Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File:                     5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier:          OrJZVe+0yug90Aee6q/ZZLzwj+nhtmQKjYeKt9T/X0A=
Subject key identifier:   0B:1B:33:AA:41:58:75:52:92:73:54:E3:08:FB:9C:DC:70:55:09:06
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer:       /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial:       01962E99CE3786F663A75963D8FF3CA944A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number:          34
Signing time:             Sun 13 Apr 2025 10:02:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:33 +0000
Files and hashes:         1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: z31MFEjYtEoKcSc6MEP+xgKEaJYxV7qm5r7SPBU6mYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ce:37:86:f6:63:a7:59:63:d8:ff:3c:a9:44:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
        Validity
            Not Before: Apr 13 10:02:33 2025 GMT
            Not After : Apr 14 10:02:33 2025 GMT
        Subject: CN=0b1b33aa41587552927354e308fb9cdc70550906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:b5:cd:cc:05:99:a0:1c:98:1f:06:ea:a0:
                    62:d7:df:8f:7c:f6:bd:13:a4:9f:2b:0d:98:f8:e0:
                    cf:93:90:78:0a:80:87:c2:46:4f:d8:1c:ca:22:65:
                    19:9b:10:fb:b8:cd:96:83:a6:77:50:50:ba:54:3c:
                    13:a0:ca:a3:5f:81:7b:f5:63:a7:1b:86:99:94:3b:
                    70:a3:7b:17:c8:ee:54:e9:68:7e:28:ce:6a:3f:5d:
                    ca:92:72:03:d2:25:7d:4b:ed:45:da:96:be:3a:23:
                    b3:de:82:b4:6b:4a:0b:04:5a:c1:68:0c:ca:1e:dd:
                    24:f9:dd:68:c0:2b:26:38:a0:58:0e:31:98:52:b3:
                    39:53:c3:88:be:7a:52:e4:49:4a:b2:59:a1:b2:c0:
                    b4:ba:c7:e6:44:4c:13:de:c4:64:d7:fb:1d:27:8d:
                    e4:bb:3c:ba:a9:f7:43:7a:79:c6:64:cf:47:38:75:
                    61:9d:64:12:6e:cb:d3:42:ae:9d:da:ac:41:14:bf:
                    56:b8:5c:e2:c6:33:ee:09:9b:ce:fe:42:49:e3:1a:
                    f8:1d:ba:f6:70:d8:f1:d5:5b:80:56:71:e8:77:08:
                    22:50:c4:23:2d:ad:a9:24:10:a8:f6:63:4e:46:39:
                    61:56:c8:0d:1b:9e:34:0c:22:de:70:13:37:1e:ef:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:33:AA:41:58:75:52:92:73:54:E3:08:FB:9C:DC:70:55:09:06
            X509v3 Authority Key Identifier:
                keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:e1:83:69:7d:0e:02:ef:ce:35:b0:16:f0:68:9d:00:4b:
         64:13:7f:fb:56:7f:3c:33:4c:58:c5:a9:e5:09:f4:f3:71:0e:
         c0:09:21:71:3c:9e:f6:2d:72:ea:a0:f9:50:d7:36:65:38:75:
         2a:27:74:bd:46:27:bb:54:a7:7e:e7:1e:07:d5:c4:20:f6:0c:
         14:92:22:27:5d:00:55:5e:d0:12:29:32:68:0a:d9:06:b9:f0:
         e4:be:97:bb:3d:10:cc:13:33:26:f7:67:9a:44:16:ac:c8:74:
         97:7d:1c:c6:d6:da:85:a7:d4:48:a4:7f:49:e6:57:ba:00:b5:
         dc:3b:4f:cf:cc:ad:25:e3:f8:1e:81:a5:76:7b:df:75:09:f4:
         b1:10:1f:58:28:b4:a7:bd:7d:83:0f:16:60:36:fa:c1:73:9c:
         95:78:51:70:07:41:12:3d:82:ef:59:80:7c:24:f5:60:21:3e:
         04:cd:45:91:8d:b5:13:72:e6:0a:e6:b4:23:2a:fd:32:59:1f:
         5b:03:04:1f:19:f4:8f:50:89:5c:23:c7:c4:e7:bc:ba:89:d1:
         a5:1d:6c:a0:64:a4:78:a9:4a:53:66:18:84:6f:42:c9:17:c8:
         67:88:9b:cd:97:54:39:02:61:16:bd:15:ff:22:15:af:6a:7a:
         2d:a1:a8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumc43hvZjp1lj2P88qUSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OTAxYzk2Yzc0N2U5MTYyY2FlZmU1MDE0MGFlNTMyMWIy
M2M1N2MwHhcNMjUwNDEzMTAwMjMzWhcNMjUwNDE0MTAwMjMzWjAzMTEwLwYDVQQD
EygwYjFiMzNhYTQxNTg3NTUyOTI3MzU0ZTMwOGZiOWNkYzcwNTUwOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5le1zcwFmaAcmB8G6qBi19+PfPa9
E6SfKw2Y+ODPk5B4CoCHwkZP2BzKImUZmxD7uM2Wg6Z3UFC6VDwToMqjX4F79WOn
G4aZlDtwo3sXyO5U6Wh+KM5qP13KknID0iV9S+1F2pa+OiOz3oK0a0oLBFrBaAzK
Ht0k+d1owCsmOKBYDjGYUrM5U8OIvnpS5ElKslmhssC0usfmREwT3sRk1/sdJ43k
uzy6qfdDennGZM9HOHVhnWQSbsvTQq6d2qxBFL9WuFzixjPuCZvO/kJJ4xr4Hbr2
cNjx1VuAVnHodwgiUMQjLa2pJBCo9mNORjlhVsgNG540DCLecBM3Hu/5QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsbM6pBWHVSknNU4wj7nNxwVQkGMB8GA1UdIwQY
MBaAFOWQHJbHR+kWLK7+UBQK5TIbI8V8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wNDAwNzAtNjRiMC00NmY4LWEzNjAt
MDIyMDYzMDNkNzEzLzEvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wNDAwNzAtNjRiMC00NmY4LWEzNjAtMDIyMDYzMDNkNzEz
LzEvNVpBY2xzZEg2UllzcnY1UUZBcmxNaHNqeFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsnhg2l9
DgLvzjWwFvBonQBLZBN/+1Z/PDNMWMWp5Qn083EOwAkhcTye9i1y6qD5UNc2ZTh1
Kid0vUYnu1SnfuceB9XEIPYMFJIiJ10AVV7QEikyaArZBrnw5L6Xuz0QzBMzJvdn
mkQWrMh0l30cxtbahafUSKR/SeZXugC13DtPz8ytJeP4HoGldnvfdQn0sRAfWCi0
p719gw8WYDb6wXOclXhRcAdBEj2C71mAfCT1YCE+BM1FkY21E3LmCua0Iyr9Mlkf
WwMEHxn0j1CJXCPHxOe8uonRpR1soGSkeKlKU2YYhG9CyRfIZ4ibzZdUOQJhFr0V
/yIVr2p6LaGoNg==
-----END CERTIFICATE-----