Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File:                     4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier:          eB+lSQPRpJazSjT57YsrFZU9ipTEki5UbqQZMboxsKs=
Subject key identifier:   7C:63:F0:EA:23:3A:C0:67:F6:59:8E:01:6C:5F:3C:07:BC:5D:71:C9
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer:       /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial:       01962ECF6B046BB428AEF6510C36EE9FA252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: nRajDQ3IoOcexWleKcyYoGJxNXHAJP3tqoI6TfoFass=)
                          2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
                          3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:04:6b:b4:28:ae:f6:51:0c:36:ee:9f:a2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=7c63f0ea233ac067f6598e016c5f3c07bc5d71c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:05:da:24:9e:57:3e:e4:64:76:a9:59:64:
                    de:bd:0d:a8:eb:30:eb:ff:53:58:98:8d:ae:eb:48:
                    8d:c3:09:9a:6f:60:84:95:9b:7d:0d:0b:c7:e7:59:
                    76:11:d3:58:68:bc:97:4d:eb:fd:09:c7:20:dd:da:
                    e8:d6:27:2d:b5:b0:de:1d:c5:7e:5c:39:52:61:c5:
                    80:e7:d9:12:9b:49:40:ac:8b:fe:39:3f:b5:f3:84:
                    29:c6:d4:37:61:4b:70:4d:19:bb:c2:77:f4:4f:c2:
                    e0:ce:20:51:3b:0b:db:00:7d:5d:ab:cc:e4:69:0e:
                    84:26:5e:f9:a4:6c:47:17:8c:54:82:af:3b:e0:ff:
                    21:67:3f:4f:02:b9:fc:bc:bd:c6:a3:4c:d1:a0:2e:
                    72:65:b2:07:a5:65:a5:15:bb:39:24:e3:aa:6b:c0:
                    45:01:ef:3b:1a:28:0f:2b:5a:15:a6:4b:7b:3a:24:
                    4e:fe:29:4a:e5:ed:06:db:f3:8a:f6:f0:8f:61:99:
                    0b:38:48:47:e2:ba:34:80:64:7a:37:2f:87:04:95:
                    5c:a4:16:06:7b:27:63:9a:ad:c7:ed:17:b6:89:14:
                    6d:92:d9:a7:b0:c4:36:9f:ef:84:54:38:1b:f8:2a:
                    1e:5c:1c:34:1c:50:05:46:5c:2a:39:fb:5c:3f:f4:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:63:F0:EA:23:3A:C0:67:F6:59:8E:01:6C:5F:3C:07:BC:5D:71:C9
            X509v3 Authority Key Identifier:
                keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:4e:3f:37:b8:64:30:3f:59:36:2c:ad:a8:b5:10:0c:4c:
         9b:01:f2:5f:67:e6:42:ed:3f:3b:73:bd:f5:25:8d:fa:33:5e:
         7b:53:21:8b:fc:ad:ad:c0:de:f3:82:50:2e:cf:8c:40:dd:2b:
         1b:64:2a:7e:44:6e:7e:52:a1:5c:05:bf:29:d6:f4:89:83:9e:
         0b:f7:d7:e2:69:1a:9d:ed:39:10:2a:42:25:ed:c1:00:98:f2:
         66:7d:96:a7:f3:df:81:f0:88:fc:7e:b6:ec:b7:ce:e5:4c:07:
         d0:b4:02:8c:81:18:1e:44:69:9d:16:c0:bb:f9:45:24:26:3b:
         55:17:d2:3f:d7:e9:d4:a5:6e:6f:fa:d6:bc:f9:26:9b:4b:e2:
         8a:fb:f7:23:17:02:34:c8:f6:fa:24:3c:43:4a:24:5b:74:17:
         d6:67:4a:30:c0:b9:63:0c:c3:ae:bb:b8:f4:dd:85:d4:ab:0f:
         24:5c:1c:76:f7:1a:f9:cc:f9:44:55:a8:8b:28:ec:9b:04:e7:
         97:a7:3e:0b:43:c0:d7:32:ef:85:e9:d8:8a:f3:e7:bf:8a:90:
         89:3c:9b:87:e3:78:09:fe:c8:07:c5:49:b1:04:53:1c:1d:37:
         5d:65:fa:19:49:4f:ae:b5:3e:43:f6:bd:28:32:b7:81:e1:33:
         14:8e:93:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2sEa7QorvZRDDbun6JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzU4NjEyMTBkYzM4YmRiYWViNDc3ZDZkYTcxOTY2NGE4
NGE2YmMwHhcNMjUwNDEzMTEwMTA3WhcNMjUwNDE0MTEwMTA3WjAzMTEwLwYDVQQD
Eyg3YzYzZjBlYTIzM2FjMDY3ZjY1OThlMDE2YzVmM2MwN2JjNWQ3MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuUF2iSeVz7kZHapWWTevQ2o6zDr
/1NYmI2u60iNwwmab2CElZt9DQvH51l2EdNYaLyXTev9Cccg3dro1icttbDeHcV+
XDlSYcWA59kSm0lArIv+OT+184QpxtQ3YUtwTRm7wnf0T8LgziBROwvbAH1dq8zk
aQ6EJl75pGxHF4xUgq874P8hZz9PArn8vL3Go0zRoC5yZbIHpWWlFbs5JOOqa8BF
Ae87GigPK1oVpkt7OiRO/ilK5e0G2/OK9vCPYZkLOEhH4ro0gGR6Ny+HBJVcpBYG
eydjmq3H7Re2iRRtktmnsMQ2n++EVDgb+CoeXBw0HFAFRlwqOftcP/RcCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxj8OojOsBn9lmOAWxfPAe8XXHJMB8GA1UdIwQY
MBaAFOLFhhIQ3Di9uutHfW2nGWZKhKa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEt
MzM3NTYxN2Q0ZWZkLzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmRiMDgtYzg0NS00MWFiLWEwOGEtMzM3NTYxN2Q0ZWZk
LzEvNHNXR0VoRGNPTDI2NjBkOWJhY1paa3FFcHJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnhOPze4
ZDA/WTYsrai1EAxMmwHyX2fmQu0/O3O99SWN+jNee1Mhi/ytrcDe84JQLs+MQN0r
G2QqfkRuflKhXAW/Kdb0iYOeC/fX4mkane05ECpCJe3BAJjyZn2Wp/PfgfCI/H62
7LfO5UwH0LQCjIEYHkRpnRbAu/lFJCY7VRfSP9fp1KVub/rWvPkmm0viivv3IxcC
NMj2+iQ8Q0okW3QX1mdKMMC5YwzDrru49N2F1KsPJFwcdvca+cz5RFWoiyjsmwTn
l6c+C0PA1zLvhenYivPnv4qQiTybh+N4Cf7IB8VJsQRTHB03XWX6GUlPrrU+Q/a9
KDK3geEzFI6Tdg==
-----END CERTIFICATE-----