Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
File:                     eZSkPeadFPsUR0JOLK3lT5kiuq8.mft (raw, json)
Hash identifier:          YmwFg8GbTRhRQ9R4p7vleHVVHJEVFKS+ovTse5JHA3M=
Subject key identifier:   27:82:27:4D:D1:86:E4:06:67:E6:93:DC:49:1E:57:C1:FA:FD:FD:ED
Authority key identifier: 79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF
Certificate issuer:       /CN=7994a43de69d14fb1447424e2cade54f9922baaf
Certificate serial:       01931EF5CFC4386F01CC555AD0B6BCD93427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft
Manifest number:          0A3A
Signing time:             Tue 12 Nov 2024 06:00:46 +0000
Manifest this update:     Tue 12 Nov 2024 06:00:46 +0000
Manifest next update:     Wed 13 Nov 2024 06:00:46 +0000
Files and hashes:         1: IkqtoV6esQBAhFDU-jTUxe7ULVk.roa (hash: qwiiu8bA7LyMfzy7R3cjgDhecRSxZ/IDJMG05EHKVvk=)
                          2: eZSkPeadFPsUR0JOLK3lT5kiuq8.crl (hash: td2WVDNvGzLx7AusNL2rBHrp6VWQhv5TeUqMS1b8Oy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1e:f5:cf:c4:38:6f:01:cc:55:5a:d0:b6:bc:d9:34:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7994a43de69d14fb1447424e2cade54f9922baaf
        Validity
            Not Before: Nov 12 06:00:46 2024 GMT
            Not After : Nov 13 06:00:46 2024 GMT
        Subject: CN=2782274dd186e40667e693dc491e57c1fafdfded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:d9:44:f9:7b:27:0f:22:e0:6a:a6:ed:5d:
                    bf:dd:d7:a8:d7:3d:fe:05:63:05:ca:60:66:69:6b:
                    d6:b2:b1:34:85:cc:21:8e:2f:02:d1:1e:57:d6:91:
                    99:74:b9:2b:18:cc:c6:f8:bd:d4:1b:80:0d:2c:28:
                    88:65:43:4e:ff:d4:18:9a:bb:5b:16:c3:5c:67:d3:
                    df:f1:c3:b1:25:b4:bc:9f:8c:4d:7d:ca:88:91:4f:
                    f5:42:06:82:2e:b3:4a:6e:ff:a7:ae:26:aa:4d:4f:
                    a0:b1:2c:11:85:f1:18:16:73:09:83:40:3b:35:ab:
                    c0:0a:34:8d:73:a3:dd:c4:3b:0e:5e:1b:4b:ac:76:
                    2f:a1:49:f9:76:71:01:af:33:15:55:7d:b2:f5:52:
                    b6:ce:51:9f:9f:b0:e2:a1:a3:81:8c:38:24:38:8e:
                    6a:cf:8b:77:a0:61:f7:5e:cb:91:4c:ce:0b:70:54:
                    34:fd:4d:f8:47:16:5b:2e:21:6b:47:d6:ee:5a:6a:
                    aa:c0:ea:81:1b:4d:96:df:54:a0:88:29:cf:19:e0:
                    ae:62:31:d4:4c:6c:29:d9:58:fb:96:c6:54:e1:e2:
                    0c:b6:80:de:0b:fe:85:df:5b:15:d2:78:7b:26:95:
                    60:9e:ba:fc:98:e2:3e:ef:28:48:2d:4b:47:63:fd:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:27:4D:D1:86:E4:06:67:E6:93:DC:49:1E:57:C1:FA:FD:FD:ED
            X509v3 Authority Key Identifier:
                keyid:79:94:A4:3D:E6:9D:14:FB:14:47:42:4E:2C:AD:E5:4F:99:22:BA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZSkPeadFPsUR0JOLK3lT5kiuq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/848274-493f-484d-9c48-a8ef33ff5bb0/1/eZSkPeadFPsUR0JOLK3lT5kiuq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:67:85:f5:e8:18:06:ba:ae:5a:cb:13:a5:11:dd:c1:c5:b3:
         cf:9b:07:6b:7c:3a:ef:15:f4:79:3e:45:f5:c2:22:58:a2:48:
         f7:73:f1:8b:53:b9:0e:33:70:ef:9b:34:c3:ca:bf:9c:55:60:
         fc:c7:1c:db:ff:39:05:9b:63:38:92:31:70:71:6c:7c:f1:3c:
         ee:9c:67:f0:97:0e:12:8b:92:f4:c5:15:23:f6:94:13:e4:a2:
         ac:d7:4a:26:ea:cc:2a:50:9c:41:e0:7a:83:0a:8f:89:4e:a9:
         4d:7a:a7:b2:02:81:ed:cb:31:3e:11:e9:56:02:20:f0:3a:e6:
         e6:35:4a:2d:9c:e2:8f:ae:32:25:e4:8b:6b:fa:be:29:de:6c:
         cf:20:1c:1d:5e:29:49:2c:24:c2:e4:c8:d3:2e:6b:2f:f8:3b:
         ed:b5:35:f7:27:3f:0b:0f:8d:f6:ee:6e:20:db:99:2a:5a:f2:
         e9:a4:26:dc:65:40:32:71:c8:a3:82:4d:7a:dd:26:db:da:14:
         96:8d:2f:52:c4:fa:cb:7f:ad:ea:da:08:fd:99:72:82:6b:0a:
         31:b9:1c:55:87:5c:c0:9a:d6:9e:d9:3f:17:12:62:b3:ce:55:
         d4:87:d1:bf:87:ed:c8:4b:57:7b:c6:06:c2:b7:10:d3:b3:89:
         19:e3:c4:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMe9c/EOG8BzFVa0La82TQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTRhNDNkZTY5ZDE0ZmIxNDQ3NDI0ZTJjYWRlNTRmOTky
MmJhYWYwHhcNMjQxMTEyMDYwMDQ2WhcNMjQxMTEzMDYwMDQ2WjAzMTEwLwYDVQQD
EygyNzgyMjc0ZGQxODZlNDA2NjdlNjkzZGM0OTFlNTdjMWZhZmRmZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoHZRPl7Jw8i4Gqm7V2/3deo1z3+
BWMFymBmaWvWsrE0hcwhji8C0R5X1pGZdLkrGMzG+L3UG4ANLCiIZUNO/9QYmrtb
FsNcZ9Pf8cOxJbS8n4xNfcqIkU/1QgaCLrNKbv+nriaqTU+gsSwRhfEYFnMJg0A7
NavACjSNc6PdxDsOXhtLrHYvoUn5dnEBrzMVVX2y9VK2zlGfn7DioaOBjDgkOI5q
z4t3oGH3XsuRTM4LcFQ0/U34RxZbLiFrR9buWmqqwOqBG02W31SgiCnPGeCuYjHU
TGwp2Vj7lsZU4eIMtoDeC/6F31sV0nh7JpVgnrr8mOI+7yhILUtHY/1JcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeCJ03RhuQGZ+aT3EkeV8H6/f3tMB8GA1UdIwQY
MBaAFHmUpD3mnRT7FEdCTiyt5U+ZIrqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84NDgyNzQtNDkzZi00ODRkLTljNDgt
YThlZjMzZmY1YmIwLzEvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84NDgyNzQtNDkzZi00ODRkLTljNDgtYThlZjMzZmY1YmIw
LzEvZVpTa1BlYWRGUHNVUjBKT0xLM2xUNWtpdXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WeF9egY
BrquWssTpRHdwcWzz5sHa3w67xX0eT5F9cIiWKJI93Pxi1O5DjNw75s0w8q/nFVg
/Mcc2/85BZtjOJIxcHFsfPE87pxn8JcOEouS9MUVI/aUE+SirNdKJurMKlCcQeB6
gwqPiU6pTXqnsgKB7csxPhHpVgIg8Drm5jVKLZzij64yJeSLa/q+Kd5szyAcHV4p
SSwkwuTI0y5rL/g77bU19yc/Cw+N9u5uINuZKlry6aQm3GVAMnHIo4JNet0m29oU
lo0vUsT6y3+t6toI/ZlygmsKMbkcVYdcwJrWntk/FxJis85V1IfRv4ftyEtXe8YG
wrcQ07OJGePEew==
-----END CERTIFICATE-----