Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
File:                     KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json)
Hash identifier:          EwMRIm2yc1MJm4dNwyWlPhMdswE6kCteh4y6wVNvByI=
Subject key identifier:   1C:58:09:DC:4E:D4:8C:7D:4A:B1:18:FB:58:BC:35:84:C1:04:59:7D
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Certificate issuer:       /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial:       01962F071169856912D8442CA90B3DD0A8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
Manifest number:          0AE9
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=)
                          2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: AkcV4dVgovVbwTzD8COqNnfOm3frZ1EWfQVOOgQnacU=)
                          3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:11:69:85:69:12:d8:44:2c:a9:0b:3d:d0:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=1c5809dc4ed48c7d4ab118fb58bc3584c104597d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:f5:13:63:db:ce:e2:2b:8b:e0:16:8f:ed:
                    17:83:a6:01:73:4f:69:f5:cf:4c:d4:fd:9d:c0:3d:
                    06:d2:24:07:10:50:81:fc:65:5d:63:14:3a:2d:5d:
                    6f:d3:9a:59:90:65:2c:dc:e5:13:86:8e:6a:97:ec:
                    ca:1e:f6:4c:df:b4:31:22:94:fb:f8:19:6e:86:a1:
                    da:84:0d:8f:19:a7:97:0d:59:9f:e0:8c:8a:c4:0a:
                    49:e1:bb:60:04:3f:82:39:20:ee:de:78:cc:67:b6:
                    59:3c:e7:67:e4:33:42:dd:7c:c7:f9:25:87:a6:1f:
                    fb:a4:4e:a7:46:f1:03:55:2e:91:fe:21:44:ef:c4:
                    c3:8f:13:60:1a:01:07:b5:a4:40:94:a5:b1:74:01:
                    25:dc:06:ac:7d:17:14:bd:80:cc:e4:b3:a7:9f:6e:
                    61:0d:61:f6:7b:75:61:d0:ac:d6:70:db:60:79:e4:
                    ca:65:98:ca:ce:f5:22:27:eb:be:2d:81:d3:94:90:
                    e1:03:07:d1:16:8d:26:59:bb:e2:be:f2:e7:7b:6a:
                    1f:ef:a8:dc:27:36:60:8f:ee:c1:f6:ff:24:c0:c2:
                    8c:c7:47:12:b4:0f:02:b6:e5:90:cb:e5:40:4e:82:
                    c1:98:dd:e0:ad:00:74:d9:fb:a4:f5:e1:53:e6:13:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:09:DC:4E:D4:8C:7D:4A:B1:18:FB:58:BC:35:84:C1:04:59:7D
            X509v3 Authority Key Identifier:
                keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:5c:93:8f:7a:cc:7c:97:ce:72:1f:e4:e7:e3:32:7a:56:
         e3:3c:bb:fa:f8:51:82:c2:5c:c1:64:9c:de:7f:98:0d:7f:53:
         7a:94:a5:ae:a4:28:27:34:8a:30:58:1c:dc:bf:04:df:a3:f0:
         53:b0:ae:55:b1:5d:6c:13:9f:b2:c6:53:94:54:f9:fc:ca:95:
         28:27:3a:18:1b:d1:f5:50:78:4f:d9:a1:78:71:58:46:bb:8e:
         5e:d2:fc:87:6f:94:69:7c:23:da:08:38:63:89:4b:9e:be:06:
         c8:f2:92:79:0b:b6:2e:2b:49:7a:aa:d0:c8:5e:ea:2e:d0:3d:
         da:0f:c1:ca:d9:66:81:d0:ed:3f:87:14:21:9b:9a:74:1e:82:
         60:6f:d8:e1:d3:13:c0:ac:42:63:ed:b3:d6:a9:b0:65:0b:ae:
         80:ca:ce:5b:35:1a:37:04:6f:8f:2c:f2:9b:02:46:14:a1:04:
         ac:e8:f5:66:16:33:9d:75:4b:1f:14:5d:14:de:4a:1d:5c:e8:
         10:48:a9:45:22:0d:42:a8:45:85:e3:fc:76:94:7d:23:e3:dc:
         f7:d8:1d:3c:15:c9:5e:24:c9:3c:82:4c:61:17:cb:9a:c4:eb:
         04:38:26:95:4c:75:49:84:f8:58:2a:83:14:e5:11:a2:94:4b:
         84:71:9f:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxFphWkS2EQsqQs90KjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5
M2FjM2EwHhcNMjUwNDEzMTIwMTU0WhcNMjUwNDE0MTIwMTU0WjAzMTEwLwYDVQQD
EygxYzU4MDlkYzRlZDQ4YzdkNGFiMTE4ZmI1OGJjMzU4NGMxMDQ1OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOb1E2PbzuIri+AWj+0Xg6YBc09p
9c9M1P2dwD0G0iQHEFCB/GVdYxQ6LV1v05pZkGUs3OUTho5ql+zKHvZM37QxIpT7
+BluhqHahA2PGaeXDVmf4IyKxApJ4btgBD+COSDu3njMZ7ZZPOdn5DNC3XzH+SWH
ph/7pE6nRvEDVS6R/iFE78TDjxNgGgEHtaRAlKWxdAEl3AasfRcUvYDM5LOnn25h
DWH2e3Vh0KzWcNtgeeTKZZjKzvUiJ+u+LYHTlJDhAwfRFo0mWbvivvLne2of76jc
JzZgj+7B9v8kwMKMx0cStA8CtuWQy+VAToLBmN3grQB02fuk9eFT5hNzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxYCdxO1Ix9SrEY+1i8NYTBBFl9MB8GA1UdIwQY
MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt
MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4
LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7Zck496
zHyXznIf5OfjMnpW4zy7+vhRgsJcwWSc3n+YDX9TepSlrqQoJzSKMFgc3L8E36Pw
U7CuVbFdbBOfssZTlFT5/MqVKCc6GBvR9VB4T9mheHFYRruOXtL8h2+UaXwj2gg4
Y4lLnr4GyPKSeQu2LitJeqrQyF7qLtA92g/BytlmgdDtP4cUIZuadB6CYG/Y4dMT
wKxCY+2z1qmwZQuugMrOWzUaNwRvjyzymwJGFKEErOj1ZhYznXVLHxRdFN5KHVzo
EEipRSINQqhFheP8dpR9I+Pc99gdPBXJXiTJPIJMYRfLmsTrBDgmlUx1SYT4WCqD
FOURopRLhHGf2Q==
-----END CERTIFICATE-----