Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File:                     v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier:          Vugx7Jaewl9N7X9nZ4VM5vSHf9XbTzdOMcNzNuoXrqg=
Subject key identifier:   8A:C9:F5:AF:A6:03:07:82:50:2C:53:72:5D:3A:F2:BE:53:20:B8:54
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer:       /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial:       01962DF3DA0DE8B4EA557E805D7D9DF241B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=)
                          2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: cMh0JpNR8RrTEc+m+5l3NQTNcPye7zlDqSk8O6AubkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:0d:e8:b4:ea:55:7e:80:5d:7d:9d:f2:41:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=8ac9f5afa6030782502c53725d3af2be5320b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:8a:75:54:b6:1b:bc:12:2b:f7:ea:82:26:
                    db:50:9d:fc:ba:64:5b:1a:ae:29:ab:d5:37:23:fe:
                    8b:17:b4:40:7f:c0:b4:11:24:b7:1e:dd:4b:ab:be:
                    d6:77:02:bd:21:83:38:d7:0b:e2:df:00:af:61:ac:
                    e0:a1:0a:55:11:30:b4:65:83:3d:ec:cd:74:f3:ba:
                    aa:ed:29:43:68:a5:08:b4:fa:be:ab:b4:9d:ea:79:
                    b3:a6:86:32:a7:78:9e:0f:ce:05:9d:cb:9c:c0:1a:
                    01:04:ee:58:f4:d3:92:17:0f:2e:7e:1a:03:36:74:
                    8e:18:f4:de:ae:91:b3:15:79:eb:c5:8b:71:34:1c:
                    67:e6:a4:f7:59:32:d3:97:a7:bd:4e:fc:8c:1c:cd:
                    9c:58:48:ba:95:34:fe:56:50:f5:ff:0b:e1:ef:68:
                    ef:81:52:57:58:06:da:af:9a:70:48:96:47:fa:1a:
                    18:84:4e:87:b3:ea:3b:6f:d7:bb:bf:31:5a:91:6f:
                    65:a3:f8:27:7c:9f:46:ff:ef:d4:2b:49:75:68:2d:
                    9e:f1:a4:85:da:4c:4d:46:f8:4b:80:27:11:19:ee:
                    47:c1:da:27:d3:6d:72:ee:d9:b9:41:82:1d:09:53:
                    52:58:66:2c:2e:d2:f4:d9:12:93:c1:36:4f:ad:76:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C9:F5:AF:A6:03:07:82:50:2C:53:72:5D:3A:F2:BE:53:20:B8:54
            X509v3 Authority Key Identifier:
                keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:79:90:2b:35:dc:84:ad:b2:38:d3:25:61:45:b2:5c:ed:d8:
         b1:a8:e3:74:b6:70:4b:1d:ed:08:99:14:04:78:dc:ee:8f:1b:
         da:06:08:38:b5:11:10:50:7c:31:88:f7:38:9f:6b:c6:d9:a1:
         db:35:3b:bd:38:f3:8f:67:b9:d7:13:8a:87:f9:12:ad:e2:ae:
         02:d9:9e:f1:95:bc:96:ad:19:f5:24:3a:6f:cf:50:01:cc:af:
         32:65:c3:84:86:49:75:5d:33:c2:76:76:64:5d:13:13:0b:4b:
         8d:1c:21:18:52:5d:b8:0c:dc:b9:49:44:eb:e5:b5:0f:d0:78:
         de:58:b5:9f:7b:8c:53:a5:cf:28:b8:06:3a:5a:13:bb:9f:15:
         99:ff:8c:5c:86:f1:73:b8:ba:e4:23:d6:df:c9:d6:f5:51:c4:
         70:5b:19:d9:ab:47:8e:88:c9:88:41:36:77:9c:3b:13:d6:b1:
         12:98:9c:d0:82:9a:20:f1:80:2d:3c:48:47:51:58:95:39:01:
         67:58:e3:6d:32:fe:3f:7e:07:03:82:2a:39:3b:78:eb:e5:16:
         a4:99:3e:52:2c:ff:e1:57:94:ff:96:e0:34:ec:01:06:b3:57:
         c2:49:ab:1b:3a:a3:1a:1d:75:30:d7:aa:49:de:a0:ef:8e:67:
         6b:86:85:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89oN6LTqVX6AXX2d8kG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWViZmU0NThjODk5MDcwMGYwNGMwMWIxMTMyZTNhMzc2
MjNkZTUwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
Eyg4YWM5ZjVhZmE2MDMwNzgyNTAyYzUzNzI1ZDNhZjJiZTUzMjBiODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYCKdVS2G7wSK/fqgibbUJ38umRb
Gq4pq9U3I/6LF7RAf8C0ESS3Ht1Lq77WdwK9IYM41wvi3wCvYazgoQpVETC0ZYM9
7M1087qq7SlDaKUItPq+q7Sd6nmzpoYyp3ieD84FncucwBoBBO5Y9NOSFw8ufhoD
NnSOGPTerpGzFXnrxYtxNBxn5qT3WTLTl6e9TvyMHM2cWEi6lTT+VlD1/wvh72jv
gVJXWAbar5pwSJZH+hoYhE6Hs+o7b9e7vzFakW9lo/gnfJ9G/+/UK0l1aC2e8aSF
2kxNRvhLgCcRGe5Hwdon021y7tm5QYIdCVNSWGYsLtL02RKTwTZPrXbt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrJ9a+mAweCUCxTcl068r5TILhUMB8GA1UdIwQY
MBaAFL9ev+RYyJkHAPBMAbETLjo3Yj3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgt
MDU4Mzk0MWVlYTcxLzEvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80MDQwZWUtMDdiZC00M2M0LTg1MDgtMDU4Mzk0MWVlYTcx
LzEvdjE2XzVGakltUWNBOEV3QnNSTXVPamRpUGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHmQKzXc
hK2yONMlYUWyXO3YsajjdLZwSx3tCJkUBHjc7o8b2gYIOLUREFB8MYj3OJ9rxtmh
2zU7vTjzj2e51xOKh/kSreKuAtme8ZW8lq0Z9SQ6b89QAcyvMmXDhIZJdV0zwnZ2
ZF0TEwtLjRwhGFJduAzcuUlE6+W1D9B43li1n3uMU6XPKLgGOloTu58Vmf+MXIbx
c7i65CPW38nW9VHEcFsZ2atHjojJiEE2d5w7E9axEpic0IKaIPGALTxIR1FYlTkB
Z1jjbTL+P34HA4IqOTt46+UWpJk+Uiz/4VeU/5bgNOwBBrNXwkmrGzqjGh11MNeq
Sd6g745na4aF4w==
-----END CERTIFICATE-----