Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File:                     5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier:          dZUEpfc6WLK3NUB3YU70sJoqkx2P2TZ2dXLliP/hMiQ=
Subject key identifier:   70:6C:34:62:BF:AC:7A:98:2A:7C:AE:6C:8C:D0:C8:38:90:F8:6C:2C
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer:       /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial:       01962ECFC8E58C79A275AB26FF52CBD2C5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:31 +0000
Files and hashes:         1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: AThPAJmkAwLfdIz9e5vfqw8WmmgahLCbGQD0vgJGZks=)
                          2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c8:e5:8c:79:a2:75:ab:26:ff:52:cb:d2:c5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
        Validity
            Not Before: Apr 13 11:01:31 2025 GMT
            Not After : Apr 14 11:01:31 2025 GMT
        Subject: CN=706c3462bfac7a982a7cae6c8cd0c83890f86c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:91:7d:75:36:ad:28:01:ca:e6:0c:a8:54:
                    61:e9:09:12:5d:80:1f:7d:01:60:32:86:58:8b:4c:
                    c1:c9:ab:f3:bb:f9:eb:5a:69:20:84:23:7a:34:a6:
                    18:19:ff:28:16:65:de:5c:7c:3d:44:4a:ea:1c:48:
                    d6:38:1d:94:ba:e1:4b:0e:25:ba:67:96:55:26:1f:
                    7d:17:7a:da:18:8a:32:0c:b4:be:1c:f0:8e:c1:de:
                    1c:28:4d:37:03:ab:d2:b0:51:72:17:a0:75:5f:36:
                    d1:d4:f0:e6:2e:0e:13:4f:34:f4:94:d8:1e:4f:14:
                    0e:dd:1c:7b:ac:1b:31:8c:0d:64:b1:44:00:89:4f:
                    65:76:19:a2:3e:f4:92:54:71:1c:ee:20:e9:7a:d9:
                    77:6b:69:50:68:f0:91:8c:f8:ac:3f:32:d3:7d:9b:
                    8f:6e:6c:d6:f0:08:50:1b:37:92:96:5b:fc:1e:bd:
                    a1:19:dc:93:2a:b8:aa:f3:11:de:8f:e1:d8:d2:e8:
                    b3:14:82:e5:62:9c:8f:d3:fb:38:0a:e3:a2:b4:e3:
                    83:9e:c1:2b:66:f7:c8:0f:47:c3:f1:bb:81:1f:53:
                    de:bf:51:16:6d:6e:1d:27:52:3a:13:b2:d5:f2:71:
                    68:c5:da:48:64:8b:a9:8c:4a:f0:5c:23:9f:60:91:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:34:62:BF:AC:7A:98:2A:7C:AE:6C:8C:D0:C8:38:90:F8:6C:2C
            X509v3 Authority Key Identifier:
                keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:93:1a:96:ab:4f:20:64:62:c4:b5:3a:22:32:14:80:e9:ea:
         b3:90:6a:34:36:10:57:b8:ff:c9:90:17:dc:c1:a5:ba:c6:5f:
         5d:6e:8a:23:3f:f7:35:fd:f3:ba:2f:78:c3:65:dc:30:9b:e4:
         77:ed:b4:d5:e1:55:e9:7b:7c:6e:58:84:db:8c:7e:c0:27:da:
         68:2a:0e:d6:26:3a:fb:d4:42:6a:67:9d:aa:ca:b1:f3:28:5e:
         fe:90:e6:20:c6:d2:84:a4:7e:45:8a:7e:9f:30:9b:67:8e:4c:
         0f:c2:dd:bf:c5:48:d1:5c:7e:79:f1:ae:de:53:28:53:9a:ba:
         10:9a:fd:e5:12:eb:0d:42:8f:4f:66:37:d5:01:c0:b5:d3:81:
         42:d1:a7:c9:da:c6:09:92:b7:eb:df:93:03:2c:66:7b:3f:b9:
         3c:69:f3:26:00:4a:cd:f2:f3:63:ad:7b:4d:f4:fe:ce:ec:ad:
         91:7d:c5:94:b8:08:ab:0e:7d:b6:a2:4e:41:88:3e:fb:0d:b5:
         b8:63:47:1d:2a:cb:76:d2:d9:41:cd:9b:d5:50:5a:e8:6c:0d:
         2f:42:42:a2:79:2d:a1:3c:be:61:78:1a:cb:39:cc:40:a9:95:
         a0:c3:42:80:f6:98:0e:0f:f6:99:a9:a4:6a:6a:fe:13:91:58:
         7c:3a:75:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8jljHmidasm/1LL0sWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjUwNDEzMTEwMTMxWhcNMjUwNDE0MTEwMTMxWjAzMTEwLwYDVQQD
Eyg3MDZjMzQ2MmJmYWM3YTk4MmE3Y2FlNmM4Y2QwYzgzODkwZjg2YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiCRfXU2rSgByuYMqFRh6QkSXYAf
fQFgMoZYi0zByavzu/nrWmkghCN6NKYYGf8oFmXeXHw9RErqHEjWOB2UuuFLDiW6
Z5ZVJh99F3raGIoyDLS+HPCOwd4cKE03A6vSsFFyF6B1XzbR1PDmLg4TTzT0lNge
TxQO3Rx7rBsxjA1ksUQAiU9ldhmiPvSSVHEc7iDpetl3a2lQaPCRjPisPzLTfZuP
bmzW8AhQGzeSllv8Hr2hGdyTKriq8xHej+HY0uizFILlYpyP0/s4CuOitOODnsEr
ZvfID0fD8buBH1Pev1EWbW4dJ1I6E7LV8nFoxdpIZIupjErwXCOfYJFT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBsNGK/rHqYKnyubIzQyDiQ+GwsMB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpMalqtP
IGRixLU6IjIUgOnqs5BqNDYQV7j/yZAX3MGlusZfXW6KIz/3Nf3zui94w2XcMJvk
d+201eFV6Xt8bliE24x+wCfaaCoO1iY6+9RCamedqsqx8yhe/pDmIMbShKR+RYp+
nzCbZ45MD8Ldv8VI0Vx+efGu3lMoU5q6EJr95RLrDUKPT2Y31QHAtdOBQtGnydrG
CZK369+TAyxmez+5PGnzJgBKzfLzY617TfT+zuytkX3FlLgIqw59tqJOQYg++w21
uGNHHSrLdtLZQc2b1VBa6GwNL0JConktoTy+YXgayznMQKmVoMNCgPaYDg/2mamk
amr+E5FYfDp13A==
-----END CERTIFICATE-----