Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File:                     4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier:          9aZadPUzsZKkovgfwL1MrJ5phJQYELr7HI2yHdlhZv0=
Subject key identifier:   C8:FF:43:2D:91:65:2A:79:10:0B:D7:0B:CF:53:4C:41:AB:9C:6F:31
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer:       /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial:       01962DF42AB5E1E16EE13CBED221694F7600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number:          0312
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
                          2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: Ek6kSUcCCKp+o3PmjaLUxwCZDTtj3ALVL+IpFFGMGCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:b5:e1:e1:6e:e1:3c:be:d2:21:69:4f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=c8ff432d91652a79100bd70bcf534c41ab9c6f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:f3:a7:61:6c:e6:1b:30:ab:cb:d9:5a:3f:
                    00:a2:e2:d7:8a:9e:cc:e1:ec:40:70:33:49:75:58:
                    1e:71:b6:94:e3:96:55:88:83:07:7c:3d:de:0b:8a:
                    a1:61:ca:81:42:b7:ba:dc:df:48:b6:77:13:46:b9:
                    e2:69:8b:35:16:54:d1:05:18:ba:b8:c9:ba:00:68:
                    94:93:e9:2f:ea:91:f9:18:52:d1:ec:2d:6d:d9:5c:
                    04:f1:9c:b4:17:6d:eb:79:41:2e:dc:a6:ba:03:68:
                    8e:42:bf:b6:18:f2:9f:6c:07:92:74:09:91:61:7b:
                    2e:97:1f:d6:93:64:50:83:40:68:3b:6b:cf:cc:ce:
                    29:39:35:bb:da:65:dd:fd:e5:ee:4b:f3:56:c0:6f:
                    cc:63:72:f1:11:68:4c:12:6d:f1:60:37:07:32:04:
                    ac:a4:6a:76:ab:9a:c7:ce:2f:3f:ae:68:0b:3b:48:
                    33:1d:f2:e1:89:91:95:c3:14:b5:a5:87:5e:4b:7e:
                    5e:d3:c0:ce:94:64:4e:0c:6e:e7:6b:da:77:f5:74:
                    64:cb:a0:97:fa:a4:a4:a0:94:a7:7f:3d:16:de:b4:
                    09:34:5b:90:7a:eb:ee:07:3e:6f:48:45:f4:3c:c5:
                    d6:2f:37:4e:bb:84:64:af:6b:1f:fc:09:0f:07:29:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:43:2D:91:65:2A:79:10:0B:D7:0B:CF:53:4C:41:AB:9C:6F:31
            X509v3 Authority Key Identifier:
                keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:21:13:cf:45:8a:20:e0:a7:3d:63:db:82:fd:8f:be:b2:
         a2:9b:8a:6a:05:7c:10:8c:e2:f4:28:98:31:9c:5e:fe:f0:21:
         32:07:85:c9:96:fa:04:9f:8f:67:1f:be:4f:31:b8:5b:0f:e0:
         a5:31:6f:de:8c:91:97:ef:5d:4b:e1:fc:cd:9c:6e:e6:ef:14:
         c0:64:c7:24:38:94:a8:a2:a5:33:89:69:b1:40:b8:c9:04:2f:
         84:7e:86:14:5c:60:8c:81:a8:65:9f:1b:b3:6f:6b:6a:19:ef:
         b1:df:c4:a5:ab:d2:95:2f:14:5e:cc:99:87:28:e5:0b:db:9f:
         83:5d:70:38:77:4e:3b:f7:2d:86:51:44:4b:c8:3b:5f:b5:e9:
         d0:07:e6:8b:c2:d1:c7:eb:28:6b:11:52:e6:30:90:c2:32:8b:
         3d:0a:1a:ca:d3:d2:91:10:7a:a1:ac:78:89:5d:e1:95:35:ad:
         e2:f5:ff:0e:ae:d9:42:15:b5:7f:72:95:c6:a3:0a:7e:a1:98:
         0b:d7:f1:d3:75:b0:f3:8e:81:76:4d:72:ae:91:7f:1e:76:0f:
         9f:d0:ce:9e:1c:22:cb:67:86:24:65:ca:64:4d:d4:63:dc:72:
         44:a7:56:61:c9:6a:ef:4a:dd:fe:0a:70:4f:73:0c:0e:6f:82:
         b0:33:e0:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Cq14eFu4Ty+0iFpT3YAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNGIyOGExOWRiZjUzNGFkNjFjYjA0OTk4NmU1NDI0YzMy
ODRkZTIwHhcNMjUwNDEzMDcwMTM4WhcNMjUwNDE0MDcwMTM4WjAzMTEwLwYDVQQD
EyhjOGZmNDMyZDkxNjUyYTc5MTAwYmQ3MGJjZjUzNGM0MWFiOWM2ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2fzp2Fs5hswq8vZWj8AouLXip7M
4exAcDNJdVgecbaU45ZViIMHfD3eC4qhYcqBQre63N9ItncTRrniaYs1FlTRBRi6
uMm6AGiUk+kv6pH5GFLR7C1t2VwE8Zy0F23reUEu3Ka6A2iOQr+2GPKfbAeSdAmR
YXsulx/Wk2RQg0BoO2vPzM4pOTW72mXd/eXuS/NWwG/MY3LxEWhMEm3xYDcHMgSs
pGp2q5rHzi8/rmgLO0gzHfLhiZGVwxS1pYdeS35e08DOlGRODG7na9p39XRky6CX
+qSkoJSnfz0W3rQJNFuQeuvuBz5vSEX0PMXWLzdOu4Rkr2sf/AkPBynvBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj/Qy2RZSp5EAvXC89TTEGrnG8xMB8GA1UdIwQY
MBaAFOBLKKGdv1NK1hywSZhuVCTDKE3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYt
YWNmMDQ0ODEwNjRkLzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jZGE4ZjctOGI4Ny00YzZlLWJkNTYtYWNmMDQ0ODEwNjRk
LzEvNEVzb29aMl9VMHJXSExCSm1HNVVKTU1vVGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQswhE89F
iiDgpz1j24L9j76yopuKagV8EIzi9CiYMZxe/vAhMgeFyZb6BJ+PZx++TzG4Ww/g
pTFv3oyRl+9dS+H8zZxu5u8UwGTHJDiUqKKlM4lpsUC4yQQvhH6GFFxgjIGoZZ8b
s29rahnvsd/EpavSlS8UXsyZhyjlC9ufg11wOHdOO/cthlFES8g7X7Xp0Afmi8LR
x+soaxFS5jCQwjKLPQoaytPSkRB6oax4iV3hlTWt4vX/Dq7ZQhW1f3KVxqMKfqGY
C9fx03Ww846Bdk1yrpF/HnYPn9DOnhwiy2eGJGXKZE3UY9xyRKdWYclq70rd/gpw
T3MMDm+CsDPgfg==
-----END CERTIFICATE-----