Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          Oy7dQhLOJ2uHkiUOTek1Puzbuh32pyTM0h6YEL0YGqk=
Subject key identifier:   2A:8B:F8:8D:AF:69:33:AA:46:BC:6F:8D:E3:C9:21:26:75:62:BD:85
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       01962F741CCD90F6D470C2A55237F3653B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          0352
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: bxohm57DeJGPsDawDjlxx8J/FWSKz+rEg3I5emoy6pA=)
                          2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1c:cd:90:f6:d4:70:c2:a5:52:37:f3:65:3b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=2a8bf88daf6933aa46bc6f8de3c921267562bd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6f:f8:25:06:49:ff:83:89:1d:d1:4a:7e:92:
                    d6:71:13:00:34:fa:06:88:d9:1a:12:1f:6c:b5:af:
                    46:bf:63:ad:4d:6b:94:4e:8b:b0:89:49:43:0f:d0:
                    ef:16:32:e8:f7:dc:32:80:e7:90:f4:28:c4:40:d6:
                    17:1a:67:68:28:91:a8:10:6d:43:e9:9c:c1:23:87:
                    20:38:28:cf:5f:ce:db:22:c8:3b:42:0f:0f:ec:a9:
                    a7:74:6d:42:c4:d1:8c:cf:bd:a9:7d:b3:93:78:73:
                    e9:d5:e6:aa:56:6c:7f:2c:56:5a:10:ea:74:fd:de:
                    6f:0e:a2:5c:a7:9b:96:eb:2a:4b:f4:e6:c4:a7:77:
                    fb:41:46:d0:bf:16:da:c4:a9:6d:dd:2c:25:a9:5a:
                    80:92:fc:fd:3c:d2:d7:17:bd:36:46:aa:3f:31:2b:
                    5a:fa:a8:3e:a3:76:7c:78:e5:1d:9b:e5:a9:c6:91:
                    dd:89:0c:4f:c9:f6:92:ce:6e:d7:0f:6c:7f:e1:a3:
                    e7:42:0f:89:9b:70:b5:37:4f:4a:93:a7:cb:ad:9c:
                    ae:88:34:22:59:97:57:b8:82:3e:de:a4:62:80:42:
                    a7:4d:a5:24:e5:d6:c8:91:f7:13:5e:99:f2:bb:fa:
                    4b:02:0a:ea:7d:2f:0f:a1:bd:a8:d4:15:76:89:31:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:F8:8D:AF:69:33:AA:46:BC:6F:8D:E3:C9:21:26:75:62:BD:85
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d1:f2:f7:1b:46:09:c1:0d:06:0f:1e:f5:61:43:99:ad:bc:
         97:86:18:32:f0:cc:33:47:fa:5d:de:a3:64:88:ad:03:17:f7:
         37:6d:14:99:72:43:5c:74:4b:08:00:49:69:c7:c0:b4:e2:01:
         a4:78:10:2d:70:a9:e1:9e:55:5f:9c:52:2a:c9:f8:68:1d:3b:
         35:7c:92:3c:80:ed:2d:04:cd:fa:96:35:a7:2b:de:f0:ab:d6:
         11:d5:43:3a:b1:59:0f:a1:be:20:1b:23:dc:d9:e9:d1:3f:f3:
         ee:de:14:22:c4:95:27:65:50:44:18:ff:8c:01:e3:a8:1d:6c:
         da:64:78:dc:9a:7d:fc:f0:43:86:33:18:33:af:8e:d0:df:0c:
         96:e5:b9:f3:55:9d:a9:03:f7:5c:3c:a7:66:0f:c6:a8:4c:c8:
         bf:23:15:9a:c0:d3:bd:dc:78:3c:7c:82:26:2c:d7:7d:29:49:
         1e:5e:0d:3d:71:2a:ea:99:59:26:f4:0a:2d:36:ca:fc:46:24:
         0d:7c:69:0b:2e:9a:14:0e:63:e7:c2:68:2f:57:31:2e:e4:27:
         c5:7a:50:67:bc:02:dd:12:fe:dd:7b:0f:6d:df:b0:d0:d7:2e:
         1d:10:a0:d9:dc:f0:39:0f:eb:c5:ea:6b:15:1c:ff:b1:31:06:
         f9:b6:b1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBzNkPbUcMKlUjfzZTt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx
YzYyNzgwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EygyYThiZjg4ZGFmNjkzM2FhNDZiYzZmOGRlM2M5MjEyNjc1NjJiZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm/4JQZJ/4OJHdFKfpLWcRMANPoG
iNkaEh9sta9Gv2OtTWuUTouwiUlDD9DvFjLo99wygOeQ9CjEQNYXGmdoKJGoEG1D
6ZzBI4cgOCjPX87bIsg7Qg8P7KmndG1CxNGMz72pfbOTeHPp1eaqVmx/LFZaEOp0
/d5vDqJcp5uW6ypL9ObEp3f7QUbQvxbaxKlt3SwlqVqAkvz9PNLXF702Rqo/MSta
+qg+o3Z8eOUdm+WpxpHdiQxPyfaSzm7XD2x/4aPnQg+Jm3C1N09Kk6fLrZyuiDQi
WZdXuII+3qRigEKnTaUk5dbIkfcTXpnyu/pLAgrqfS8Pob2o1BV2iTG1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqL+I2vaTOqRrxvjePJISZ1Yr2FMB8GA1UdIwQY
MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt
Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0
LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitHy9xtG
CcENBg8e9WFDma28l4YYMvDMM0f6Xd6jZIitAxf3N20UmXJDXHRLCABJacfAtOIB
pHgQLXCp4Z5VX5xSKsn4aB07NXySPIDtLQTN+pY1pyve8KvWEdVDOrFZD6G+IBsj
3Nnp0T/z7t4UIsSVJ2VQRBj/jAHjqB1s2mR43Jp9/PBDhjMYM6+O0N8MluW581Wd
qQP3XDynZg/GqEzIvyMVmsDTvdx4PHyCJizXfSlJHl4NPXEq6plZJvQKLTbK/EYk
DXxpCy6aFA5j58JoL1cxLuQnxXpQZ7wC3RL+3XsPbd+w0NcuHRCg2dzwOQ/rxepr
FRz/sTEG+baxMA==
-----END CERTIFICATE-----