Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File:                     iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier:          Ep4InXcIaOISIRftD1uoIf6q8i1Cqrl+tTC6bfFqb1g=
Subject key identifier:   3B:4C:6E:E9:2F:21:05:3A:A9:1F:C3:9D:45:15:DE:B8:6B:94:18:73
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer:       /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial:       01962ECFD7B34E1B7F0B920A15FE4CEAA559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number:          08B1
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: ErjG8PzRqBjeDZcaFGNcBuUeEUE.roa (hash: sN5KyroEA4/9YU1zLDTzNIFkGV6HdbsDCYD+xFVzoWA=)
                          2: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: rE4jjQOmKj550nUFbWK/tUVE9bYjettfTn/hMuvSI4s=)
                          3: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:b3:4e:1b:7f:0b:92:0a:15:fe:4c:ea:a5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=3b4c6ee92f21053aa91fc39d4515deb86b941873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:74:66:72:0c:7a:81:50:42:2e:70:0a:c1:
                    50:88:27:2f:68:f6:16:ab:cd:14:1e:81:57:95:3d:
                    3f:b3:d4:cd:24:24:68:55:b2:67:62:8d:64:a1:d3:
                    b6:f2:a1:78:0f:7a:a6:41:f3:42:00:be:a5:ac:de:
                    f7:f5:ed:25:b8:e9:3f:fe:f2:ee:62:34:7d:5d:17:
                    50:48:bd:c7:21:bc:a9:41:64:30:cb:3a:23:7e:02:
                    aa:78:ac:4b:6d:7b:a9:75:41:17:7d:7e:69:0c:95:
                    38:85:43:10:d2:6c:d4:71:92:c9:2b:dc:31:cd:02:
                    fa:58:ef:cd:fe:11:1f:52:ff:35:bb:14:d9:ea:d4:
                    a5:91:0f:96:3a:bd:1d:29:ba:99:a8:63:43:69:aa:
                    7f:60:80:3d:55:47:ae:da:af:70:1e:44:d5:77:e8:
                    e5:16:6c:d4:09:8e:3d:b2:72:f9:00:1e:97:e9:c9:
                    75:fa:2c:7a:10:b2:d4:ed:a6:09:c3:49:f7:72:c6:
                    eb:1a:01:14:0d:c8:9a:14:e6:80:2b:22:d1:b2:cb:
                    38:ec:aa:32:ce:8a:a2:45:56:86:e5:ab:e6:0b:74:
                    82:b1:8f:17:53:de:ac:78:46:ec:1f:01:b8:b1:38:
                    2b:ab:10:f6:c8:70:bb:65:e8:75:f3:9f:a6:2c:0b:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:6E:E9:2F:21:05:3A:A9:1F:C3:9D:45:15:DE:B8:6B:94:18:73
            X509v3 Authority Key Identifier:
                keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:1f:61:0f:67:b8:f9:4e:ec:a9:b0:18:56:9c:90:79:46:
         61:19:76:9d:87:65:74:ab:40:20:6b:74:b4:3c:fe:b9:49:d4:
         17:3e:3f:bd:e0:52:af:19:e8:71:c9:1f:3a:ec:a1:68:a5:cc:
         a8:23:d7:f6:d6:d5:59:1b:ae:7e:d3:dd:32:8b:9c:99:db:6c:
         d5:04:04:dd:a6:75:95:59:c6:1f:8a:8a:8e:40:28:d2:c1:d9:
         03:d8:3b:98:22:18:92:c3:c5:d0:6d:cc:26:cb:9b:0d:eb:a4:
         63:eb:0d:0a:31:f7:59:11:fd:d6:76:47:bf:a0:47:72:5d:2e:
         53:92:ec:f2:64:d2:e3:98:37:5a:52:d0:2d:54:da:70:ee:e4:
         9b:b0:4b:a6:2a:5c:17:78:5c:17:1f:b4:40:d2:75:c1:fe:1a:
         2b:8f:d4:58:c0:2c:4f:ea:0a:e6:a2:ef:dd:02:47:9c:d0:a9:
         01:bd:24:05:6a:0c:13:d1:69:a6:29:a5:62:78:43:5f:96:96:
         f4:76:98:3b:de:c6:d2:dc:ca:7c:99:ec:df:8a:4d:ef:44:dc:
         6e:36:ef:8b:62:6c:56:c1:80:4a:3c:6e:de:76:28:eb:42:b1:
         2a:48:b2:83:af:35:5e:66:b4:08:33:b1:f5:09:44:fd:5b:f5:
         b1:e7:e2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9ezTht/C5IKFf5M6qVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEwOGY0MWMzNzMwMjdlMDgxYjVjMWNhOGE4MDBiZjE4
NTVkOWYwHhcNMjUwNDEzMTEwMTM1WhcNMjUwNDE0MTEwMTM1WjAzMTEwLwYDVQQD
EygzYjRjNmVlOTJmMjEwNTNhYTkxZmMzOWQ0NTE1ZGViODZiOTQxODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujB0ZnIMeoFQQi5wCsFQiCcvaPYW
q80UHoFXlT0/s9TNJCRoVbJnYo1kodO28qF4D3qmQfNCAL6lrN739e0luOk//vLu
YjR9XRdQSL3HIbypQWQwyzojfgKqeKxLbXupdUEXfX5pDJU4hUMQ0mzUcZLJK9wx
zQL6WO/N/hEfUv81uxTZ6tSlkQ+WOr0dKbqZqGNDaap/YIA9VUeu2q9wHkTVd+jl
FmzUCY49snL5AB6X6cl1+ix6ELLU7aYJw0n3csbrGgEUDciaFOaAKyLRsss47Koy
zoqiRVaG5avmC3SCsY8XU96seEbsHwG4sTgrqxD2yHC7Zeh185+mLAt28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtMbukvIQU6qR/DnUUV3rhrlBhzMB8GA1UdIwQY
MBaAFIpaCPQcNzAn4IG1wcqKgAvxhV2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUt
OGE1NmIwZjUwNzMxLzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUtOGE1NmIwZjUwNzMx
LzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSofYQ9n
uPlO7KmwGFackHlGYRl2nYdldKtAIGt0tDz+uUnUFz4/veBSrxnocckfOuyhaKXM
qCPX9tbVWRuuftPdMoucmdts1QQE3aZ1lVnGH4qKjkAo0sHZA9g7mCIYksPF0G3M
JsubDeukY+sNCjH3WRH91nZHv6BHcl0uU5Ls8mTS45g3WlLQLVTacO7km7BLpipc
F3hcFx+0QNJ1wf4aK4/UWMAsT+oK5qLv3QJHnNCpAb0kBWoME9FppimlYnhDX5aW
9HaYO97G0tzKfJns34pN70Tcbjbvi2JsVsGASjxu3nYo60KxKkiyg681Xma0CDOx
9QlE/Vv1sefi5A==
-----END CERTIFICATE-----