Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File:                     E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier:          pewKnsu10vn2htAv2ADi4nulrojHIyEPeznztCbUpEQ=
Subject key identifier:   59:19:63:31:5F:31:A6:22:47:6D:2D:84:FC:31:3B:22:EB:A6:0E:3E
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer:       /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial:       01962E619C096309FFCE71D19FDF2CCAAE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number:          0C72
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=)
                          2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: 2YK1UJobh5NQPJJyfSiLO0XOkQCjWJ47ym138IVsnug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9c:09:63:09:ff:ce:71:d1:9f:df:2c:ca:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=591963315f31a622476d2d84fc313b22eba60e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:ab:0b:87:92:13:4a:0b:eb:99:03:d7:5d:
                    81:55:56:a2:17:43:82:07:09:42:c4:5a:43:96:82:
                    4b:04:c6:a3:97:e0:4d:c4:9b:20:1c:70:0f:0d:98:
                    2b:17:fe:22:e4:1a:d8:12:89:66:d7:aa:64:f4:af:
                    ec:39:c2:62:2b:3c:b3:98:58:9e:f4:03:98:6e:1f:
                    1f:05:b9:a7:88:31:a6:08:cb:ab:dc:57:06:d5:b6:
                    2a:96:cf:d2:71:6f:35:f5:dc:24:a0:b1:fa:84:8a:
                    06:c1:85:18:55:8b:3c:30:c0:02:89:2f:68:74:e7:
                    df:b9:4c:1d:44:01:a7:58:36:a6:eb:5e:29:07:a7:
                    12:c1:c4:dc:ee:33:aa:36:ee:5a:3e:ab:ef:d5:eb:
                    32:65:cc:6b:6c:79:d8:70:a5:8d:73:98:fb:e0:8a:
                    46:34:49:90:1d:3c:73:fe:3d:07:c3:0c:fb:db:37:
                    19:49:96:f1:d1:69:3f:52:d2:26:11:1a:54:d7:c6:
                    44:97:39:6b:ef:e2:ce:77:6b:d6:4b:08:55:a1:32:
                    81:b2:fc:9f:47:e9:0d:13:60:6c:f5:a4:e2:38:58:
                    3c:a4:f7:06:26:10:08:4c:9b:46:b3:c4:1f:22:6d:
                    15:0d:3c:b9:a3:14:71:8a:da:01:96:72:4f:63:d6:
                    72:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:19:63:31:5F:31:A6:22:47:6D:2D:84:FC:31:3B:22:EB:A6:0E:3E
            X509v3 Authority Key Identifier:
                keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:94:87:eb:f5:60:21:b9:ad:6b:35:e3:0d:7b:f4:25:55:e7:
         8b:8f:bb:3c:f0:c4:f9:d1:7c:64:c5:54:fc:1a:be:dc:ee:a4:
         20:9e:28:56:7d:36:a8:c5:e1:c7:88:da:6b:f8:5d:50:86:c7:
         4c:00:a6:49:2a:c7:0e:12:54:f6:5e:83:80:bf:3b:83:b9:42:
         56:f5:fb:84:7c:33:3b:91:f3:76:b1:ba:62:0e:bd:84:cc:59:
         ab:37:c9:b2:10:3c:b9:cc:30:28:99:78:6a:ac:ba:cf:78:b0:
         c6:92:a8:0b:7f:e0:cd:b8:dc:42:82:6f:15:94:7b:c3:94:4a:
         58:30:35:51:2b:80:66:15:23:3d:a1:6e:ea:5a:8d:a9:a7:44:
         3d:6f:ba:bd:c6:62:86:82:22:97:42:b5:91:e0:97:70:76:3f:
         cb:8c:43:46:25:60:fa:b1:a8:9c:7d:3f:63:8a:96:9c:89:9a:
         26:4d:b6:be:26:93:4d:7b:95:6b:ea:b9:ca:ea:54:35:0f:36:
         a5:49:e1:39:c3:86:83:b4:26:44:cf:7e:ed:b1:51:82:d2:9a:
         60:86:91:d7:b8:49:b9:71:b3:0b:70:3b:90:fa:6b:e7:67:7c:
         55:de:56:54:81:fa:39:1a:ad:7e:fb:a5:f6:18:bf:10:a9:f8:
         0b:1b:9e:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZwJYwn/znHRn98syq6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOWU4MzYxNmY1MWYwMGIxZTU1YzBjNjE3YjNhNWYwNGFi
NzQxYTMwHhcNMjUwNDEzMDkwMTEwWhcNMjUwNDE0MDkwMTEwWjAzMTEwLwYDVQQD
Eyg1OTE5NjMzMTVmMzFhNjIyNDc2ZDJkODRmYzMxM2IyMmViYTYwZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV+rC4eSE0oL65kD112BVVaiF0OC
BwlCxFpDloJLBMajl+BNxJsgHHAPDZgrF/4i5BrYEolm16pk9K/sOcJiKzyzmFie
9AOYbh8fBbmniDGmCMur3FcG1bYqls/ScW819dwkoLH6hIoGwYUYVYs8MMACiS9o
dOffuUwdRAGnWDam614pB6cSwcTc7jOqNu5aPqvv1esyZcxrbHnYcKWNc5j74IpG
NEmQHTxz/j0Hwwz72zcZSZbx0Wk/UtImERpU18ZElzlr7+LOd2vWSwhVoTKBsvyf
R+kNE2Bs9aTiOFg8pPcGJhAITJtGs8QfIm0VDTy5oxRxitoBlnJPY9ZycQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkZYzFfMaYiR20thPwxOyLrpg4+MB8GA1UdIwQY
MBaAFBOeg2FvUfALHlXAxhezpfBKt0GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTIt
Njc4MmUyZGFlZjc0LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTItNjc4MmUyZGFlZjc0
LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZSH6/Vg
IbmtazXjDXv0JVXni4+7PPDE+dF8ZMVU/Bq+3O6kIJ4oVn02qMXhx4jaa/hdUIbH
TACmSSrHDhJU9l6DgL87g7lCVvX7hHwzO5HzdrG6Yg69hMxZqzfJshA8ucwwKJl4
aqy6z3iwxpKoC3/gzbjcQoJvFZR7w5RKWDA1USuAZhUjPaFu6lqNqadEPW+6vcZi
hoIil0K1keCXcHY/y4xDRiVg+rGonH0/Y4qWnImaJk22viaTTXuVa+q5yupUNQ82
pUnhOcOGg7QmRM9+7bFRgtKaYIaR17hJuXGzC3A7kPpr52d8Vd5WVIH6ORqtfvul
9hi/EKn4CxueLA==
-----END CERTIFICATE-----