Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File:                     L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier:          C9Ncj6BOAy+a1OMgettzn8fKTAR0i9WxTX51m/+22ZE=
Subject key identifier:   57:2B:DB:F8:90:EF:17:7B:8F:14:E2:58:C5:D4:28:D2:72:8B:18:EB
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer:       /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial:       01962E2B39B3B78DDC634683EB5C1ECC0307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number:          02EA
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
                          2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: JliFpYBPFMq+l3+SfTf3ROwtW5raDT4G6NbMhbGCsZE=)
                          3: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (hash: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:39:b3:b7:8d:dc:63:46:83:eb:5c:1e:cc:03:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=572bdbf890ef177b8f14e258c5d428d2728b18eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:40:26:3e:4a:bf:7f:0e:b9:a3:89:73:1c:
                    2f:32:99:e0:59:fc:e6:01:d4:a2:16:ae:5a:a4:aa:
                    e8:b5:4e:60:aa:d3:d5:8e:ed:40:62:ca:a9:d9:a8:
                    f3:bb:ae:c6:78:b9:14:2c:29:e3:d3:c2:1a:8d:b1:
                    72:0a:63:55:38:f0:75:08:cc:f0:e0:50:a0:e8:9a:
                    c8:d1:72:8d:eb:e5:79:b5:ef:f2:98:e1:ff:c8:4e:
                    b5:cc:3a:e6:00:02:81:79:32:24:be:26:31:c8:24:
                    be:52:44:a6:fc:dc:45:de:b2:56:03:d9:cf:77:cc:
                    e5:48:cf:05:75:8b:5f:c0:52:9a:8d:92:b7:7c:51:
                    1f:59:79:44:20:23:32:15:0c:ec:4a:8f:70:9b:79:
                    a1:3c:5a:5d:48:55:e8:5d:29:9f:a2:26:35:c5:a9:
                    b9:20:a1:1d:be:9a:24:e2:68:df:36:ab:44:88:00:
                    9e:d9:8b:1a:3c:71:f1:db:63:c8:f8:87:54:33:ad:
                    64:6b:1e:bd:fb:4c:e5:f5:cc:a8:98:92:52:5f:90:
                    2f:a2:f7:c4:81:75:9b:47:b6:03:37:9f:e4:47:55:
                    46:9a:27:49:eb:a4:eb:43:de:b8:d3:5d:e2:88:07:
                    f5:40:36:e8:e0:cf:36:4c:37:b4:e2:4b:f2:7f:5d:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2B:DB:F8:90:EF:17:7B:8F:14:E2:58:C5:D4:28:D2:72:8B:18:EB
            X509v3 Authority Key Identifier:
                keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:30:76:60:6c:1b:a9:0a:28:58:0b:0c:59:53:40:e1:0b:dd:
         e9:d3:c3:c9:10:da:5c:08:15:f5:6d:55:ca:0b:7a:5e:31:4c:
         e8:0b:6d:f0:9d:5a:85:77:87:37:72:fe:d7:0f:8a:5d:27:71:
         51:38:59:70:28:cf:bb:fc:71:c1:33:2a:d6:76:a2:eb:f7:51:
         32:20:ee:99:40:7e:6e:92:1a:d1:e8:4a:c8:39:b8:07:4c:c8:
         b4:6e:67:4c:17:03:91:a8:9a:7e:12:58:49:39:e6:80:1a:9a:
         d3:d3:62:e0:41:a2:b9:85:bd:53:ca:15:55:3f:b8:24:ce:42:
         2c:af:67:e0:dd:05:8e:4d:f2:85:bc:bb:36:40:99:d4:01:9f:
         1c:4b:03:f4:48:e4:16:f9:d8:b4:f0:6b:c5:50:cb:cc:6d:99:
         76:a5:cd:3c:02:e6:90:cd:eb:20:bf:fd:57:03:87:41:3c:f7:
         25:b7:a8:1c:94:97:48:ee:61:84:3f:5e:81:8e:1a:3d:6d:39:
         f9:fa:11:c7:bd:46:23:da:02:17:84:ce:3a:18:60:97:cb:c3:
         f2:44:d5:3c:81:21:84:77:52:f0:e4:53:3c:c0:a7:b7:db:34:
         eb:88:ab:3f:6e:66:dd:68:04:79:8d:d4:89:11:3c:97:08:30:
         a0:71:3c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKzmzt43cY0aD61wezAMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjUwNDEzMDgwMTQ2WhcNMjUwNDE0MDgwMTQ2WjAzMTEwLwYDVQQD
Eyg1NzJiZGJmODkwZWYxNzdiOGYxNGUyNThjNWQ0MjhkMjcyOGIxOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ThAJj5Kv38OuaOJcxwvMpngWfzm
AdSiFq5apKrotU5gqtPVju1AYsqp2ajzu67GeLkULCnj08IajbFyCmNVOPB1CMzw
4FCg6JrI0XKN6+V5te/ymOH/yE61zDrmAAKBeTIkviYxyCS+UkSm/NxF3rJWA9nP
d8zlSM8FdYtfwFKajZK3fFEfWXlEICMyFQzsSo9wm3mhPFpdSFXoXSmfoiY1xam5
IKEdvpok4mjfNqtEiACe2YsaPHHx22PI+IdUM61kax69+0zl9cyomJJSX5AvovfE
gXWbR7YDN5/kR1VGmidJ66TrQ964013iiAf1QDbo4M82TDe04kvyf12kGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcr2/iQ7xd7jxTiWMXUKNJyixjrMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTB2YGwb
qQooWAsMWVNA4Qvd6dPDyRDaXAgV9W1Vygt6XjFM6Att8J1ahXeHN3L+1w+KXSdx
UThZcCjPu/xxwTMq1nai6/dRMiDumUB+bpIa0ehKyDm4B0zItG5nTBcDkaiafhJY
STnmgBqa09Ni4EGiuYW9U8oVVT+4JM5CLK9n4N0Fjk3yhby7NkCZ1AGfHEsD9Ejk
FvnYtPBrxVDLzG2ZdqXNPALmkM3rIL/9VwOHQTz3JbeoHJSXSO5hhD9egY4aPW05
+foRx71GI9oCF4TOOhhgl8vD8kTVPIEhhHdS8ORTPMCnt9s064irP25m3WgEeY3U
iRE8lwgwoHE84Q==
-----END CERTIFICATE-----