Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
File:                     E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json)
Hash identifier:          Twc2rj8ES0wIfgPPmNuQP+h12/WgS8cPi8Dc9EZ0UT4=
Subject key identifier:   63:2D:5E:80:D4:05:76:F7:6D:B2:86:8C:58:55:6B:B3:1E:95:15:EE
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Certificate issuer:       /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial:       01962F064A64956AC33DCBCBE86C2E2379F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
Manifest number:          14BA
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: m42Qv86GSjsLBUxIJPiwHe2mssL7eEVFrJgmiJqPiRk=)
                          2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4a:64:95:6a:c3:3d:cb:cb:e8:6c:2e:23:79:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139ca3799553b9e180d334442323003513485e2d
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=632d5e80d40576f76db2868c58556bb31e9515ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:6e:8e:47:6b:2a:0b:a8:4f:39:c8:e5:17:
                    b5:90:3b:bd:fc:2f:99:29:2c:06:c5:70:20:f5:b0:
                    8a:64:fa:a7:ca:a4:17:0b:b9:b8:ef:12:cf:d9:b5:
                    8b:58:55:b7:b1:c2:3f:de:35:7f:dc:17:5b:39:67:
                    a9:cb:c1:47:57:c4:96:9e:46:76:35:e5:dd:9f:5a:
                    de:90:2c:51:54:56:30:10:9f:91:ae:0c:e6:55:7c:
                    36:e2:c2:d8:17:30:db:66:24:c2:71:37:3a:2b:e1:
                    79:af:69:98:f3:2d:f2:f5:20:c8:34:97:32:1d:1e:
                    1c:c0:5b:6f:75:34:c6:38:42:50:54:95:a1:bb:b3:
                    5b:ed:83:53:22:f9:68:de:b6:15:5b:4d:ab:3e:b6:
                    b9:95:0b:d4:49:9f:1f:d3:f5:59:10:58:08:dd:f0:
                    15:05:e7:e2:c8:38:f9:64:a1:2f:8c:fd:a7:dc:38:
                    3f:00:5e:74:2c:c6:eb:bd:a0:23:24:1d:19:6d:a1:
                    22:bd:70:c6:fd:7a:a0:88:99:6c:37:4f:59:6a:bd:
                    1b:85:4b:f5:b5:30:82:46:e3:11:8f:86:2e:c8:57:
                    ae:09:e2:84:98:1d:30:50:a0:9d:21:0e:49:5a:67:
                    ca:92:80:2b:99:2d:94:0a:17:47:9a:c6:75:ff:5c:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:5E:80:D4:05:76:F7:6D:B2:86:8C:58:55:6B:B3:1E:95:15:EE
            X509v3 Authority Key Identifier:
                keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:fc:9f:1c:a9:d8:00:e2:75:76:46:24:28:04:37:c5:72:
         20:fd:6e:aa:41:93:16:eb:87:97:5c:9a:0a:28:27:09:39:5b:
         2f:38:26:5b:a3:02:18:32:45:e7:97:d1:c8:35:14:93:48:77:
         d4:6f:7c:24:21:ce:2b:1d:b7:db:d5:47:12:92:25:43:6c:c3:
         bf:53:85:f9:21:a1:7b:22:84:12:9e:e3:d6:61:9c:9e:69:f7:
         7a:a8:b5:be:86:87:04:9a:dc:c6:b1:3d:74:1b:f7:2e:a7:ed:
         a7:69:11:b7:65:5e:81:3c:b0:1d:73:e1:f1:d0:87:ec:00:a2:
         6f:53:54:96:03:3a:fc:00:65:6e:56:21:1f:9f:06:80:4b:3f:
         f8:bd:48:ae:05:ea:a6:19:03:4a:52:e4:06:85:7b:10:49:92:
         f2:8d:c1:da:96:98:5a:1e:aa:45:f1:c8:fa:a9:57:59:4f:ef:
         89:91:44:a5:61:64:04:02:9f:28:75:5b:e3:d0:50:cb:ca:a8:
         64:2d:5c:a0:97:db:23:37:93:0f:6f:b6:d1:3d:f3:71:89:c7:
         da:6e:21:19:ba:d2:af:92:44:2a:3d:6c:d7:ef:b1:6a:cf:96:
         1c:ce:0e:9b:17:b2:d2:21:16:94:3b:83:c0:73:15:c0:b6:9e:
         7a:27:de:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBkpklWrDPcvL6GwuI3nwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOWNhMzc5OTU1M2I5ZTE4MGQzMzQ0NDIzMjMwMDM1MTM0
ODVlMmQwHhcNMjUwNDEzMTIwMTAzWhcNMjUwNDE0MTIwMTAzWjAzMTEwLwYDVQQD
Eyg2MzJkNWU4MGQ0MDU3NmY3NmRiMjg2OGM1ODU1NmJiMzFlOTUxNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWJujkdrKguoTznI5Re1kDu9/C+Z
KSwGxXAg9bCKZPqnyqQXC7m47xLP2bWLWFW3scI/3jV/3BdbOWepy8FHV8SWnkZ2
NeXdn1rekCxRVFYwEJ+RrgzmVXw24sLYFzDbZiTCcTc6K+F5r2mY8y3y9SDINJcy
HR4cwFtvdTTGOEJQVJWhu7Nb7YNTIvlo3rYVW02rPra5lQvUSZ8f0/VZEFgI3fAV
BefiyDj5ZKEvjP2n3Dg/AF50LMbrvaAjJB0ZbaEivXDG/XqgiJlsN09Zar0bhUv1
tTCCRuMRj4YuyFeuCeKEmB0wUKCdIQ5JWmfKkoArmS2UChdHmsZ1/1xqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMtXoDUBXb3bbKGjFhVa7MelRXuMB8GA1UdIwQY
MBaAFBOco3mVU7nhgNM0RCMjADUTSF4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEt
YTVmZTQ4NDYxNmFkLzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEtYTVmZTQ4NDYxNmFk
LzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZf8nxyp
2ADidXZGJCgEN8VyIP1uqkGTFuuHl1yaCignCTlbLzgmW6MCGDJF55fRyDUUk0h3
1G98JCHOKx2329VHEpIlQ2zDv1OF+SGheyKEEp7j1mGcnmn3eqi1voaHBJrcxrE9
dBv3Lqftp2kRt2VegTywHXPh8dCH7ACib1NUlgM6/ABlblYhH58GgEs/+L1IrgXq
phkDSlLkBoV7EEmS8o3B2paYWh6qRfHI+qlXWU/viZFEpWFkBAKfKHVb49BQy8qo
ZC1coJfbIzeTD2+20T3zcYnH2m4hGbrSr5JEKj1s1++xas+WHM4Omxey0iEWlDuD
wHMVwLaeeifeZA==
-----END CERTIFICATE-----