Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
File:                     V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json)
Hash identifier:          YacO6K1QhASicxkjpQ6w5wbBTHxMXEVYuHgwq2eIAfg=
Subject key identifier:   7C:C4:AB:C8:28:29:1B:D9:68:33:AF:33:C5:72:30:F5:20:E1:E5:EA
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       01962ECF65BC7A13EA134688B36FBA6ECFC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
Manifest number:          014D
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: sUCo5be6Wzt3NpWOPM0OXxdGlcMoNiQi4ndNudjRbII=)
                          2: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (hash: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:65:bc:7a:13:ea:13:46:88:b3:6f:ba:6e:cf:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=7cc4abc828291bd96833af33c57230f520e1e5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:5e:0e:26:7f:30:b5:11:e2:36:f8:bb:87:
                    5b:7e:60:ac:5c:b7:32:a6:3e:ff:1b:18:25:24:99:
                    d6:ad:12:2a:4f:48:81:50:76:bf:2c:25:58:bc:73:
                    31:e6:b6:90:2e:e6:24:fb:00:1a:79:18:c2:99:a9:
                    19:9d:69:7e:fa:62:28:4c:0b:9c:3c:61:f6:62:d4:
                    06:3e:94:55:7c:99:d1:19:3d:8a:82:12:c2:73:46:
                    ad:0c:1d:f7:b2:ba:90:ce:65:9b:61:a3:a3:fe:c7:
                    1a:dd:97:76:19:d8:e7:aa:f7:a7:01:5b:98:bc:09:
                    c9:41:e3:56:4f:b0:d1:42:5a:c4:a6:c1:1a:09:72:
                    13:1c:a2:c9:73:e9:16:e7:db:01:1c:61:d7:4a:6e:
                    95:d3:1a:a1:3a:17:c1:65:d8:46:3c:3f:aa:63:b9:
                    d1:ce:5d:6d:cb:8e:bd:07:fa:24:a3:77:59:31:8d:
                    2b:17:3e:1a:67:de:64:12:6d:6e:dd:a0:4b:c2:b0:
                    a4:82:06:54:3b:6d:a8:2d:ac:4b:70:4f:35:a7:e0:
                    bf:e3:04:cc:55:4c:25:5f:c1:fa:88:22:11:92:e3:
                    40:62:d1:4e:92:34:03:dc:59:87:9a:6f:38:aa:3e:
                    b0:48:fb:39:2c:2f:49:06:77:83:96:f0:db:7f:81:
                    2b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C4:AB:C8:28:29:1B:D9:68:33:AF:33:C5:72:30:F5:20:E1:E5:EA
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:05:8d:67:ac:9f:d8:8e:02:8c:07:c0:94:6b:6a:42:af:
         5f:a4:e4:7f:cb:31:ac:67:81:9c:13:d0:b7:d0:71:6f:4a:42:
         c3:be:d2:5d:4b:15:fa:8a:ed:dd:a0:02:52:44:48:ff:ff:18:
         3c:f8:42:78:99:87:14:44:b6:89:25:df:e2:d3:e6:55:8c:4a:
         76:ec:a6:83:de:ef:5f:57:c8:51:fd:1f:19:da:73:14:47:79:
         d0:08:73:a3:97:5f:3b:26:7f:07:96:b8:1f:b6:40:1f:0a:fc:
         19:c4:b7:b1:27:3f:77:29:fb:20:4e:52:f7:49:d8:d6:22:fa:
         8e:d2:41:60:a5:8b:5d:ea:e4:c9:43:4e:69:ac:b5:86:5a:92:
         ae:eb:78:65:41:f1:dd:c5:97:06:57:03:4e:ce:e4:31:aa:34:
         90:6c:d8:eb:18:19:39:23:f8:6e:39:e9:db:1e:77:dd:46:d6:
         5d:21:39:b7:0e:8e:4b:ee:52:fc:d5:d2:9a:c8:3e:b4:34:6b:
         3e:39:a0:4c:3f:99:64:57:6d:6b:00:2c:5b:23:d1:00:2b:1f:
         02:67:cb:73:e5:8b:16:f9:c4:33:c2:16:cc:fa:99:08:e0:6e:
         94:46:4e:16:8a:ab:08:50:73:20:9a:b2:31:dd:83:3e:09:8c:
         19:b8:c5:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2W8ehPqE0aIs2+6bs/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTcyY2U3ZjhjNDk0MjM1YTA4NDgyMzk2NWI5MDQ3MDRi
YzgyNDAwHhcNMjUwNDEzMTEwMTA2WhcNMjUwNDE0MTEwMTA2WjAzMTEwLwYDVQQD
Eyg3Y2M0YWJjODI4MjkxYmQ5NjgzM2FmMzNjNTcyMzBmNTIwZTFlNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnZeDiZ/MLUR4jb4u4dbfmCsXLcy
pj7/GxglJJnWrRIqT0iBUHa/LCVYvHMx5raQLuYk+wAaeRjCmakZnWl++mIoTAuc
PGH2YtQGPpRVfJnRGT2KghLCc0atDB33srqQzmWbYaOj/sca3Zd2GdjnqvenAVuY
vAnJQeNWT7DRQlrEpsEaCXITHKLJc+kW59sBHGHXSm6V0xqhOhfBZdhGPD+qY7nR
zl1ty469B/oko3dZMY0rFz4aZ95kEm1u3aBLwrCkggZUO22oLaxLcE81p+C/4wTM
VUwlX8H6iCIRkuNAYtFOkjQD3FmHmm84qj6wSPs5LC9JBneDlvDbf4ErqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzEq8goKRvZaDOvM8VyMPUg4eXqMB8GA1UdIwQY
MBaAFFfnLOf4xJQjWghII5ZbkEcEvIJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQt
MmEwZjg3NDNjMmMyLzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTJhYjEtNGI1My00OTlmLThkZGQtMmEwZjg3NDNjMmMy
LzEvVi1jczVfakVsQ05hQ0VnamxsdVFSd1M4Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmkFjWes
n9iOAowHwJRrakKvX6Tkf8sxrGeBnBPQt9Bxb0pCw77SXUsV+ort3aACUkRI//8Y
PPhCeJmHFES2iSXf4tPmVYxKduymg97vX1fIUf0fGdpzFEd50Ahzo5dfOyZ/B5a4
H7ZAHwr8GcS3sSc/dyn7IE5S90nY1iL6jtJBYKWLXerkyUNOaay1hlqSrut4ZUHx
3cWXBlcDTs7kMao0kGzY6xgZOSP4bjnp2x533UbWXSE5tw6OS+5S/NXSmsg+tDRr
PjmgTD+ZZFdtawAsWyPRACsfAmfLc+WLFvnEM8IWzPqZCOBulEZOFoqrCFBzIJqy
Md2DPgmMGbjFig==
-----END CERTIFICATE-----