Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File:                     5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier:          PKXCBhOFgNUNryfU2K2GJPBUaqcXfNbt/dgD3JDcYuU=
Subject key identifier:   33:C7:AD:F2:8C:D0:E5:A8:2F:0A:7A:73:E9:26:7D:56:E0:2D:08:1D
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer:       /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial:       01962ECFC60C8385CC90166CA3332F6A11B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number:          0153
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: iNWLahlcbcn1kGaVyL/8NzGalnek9L+Hm8BozKqnMkw=)
                          2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
                          3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:0c:83:85:cc:90:16:6c:a3:33:2f:6a:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=33c7adf28cd0e5a82f0a7a73e9267d56e02d081d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:1c:ba:eb:69:db:d9:97:9e:d1:af:f7:71:
                    cf:32:e1:4e:d3:67:c9:fb:b4:0c:54:d5:79:a7:8c:
                    f5:a4:91:b1:8b:34:b1:06:a3:47:98:19:79:2e:82:
                    48:fa:5c:5d:c6:ed:7c:e9:12:b2:12:33:f3:98:ce:
                    e8:b3:d9:c2:8a:c5:e7:32:74:1f:4a:5d:18:59:c6:
                    56:c5:a6:b3:42:f5:85:ab:ee:16:c8:36:4a:42:21:
                    b2:fb:87:75:32:7f:14:c0:b0:84:5f:4b:9a:60:77:
                    9e:37:97:8d:62:4d:51:ec:a3:fb:9d:6c:60:14:0e:
                    85:bb:e3:33:b0:06:96:78:ce:41:d6:3e:61:0e:26:
                    d1:0b:49:10:4f:43:bf:bb:ec:c3:23:50:85:dc:eb:
                    91:65:d8:ac:ab:d1:69:27:ad:93:66:5d:d6:78:26:
                    ab:c4:37:b2:23:f4:17:24:4f:7e:87:5e:5d:79:18:
                    49:c9:b3:1f:32:25:c2:6b:31:f7:3b:dd:8c:1f:b0:
                    b2:ef:ab:cd:ce:7a:5c:5b:f1:96:5b:35:cb:b4:b2:
                    45:2a:b6:2b:9c:63:5a:00:40:f5:fe:62:39:c6:3e:
                    39:ca:f0:55:9e:93:40:65:11:40:2c:53:9d:e7:67:
                    85:81:f4:f9:3b:fc:00:65:5e:d8:2c:39:65:48:e4:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:AD:F2:8C:D0:E5:A8:2F:0A:7A:73:E9:26:7D:56:E0:2D:08:1D
            X509v3 Authority Key Identifier:
                keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:61:32:8b:1c:72:4a:32:e4:56:e6:2f:99:59:d2:c5:e8:
         27:f3:38:4c:19:32:fb:41:b8:7c:b5:85:d8:f8:c2:66:fd:8c:
         e1:41:27:0c:d8:84:f6:44:7f:c8:3e:99:7c:74:82:44:c6:44:
         ac:cf:0a:e7:4e:84:1a:d1:76:40:c0:fb:ad:9c:28:64:77:78:
         ac:4b:4d:fc:3e:b5:7b:cf:04:be:0e:d1:24:25:99:f6:03:99:
         b9:a3:22:0f:2b:29:f3:50:c2:88:3f:2b:00:60:73:48:03:3f:
         1d:d1:7d:d5:64:d5:7b:e8:61:94:46:c9:22:bf:1f:34:51:35:
         2e:2b:ee:91:c2:b0:5a:2c:df:cc:43:7b:69:54:dc:60:9b:68:
         1b:32:10:90:25:34:c1:39:49:17:66:14:f2:2d:79:1b:95:4e:
         c9:ab:d0:f9:b7:49:35:b2:fc:e7:10:c2:0f:34:4e:14:74:b8:
         6e:c7:44:c3:70:2b:9c:a9:45:7b:8d:99:73:6b:fb:d5:75:f6:
         c0:bc:bc:05:7b:ac:a8:db:e5:ad:aa:7e:8f:91:a1:5f:d0:4c:
         ab:04:de:76:df:e4:39:5f:24:07:45:0c:e1:07:05:79:48:8b:
         d2:fb:06:7a:44:9c:e4:3d:d1:8b:80:c8:74:56:a9:c9:29:4e:
         44:63:12:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8YMg4XMkBZsozMvahGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
EygzM2M3YWRmMjhjZDBlNWE4MmYwYTdhNzNlOTI2N2Q1NmUwMmQwODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj0cuutp29mXntGv93HPMuFO02fJ
+7QMVNV5p4z1pJGxizSxBqNHmBl5LoJI+lxdxu186RKyEjPzmM7os9nCisXnMnQf
Sl0YWcZWxaazQvWFq+4WyDZKQiGy+4d1Mn8UwLCEX0uaYHeeN5eNYk1R7KP7nWxg
FA6Fu+MzsAaWeM5B1j5hDibRC0kQT0O/u+zDI1CF3OuRZdisq9FpJ62TZl3WeCar
xDeyI/QXJE9+h15deRhJybMfMiXCazH3O92MH7Cy76vNznpcW/GWWzXLtLJFKrYr
nGNaAED1/mI5xj45yvBVnpNAZRFALFOd52eFgfT5O/wAZV7YLDllSOTPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPHrfKM0OWoLwp6c+kmfVbgLQgdMB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9VhMosc
ckoy5FbmL5lZ0sXoJ/M4TBky+0G4fLWF2PjCZv2M4UEnDNiE9kR/yD6ZfHSCRMZE
rM8K506EGtF2QMD7rZwoZHd4rEtN/D61e88Evg7RJCWZ9gOZuaMiDysp81DCiD8r
AGBzSAM/HdF91WTVe+hhlEbJIr8fNFE1LivukcKwWizfzEN7aVTcYJtoGzIQkCU0
wTlJF2YU8i15G5VOyavQ+bdJNbL85xDCDzROFHS4bsdEw3ArnKlFe42Zc2v71XX2
wLy8BXusqNvlrap+j5GhX9BMqwTedt/kOV8kB0UM4QcFeUiL0vsGekSc5D3Ri4DI
dFapySlORGMS5w==
-----END CERTIFICATE-----