Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
File:                     t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft (raw, json)
Hash identifier:          YFOFQ49us9CUYwuCTu6fPA5KsYpvEUIKzez21pFZJqI=
Subject key identifier:   34:12:2E:73:8D:6D:11:95:C4:76:7A:CC:EC:1D:47:40:F5:C3:92:23
Authority key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48
Certificate issuer:       /CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
Certificate serial:       01962E61FF908AAA2096E55B2D6ACAA39647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft
Manifest number:          05FC
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: NPzS7dKaq70IcGX_A1Qcj_ZLSso.roa (hash: NKVUhSy28Mx3aJChPzTkXureREnDmeAOH1iQ7b+r7LU=)
                          2: t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl (hash: Fxxhgrgcz22wDYU1+ooW4Qp08hW7AYmtgqxh2L1NnKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:90:8a:aa:20:96:e5:5b:2d:6a:ca:a3:96:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=34122e738d6d1195c4767accec1d4740f5c39223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:a9:3c:d2:d1:07:eb:9e:70:99:08:d5:da:
                    7a:c4:e3:3d:88:63:e3:27:8b:d2:c8:14:86:3f:5c:
                    1e:3f:31:3b:63:cf:c7:00:36:86:d6:32:08:90:a0:
                    1e:c5:a5:ae:68:f1:89:6e:93:00:00:82:c9:90:5b:
                    f1:71:ec:de:8f:6f:19:2b:2d:ed:2b:99:5d:29:2b:
                    f4:30:41:a7:7b:71:3b:23:f7:27:89:94:35:2b:4f:
                    58:bd:75:6b:63:84:9b:ee:6b:d6:30:7e:51:be:49:
                    f9:9a:71:ae:fc:22:94:bd:e4:bb:97:10:1f:78:eb:
                    97:c9:ba:d0:8e:fb:d0:c4:9d:9d:89:42:51:79:7b:
                    03:0f:52:de:73:ee:f0:e5:92:08:8a:7c:35:36:c6:
                    a0:63:ed:4f:a7:2a:64:e3:eb:64:dd:e5:84:5b:79:
                    ab:4a:31:d3:cb:3a:dd:23:f2:a2:a5:98:8b:c8:2a:
                    5b:dc:49:e6:0e:3f:f7:25:88:88:aa:4e:79:17:02:
                    7a:02:ff:57:84:91:5d:6f:f0:4b:62:13:a8:13:57:
                    2c:bf:ae:cf:a2:a2:ad:6f:f7:6c:54:86:13:f4:80:
                    d3:9e:e5:15:12:00:79:19:d9:e4:90:19:e0:0a:e1:
                    25:2d:fd:a5:3a:d1:59:e3:78:ae:29:8c:55:b0:6e:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:2E:73:8D:6D:11:95:C4:76:7A:CC:EC:1D:47:40:F5:C3:92:23
            X509v3 Authority Key Identifier:
                keyid:B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:50:d3:c8:b9:3e:fb:d9:67:ca:41:30:44:4a:93:88:cb:39:
         8a:e3:97:94:a2:77:d8:0d:77:d9:99:52:5d:2f:7f:5d:26:5f:
         fd:7c:36:a0:99:c7:9d:fe:dc:9e:00:9d:55:11:e6:2d:70:b8:
         9d:59:60:56:5b:06:a9:a9:04:81:f9:b4:fe:41:0a:58:01:d1:
         93:f1:01:ac:c2:d3:d6:af:51:33:15:89:01:44:b7:50:f2:01:
         d6:1c:03:3c:77:38:dc:88:91:8a:a2:bc:69:5a:fe:33:f8:36:
         43:c0:e4:a9:78:6d:e6:81:1f:9c:ad:26:59:b6:1e:a4:95:eb:
         ac:53:ec:0c:5b:c0:31:c8:60:83:ce:8e:06:ca:89:ac:51:61:
         2a:48:90:70:82:27:ae:95:1b:5e:19:d1:a6:42:81:0c:24:a8:
         35:dc:a9:46:23:df:b7:6e:bb:7d:1a:5d:b1:55:e3:ce:5b:bb:
         9c:f4:ad:fc:12:47:35:89:14:f0:5f:40:95:47:71:f5:25:1a:
         ff:7d:ad:00:bc:d5:e3:a4:ff:1f:14:58:f4:df:5c:83:11:ec:
         78:d4:9d:57:a8:e7:7a:72:34:2b:c8:5d:9b:e4:3b:c9:51:7a:
         1e:c0:ab:51:30:c6:81:67:dd:65:e6:21:84:81:1e:e6:1c:10:
         d7:31:b9:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYf+QiqogluVbLWrKo5ZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWMyZGUzZWIzMDkxODBmNGY1YTVhZjJkNTZmZTQyNTg3
ODQ2NDgwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
EygzNDEyMmU3MzhkNmQxMTk1YzQ3NjdhY2NlYzFkNDc0MGY1YzM5MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfGpPNLRB+uecJkI1dp6xOM9iGPj
J4vSyBSGP1wePzE7Y8/HADaG1jIIkKAexaWuaPGJbpMAAILJkFvxcezej28ZKy3t
K5ldKSv0MEGne3E7I/cniZQ1K09YvXVrY4Sb7mvWMH5Rvkn5mnGu/CKUveS7lxAf
eOuXybrQjvvQxJ2diUJReXsDD1Lec+7w5ZIIinw1NsagY+1Ppypk4+tk3eWEW3mr
SjHTyzrdI/KipZiLyCpb3EnmDj/3JYiIqk55FwJ6Av9XhJFdb/BLYhOoE1csv67P
oqKtb/dsVIYT9IDTnuUVEgB5GdnkkBngCuElLf2lOtFZ43iuKYxVsG56XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQSLnONbRGVxHZ6zOwdR0D1w5IjMB8GA1UdIwQY
MBaAFLecLePrMJGA9PWlry1W/kJYeEZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt
MGJiNmE4M2Y5ZjQwLzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw
LzEvdDV3dDQtc3drWUQwOWFXdkxWYi1RbGg0UmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFDTyLk+
+9lnykEwREqTiMs5iuOXlKJ32A132ZlSXS9/XSZf/Xw2oJnHnf7cngCdVRHmLXC4
nVlgVlsGqakEgfm0/kEKWAHRk/EBrMLT1q9RMxWJAUS3UPIB1hwDPHc43IiRiqK8
aVr+M/g2Q8DkqXht5oEfnK0mWbYepJXrrFPsDFvAMchgg86OBsqJrFFhKkiQcIIn
rpUbXhnRpkKBDCSoNdypRiPft267fRpdsVXjzlu7nPSt/BJHNYkU8F9AlUdx9SUa
/32tALzV46T/HxRY9N9cgxHseNSdV6jnenI0K8hdm+Q7yVF6HsCrUTDGgWfdZeYh
hIEe5hwQ1zG5Kg==
-----END CERTIFICATE-----