Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File:                     pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier:          haPD/i3OeuF2OasfzUrBS7iVlMxgzMXIXsf3ee427Ec=
Subject key identifier:   3D:5D:3B:4B:DD:90:35:85:9E:BD:CC:33:0A:61:E5:18:51:E2:78:9F
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer:       /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial:       01962F74C35E0A486C367FB7043DD617EBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number:          0C0A
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
                          2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: +SH8S40/SsEnEs2obdhnmJWKf1XxvgrFYqcFECOMJiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c3:5e:0a:48:6c:36:7f:b7:04:3d:d6:17:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=3d5d3b4bdd9035859ebdcc330a61e51851e2789f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:a7:0b:0e:ae:1d:63:c3:b6:5b:37:36:a3:
                    e9:a9:8a:ae:0c:fe:32:2d:1d:d6:18:a6:97:5c:c6:
                    1a:5b:26:64:5e:a9:e2:10:9e:40:e8:67:fe:84:2f:
                    b3:71:8c:90:aa:b3:21:dd:30:87:94:ca:52:5c:45:
                    88:0f:21:32:7a:cf:a7:57:20:2e:00:4d:06:a6:3d:
                    19:11:21:76:89:07:ad:d8:3d:26:67:a9:0f:7a:b2:
                    57:b7:ee:d7:84:25:92:cb:2b:a0:32:75:39:fd:22:
                    41:31:68:37:f4:79:ae:3e:fd:c3:9f:41:15:e0:72:
                    9c:0d:0a:07:5b:ad:42:5f:8f:5f:7f:df:4d:f1:ef:
                    1f:03:2a:15:fc:d3:33:df:fe:ce:b1:80:4b:72:35:
                    a3:24:b7:df:82:f4:93:3a:f6:7f:6d:3d:7d:59:2f:
                    01:4f:c1:67:01:83:13:b8:80:c7:02:84:8e:d2:6f:
                    ed:12:e4:99:b1:33:25:60:8d:98:ba:8e:7a:2e:e3:
                    5e:d5:5d:c2:57:0d:a8:54:d4:ef:19:97:d9:3c:1a:
                    47:1d:c8:2f:ba:75:d8:83:bf:35:37:dd:4e:4f:48:
                    fb:e5:d7:2a:fc:cd:61:f2:aa:d5:aa:c0:67:f3:ad:
                    dd:d3:ad:5c:62:e4:b7:35:8d:3a:b8:77:96:b8:bc:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:3B:4B:DD:90:35:85:9E:BD:CC:33:0A:61:E5:18:51:E2:78:9F
            X509v3 Authority Key Identifier:
                keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:48:cb:0e:b4:b3:c8:ae:71:e9:43:a5:15:e9:c7:06:b9:6a:
         4f:77:fe:99:6c:5b:e4:d5:a4:cb:37:5c:47:28:1d:59:4f:c6:
         9d:13:43:31:66:6d:c7:03:be:a2:22:56:92:0a:02:7c:44:2a:
         57:5a:6f:d7:e8:86:8c:e2:d4:f1:91:14:ef:68:f6:05:8a:f4:
         77:e8:41:fa:b0:03:7b:b4:ca:1a:bd:f2:dc:52:58:88:d7:f6:
         8c:ac:bf:2e:0a:00:1d:f9:63:c1:f9:2d:71:63:de:b4:62:83:
         7f:13:a3:16:56:5d:0e:d5:bb:60:47:aa:a1:f3:ae:92:79:b7:
         04:a1:89:e2:a0:96:4c:bf:97:a3:38:e0:23:44:61:a4:c6:64:
         56:64:cf:01:db:db:75:7e:d0:2c:1c:32:07:a2:d1:4f:43:f0:
         3a:87:06:40:66:7a:22:16:db:91:42:62:b5:97:fb:c6:71:a5:
         93:44:28:01:bf:f2:62:a1:ba:56:0a:8c:ca:b3:3d:4c:aa:fc:
         db:39:0e:9a:20:ec:b6:48:22:a6:6e:0a:80:8e:b3:d4:b9:ef:
         67:5d:a3:97:c5:dc:5c:30:39:4f:91:75:32:20:7d:50:55:63:
         e8:e2:5e:c0:70:56:5a:8f:4b:3c:5b:93:61:17:da:30:e3:bf:
         84:44:0f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMNeCkhsNn+3BD3WF+vJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4
MjlkOGUwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
EygzZDVkM2I0YmRkOTAzNTg1OWViZGNjMzMwYTYxZTUxODUxZTI3ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg++nCw6uHWPDtls3NqPpqYquDP4y
LR3WGKaXXMYaWyZkXqniEJ5A6Gf+hC+zcYyQqrMh3TCHlMpSXEWIDyEyes+nVyAu
AE0Gpj0ZESF2iQet2D0mZ6kPerJXt+7XhCWSyyugMnU5/SJBMWg39HmuPv3Dn0EV
4HKcDQoHW61CX49ff99N8e8fAyoV/NMz3/7OsYBLcjWjJLffgvSTOvZ/bT19WS8B
T8FnAYMTuIDHAoSO0m/tEuSZsTMlYI2Yuo56LuNe1V3CVw2oVNTvGZfZPBpHHcgv
unXYg781N91OT0j75dcq/M1h8qrVqsBn863d061cYuS3NY06uHeWuLxZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1dO0vdkDWFnr3MMwph5RhR4nifMB8GA1UdIwQY
MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt
MWFiYjhlMjdiNGQxLzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx
LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkjLDrSz
yK5x6UOlFenHBrlqT3f+mWxb5NWkyzdcRygdWU/GnRNDMWZtxwO+oiJWkgoCfEQq
V1pv1+iGjOLU8ZEU72j2BYr0d+hB+rADe7TKGr3y3FJYiNf2jKy/LgoAHfljwfkt
cWPetGKDfxOjFlZdDtW7YEeqofOuknm3BKGJ4qCWTL+XozjgI0RhpMZkVmTPAdvb
dX7QLBwyB6LRT0PwOocGQGZ6IhbbkUJitZf7xnGlk0QoAb/yYqG6VgqMyrM9TKr8
2zkOmiDstkgipm4KgI6z1LnvZ12jl8XcXDA5T5F1MiB9UFVj6OJewHBWWo9LPFuT
YRfaMOO/hEQPAQ==
-----END CERTIFICATE-----