Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File:                     W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier:          11VpBX2nXjXt2FLQ9+7SBq5NArDz3FLR7QMdoW2+D+o=
Subject key identifier:   A4:3C:25:BE:87:F7:B8:56:D0:A2:DC:36:65:93:95:40:3C:C3:64:23
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer:       /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial:       01962ECF568878E5591826CDF00E7128955E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number:          1169
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: LwS7P81N1McSDyfhLswAoCvgGcu0Ps/FoBUoyxcOzig=)
                          2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
                          3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:88:78:e5:59:18:26:cd:f0:0e:71:28:95:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=a43c25be87f7b856d0a2dc36659395403cc36423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:fb:b8:3f:9f:71:96:12:10:a6:fd:9d:3d:
                    1b:bd:1f:2e:ce:23:1c:32:8a:9b:4b:22:00:25:bf:
                    fd:a9:2b:ff:06:0c:72:e9:23:1d:b7:7f:e1:61:2d:
                    b9:bf:fa:55:f4:34:ef:39:f5:82:c7:61:49:60:2a:
                    d5:fd:e4:a6:57:02:a4:df:d0:bb:b6:fa:27:df:17:
                    42:b8:11:48:75:73:f4:5a:e2:41:b2:cc:5a:d8:7b:
                    3f:32:64:fd:ab:a3:b0:bb:17:2b:ac:a7:ee:aa:30:
                    e7:70:cd:40:64:96:71:f5:cd:7b:0e:42:d8:c8:32:
                    29:ae:a2:da:fe:d8:86:89:85:71:f1:b7:b9:56:b8:
                    5c:c2:f5:a8:03:37:38:8a:13:99:67:6c:fb:26:73:
                    d1:39:bd:1e:7e:3b:fc:a3:ea:27:d9:a4:ec:fa:3f:
                    ab:ab:b8:f1:08:67:95:0b:32:5f:3a:0b:3f:a8:64:
                    1c:00:89:23:0d:93:4b:69:01:15:69:29:b2:f7:cb:
                    6d:53:ef:d5:ce:ea:4e:1c:d3:57:31:f0:b0:64:0d:
                    58:68:e0:df:7d:f2:83:be:bf:97:24:58:78:e3:35:
                    ea:0e:e3:2c:48:bc:17:69:f0:04:45:c6:f3:13:5f:
                    0d:31:36:26:1a:cc:4a:2f:43:e6:0b:5d:45:b6:74:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:25:BE:87:F7:B8:56:D0:A2:DC:36:65:93:95:40:3C:C3:64:23
            X509v3 Authority Key Identifier:
                keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d0:6e:a6:4c:17:32:0c:03:32:72:e8:c9:b9:82:19:63:e6:
         e4:81:48:78:12:44:17:91:ea:d7:bf:ad:07:b0:ec:f7:0d:59:
         2f:aa:a8:9f:36:2f:8c:76:53:ed:ac:8f:6e:05:29:ac:b9:a6:
         0c:d7:bd:6b:5b:cc:33:11:7d:8a:33:95:39:a7:68:df:83:9a:
         5c:da:bd:c3:ed:d7:49:c7:3f:55:12:44:31:88:d1:7f:8c:fe:
         b2:f8:26:67:7e:7c:db:04:c6:11:43:52:89:1e:4c:9d:26:82:
         fe:ec:19:fa:2f:4f:e3:fb:a8:4f:97:55:cf:62:b7:e7:10:c2:
         cc:cd:14:89:fc:fd:3d:75:cc:fc:7d:30:67:bc:30:6d:ee:a2:
         9e:7c:65:e8:c3:27:ce:93:bc:c0:70:b2:2a:10:73:23:0f:aa:
         06:7a:95:7b:71:71:f7:65:05:f2:d0:9f:54:5b:d8:75:34:b4:
         12:25:65:5e:69:92:c5:8f:a8:97:5d:8f:25:19:e2:f5:b5:a0:
         be:24:86:80:4a:be:e8:86:f2:1f:98:ad:5e:59:d1:ac:ea:40:
         11:94:79:0a:96:a8:f5:24:eb:33:0f:d4:c1:0b:75:8a:6d:fc:
         ec:e5:ff:1b:ff:15:0b:83:88:87:12:5d:84:44:99:d6:05:ce:
         23:0e:de:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1aIeOVZGCbN8A5xKJVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTA1NTFlM2MxN2UwYTAyZDI4ZDZkY2EyNzlkYjNlNDE0
N2Y5OTEwHhcNMjUwNDEzMTEwMTAyWhcNMjUwNDE0MTEwMTAyWjAzMTEwLwYDVQQD
EyhhNDNjMjViZTg3ZjdiODU2ZDBhMmRjMzY2NTkzOTU0MDNjYzM2NDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxD7uD+fcZYSEKb9nT0bvR8uziMc
MoqbSyIAJb/9qSv/Bgxy6SMdt3/hYS25v/pV9DTvOfWCx2FJYCrV/eSmVwKk39C7
tvon3xdCuBFIdXP0WuJBssxa2Hs/MmT9q6OwuxcrrKfuqjDncM1AZJZx9c17DkLY
yDIprqLa/tiGiYVx8be5VrhcwvWoAzc4ihOZZ2z7JnPROb0efjv8o+on2aTs+j+r
q7jxCGeVCzJfOgs/qGQcAIkjDZNLaQEVaSmy98ttU+/VzupOHNNXMfCwZA1YaODf
ffKDvr+XJFh44zXqDuMsSLwXafAERcbzE18NMTYmGsxKL0PmC11FtnR2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ8Jb6H97hW0KLcNmWTlUA8w2QjMB8GA1UdIwQY
MBaAFFuQVR48F+CgLSjW3KJ52z5BR/mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgt
YTMwZTMzYTcwYjFlLzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMTkyYTQtNzZiMi00NjVkLTg4MTgtYTMwZTMzYTcwYjFl
LzEvVzVCVkhqd1g0S0F0S05iY29ubmJQa0ZILVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNBupkwX
MgwDMnLoybmCGWPm5IFIeBJEF5Hq17+tB7Ds9w1ZL6qonzYvjHZT7ayPbgUprLmm
DNe9a1vMMxF9ijOVOado34OaXNq9w+3XScc/VRJEMYjRf4z+svgmZ3582wTGEUNS
iR5MnSaC/uwZ+i9P4/uoT5dVz2K35xDCzM0Uifz9PXXM/H0wZ7wwbe6innxl6MMn
zpO8wHCyKhBzIw+qBnqVe3Fx92UF8tCfVFvYdTS0EiVlXmmSxY+ol12PJRni9bWg
viSGgEq+6IbyH5itXlnRrOpAEZR5Cpao9STrMw/UwQt1im387OX/G/8VC4OIhxJd
hESZ1gXOIw7eOw==
-----END CERTIFICATE-----