18:48:58:5d:2b:84:bf:3b:e4:e2:2b:b3:8c:c6:1e:
                    33:5c:57:0c:38:b7:fd:29:96:0d:2d:44:46:b3:dc:
                    ae:87:9a:c3:9f:48:30:32:d0:b6:d4:c2:1e:04:2c:
                    e7:e5:14:80:92:38:09:dd:26:fc:34:b2:6c:0f:6d:
                    8a:8e:fa:5d:20:da:9c:1a:77:f4:1d:a2:4f:fe:e7:
                    d9:9e:ad:48:89:ab:c8:81:d8:e1:de:c8:9c:76:8e:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:4B:31:8D:20:08:A8:4B:74:47:AB:E0:B9:C1:5D:EE:20:3F:E3
            X509v3 Authority Key Identifier:
                keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:a9:21:5d:91:6e:16:95:e1:75:f8:75:51:1d:78:68:b9:
         f9:7d:ce:c7:48:15:83:84:73:1e:5f:fa:85:93:f6:f0:ef:a1:
         c1:ef:9b:a6:c2:9c:bb:a5:12:f6:09:cb:f6:33:4b:a4:4a:67:
         c1:bb:c7:f4:32:cb:44:af:9d:dc:55:ba:d5:dd:14:43:13:dd:
         ec:56:e3:58:08:3a:a1:3c:e3:51:15:26:fa:1a:67:37:9a:72:
         28:1c:30:8f:a4:a9:6d:f9:7c:9c:69:90:62:d1:13:87:96:78:
         74:d3:8a:34:fc:df:cf:6b:bb:24:86:af:89:ba:40:7f:fb:28:
         3a:64:ee:cc:48:65:49:61:52:ff:c2:7e:62:b3:e8:70:e4:7e:
         a8:44:98:13:8a:85:c5:56:ae:f7:6f:fc:bf:41:c5:71:23:f3:
         4f:4e:ca:36:0c:29:a1:62:7f:fc:2d:c5:c0:82:ac:34:b4:0b:
         56:3a:fc:7e:bb:f1:c3:ad:82:15:64:89:9e:5b:78:11:55:43:
         2e:de:12:b8:a6:91:a7:b2:8a:ac:5b:27:09:5f:e8:6e:20:f8:
         5a:9d:d4:34:bc:bd:c4:74:fe:1a:f7:48:96:89:e7:8d:0c:b5:
         22:0c:b4:57:d6:eb:e0:ee:cd:95:1e:6e:82:33:99:6c:e1:aa:
         cb:6f:e1:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdON3bkaMjn1VqqxW0oq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy
ZTkwODYwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
EyhlY2YxNGIzMThkMjAwOGE4NGI3NDQ3YWJlMGI5YzE1ZGVlMjAzZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbQg4UpOWQ6ianYOipjGbcxD+vjb
6Khq+OPnjv2LbKUwcZKmyy3Zrz2aZJDS0zsnnR1jPUtiaF56hBnvTOJwP+6ilgiD
Ay0hzl1PjsH2HQhY167w2IR/XYJniQdryk7AvA9EgDMdWlOKCFsG4L+PAQfCEMeo
Rn+AtORE61VxE+YvIj696sAJ94jTwL961LQmycuzqLJ55N8SH/vzN6esjDYatvYY
SFhdK4S/O+TiK7OMxh4zXFcMOLf9KZYNLURGs9yuh5rDn0gwMtC21MIeBCzn5RSA
kjgJ3Sb8NLJsD22KjvpdINqcGnf0HaJP/ufZnq1IiavIgdjh3sicdo7eGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzxSzGNIAioS3RHq+C5wV3uID/jMB8GA1UdIwQY
MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt
MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0
LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbWpIV2R
bhaV4XX4dVEdeGi5+X3Ox0gVg4RzHl/6hZP28O+hwe+bpsKcu6US9gnL9jNLpEpn
wbvH9DLLRK+d3FW61d0UQxPd7FbjWAg6oTzjURUm+hpnN5pyKBwwj6Spbfl8nGmQ
YtETh5Z4dNOKNPzfz2u7JIavibpAf/soOmTuzEhlSWFS/8J+YrPocOR+qESYE4qF
xVau92/8v0HFcSPzT07KNgwpoWJ//C3FwIKsNLQLVjr8frvxw62CFWSJnlt4EVVD
Lt4SuKaRp7KKrFsnCV/obiD4Wp3UNLy9xHT+GvdIlonnjQy1Igy0V9br4O7NlR5u
gjOZbOGqy2/hiw==
-----END CERTIFICATE-----