Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
File:                     erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json)
Hash identifier:          7lM6VVxRcj/yWQjbCKZWYu1Qx4If2fVsoxWAhLmzd4g=
Subject key identifier:   CD:42:09:7A:C6:04:CE:11:43:C1:E6:AD:12:01:06:A5:25:20:BD:0A
Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB
Certificate issuer:       /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
Certificate serial:       01962F747F07CB39A2877AA42ED1C1823CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft
Manifest number:          C8
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=)
                          2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: +CV2aaYQ5Worfu+yZd8sZiJCWvN8Uhz3/9KKX0OMkhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:07:cb:39:a2:87:7a:a4:2e:d1:c1:82:3c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=cd42097ac604ce1143c1e6ad120106a52520bd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:76:40:b3:83:f6:d5:62:85:14:c6:a5:0f:
                    cc:67:b3:8a:5e:10:4b:d7:ad:a1:1a:8b:eb:9e:bf:
                    2e:a8:3b:6f:e6:65:b6:61:94:ae:fa:66:7e:f7:c7:
                    e9:b8:24:b8:6a:f0:f7:f4:4a:65:59:81:e1:d0:a5:
                    8f:3e:47:07:86:07:b3:50:5d:73:6f:0e:74:7b:0d:
                    c6:7a:52:e9:f8:e3:42:97:b4:a1:a5:a0:82:90:0d:
                    d2:74:d2:ac:56:ac:4a:8d:f7:04:ec:fb:eb:f7:35:
                    3d:a6:df:c5:90:43:6d:62:fd:32:11:0e:9b:20:4d:
                    a5:67:16:8d:89:c2:ed:a1:88:9f:f2:88:3d:d5:5a:
                    c9:60:f1:d8:c1:8d:bb:6d:6c:4a:a7:3c:8f:d9:e6:
                    48:f0:e8:b4:90:35:5c:1c:02:06:2e:76:25:17:8e:
                    fb:01:63:c3:ba:59:e5:a9:76:60:13:26:3e:3e:57:
                    66:f2:dc:8c:a3:5c:45:de:16:3a:2e:b1:15:7e:9f:
                    7b:39:75:d8:81:ce:4f:40:f9:da:67:8f:7f:6e:5a:
                    e5:e4:ea:ba:73:05:f4:80:a9:e4:50:47:a2:d9:ba:
                    3a:8d:26:8b:76:68:41:ee:a5:2d:4d:4f:35:45:28:
                    25:a2:7b:15:9c:96:ac:72:19:e5:b2:7d:a9:52:0f:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:42:09:7A:C6:04:CE:11:43:C1:E6:AD:12:01:06:A5:25:20:BD:0A
            X509v3 Authority Key Identifier:
                keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:d6:7a:04:8a:07:dc:b3:b5:0b:bf:c7:4d:09:7e:31:db:
         99:0e:88:41:78:30:e0:30:c0:4f:55:37:71:2e:cf:51:de:15:
         81:05:30:7c:a1:05:ec:e5:a6:c7:54:f3:02:36:7c:ba:33:b2:
         ee:56:6a:dc:37:84:0c:f2:27:e2:92:4a:78:09:de:cd:f7:9a:
         2f:ab:6e:8a:28:d8:12:28:a9:bc:2d:2b:eb:99:bb:3c:0d:d2:
         95:4f:da:51:c8:cd:6d:c4:17:34:54:2d:aa:40:d7:5d:85:fa:
         fa:71:af:97:d6:f6:21:d9:1a:fa:3e:d1:41:50:47:fd:f4:8a:
         dc:65:64:68:a2:01:6a:5c:c3:de:25:ca:cc:d1:b7:37:03:11:
         41:2a:9c:0e:cf:66:d6:d1:af:0e:52:e2:2e:b0:3c:e4:11:06:
         3b:04:68:2c:8c:04:5b:aa:36:4a:74:27:38:b6:0e:43:4d:02:
         ff:4d:7d:e0:c5:60:8f:e5:b4:42:fc:3f:b7:ac:ce:3b:d3:7c:
         59:0e:25:03:f3:45:2b:01:24:50:77:ca:a0:16:f7:19:f7:16:
         a0:84:94:ab:70:b4:a5:84:e2:5c:70:9f:8f:68:9c:58:d3:c6:
         a1:03:98:8c:1d:44:6b:ee:ae:f9:8d:46:81:9c:42:97:78:d4:
         1f:c2:98:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdH8Hyzmih3qkLtHBgjzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYmFhMGI0MDI4ZjA3M2MwNTY0YTY1OGI0ZmI4ODg2Y2Jj
OGQzZWIwHhcNMjUwNDEzMTQwMTI1WhcNMjUwNDE0MTQwMTI1WjAzMTEwLwYDVQQD
EyhjZDQyMDk3YWM2MDRjZTExNDNjMWU2YWQxMjAxMDZhNTI1MjBiZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSt2QLOD9tVihRTGpQ/MZ7OKXhBL
162hGovrnr8uqDtv5mW2YZSu+mZ+98fpuCS4avD39EplWYHh0KWPPkcHhgezUF1z
bw50ew3GelLp+ONCl7ShpaCCkA3SdNKsVqxKjfcE7Pvr9zU9pt/FkENtYv0yEQ6b
IE2lZxaNicLtoYif8og91VrJYPHYwY27bWxKpzyP2eZI8Oi0kDVcHAIGLnYlF477
AWPDulnlqXZgEyY+Pldm8tyMo1xF3hY6LrEVfp97OXXYgc5PQPnaZ49/blrl5Oq6
cwX0gKnkUEei2bo6jSaLdmhB7qUtTU81RSglonsVnJaschnlsn2pUg8XVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1CCXrGBM4RQ8HmrRIBBqUlIL0KMB8GA1UdIwQY
MBaAFHq6oLQCjwc8BWSmWLT7iIbLyNPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEt
YmFlZGM3OWFlN2UxLzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEtYmFlZGM3OWFlN2Ux
LzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+bWegSK
B9yztQu/x00JfjHbmQ6IQXgw4DDAT1U3cS7PUd4VgQUwfKEF7OWmx1TzAjZ8ujOy
7lZq3DeEDPIn4pJKeAnezfeaL6tuiijYEiipvC0r65m7PA3SlU/aUcjNbcQXNFQt
qkDXXYX6+nGvl9b2Idka+j7RQVBH/fSK3GVkaKIBalzD3iXKzNG3NwMRQSqcDs9m
1tGvDlLiLrA85BEGOwRoLIwEW6o2SnQnOLYOQ00C/0194MVgj+W0Qvw/t6zOO9N8
WQ4lA/NFKwEkUHfKoBb3GfcWoISUq3C0pYTiXHCfj2icWNPGoQOYjB1Ea+6u+Y1G
gZxCl3jUH8KYAQ==
-----END CERTIFICATE-----