Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File:                     X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier:          /e1aP3aqdb6rBY3z48SQjQA7JElSIR8wCgFGOW8l/sU=
Subject key identifier:   DE:49:BD:E1:4C:3F:83:10:D6:D2:36:F1:E3:00:26:59:57:14:CF:B5
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer:       /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial:       01962F74297C8714BFD5CE34794AAAF260BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number:          13A3
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: k2eyba0glWp/9k3gqLdtWpv3Bi5D2QUkfKdgFPv84Gk=)
                          2: cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa (hash: 3JeVGhOmnf8UAWFgpjcbUPRndvwOtl5MmVpvoRBsyvw=)
                          3: evKhJ57xaSzVNl3Qur7cE-8m3B0.roa (hash: aCKoxKyHcj4KLd0GXx48dLEfPi6FKkTqW5i/PZZzxQY=)
                          4: g48iOiDRDJ_XgJvC4YquAwkHpcU.roa (hash: W/4pzvw1CPsXQg+e4ipuVBiSg+Ao5Jez6JAYyxmb4bg=)
                          5: qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa (hash: maKG5skNiEELx6cnhHvPmlu2+gxjGrUB3RJ4ysfb/0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:29:7c:87:14:bf:d5:ce:34:79:4a:aa:f2:60:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=de49bde14c3f8310d6d236f1e30026595714cfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:03:4f:b2:be:97:08:88:ae:aa:0f:3a:6a:
                    69:37:af:38:b1:53:ab:58:95:13:47:a0:43:a7:17:
                    fc:1b:9f:34:51:e0:26:4b:1e:b2:ee:b1:ac:51:a6:
                    d7:4a:6b:7b:7e:fd:d1:2b:2f:24:bd:bc:ac:ed:e1:
                    58:26:38:d9:01:fb:fd:a0:85:6a:64:0e:db:85:ef:
                    64:3e:dc:89:d4:68:ff:d4:1a:5e:b2:e9:8c:ba:96:
                    43:a3:76:77:19:59:5c:13:e5:83:07:9f:dc:b5:ed:
                    c4:d7:fe:34:a6:4c:d4:6d:aa:97:bc:1f:60:7d:46:
                    00:30:af:3d:68:ec:bb:b6:96:3b:27:1c:d3:9b:17:
                    8a:04:91:93:be:a5:5c:d9:2a:97:c0:35:4c:a4:d3:
                    02:b0:bb:0d:78:c0:11:2a:0d:29:4f:4c:5f:d1:cc:
                    96:f0:dd:0e:55:e5:1a:76:d8:f3:ee:cd:11:19:4f:
                    52:fc:80:2f:fb:6d:65:b0:7c:7a:9f:f1:e6:8c:a2:
                    d6:c9:6a:e1:67:c8:a9:8b:08:23:da:bd:5e:3a:54:
                    ba:1c:2d:2b:45:d0:34:29:47:9e:de:7a:b0:3b:48:
                    82:6c:54:a2:66:7a:85:d9:f7:16:f1:4b:bc:1b:3a:
                    e0:2e:05:f0:41:b6:0e:73:15:a5:ce:31:fe:ca:1e:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:BD:E1:4C:3F:83:10:D6:D2:36:F1:E3:00:26:59:57:14:CF:B5
            X509v3 Authority Key Identifier:
                keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:d7:14:90:59:5d:ec:16:98:81:e3:5a:63:5b:6b:08:02:
         7f:a0:60:a5:77:55:6e:0e:5e:2f:90:9e:ab:79:21:a4:85:15:
         58:42:0b:e9:28:85:2e:20:ec:b1:dc:af:e6:d5:3e:65:4f:69:
         64:70:ec:ef:11:f7:ed:14:65:ba:90:f9:fe:ea:3b:3f:54:5d:
         1d:1e:c7:33:7e:8c:fc:47:9f:5b:ee:a8:b9:76:e1:92:79:cb:
         60:81:ac:b6:1b:38:e1:7a:1a:4b:08:00:fc:31:74:b1:70:91:
         95:3d:35:64:78:3c:54:13:ab:21:4c:a6:26:c0:a6:20:e4:34:
         81:c0:4f:79:3f:74:31:66:e0:89:72:6a:e5:08:bb:ce:2d:41:
         5e:50:1f:e2:43:50:32:5d:6b:17:64:4f:1f:57:7b:8a:39:ca:
         2d:02:39:39:4a:59:bb:d2:b1:b5:2a:46:56:03:85:f6:5f:15:
         8d:1a:0a:5c:85:60:a0:16:ce:08:63:85:26:ff:10:8d:57:49:
         57:fb:52:d2:fa:3d:72:80:9a:e9:cf:a4:2e:98:88:72:ba:08:
         05:43:90:7e:5a:cf:d1:e0:89:e3:a5:91:6b:e8:2b:59:c4:36:
         cb:8e:36:ce:d3:db:9a:40:e7:6b:93:c5:03:07:8b:8b:6d:cb:
         de:1d:60:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCl8hxS/1c40eUqq8mC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw
YWZlYjIwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
EyhkZTQ5YmRlMTRjM2Y4MzEwZDZkMjM2ZjFlMzAwMjY1OTU3MTRjZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbYDT7K+lwiIrqoPOmppN684sVOr
WJUTR6BDpxf8G580UeAmSx6y7rGsUabXSmt7fv3RKy8kvbys7eFYJjjZAfv9oIVq
ZA7bhe9kPtyJ1Gj/1BpesumMupZDo3Z3GVlcE+WDB5/cte3E1/40pkzUbaqXvB9g
fUYAMK89aOy7tpY7JxzTmxeKBJGTvqVc2SqXwDVMpNMCsLsNeMARKg0pT0xf0cyW
8N0OVeUadtjz7s0RGU9S/IAv+21lsHx6n/HmjKLWyWrhZ8ipiwgj2r1eOlS6HC0r
RdA0KUee3nqwO0iCbFSiZnqF2fcW8Uu8GzrgLgXwQbYOcxWlzjH+yh6ULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5JveFMP4MQ1tI28eMAJllXFM+1MB8GA1UdIwQY
MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt
MWQ5ZDhkMDA0MTExLzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx
LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZrXFJBZ
XewWmIHjWmNbawgCf6BgpXdVbg5eL5Ceq3khpIUVWEIL6SiFLiDssdyv5tU+ZU9p
ZHDs7xH37RRlupD5/uo7P1RdHR7HM36M/EefW+6ouXbhknnLYIGsths44XoaSwgA
/DF0sXCRlT01ZHg8VBOrIUymJsCmIOQ0gcBPeT90MWbgiXJq5Qi7zi1BXlAf4kNQ
Ml1rF2RPH1d7ijnKLQI5OUpZu9KxtSpGVgOF9l8VjRoKXIVgoBbOCGOFJv8QjVdJ
V/tS0vo9coCa6c+kLpiIcroIBUOQflrP0eCJ46WRa+grWcQ2y442ztPbmkDna5PF
AweLi23L3h1gCg==
-----END CERTIFICATE-----