Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          BqvzUNGl+xae9femZR/eAZo5uNPQ6JCGbEwENznT65Q=
Subject key identifier:   D6:36:D0:53:0E:8A:2A:72:D5:CF:5D:E5:79:B4:9C:01:1C:B0:62:76
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       01962ECF64BB59D2CF0BD1B7D34C77569F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          12A7
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: SbKWgaCv73ZlsPASdiKEGg88uCTMmuRLV6bke6f6ufc=)
                          2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:bb:59:d2:cf:0b:d1:b7:d3:4c:77:56:9f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=d636d0530e8a2a72d5cf5de579b49c011cb06276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:c1:42:5f:e1:37:38:08:44:38:2a:68:8c:
                    72:6a:b5:fb:3b:a8:ec:7e:9e:fb:90:32:f0:44:08:
                    d7:32:94:20:a5:e9:0a:f9:fb:62:27:93:ca:42:d8:
                    22:92:b1:86:32:b6:98:24:78:11:1b:01:af:0e:bd:
                    78:88:ec:e0:62:6b:5d:7f:9f:7f:36:74:dc:55:89:
                    de:5d:7d:c8:aa:86:30:17:73:da:b9:b9:56:15:d1:
                    02:b8:35:d7:64:72:95:5b:fd:3e:74:37:b3:4d:31:
                    03:d6:04:33:3f:aa:a4:0e:31:c0:dd:31:a1:a1:94:
                    f0:8d:24:52:0c:28:24:4e:c7:f5:8b:84:08:05:46:
                    06:3f:8a:e6:03:7b:89:19:eb:7d:07:31:26:b7:04:
                    45:db:dd:48:05:be:f3:56:db:76:99:c2:b5:ca:8b:
                    62:73:35:e1:11:b6:0d:8c:ef:fb:9b:43:c5:8e:33:
                    67:f6:a2:17:b2:22:ef:21:49:a0:61:02:51:29:4f:
                    2c:9b:21:a3:90:45:ca:8d:e2:7a:00:cd:71:15:0e:
                    3b:53:a4:9b:2f:b3:6f:75:23:3b:8e:83:8b:50:03:
                    f3:a4:46:26:dd:30:bc:ac:6c:29:20:07:f9:d8:5b:
                    26:80:0b:57:8c:62:53:b7:23:5a:9c:d9:2e:44:2f:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:D0:53:0E:8A:2A:72:D5:CF:5D:E5:79:B4:9C:01:1C:B0:62:76
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:3d:59:a3:e7:3b:ab:7f:d6:98:4e:e8:e3:06:1f:08:58:
         18:e7:5f:72:59:41:5a:68:ad:e2:e3:60:97:34:bb:d7:83:91:
         45:44:57:39:02:75:16:d5:83:c4:5e:7b:40:ad:62:b1:da:28:
         ee:61:8f:bd:64:6f:b6:b5:9b:f3:12:aa:e0:ad:cb:0b:c4:b6:
         09:a8:36:d3:40:4f:ec:ca:10:9b:1c:c5:08:fb:34:9d:1f:e3:
         f0:38:d7:15:2f:0c:01:cf:23:63:d5:d7:bd:5f:f0:43:aa:cd:
         6d:16:26:1b:32:7c:e3:09:2c:16:a5:9e:d7:03:ff:66:33:7b:
         85:d8:94:82:f6:08:e3:a8:14:2f:09:42:32:f7:3a:68:04:79:
         9c:24:7c:08:33:85:89:2c:1f:a4:73:1f:ae:0b:a4:fd:5b:2c:
         72:dc:f0:08:a3:59:fb:0b:c0:75:d6:47:f1:3c:32:22:47:a8:
         28:e0:cc:7e:8a:59:29:03:55:74:eb:47:0f:85:bf:77:32:19:
         aa:89:1f:e3:f7:fa:d8:a2:75:aa:77:d8:4e:db:cc:b4:fb:5d:
         e8:87:a5:6a:9c:1f:ca:8c:31:11:92:57:b8:28:d2:07:77:db:
         17:81:54:49:97:80:89:24:89:01:86:39:c3:e6:1b:6b:86:80:
         20:21:be:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2S7WdLPC9G300x3Vp+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhkNjM2ZDA1MzBlOGEyYTcyZDVjZjVkZTU3OWI0OWMwMTFjYjA2Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n7BQl/hNzgIRDgqaIxyarX7O6js
fp77kDLwRAjXMpQgpekK+ftiJ5PKQtgikrGGMraYJHgRGwGvDr14iOzgYmtdf59/
NnTcVYneXX3IqoYwF3PaublWFdECuDXXZHKVW/0+dDezTTED1gQzP6qkDjHA3TGh
oZTwjSRSDCgkTsf1i4QIBUYGP4rmA3uJGet9BzEmtwRF291IBb7zVtt2mcK1yoti
czXhEbYNjO/7m0PFjjNn9qIXsiLvIUmgYQJRKU8smyGjkEXKjeJ6AM1xFQ47U6Sb
L7NvdSM7joOLUAPzpEYm3TC8rGwpIAf52FsmgAtXjGJTtyNanNkuRC9MawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY20FMOiipy1c9d5Xm0nAEcsGJ2MB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU49WaPn
O6t/1phO6OMGHwhYGOdfcllBWmit4uNglzS714ORRURXOQJ1FtWDxF57QK1isdoo
7mGPvWRvtrWb8xKq4K3LC8S2Cag200BP7MoQmxzFCPs0nR/j8DjXFS8MAc8jY9XX
vV/wQ6rNbRYmGzJ84wksFqWe1wP/ZjN7hdiUgvYI46gULwlCMvc6aAR5nCR8CDOF
iSwfpHMfrguk/VssctzwCKNZ+wvAddZH8TwyIkeoKODMfopZKQNVdOtHD4W/dzIZ
qokf4/f62KJ1qnfYTtvMtPtd6IelapwfyowxEZJXuCjSB3fbF4FUSZeAiSSJAYY5
w+Yba4aAICG+yg==
-----END CERTIFICATE-----