Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File:                     cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier:          5WqWpIDIHmRrNRsT29MYPYutVfLvozfYEmiUbTUTTo8=
Subject key identifier:   E5:59:D7:BA:26:92:DA:21:C0:A2:68:A1:DB:72:81:93:06:6C:7C:D8
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer:       /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial:       01962DF421FF99BB88AB803E3D51731B6E81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (hash: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=)
                          2: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
                          3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: Qp89AQ+1mnWQ4Gms0Y2sqittvnTy9Uj+b/kh374JvJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:ff:99:bb:88:ab:80:3e:3d:51:73:1b:6e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=e559d7ba2692da21c0a268a1db728193066c7cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:e2:8d:b2:2b:b7:d7:7e:16:70:38:60:4e:
                    ee:68:df:90:e5:a8:cd:8b:4a:8a:24:4a:af:9e:98:
                    87:13:89:01:ab:85:82:3e:61:9e:d8:86:ca:93:8d:
                    55:29:54:e0:51:60:a9:c4:0d:df:3d:ef:6c:ce:d6:
                    87:d1:79:08:77:4a:25:52:ef:91:7e:7a:7d:bd:4e:
                    24:8a:1f:f5:07:f2:c9:25:8f:1c:bb:63:1b:40:13:
                    ea:8e:fd:9b:42:6f:e3:63:ca:a4:84:ea:1f:64:72:
                    5d:8f:08:16:11:23:2d:6f:c5:5c:43:9b:1a:bf:94:
                    ae:59:93:fe:be:06:f6:a3:30:b4:7c:32:51:3e:8a:
                    8e:73:f8:2e:a3:91:a8:93:4c:f5:fa:5e:07:ce:85:
                    09:87:0e:7a:65:66:b0:df:dd:33:18:91:ea:ad:3f:
                    84:75:e6:c2:5d:a9:73:35:d5:aa:6b:1d:38:f2:b0:
                    4c:b3:a8:c5:c2:cc:80:6c:ea:07:ed:b2:0e:1b:d6:
                    3b:9a:cd:48:5e:13:0b:27:a3:e2:61:80:8c:91:5a:
                    5b:3a:9a:51:56:76:dd:4a:93:04:09:d8:8e:5e:09:
                    71:b2:20:d1:58:06:ce:7a:0e:3e:7f:cf:49:54:9b:
                    2c:81:7a:93:b3:4a:92:00:c4:c1:f9:48:1e:3c:b5:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:59:D7:BA:26:92:DA:21:C0:A2:68:A1:DB:72:81:93:06:6C:7C:D8
            X509v3 Authority Key Identifier:
                keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:36:92:b5:71:50:35:9a:65:4c:06:99:73:4d:da:69:19:
         2b:6b:ac:b5:11:c4:7e:d6:e0:84:28:02:5b:50:ea:05:25:18:
         3c:60:25:c2:cb:a3:b6:4c:40:69:9e:7d:fd:a8:55:33:5c:83:
         12:44:8f:11:60:10:5c:e5:b0:12:fa:58:fb:98:fb:29:28:70:
         0f:d6:5d:e4:d1:ac:09:b3:31:0d:73:cb:d1:53:42:2e:50:e6:
         df:3e:43:d1:0d:f4:32:4d:50:92:c6:8b:26:16:86:4c:61:94:
         c7:aa:76:7e:60:7d:ca:35:2d:b4:e0:b2:1b:f8:33:31:5c:5b:
         d9:1f:c6:af:cb:c8:d2:ba:39:35:b0:6d:0e:a0:9d:47:3c:db:
         62:83:cd:28:9a:f1:5e:7e:ab:fa:0f:7d:1f:fe:31:29:af:40:
         06:74:a2:09:67:39:9a:1e:bf:49:94:ee:db:14:6c:88:3d:4b:
         07:e5:5c:f3:3f:00:21:3c:52:7f:11:14:bb:d9:e3:fe:c1:0a:
         eb:8b:36:14:3c:6e:f1:1e:db:29:2e:f3:f1:c4:5f:f2:11:72:
         e3:1d:a8:e6:58:0d:eb:ec:c6:89:02:a3:3b:16:8d:e2:73:1e:
         30:f9:ff:76:0c:b7:9d:1a:61:e7:78:e1:a0:9d:68:b4:f5:e1:
         1a:04:d9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CH/mbuIq4A+PVFzG26BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjUwNDEzMDcwMTM2WhcNMjUwNDE0MDcwMTM2WjAzMTEwLwYDVQQD
EyhlNTU5ZDdiYTI2OTJkYTIxYzBhMjY4YTFkYjcyODE5MzA2NmM3Y2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i7ijbIrt9d+FnA4YE7uaN+Q5ajN
i0qKJEqvnpiHE4kBq4WCPmGe2IbKk41VKVTgUWCpxA3fPe9sztaH0XkId0olUu+R
fnp9vU4kih/1B/LJJY8cu2MbQBPqjv2bQm/jY8qkhOofZHJdjwgWESMtb8VcQ5sa
v5SuWZP+vgb2ozC0fDJRPoqOc/guo5Gok0z1+l4HzoUJhw56ZWaw390zGJHqrT+E
debCXalzNdWqax048rBMs6jFwsyAbOoH7bIOG9Y7ms1IXhMLJ6PiYYCMkVpbOppR
VnbdSpMECdiOXglxsiDRWAbOeg4+f89JVJssgXqTs0qSAMTB+UgePLU4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVZ17omktohwKJoodtygZMGbHzYMB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZw2krVx
UDWaZUwGmXNN2mkZK2ustRHEftbghCgCW1DqBSUYPGAlwsujtkxAaZ59/ahVM1yD
EkSPEWAQXOWwEvpY+5j7KShwD9Zd5NGsCbMxDXPL0VNCLlDm3z5D0Q30Mk1QksaL
JhaGTGGUx6p2fmB9yjUttOCyG/gzMVxb2R/Gr8vI0ro5NbBtDqCdRzzbYoPNKJrx
Xn6r+g99H/4xKa9ABnSiCWc5mh6/SZTu2xRsiD1LB+Vc8z8AITxSfxEUu9nj/sEK
64s2FDxu8R7bKS7z8cRf8hFy4x2o5lgN6+zGiQKjOxaN4nMeMPn/dgy3nRph53jh
oJ1otPXhGgTZCQ==
-----END CERTIFICATE-----