Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          VlKo1ESSQX0JVZQm7t/k9VPgJri/BmChIEY52dL/sb8=
Subject key identifier:   5E:8E:9C:98:AE:AF:DC:01:2E:1B:0D:87:DE:0C:D0:1A:76:AE:D2:DF
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       01962F3D61959A94FE435404A92A9014794B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          0BE4
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: W7y7aW7KnuAtUYMi+nqK/HTcJ1gZZcVJ0nOUxo9iKfI=)
                          2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:95:9a:94:fe:43:54:04:a9:2a:90:14:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=5e8e9c98aeafdc012e1b0d87de0cd01a76aed2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:1a:13:36:3d:62:46:e9:20:84:02:49:f0:
                    50:c5:4b:dc:d8:72:22:9d:3d:1c:fe:74:4f:0f:c3:
                    ea:ae:4b:14:f2:a0:8f:df:39:b8:73:1d:51:5a:85:
                    d5:33:23:41:75:9b:65:37:e5:fe:3a:cd:f0:e4:98:
                    61:9d:48:68:10:b9:1f:dc:2f:96:07:8b:26:88:cb:
                    79:24:1d:15:86:96:43:d9:25:ba:14:c8:77:ce:8e:
                    c3:c2:54:5f:0a:19:b7:96:ed:c5:bd:c2:ae:59:f4:
                    a5:88:ee:c7:ae:b7:d5:15:53:27:4b:4c:bb:33:ec:
                    4c:09:8b:7a:e3:86:7f:06:34:71:37:d9:28:61:db:
                    4a:c9:4b:b7:80:11:ba:87:d1:51:2d:39:d4:98:86:
                    cd:ad:b3:25:4f:a6:59:e4:dd:34:63:18:7a:05:76:
                    b9:cf:b4:d6:db:23:03:56:b3:d3:bd:8f:a8:01:09:
                    61:e2:a6:3c:4b:d5:85:0d:84:2c:26:d8:e8:77:25:
                    fe:6d:1b:bd:b8:02:51:b9:59:18:d5:93:e3:f4:0d:
                    0e:d4:9a:1d:8b:66:12:e4:31:f8:b8:1a:70:a0:85:
                    6f:1d:b9:02:2d:75:c2:fa:84:83:d1:c8:f0:72:ed:
                    30:87:8c:56:3b:e6:63:54:63:41:86:ad:69:75:03:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8E:9C:98:AE:AF:DC:01:2E:1B:0D:87:DE:0C:D0:1A:76:AE:D2:DF
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:37:86:dd:d9:98:3c:8a:b1:84:8c:16:be:b2:24:cd:be:
         83:8c:76:33:18:2a:dc:43:79:d0:44:35:f4:92:22:cd:88:9d:
         1d:92:a3:60:68:e8:26:7e:5f:cc:97:1c:c6:68:76:37:b9:1e:
         de:ca:eb:10:92:39:36:21:b9:8b:fe:f6:c0:04:75:e5:f4:75:
         68:29:7f:b0:50:5c:e6:36:11:2c:44:01:bf:19:7c:51:36:12:
         dd:0a:a0:ed:05:67:20:83:9a:fd:47:ba:69:2e:07:88:7b:c6:
         b4:9b:4e:51:aa:22:fe:a7:3c:96:f6:2a:13:7a:d8:e4:7f:a3:
         d2:27:32:68:3e:ab:91:44:08:c2:9e:05:48:01:71:75:5b:17:
         2d:57:e1:b6:0b:0b:c8:e1:6a:0f:e9:33:c9:1f:6f:b5:38:db:
         3c:ed:57:22:d5:7b:e5:f1:2c:48:af:87:f6:98:e2:52:48:17:
         ec:f0:fe:ee:ff:cf:32:f8:73:bd:77:91:b0:6f:66:34:be:af:
         2c:73:ff:03:05:d7:0f:11:af:9a:ec:d2:3f:ee:c7:26:8f:3b:
         e1:07:6e:3e:1a:5c:11:50:f0:a2:1a:64:ee:03:b5:fc:5b:08:
         98:ad:f2:2d:7b:8b:be:c5:c9:71:50:58:c6:92:52:47:97:a8:
         6e:3c:a8:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWGVmpT+Q1QEqSqQFHlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg1ZThlOWM5OGFlYWZkYzAxMmUxYjBkODdkZTBjZDAxYTc2YWVkMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjwaEzY9YkbpIIQCSfBQxUvc2HIi
nT0c/nRPD8PqrksU8qCP3zm4cx1RWoXVMyNBdZtlN+X+Os3w5JhhnUhoELkf3C+W
B4smiMt5JB0VhpZD2SW6FMh3zo7DwlRfChm3lu3FvcKuWfSliO7HrrfVFVMnS0y7
M+xMCYt644Z/BjRxN9koYdtKyUu3gBG6h9FRLTnUmIbNrbMlT6ZZ5N00Yxh6BXa5
z7TW2yMDVrPTvY+oAQlh4qY8S9WFDYQsJtjodyX+bRu9uAJRuVkY1ZPj9A0O1Jod
i2YS5DH4uBpwoIVvHbkCLXXC+oSD0cjwcu0wh4xWO+ZjVGNBhq1pdQNzYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6OnJiur9wBLhsNh94M0Bp2rtLfMB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH83ht3Z
mDyKsYSMFr6yJM2+g4x2Mxgq3EN50EQ19JIizYidHZKjYGjoJn5fzJccxmh2N7ke
3srrEJI5NiG5i/72wAR15fR1aCl/sFBc5jYRLEQBvxl8UTYS3Qqg7QVnIIOa/Ue6
aS4HiHvGtJtOUaoi/qc8lvYqE3rY5H+j0icyaD6rkUQIwp4FSAFxdVsXLVfhtgsL
yOFqD+kzyR9vtTjbPO1XItV75fEsSK+H9pjiUkgX7PD+7v/PMvhzvXeRsG9mNL6v
LHP/AwXXDxGvmuzSP+7HJo874QduPhpcEVDwohpk7gO1/FsImK3yLXuLvsXJcVBY
xpJSR5eobjyoBA==
-----END CERTIFICATE-----