Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
File:                     V5ren-rtxAbfXhG87wOTzV6f0N0.mft (raw, json)
Hash identifier:          1AdwWslRctCfdX+u7I96f/g3/SKGSwmX6yO98QbaDrw=
Subject key identifier:   D6:65:9A:40:E0:9E:15:A0:C5:78:B4:6D:00:BA:F0:F3:E9:F8:8E:8E
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Certificate issuer:       /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial:       01962ECFD35E0B20FB36C42826C7B17F7973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
Manifest number:          1016
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: 6TwLhRWsmxkkhggFLTKj7guz2DE.roa (hash: s2x2RuJc1EuTWcfLAZGiSbTr9uwQiNoRbPeGEeK1UYk=)
                          2: CtLvXpDbiC_lIsOnzUkFvQoNOW0.roa (hash: HxkNpx8Pcltu0KFjSBg3rwAtGuveX0ZtVcwj6Ck1QYw=)
                          3: QBsToBJpbd_nRq5EIjRck6T3KbA.roa (hash: KZeNSeGK7PvW4oyfh6BDCeqEbjJDhVh49ggmavvGkaQ=)
                          4: V5ren-rtxAbfXhG87wOTzV6f0N0.crl (hash: DXCIaf7qhHlis0Av5VpoBtm2zsm0Bhe3y0qF2FHssEk=)
                          5: muLWmt6ZMacxUDBOEpDcdZVybqE.roa (hash: iIOnhccJGVHF6XublOYDVi+aYn8G2xGe4M5LSF1btvo=)
                          6: uw5uYRfw3pC5nJXxczi3tVvkY7I.roa (hash: noD3uoydquQYeR5oh05bo3dbdjw+XIFKtmuy3W50gWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d3:5e:0b:20:fb:36:c4:28:26:c7:b1:7f:79:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=d6659a40e09e15a0c578b46d00baf0f3e9f88e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:88:12:c0:31:bb:4c:48:e9:a4:a1:2c:c1:
                    30:dd:e4:fe:70:98:6c:55:a2:2a:3e:46:92:64:fe:
                    9d:bc:a3:fb:df:80:7e:7f:bb:8e:5b:08:61:9a:40:
                    44:53:e0:f9:f9:97:fa:ff:63:4e:8d:43:8e:14:f0:
                    60:54:36:f0:d1:b1:4b:9b:ac:b2:46:09:cf:1f:49:
                    2e:f3:49:f7:37:f7:ef:07:03:9c:cb:81:c5:ac:01:
                    75:16:af:b2:45:a2:50:fe:17:3a:96:85:c6:df:aa:
                    01:41:b4:1c:66:8d:5d:c1:02:8d:9c:0e:b5:e5:3d:
                    b0:d5:a8:4e:3d:33:ba:cf:aa:63:fe:56:62:dd:53:
                    04:68:0c:9b:b8:6c:1c:c3:0d:2e:04:8f:2f:bc:d5:
                    71:83:45:96:b3:5f:76:4b:2a:73:b3:c3:54:44:02:
                    44:b8:65:41:c8:f4:aa:01:72:90:03:b2:90:44:67:
                    dc:59:58:38:f9:65:a7:ac:7b:5d:8a:6d:bf:e5:81:
                    b9:db:f9:13:d9:f8:36:05:c3:4e:58:b3:d0:48:42:
                    9e:13:c7:d1:bf:9f:86:f0:6a:98:30:00:b3:9a:03:
                    b9:cf:bd:73:5d:ef:2d:98:3b:ec:82:35:b8:ea:f0:
                    ff:4f:ab:48:82:f4:3b:74:d6:8b:8b:d7:da:ea:a0:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:65:9A:40:E0:9E:15:A0:C5:78:B4:6D:00:BA:F0:F3:E9:F8:8E:8E
            X509v3 Authority Key Identifier:
                keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:a0:58:7a:0b:f9:a1:86:ff:67:f4:ee:9a:f1:40:45:62:
         f1:ef:39:0c:66:29:43:95:ab:fd:44:4e:7a:7c:ff:ca:08:a0:
         b8:8f:77:1c:a4:83:ee:ce:da:36:6b:1b:fe:af:05:0c:76:98:
         01:99:87:81:55:38:33:bc:77:eb:69:5c:2f:f6:74:01:a2:70:
         91:1c:9b:ab:8b:ab:61:8b:0f:99:07:7c:06:a4:85:fb:aa:b6:
         a9:dd:70:73:35:32:ef:e0:80:10:7e:e0:a5:8d:a1:9e:f8:74:
         4e:2d:0a:0c:33:fc:0b:41:67:c2:42:47:41:19:f1:de:73:a1:
         ac:c7:ba:17:13:b5:74:dc:34:ac:d1:74:98:2a:b9:a2:3d:e4:
         3b:0c:a6:ce:ac:8d:35:0f:c3:c7:a2:a8:b9:ba:11:78:95:7e:
         82:32:00:b4:55:16:f1:45:a4:b6:24:e4:45:27:be:ec:c0:c1:
         fa:95:31:0c:7a:b7:04:d3:71:fc:1e:ae:5a:50:76:37:62:da:
         96:ae:47:e9:76:2b:bc:90:0f:ac:62:64:48:fd:38:1e:5a:e8:
         21:08:31:79:ca:46:47:49:d8:6e:6b:d8:16:d8:12:51:e2:92:
         2e:cc:63:9b:63:9a:6a:dc:f1:82:80:ce:a9:ba:49:89:7c:9d:
         e1:58:fe:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9NeCyD7NsQoJsexf3lzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjUwNDEzMTEwMTMzWhcNMjUwNDE0MTEwMTMzWjAzMTEwLwYDVQQD
EyhkNjY1OWE0MGUwOWUxNWEwYzU3OGI0NmQwMGJhZjBmM2U5Zjg4ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2reIEsAxu0xI6aShLMEw3eT+cJhs
VaIqPkaSZP6dvKP734B+f7uOWwhhmkBEU+D5+Zf6/2NOjUOOFPBgVDbw0bFLm6yy
RgnPH0ku80n3N/fvBwOcy4HFrAF1Fq+yRaJQ/hc6loXG36oBQbQcZo1dwQKNnA61
5T2w1ahOPTO6z6pj/lZi3VMEaAybuGwcww0uBI8vvNVxg0WWs192Sypzs8NURAJE
uGVByPSqAXKQA7KQRGfcWVg4+WWnrHtdim2/5YG52/kT2fg2BcNOWLPQSEKeE8fR
v5+G8GqYMACzmgO5z71zXe8tmDvsgjW46vD/T6tIgvQ7dNaLi9fa6qC1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZlmkDgnhWgxXi0bQC68PPp+I6OMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnqgWHoL
+aGG/2f07prxQEVi8e85DGYpQ5Wr/UROenz/ygiguI93HKSD7s7aNmsb/q8FDHaY
AZmHgVU4M7x362lcL/Z0AaJwkRybq4urYYsPmQd8BqSF+6q2qd1wczUy7+CAEH7g
pY2hnvh0Ti0KDDP8C0FnwkJHQRnx3nOhrMe6FxO1dNw0rNF0mCq5oj3kOwymzqyN
NQ/Dx6KouboReJV+gjIAtFUW8UWktiTkRSe+7MDB+pUxDHq3BNNx/B6uWlB2N2La
lq5H6XYrvJAPrGJkSP04HlroIQgxecpGR0nYbmvYFtgSUeKSLsxjm2OaatzxgoDO
qbpJiXyd4Vj+qw==
-----END CERTIFICATE-----