Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          8wTIND4YD2H+kGQCASkuvlvHNZ5vTH5S0YsMHzjxopE=
Subject key identifier:   5D:B8:5A:9C:CA:7B:00:1A:3E:32:93:A7:22:79:02:AF:97:B4:B5:52
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       01962F74BE506EEE279F4C02A5A4EE3EB1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          12B9
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: P8CHsKhEs5BuqpMIYD7vRHFqctCd8t/0VlR6FrMHVbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:50:6e:ee:27:9f:4c:02:a5:a4:ee:3e:b1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=5db85a9cca7b001a3e3293a7227902af97b4b552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:dc:34:5e:8c:ea:c2:c4:6e:6c:80:f5:4b:
                    44:db:ea:8d:0c:aa:73:3e:97:82:c1:c0:ff:12:80:
                    93:7f:49:0a:32:81:ef:24:54:a1:7a:f3:5d:9b:d1:
                    40:98:4e:05:d8:90:d1:82:ea:cc:dd:7c:fe:bb:6a:
                    d3:b0:98:8a:86:b5:d1:78:f3:be:cc:8e:3c:3f:f0:
                    f8:c4:d9:6b:83:32:6e:14:1b:c9:ef:6a:8d:2a:79:
                    13:bc:45:e5:bb:fa:1c:25:b6:4d:67:cd:c4:ff:d7:
                    0e:5c:c3:8f:67:74:73:07:68:1f:79:a3:9f:d6:64:
                    57:5e:36:69:a4:af:52:5b:17:fb:a0:a1:05:bf:92:
                    27:d1:be:8f:2e:6b:ca:b4:fa:de:70:dc:e6:df:d1:
                    34:6b:0d:b2:bb:32:a6:2b:b3:cb:62:16:60:c1:f1:
                    fd:4a:20:df:ad:43:d0:4e:31:0b:1b:0f:8a:30:b8:
                    b3:13:84:fd:30:2f:e1:35:04:17:a0:7c:e8:60:56:
                    b1:80:ac:2c:84:eb:9b:df:5e:43:e4:70:ce:5c:4f:
                    cb:99:40:57:52:86:82:e8:6e:7f:c4:29:e3:da:db:
                    c4:bb:82:8f:e8:b5:2c:7d:f7:d2:4c:74:d9:55:d9:
                    aa:8e:e4:29:03:d6:0c:2a:9a:fa:41:ce:0e:8a:79:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B8:5A:9C:CA:7B:00:1A:3E:32:93:A7:22:79:02:AF:97:B4:B5:52
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:ec:a0:f4:ba:b6:bb:ce:2d:59:c7:dd:d5:22:e3:ad:a0:
         af:c6:a3:a6:dd:89:43:26:2b:42:21:87:d2:2b:84:68:c4:c3:
         7c:96:fc:7e:12:bd:92:48:ef:ef:8a:ad:0a:c7:ed:ab:30:35:
         8f:ce:1d:2c:94:96:f0:c2:02:31:29:60:bb:ff:a8:b8:2f:a2:
         f2:a9:2f:76:e6:40:3f:c3:81:58:7c:22:a5:9b:be:28:7e:d8:
         e4:2d:a6:b2:55:12:be:46:6c:3f:2a:d9:07:78:82:1c:be:36:
         3c:b9:dc:1e:96:a4:78:d2:09:01:fc:ac:c3:47:fb:6d:fa:13:
         59:cd:03:fa:10:a6:85:7a:d8:a7:33:60:d0:80:b6:1d:2b:ec:
         de:05:cf:2e:aa:3c:61:c7:b4:f4:22:9e:d2:32:a0:93:4f:0d:
         b1:d7:e4:e5:00:72:59:39:aa:9f:29:a3:c9:fc:45:6c:3e:4f:
         45:48:02:c3:df:cd:f4:29:47:a5:3d:cd:49:ba:4d:2b:0f:fe:
         ab:aa:99:de:01:44:e7:f1:bc:f2:c7:5c:86:91:5b:5a:5b:cd:
         16:ea:0a:80:e2:95:05:a9:e0:2c:6c:48:2b:8c:cc:b2:8f:8a:
         20:df:e5:3b:46:48:04:45:b6:9b:56:f1:01:86:1b:cf:d0:93:
         77:f0:6a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdL5Qbu4nn0wCpaTuPrHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy
ODM4ODMwHhcNMjUwNDEzMTQwMTQxWhcNMjUwNDE0MTQwMTQxWjAzMTEwLwYDVQQD
Eyg1ZGI4NWE5Y2NhN2IwMDFhM2UzMjkzYTcyMjc5MDJhZjk3YjRiNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgHcNF6M6sLEbmyA9UtE2+qNDKpz
PpeCwcD/EoCTf0kKMoHvJFShevNdm9FAmE4F2JDRgurM3Xz+u2rTsJiKhrXRePO+
zI48P/D4xNlrgzJuFBvJ72qNKnkTvEXlu/ocJbZNZ83E/9cOXMOPZ3RzB2gfeaOf
1mRXXjZppK9SWxf7oKEFv5In0b6PLmvKtPrecNzm39E0aw2yuzKmK7PLYhZgwfH9
SiDfrUPQTjELGw+KMLizE4T9MC/hNQQXoHzoYFaxgKwshOub315D5HDOXE/LmUBX
UoaC6G5/xCnj2tvEu4KP6LUsfffSTHTZVdmqjuQpA9YMKpr6Qc4OinnyYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF24WpzKewAaPjKTpyJ5Aq+XtLVSMB8GA1UdIwQY
MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt
ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0
LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEubsoPS6
trvOLVnH3dUi462gr8ajpt2JQyYrQiGH0iuEaMTDfJb8fhK9kkjv74qtCsftqzA1
j84dLJSW8MICMSlgu/+ouC+i8qkvduZAP8OBWHwipZu+KH7Y5C2mslUSvkZsPyrZ
B3iCHL42PLncHpakeNIJAfysw0f7bfoTWc0D+hCmhXrYpzNg0IC2HSvs3gXPLqo8
Yce09CKe0jKgk08Nsdfk5QByWTmqnymjyfxFbD5PRUgCw9/N9ClHpT3NSbpNKw/+
q6qZ3gFE5/G88sdchpFbWlvNFuoKgOKVBangLGxIK4zMso+KIN/lO0ZIBEW2m1bx
AYYbz9CTd/BqFQ==
-----END CERTIFICATE-----