Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File:                     U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier:          Dkmn72hM4+YkW0Az3LChNQj/QY0tfIjOHZvcCVnzk8c=
Subject key identifier:   DB:F9:8F:E7:09:84:4E:4C:11:22:FB:BF:E5:0D:9A:EB:B2:DD:61:3C
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer:       /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial:       01962E61EB94E411780BBEB8FB48BEB84CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number:          0BA7
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
                          2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
                          3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: U+5XKDymT1y1GmyZAdK+/N3Uj9fgmM8+DpmsTQ9ZjkI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:eb:94:e4:11:78:0b:be:b8:fb:48:be:b8:4c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=dbf98fe709844e4c1122fbbfe50d9aebb2dd613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:49:46:53:aa:c0:2b:0b:74:42:e8:e4:90:
                    49:87:75:f3:d7:c2:49:3c:76:e4:6f:69:9b:99:b6:
                    30:c0:61:75:ed:a0:c8:28:a1:e7:af:39:71:82:9e:
                    d5:db:f4:d8:78:2a:e6:75:1a:3f:2e:b9:da:88:25:
                    76:f1:92:88:64:a0:c2:bd:bb:bd:28:ba:72:21:8d:
                    bf:0b:1e:b8:2a:40:bb:5d:2c:19:ce:03:38:77:bc:
                    d7:0f:c2:61:58:a5:6c:ee:df:65:ee:7e:54:1e:90:
                    b2:29:27:53:e6:2f:89:35:74:3a:c6:01:a7:b9:7a:
                    3e:0b:70:1e:eb:cb:63:e0:58:1f:02:02:76:03:2a:
                    de:d1:7e:41:4a:5c:0d:c3:70:35:8f:da:9f:94:8a:
                    1b:06:c2:61:97:a8:09:cb:6d:46:a9:9d:d4:38:16:
                    4d:c9:24:41:a1:60:5a:bb:a5:83:ea:7a:ff:2f:69:
                    57:cd:08:a8:18:b6:2e:67:8c:3c:ca:17:cd:9c:a5:
                    07:65:ad:d2:ce:3a:2c:d7:29:be:65:5c:17:e2:eb:
                    3b:ca:52:39:ac:9a:b2:d3:c5:c4:23:3d:9f:d9:05:
                    2d:33:16:bd:c4:f0:32:f4:8c:fe:0a:51:ba:50:7a:
                    1e:4d:3e:d7:76:33:55:cb:5d:d4:28:0e:ea:22:9a:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:8F:E7:09:84:4E:4C:11:22:FB:BF:E5:0D:9A:EB:B2:DD:61:3C
            X509v3 Authority Key Identifier:
                keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:4e:9f:3b:eb:00:0d:5a:4d:92:84:10:19:09:db:3d:c9:
         e7:07:b4:79:e0:30:54:dc:7b:40:15:d8:94:88:84:9b:f9:11:
         bd:c0:41:b2:de:b3:7d:f6:5c:34:f3:71:b9:8c:c5:5e:f2:e4:
         09:ff:9e:d1:d9:61:2a:e0:b4:28:60:e9:51:58:d8:1b:61:ac:
         fc:d0:f8:6c:b2:41:90:c6:08:0f:0d:75:c0:9d:82:13:a4:ef:
         5a:47:76:30:5f:61:6c:1d:4d:18:19:16:2e:58:3d:5b:13:29:
         63:df:2d:d4:48:98:67:d3:a6:d6:ff:b3:c8:07:6d:eb:ee:09:
         83:46:88:36:c8:8e:e6:34:27:e6:fe:73:0f:8f:ed:97:fb:e1:
         34:15:14:2b:66:04:01:18:44:ad:19:fa:1e:7a:db:19:ab:a3:
         32:df:87:42:7b:43:e1:93:4c:9f:a9:15:a0:7a:d2:45:0b:00:
         83:28:75:b8:ec:41:bf:b4:85:b7:be:f8:98:a7:52:22:46:91:
         12:cd:bc:73:06:4b:83:ad:aa:04:01:83:ba:67:bc:9b:f3:7b:
         f4:5f:e1:e4:04:d2:61:e2:fa:0d:b4:25:40:00:ab:26:56:bc:
         2c:7c:6d:c3:1c:be:da:5a:95:44:2f:32:22:7d:d4:7d:2e:1d:
         ad:58:90:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeuU5BF4C764+0i+uEyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTNhYjkzZTg1NzAxYTczZWY0ZDVlMDBlZDZlYjk4OTM5
MzczOTQwHhcNMjUwNDEzMDkwMTMxWhcNMjUwNDE0MDkwMTMxWjAzMTEwLwYDVQQD
EyhkYmY5OGZlNzA5ODQ0ZTRjMTEyMmZiYmZlNTBkOWFlYmIyZGQ2MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75JRlOqwCsLdELo5JBJh3Xz18JJ
PHbkb2mbmbYwwGF17aDIKKHnrzlxgp7V2/TYeCrmdRo/LrnaiCV28ZKIZKDCvbu9
KLpyIY2/Cx64KkC7XSwZzgM4d7zXD8JhWKVs7t9l7n5UHpCyKSdT5i+JNXQ6xgGn
uXo+C3Ae68tj4FgfAgJ2Ayre0X5BSlwNw3A1j9qflIobBsJhl6gJy21GqZ3UOBZN
ySRBoWBau6WD6nr/L2lXzQioGLYuZ4w8yhfNnKUHZa3Szjos1ym+ZVwX4us7ylI5
rJqy08XEIz2f2QUtMxa9xPAy9Iz+ClG6UHoeTT7XdjNVy13UKA7qIpr/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNv5j+cJhE5MESL7v+UNmuuy3WE8MB8GA1UdIwQY
MBaAFFOTq5PoVwGnPvTV4A7W65iTk3OUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAt
NTlhN2VmZDM4NGMwLzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZDc2NjItNzNmZi00NTk0LThlMzAtNTlhN2VmZDM4NGMw
LzEvVTVPcmstaFhBYWMtOU5YZ0R0YnJtSk9UYzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6ZOnzvr
AA1aTZKEEBkJ2z3J5we0eeAwVNx7QBXYlIiEm/kRvcBBst6zffZcNPNxuYzFXvLk
Cf+e0dlhKuC0KGDpUVjYG2Gs/ND4bLJBkMYIDw11wJ2CE6TvWkd2MF9hbB1NGBkW
Llg9WxMpY98t1EiYZ9Om1v+zyAdt6+4Jg0aINsiO5jQn5v5zD4/tl/vhNBUUK2YE
ARhErRn6HnrbGaujMt+HQntD4ZNMn6kVoHrSRQsAgyh1uOxBv7SFt774mKdSIkaR
Es28cwZLg62qBAGDume8m/N79F/h5ATSYeL6DbQlQACrJla8LHxtwxy+2lqVRC8y
In3UfS4drViQsw==
-----END CERTIFICATE-----