Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          LytjS/uDKJBWkjcDDjszX5pzKeCQbqcWb92o6EMmOpY=
Subject key identifier:   E6:2B:14:B4:78:A4:FF:9C:7B:7A:B6:81:C7:F4:49:BE:C1:DB:1D:D6
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       01962F74490AAD40CBF816CA5445CFDF4E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0D08
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: dO5ggNDkX65UvlPZOLdPikV9wfkT0mHRa56RsJ69JDo=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:0a:ad:40:cb:f8:16:ca:54:45:cf:df:4e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=e62b14b478a4ff9c7b7ab681c7f449bec1db1dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:d2:bd:1d:31:2c:3a:ae:30:d6:b8:df:21:
                    0e:7b:17:72:a4:4f:7a:3b:b8:54:78:37:fe:aa:9f:
                    a7:3b:cc:0e:c2:f0:e1:01:2e:86:99:e3:e0:01:a9:
                    3d:49:8f:51:51:35:aa:ee:5d:bf:82:a4:71:0e:4a:
                    30:df:de:54:51:c1:36:78:6d:4e:b5:e8:6f:ef:c1:
                    ad:73:a7:3d:78:1b:55:68:ef:1d:70:e0:13:d7:ea:
                    65:11:26:f9:31:e8:8a:dc:07:2e:29:4d:76:9d:eb:
                    1e:14:66:61:69:16:43:ce:3d:1e:11:2e:15:4e:ba:
                    7c:44:30:d1:00:e2:8b:cb:f6:0b:a2:fd:6c:f7:05:
                    e7:b9:98:1b:27:1b:d0:87:bc:b4:a5:97:ec:fb:e0:
                    79:f1:8b:31:8b:a6:5a:70:66:fc:29:df:75:a5:a3:
                    da:bb:a4:3f:ba:cc:44:d1:42:6f:45:69:c6:0b:b7:
                    0b:85:48:92:89:06:7d:d4:83:af:11:41:11:a7:e6:
                    8d:51:48:8e:33:9a:db:17:23:07:ac:08:19:97:d0:
                    cd:4a:46:0f:98:22:07:83:b2:db:7a:32:85:73:a6:
                    fd:a9:52:93:50:4d:fd:0e:99:c6:21:60:33:89:4c:
                    7f:c1:73:6a:59:a8:66:be:5c:25:cc:4d:03:83:26:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:14:B4:78:A4:FF:9C:7B:7A:B6:81:C7:F4:49:BE:C1:DB:1D:D6
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6c:ce:b6:10:5d:fc:22:a8:53:18:c5:f3:8a:6b:f9:7d:b8:
         47:e8:18:d1:57:86:51:5b:c0:f8:22:02:04:e0:98:e1:a3:ce:
         ea:a1:ef:fc:78:40:62:72:88:d1:0f:1d:82:6e:99:98:6f:7b:
         67:47:cc:10:54:7d:10:5d:00:19:9a:0e:ef:7b:b1:a5:0e:22:
         89:5d:77:c4:f8:94:e6:2d:33:12:79:c2:fe:b6:fa:bd:46:3a:
         f6:28:4a:b1:53:d3:ec:d1:17:8b:99:a0:65:b6:c6:1f:46:62:
         1f:5c:68:2e:7b:17:45:a4:17:0d:2f:2b:a5:f5:1a:e9:d2:48:
         b7:d9:c8:d8:f8:e4:f8:8b:0d:76:31:d4:ea:df:a3:32:b7:05:
         72:ce:56:d9:bf:c5:4a:8d:9b:1d:94:cd:af:bc:26:32:ab:70:
         cf:ee:e5:53:44:53:28:99:a0:66:8c:e0:4e:5e:2d:ec:5f:27:
         2e:34:21:a5:27:9a:d1:1c:40:7a:45:2a:73:8f:ed:8e:d9:82:
         98:44:ad:23:b4:9f:e2:f2:55:d2:83:45:ba:30:82:18:56:8d:
         04:1a:4c:c5:0c:2c:47:20:ec:71:9c:31:72:d3:d9:74:1f:51:
         c4:b1:59:04:52:97:47:7e:45:b9:b2:cb:e8:3b:8e:82:88:2f:
         1f:eb:ff:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdEkKrUDL+BbKVEXP305rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjUwNDEzMTQwMTEyWhcNMjUwNDE0MTQwMTEyWjAzMTEwLwYDVQQD
EyhlNjJiMTRiNDc4YTRmZjljN2I3YWI2ODFjN2Y0NDliZWMxZGIxZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/3SvR0xLDquMNa43yEOexdypE96
O7hUeDf+qp+nO8wOwvDhAS6GmePgAak9SY9RUTWq7l2/gqRxDkow395UUcE2eG1O
tehv78Gtc6c9eBtVaO8dcOAT1+plESb5MeiK3AcuKU12neseFGZhaRZDzj0eES4V
Trp8RDDRAOKLy/YLov1s9wXnuZgbJxvQh7y0pZfs++B58Ysxi6ZacGb8Kd91paPa
u6Q/usxE0UJvRWnGC7cLhUiSiQZ91IOvEUERp+aNUUiOM5rbFyMHrAgZl9DNSkYP
mCIHg7LbejKFc6b9qVKTUE39DpnGIWAziUx/wXNqWahmvlwlzE0Dgya3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYrFLR4pP+ce3q2gcf0Sb7B2x3WMB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWzOthBd
/CKoUxjF84pr+X24R+gY0VeGUVvA+CICBOCY4aPO6qHv/HhAYnKI0Q8dgm6ZmG97
Z0fMEFR9EF0AGZoO73uxpQ4iiV13xPiU5i0zEnnC/rb6vUY69ihKsVPT7NEXi5mg
ZbbGH0ZiH1xoLnsXRaQXDS8rpfUa6dJIt9nI2Pjk+IsNdjHU6t+jMrcFcs5W2b/F
So2bHZTNr7wmMqtwz+7lU0RTKJmgZozgTl4t7F8nLjQhpSea0RxAekUqc4/tjtmC
mEStI7Sf4vJV0oNFujCCGFaNBBpMxQwsRyDscZwxctPZdB9RxLFZBFKXR35FubLL
6DuOgogvH+v/lA==
-----END CERTIFICATE-----