Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          p+SQGjPwIG7mHaHgHdf7OL3Zxd7Iv2IDGvQDp7w7+uk=
Subject key identifier:   66:3A:E4:63:36:25:81:27:AF:26:46:E3:75:A5:47:7F:40:D0:7F:14
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       01962E2AF99AFCA3B37117093F391F3CB3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          02D2
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: 9ohw10XbyHYKJVV01SkxB6A0kNQnem7tU6K4PsL1mvQ=)
                          2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f9:9a:fc:a3:b3:71:17:09:3f:39:1f:3c:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=663ae46336258127af2646e375a5477f40d07f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:a7:04:5d:ee:50:cb:01:a1:d7:b9:a9:c6:
                    f5:17:b6:f9:1d:9c:91:ca:8c:9d:43:d4:b0:04:ce:
                    be:12:b8:43:75:e8:1f:47:f5:ab:d1:0d:f5:bb:95:
                    d1:50:07:8b:67:ff:83:88:2d:0e:b2:cd:65:54:41:
                    84:e0:f4:11:ac:de:df:88:04:4c:a9:fb:6e:61:a4:
                    bd:db:36:e2:f0:d1:63:52:88:a1:73:19:00:45:b8:
                    9f:7a:50:b7:d4:c2:8b:29:8f:42:d8:44:9b:1a:99:
                    ac:1f:f5:05:0e:28:46:0f:1d:a3:d6:7e:aa:42:e7:
                    aa:68:61:64:a0:e7:d1:da:f8:8b:0a:a6:58:aa:13:
                    9a:9c:87:d8:d8:51:87:9b:ff:10:9f:bc:7f:be:e8:
                    33:e2:18:84:6b:88:32:f3:66:0b:53:99:28:3a:01:
                    65:4d:90:ef:22:91:74:17:0f:1e:ff:3a:93:f9:e9:
                    50:93:30:aa:2c:43:d3:17:cd:8a:4d:71:ee:4f:dd:
                    68:5b:3b:13:87:6d:12:27:c1:e9:1c:15:ae:40:1f:
                    26:36:2e:c5:8c:7b:4e:d2:4d:95:1a:75:ff:2d:11:
                    0b:67:2c:52:4c:4e:ff:7b:f2:8e:81:65:00:2e:eb:
                    49:1a:47:5a:3e:06:af:79:14:56:d3:3a:d9:34:11:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:E4:63:36:25:81:27:AF:26:46:E3:75:A5:47:7F:40:D0:7F:14
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:14:d5:dd:a1:c5:87:da:9f:66:20:28:b3:9d:f3:57:78:
         50:cb:77:af:ed:ea:e0:6e:73:d4:cc:d3:91:82:39:3d:28:67:
         25:65:2a:6d:51:e2:60:04:50:fa:fa:e8:ed:92:c8:aa:6d:1f:
         42:3c:66:27:50:1e:fc:96:0a:d8:fe:7d:15:18:94:57:98:7f:
         55:f5:07:49:23:b6:1b:03:93:99:6d:04:8b:19:3b:bc:70:2b:
         c6:e7:8f:3d:41:cd:f5:75:64:44:f0:6d:0c:e3:97:4d:4c:08:
         c1:87:99:79:e6:9a:1f:e7:00:03:c9:d7:0b:78:51:7d:6d:e7:
         ec:33:41:d0:9b:65:8f:86:9c:c2:7d:d8:6f:3e:a2:c3:b5:a9:
         91:83:14:3b:97:1b:26:cd:b2:8c:f3:2a:dd:f6:cd:d4:62:4f:
         f3:07:2b:39:b4:e4:58:f7:51:ac:30:b0:48:f0:27:79:e6:df:
         e5:6a:aa:bb:68:b9:54:a8:22:58:46:36:f1:9a:05:5e:5a:04:
         c6:f5:c6:60:d5:3c:83:46:6f:e4:39:b0:2c:8d:08:e3:b5:a0:
         16:d4:20:5e:91:0a:26:8c:72:0e:92:06:1b:80:9a:25:75:f7:
         ca:c1:3f:a4:0a:d1:48:98:f7:fd:60:af:3e:d1:bb:40:d9:5e:
         f0:f3:af:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvma/KOzcRcJPzkfPLO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YWFmNzk4YTA2YzE1Nzk1YzZmZWM3MDc5ODM5OGJlYjBm
NGQ2NmUwHhcNMjUwNDEzMDgwMTMwWhcNMjUwNDE0MDgwMTMwWjAzMTEwLwYDVQQD
Eyg2NjNhZTQ2MzM2MjU4MTI3YWYyNjQ2ZTM3NWE1NDc3ZjQwZDA3ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LOnBF3uUMsBode5qcb1F7b5HZyR
yoydQ9SwBM6+ErhDdegfR/Wr0Q31u5XRUAeLZ/+DiC0Oss1lVEGE4PQRrN7fiARM
qftuYaS92zbi8NFjUoihcxkARbifelC31MKLKY9C2ESbGpmsH/UFDihGDx2j1n6q
QueqaGFkoOfR2viLCqZYqhOanIfY2FGHm/8Qn7x/vugz4hiEa4gy82YLU5koOgFl
TZDvIpF0Fw8e/zqT+elQkzCqLEPTF82KTXHuT91oWzsTh20SJ8HpHBWuQB8mNi7F
jHtO0k2VGnX/LRELZyxSTE7/e/KOgWUALutJGkdaPgaveRRW0zrZNBFuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY65GM2JYEnryZG43WlR39A0H8UMB8GA1UdIwQY
MBaAFOaq95igbBV5XG/scHmDmL6w9NZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMt
NTM3OGRlNDMwMzc3LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81MTY5NDYtZDViNi00ZjBlLTk2NWMtNTM3OGRlNDMwMzc3
LzEvNXFyM21LQnNGWGxjYi14d2VZT1l2ckQwMW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXogU1d2h
xYfan2YgKLOd81d4UMt3r+3q4G5z1MzTkYI5PShnJWUqbVHiYARQ+vro7ZLIqm0f
QjxmJ1Ae/JYK2P59FRiUV5h/VfUHSSO2GwOTmW0Eixk7vHArxuePPUHN9XVkRPBt
DOOXTUwIwYeZeeaaH+cAA8nXC3hRfW3n7DNB0Jtlj4acwn3Ybz6iw7WpkYMUO5cb
Js2yjPMq3fbN1GJP8wcrObTkWPdRrDCwSPAneebf5Wqqu2i5VKgiWEY28ZoFXloE
xvXGYNU8g0Zv5DmwLI0I47WgFtQgXpEKJoxyDpIGG4CaJXX3ysE/pArRSJj3/WCv
PtG7QNle8POvkQ==
-----END CERTIFICATE-----