Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File:                     5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier:          LKhymfCo/7FrG1znNiZOx8RYV8FI5O49N4NAiv1SzsE=
Subject key identifier:   BF:5E:C2:DD:94:CB:D6:A8:19:59:7C:E0:50:63:A0:20:93:40:0F:29
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer:       /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial:       01962DF4525D2BA396F46965F97304210AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number:          099E
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: POz4LCFtlO9jColJioUA1XAHn8OHO/2dA9U8JuM4uFo=)
                          2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:52:5d:2b:a3:96:f4:69:65:f9:73:04:21:0a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=bf5ec2dd94cbd6a819597ce05063a02093400f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:52:cb:95:ca:68:3d:40:b3:a7:62:03:37:
                    6e:38:d1:ca:9d:e5:00:55:75:59:0f:c6:4b:00:e5:
                    8a:da:48:9b:8f:d4:45:8c:4e:9b:dd:b6:08:11:86:
                    9a:f9:0d:af:1d:e9:ed:3c:29:00:67:f9:54:69:3b:
                    e6:04:e1:f5:fc:c7:a3:e1:74:80:89:01:7e:25:08:
                    88:1c:55:34:c0:22:79:2a:d8:15:8c:1d:19:5a:44:
                    f4:55:ca:f5:e8:a2:2d:92:c1:95:5c:a3:3e:61:fc:
                    72:f1:22:bc:f5:a1:47:2e:6f:a3:71:c3:4c:0e:7a:
                    ee:d7:e9:8e:6d:b6:df:92:d1:66:a8:f5:50:12:b2:
                    e6:2a:af:b2:31:ee:84:0b:94:1d:6f:8a:77:c2:8f:
                    da:99:d5:c6:e8:91:bc:f5:6c:db:9b:06:9c:af:94:
                    bf:07:24:e8:90:b2:78:56:a2:64:a0:43:ae:c2:e5:
                    c6:5f:f5:c5:c4:fd:04:b0:40:de:b3:07:67:e7:3f:
                    c8:d8:92:bb:9f:42:9b:3b:8b:e3:be:cc:b8:64:c4:
                    6d:72:7d:a4:20:ab:46:b4:93:18:4a:68:84:bf:e9:
                    3d:c6:30:69:20:6f:d3:30:a4:4d:48:73:be:55:e2:
                    6b:b2:be:94:23:69:0a:79:e1:dc:31:8c:90:6f:2d:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5E:C2:DD:94:CB:D6:A8:19:59:7C:E0:50:63:A0:20:93:40:0F:29
            X509v3 Authority Key Identifier:
                keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bd:d3:06:31:99:42:5d:9a:ea:58:0f:90:6a:e2:b3:1d:54:
         c4:21:2d:03:eb:95:fd:5b:b2:68:96:a2:cc:de:f6:58:0b:61:
         8b:e0:8b:2b:82:32:ba:f2:b5:86:a4:4a:2a:90:3e:25:24:fe:
         b0:94:8c:aa:27:a2:7a:ab:62:1f:5a:7b:89:f2:a7:6c:1e:07:
         90:ea:84:3c:c0:41:a7:a3:f3:1c:88:36:fa:34:60:bf:4a:0a:
         14:ce:66:e5:d3:f6:49:ef:21:b3:c2:0f:cd:71:6e:dc:aa:3c:
         58:ca:12:fd:07:70:5f:54:29:46:42:32:65:0b:e8:77:09:a3:
         7c:68:c9:61:3c:89:14:bf:76:61:5d:a7:bb:76:e9:23:d5:18:
         3d:1b:6c:d3:c2:94:a2:03:90:c3:d8:96:3a:7d:ae:d6:f7:bc:
         25:e7:fd:9c:eb:d1:fa:fd:4d:ae:5a:30:3e:6b:bd:8d:f5:43:
         22:d0:32:c8:8b:6f:04:54:3e:42:7b:ad:18:fe:a0:f5:e8:47:
         e1:93:37:ad:b9:12:d6:a2:38:20:86:d6:8c:a3:fa:e8:c5:c2:
         c3:83:0d:54:ef:38:30:46:aa:42:71:9e:89:eb:d2:90:b2:3d:
         32:2d:94:ef:5e:fb:70:33:3f:88:27:93:c2:bc:15:05:5d:85:
         fb:49:4b:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FJdK6OW9Gll+XMEIQqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzQwNmY0OTgyYjYxODI0YzhmZDQ0YjgxZWRlMGE5OWZj
NzI0ZTAwHhcNMjUwNDEzMDcwMTQ4WhcNMjUwNDE0MDcwMTQ4WjAzMTEwLwYDVQQD
EyhiZjVlYzJkZDk0Y2JkNmE4MTk1OTdjZTA1MDYzYTAyMDkzNDAwZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53NSy5XKaD1As6diAzduONHKneUA
VXVZD8ZLAOWK2kibj9RFjE6b3bYIEYaa+Q2vHentPCkAZ/lUaTvmBOH1/Mej4XSA
iQF+JQiIHFU0wCJ5KtgVjB0ZWkT0Vcr16KItksGVXKM+Yfxy8SK89aFHLm+jccNM
Dnru1+mObbbfktFmqPVQErLmKq+yMe6EC5Qdb4p3wo/amdXG6JG89Wzbmwacr5S/
ByTokLJ4VqJkoEOuwuXGX/XFxP0EsEDeswdn5z/I2JK7n0KbO4vjvsy4ZMRtcn2k
IKtGtJMYSmiEv+k9xjBpIG/TMKRNSHO+VeJrsr6UI2kKeeHcMYyQby2ODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9ewt2Uy9aoGVl84FBjoCCTQA8pMB8GA1UdIwQY
MBaAFOR0BvSYK2GCTI/US4Ht4KmfxyTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85ZDY0ZmYtZDRkYS00ZGM5LTg4MjUt
NzExOGY4Mzg0Yzc3LzEvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85ZDY0ZmYtZDRkYS00ZGM5LTg4MjUtNzExOGY4Mzg0Yzc3
LzEvNUhRRzlKZ3JZWUpNajlSTGdlM2dxWl9ISk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp73TBjGZ
Ql2a6lgPkGrisx1UxCEtA+uV/VuyaJaizN72WAthi+CLK4IyuvK1hqRKKpA+JST+
sJSMqieieqtiH1p7ifKnbB4HkOqEPMBBp6PzHIg2+jRgv0oKFM5m5dP2Se8hs8IP
zXFu3Ko8WMoS/QdwX1QpRkIyZQvodwmjfGjJYTyJFL92YV2nu3bpI9UYPRts08KU
ogOQw9iWOn2u1ve8Jef9nOvR+v1NrlowPmu9jfVDItAyyItvBFQ+QnutGP6g9ehH
4ZM3rbkS1qI4IIbWjKP66MXCw4MNVO84MEaqQnGeievSkLI9Mi2U7177cDM/iCeT
wrwVBV2F+0lLLw==
-----END CERTIFICATE-----