Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
File:                     5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json)
Hash identifier:          IdRf32hFrkjuSvuKUGb4Z/ERg++g4msHCpCbA9u5tSs=
Subject key identifier:   56:4B:FA:5F:3F:98:7C:2C:91:55:99:37:83:20:FA:DC:EC:F3:32:D4
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       01962FABA12DEEA6CEE690AA8C491D4DBE91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: wPfVUO2K+G7zI8Z4+fcdwdDVZboj27CGNBIOy62V0vo=)
                          2: DRGCXmHHahc2iNYBzwoI15_FEec.roa (hash: FKFQXJg0xYyAguZYtHa29k1in59hdQjDmLcxvXha8NQ=)
                          3: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=)
                          4: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=)
                          5: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=)
                          6: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=)
                          7: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=)
                          8: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=)
                          9: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=)
                          10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=)
                          11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:2d:ee:a6:ce:e6:90:aa:8c:49:1d:4d:be:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=564bfa5f3f987c2c915599378320fadcecf332d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:f1:a9:4a:7e:02:76:68:39:2c:95:33:0e:
                    8c:b5:b9:73:ac:2d:5e:b2:5c:5e:4f:0f:64:76:ab:
                    7a:0c:15:e0:c5:06:a3:b3:34:6e:94:95:e1:35:c7:
                    01:52:c5:84:ac:44:50:09:54:1f:20:18:48:b6:57:
                    8a:4f:ae:8a:d0:c3:a0:33:e9:da:43:4d:88:d1:2f:
                    26:cf:5f:5d:a9:dc:6b:67:aa:ba:81:8f:7c:af:9e:
                    41:99:00:ae:8d:75:d4:28:56:c9:f7:27:69:ed:9b:
                    44:e3:22:ab:6d:74:ba:59:05:05:de:92:bd:34:5e:
                    4e:3a:ab:0f:23:74:38:4f:91:b3:3a:6a:01:a8:56:
                    bf:15:12:36:6f:9a:ee:fd:d9:b0:97:26:17:9c:90:
                    ad:ed:7d:34:a0:16:06:71:34:3c:ec:97:4c:08:eb:
                    77:cd:09:3e:3a:44:4d:9f:0a:f4:7c:7d:5f:3c:77:
                    e5:99:98:dc:39:6b:7d:62:0f:25:e2:f6:12:ea:db:
                    d3:09:3a:5c:f1:6d:64:1a:d0:bb:02:32:65:97:e2:
                    e5:a0:80:64:df:aa:d8:23:d5:31:02:cf:37:f2:81:
                    b2:86:26:d6:0f:ae:c1:3f:26:5f:ca:53:b5:18:ed:
                    d5:05:3b:4d:ce:a7:a7:60:05:12:e4:42:2a:95:6a:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4B:FA:5F:3F:98:7C:2C:91:55:99:37:83:20:FA:DC:EC:F3:32:D4
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:2a:2c:97:3d:5b:9a:77:b0:fc:0c:9b:45:f9:d4:59:c4:
         08:e8:06:42:08:fa:34:27:c9:21:32:12:74:31:ab:9f:0a:cb:
         54:cf:68:59:0f:83:a9:ed:20:9f:f8:90:e6:15:f3:74:3d:e9:
         36:0e:e7:86:f2:cb:6c:f8:a1:30:f5:a0:c4:97:65:cd:39:be:
         2b:77:7e:4d:fb:35:4e:9d:ad:31:6d:95:53:64:ce:8f:a3:40:
         94:62:47:62:44:79:7c:29:31:00:1d:c1:fd:23:57:5d:f4:f8:
         74:60:30:f3:8a:ae:f5:9b:81:11:70:e6:2a:a9:df:9c:b9:35:
         12:27:3e:f8:49:5e:d3:77:07:a6:88:96:8a:d8:7c:de:d7:bb:
         89:97:27:15:a2:21:9f:19:61:f0:1d:55:58:62:5a:ea:75:d5:
         08:68:13:47:0d:00:49:f8:09:f6:b6:86:26:30:93:b3:98:71:
         2a:ed:f3:b6:ec:0e:1b:09:99:89:c1:1b:c2:d9:e4:50:47:33:
         eb:c9:37:61:b1:0a:f0:b5:5d:60:a1:0f:05:71:04:95:4a:40:
         6a:34:65:ce:1a:80:0a:cf:bb:79:57:8c:b1:47:e0:17:3e:4d:
         49:17:75:fa:7c:e9:49:2f:08:82:ca:51:a2:ae:ad:c5:48:ab:
         fc:1b:12:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6Et7qbO5pCqjEkdTb6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjUwNDEzMTUwMTM5WhcNMjUwNDE0MTUwMTM5WjAzMTEwLwYDVQQD
Eyg1NjRiZmE1ZjNmOTg3YzJjOTE1NTk5Mzc4MzIwZmFkY2VjZjMzMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3vxqUp+AnZoOSyVMw6MtblzrC1e
slxeTw9kdqt6DBXgxQajszRulJXhNccBUsWErERQCVQfIBhItleKT66K0MOgM+na
Q02I0S8mz19dqdxrZ6q6gY98r55BmQCujXXUKFbJ9ydp7ZtE4yKrbXS6WQUF3pK9
NF5OOqsPI3Q4T5GzOmoBqFa/FRI2b5ru/dmwlyYXnJCt7X00oBYGcTQ87JdMCOt3
zQk+OkRNnwr0fH1fPHflmZjcOWt9Yg8l4vYS6tvTCTpc8W1kGtC7AjJll+LloIBk
36rYI9UxAs838oGyhibWD67BPyZfylO1GO3VBTtNzqenYAUS5EIqlWrkkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZL+l8/mHwskVWZN4Mg+tzs8zLUMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6cqLJc9
W5p3sPwMm0X51FnECOgGQgj6NCfJITISdDGrnwrLVM9oWQ+Dqe0gn/iQ5hXzdD3p
Ng7nhvLLbPihMPWgxJdlzTm+K3d+Tfs1Tp2tMW2VU2TOj6NAlGJHYkR5fCkxAB3B
/SNXXfT4dGAw84qu9ZuBEXDmKqnfnLk1Eic++Ele03cHpoiWith83te7iZcnFaIh
nxlh8B1VWGJa6nXVCGgTRw0ASfgJ9raGJjCTs5hxKu3ztuwOGwmZicEbwtnkUEcz
68k3YbEK8LVdYKEPBXEElUpAajRlzhqACs+7eVeMsUfgFz5NSRd1+nzpSS8IgspR
oq6txUir/BsSyQ==
-----END CERTIFICATE-----