Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File:                     5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier:          wQ5qyU0uLxwxqdqo4jHq37mkc1t/lBJA+T0n6Iyu9vc=
Subject key identifier:   F7:F2:F3:2D:EC:34:53:59:C2:51:23:DF:49:75:F1:57:09:20:9F:5E
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer:       /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial:       01962F3DB9A13D8FD5E0552C81CD7C44D4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number:          1212
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: YgSeCbpLtx/e3RYjLGZYRGgWRQuN14z9NOVEyo7aYs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b9:a1:3d:8f:d5:e0:55:2c:81:cd:7c:44:d4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=f7f2f32dec345359c25123df4975f15709209f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:97:1c:4e:11:07:34:84:ff:6b:22:f8:a4:
                    24:c2:c6:3f:46:23:eb:8e:e8:a0:36:c0:7a:78:c2:
                    54:f0:e6:09:e7:a1:08:2d:d5:30:6f:e2:07:e4:e3:
                    75:db:dd:9f:35:e7:a1:d9:a9:90:81:9c:32:f7:37:
                    c2:da:8f:fb:3a:d5:2e:dc:2a:1d:99:91:12:97:40:
                    a4:a3:d8:7e:7d:36:ab:0e:5b:f4:25:26:e1:bc:30:
                    39:29:df:ca:8c:13:e6:b5:bc:cc:20:7e:d0:4e:0d:
                    d0:2e:15:2f:fd:eb:6d:73:0e:9b:26:79:45:94:75:
                    26:3d:a2:83:57:13:25:36:a3:b3:c0:1c:4b:c7:0e:
                    d7:17:d3:dc:c8:38:78:61:aa:b4:3b:ea:46:fc:2d:
                    37:34:6c:1f:f0:70:e0:2e:b9:2b:11:52:3f:51:bd:
                    86:79:db:7b:f6:b2:ce:91:5f:ed:86:4b:ed:07:9f:
                    ef:6e:20:8c:47:98:29:79:b1:80:28:f6:b0:36:38:
                    a7:25:0d:2b:fa:74:04:45:cc:d3:1e:e0:92:f9:08:
                    91:9a:8d:aa:6b:6c:11:27:f3:8b:3d:8a:67:ed:dd:
                    89:a8:d0:3c:3b:fe:ad:4c:b1:7e:6e:d6:6e:7e:79:
                    8a:9e:97:78:fb:dd:e2:8d:24:07:b1:48:3d:c3:9f:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:F3:2D:EC:34:53:59:C2:51:23:DF:49:75:F1:57:09:20:9F:5E
            X509v3 Authority Key Identifier:
                keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:1d:4a:d5:60:ff:2b:a6:0c:94:41:b7:0c:e4:fd:ff:37:
         bb:bb:dc:de:b9:05:8d:da:02:81:9c:75:8c:b7:14:0f:7e:b4:
         a3:f8:3e:3d:d5:fc:16:0d:25:cc:97:4c:84:ae:82:a3:cd:cc:
         31:a1:27:88:1b:d9:50:aa:3d:a1:75:da:f5:86:d5:ce:1b:80:
         37:2c:e5:98:26:da:13:19:cb:48:f0:03:1c:7b:23:bb:b7:a1:
         6c:d3:2e:b8:18:5c:c6:d7:58:c0:5c:65:64:d0:26:f4:a1:d9:
         4a:18:01:85:2a:4d:4c:37:0e:00:f5:d2:59:9f:0b:a5:e3:ed:
         84:5e:49:fd:71:20:54:03:65:7c:12:7a:24:6f:48:16:76:54:
         62:83:6a:97:c9:bc:8c:65:70:5e:3e:8b:b8:c6:6c:7f:28:f2:
         22:ad:b2:e5:fe:6b:a2:a1:88:a6:df:a0:9a:fc:d4:c7:5b:49:
         eb:c5:17:94:09:9b:e0:3c:41:1f:23:90:8e:f3:dd:49:ce:a0:
         be:70:d9:77:0d:32:15:7c:8a:38:7e:6b:79:73:7b:39:c5:dc:
         81:7e:27:d6:9f:34:f6:21:70:12:45:31:5b:66:5b:e4:df:26:
         a7:98:ae:d3:85:13:04:44:12:43:71:ad:4e:79:42:a0:b2:b9:
         6e:17:36:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbmhPY/V4FUsgc18RNTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWQ0NGQ4ODEyNzVmY2EyYzBiNmIzZjdlY2VlMmQyMjIx
NDZmZDIwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EyhmN2YyZjMyZGVjMzQ1MzU5YzI1MTIzZGY0OTc1ZjE1NzA5MjA5ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8CXHE4RBzSE/2si+KQkwsY/RiPr
juigNsB6eMJU8OYJ56EILdUwb+IH5ON1292fNeeh2amQgZwy9zfC2o/7OtUu3Cod
mZESl0Cko9h+fTarDlv0JSbhvDA5Kd/KjBPmtbzMIH7QTg3QLhUv/ettcw6bJnlF
lHUmPaKDVxMlNqOzwBxLxw7XF9PcyDh4Yaq0O+pG/C03NGwf8HDgLrkrEVI/Ub2G
edt79rLOkV/thkvtB5/vbiCMR5gpebGAKPawNjinJQ0r+nQERczTHuCS+QiRmo2q
a2wRJ/OLPYpn7d2JqNA8O/6tTLF+btZufnmKnpd4+93ijSQHsUg9w5+kuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfy8y3sNFNZwlEj30l18VcJIJ9eMB8GA1UdIwQY
MBaAFOSdRNiBJ1/KLAtrP37O4tIiFG/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzkt
YzMyZDEwYzdlYTFmLzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wNTBkN2YtODQ1NS00NjVmLWIyMzktYzMyZDEwYzdlYTFm
LzEvNUoxRTJJRW5YOG9zQzJzX2ZzN2kwaUlVYjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTkdStVg
/yumDJRBtwzk/f83u7vc3rkFjdoCgZx1jLcUD360o/g+PdX8Fg0lzJdMhK6Co83M
MaEniBvZUKo9oXXa9YbVzhuANyzlmCbaExnLSPADHHsju7ehbNMuuBhcxtdYwFxl
ZNAm9KHZShgBhSpNTDcOAPXSWZ8LpePthF5J/XEgVANlfBJ6JG9IFnZUYoNql8m8
jGVwXj6LuMZsfyjyIq2y5f5roqGIpt+gmvzUx1tJ68UXlAmb4DxBHyOQjvPdSc6g
vnDZdw0yFXyKOH5reXN7OcXcgX4n1p809iFwEkUxW2Zb5N8mp5iu04UTBEQSQ3Gt
TnlCoLK5bhc2hQ==
-----END CERTIFICATE-----