Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File:                     g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier:          CEoapiUmgCLr3UfpoCZhgekHkgPndTQ6YxK3is+C9Vc=
Subject key identifier:   8A:F4:AB:76:F4:5A:F0:6D:7F:AB:27:5C:BA:D0:D6:FC:81:37:D9:46
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer:       /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial:       0195DFD8AEAC2F4FAAAC6BAEB259E25DD093
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number:          14E0
Signing time:             Sat 29 Mar 2025 03:01:14 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:14 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:14 +0000
Files and hashes:         1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
                          2: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
                          3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: odIAWkasBvpzhrPCJENoOMJQmZrAH2l2m4MYGX4dR/8=)
                          4: iItCjBu7NqQrWbQleZcs2InABtI.roa (hash: cxiVo1wViQ58OFWvWqbHd9qDUKA+J+hZBuev/y366W0=)
                          5: yjHXpxae4GvC2hVgF9lA84wEs5M.roa (hash: 4Bi95QC518DbFT+lc7i5bmvKADegBbbEtWKzYAy7Xo0=)
                          6: yvNRdoKPa6T74yCCtKA2QvJhdbs.roa (hash: gmVjs/E675HoTkgwked1IKQnLBzNPHHSFLe/DEwf98c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:ae:ac:2f:4f:aa:ac:6b:ae:b2:59:e2:5d:d0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
        Validity
            Not Before: Mar 29 03:01:14 2025 GMT
            Not After : Mar 30 03:01:14 2025 GMT
        Subject: CN=8af4ab76f45af06d7fab275cbad0d6fc8137d946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:dc:25:a5:12:9d:46:d2:f3:6b:82:76:db:
                    38:65:00:82:13:80:f3:26:ad:93:4c:72:e6:f8:5f:
                    15:42:e9:55:81:18:66:29:58:60:ea:9a:3b:ff:af:
                    ee:57:30:55:07:fd:30:d8:dc:ab:57:2a:42:ff:90:
                    54:04:21:9d:93:e7:38:5a:33:e4:2b:a6:f2:b4:aa:
                    77:28:5c:52:00:de:05:73:51:b5:b0:3c:c3:36:12:
                    83:51:a5:85:85:35:d2:18:45:96:4f:5d:42:51:5e:
                    fb:81:6b:9b:08:61:ae:20:0f:0d:fd:c8:d5:06:05:
                    39:6c:ff:81:1e:25:e8:ce:e0:54:1b:2c:9a:9c:d5:
                    a9:37:00:2a:7e:b7:8e:36:40:0a:59:ad:0e:a5:51:
                    a2:47:8b:e4:b5:e0:47:3b:e5:46:b9:b2:4b:d8:eb:
                    d9:7f:32:24:88:26:74:cc:a7:0d:e4:96:22:c4:c0:
                    3a:97:78:4a:25:55:a3:d4:a5:f3:5d:ae:b3:6a:da:
                    78:4b:3a:ca:26:73:ea:24:7c:f5:2d:b2:72:55:ab:
                    ca:4a:03:7f:8a:af:d4:72:93:e4:be:b0:92:f6:01:
                    f1:be:59:37:46:bf:c4:3f:c3:e2:e3:c2:1f:2a:99:
                    b4:6c:5c:92:db:59:49:49:ab:bf:98:b5:c7:73:44:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:AB:76:F4:5A:F0:6D:7F:AB:27:5C:BA:D0:D6:FC:81:37:D9:46
            X509v3 Authority Key Identifier:
                keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:99:53:ba:ad:6f:26:9c:23:17:f6:4e:da:e9:52:9d:a4:fd:
         58:af:e2:91:1a:b7:5b:da:45:61:f9:a7:04:46:67:4f:2b:6c:
         48:ac:3a:d7:30:11:4c:7d:8f:32:53:ea:06:14:34:36:18:e8:
         96:e9:40:ab:56:68:21:17:55:c7:57:c8:8f:35:97:2a:1f:25:
         f2:72:20:d9:7a:a9:80:ed:a6:45:e4:cb:14:a3:a9:e8:62:f3:
         0b:84:87:ac:23:b2:d1:11:38:2f:3a:48:6a:22:1b:12:2e:f7:
         f8:d1:1a:41:25:38:00:8d:53:45:1e:42:21:47:62:13:4b:6b:
         88:7e:5b:90:b7:7d:45:69:d5:b2:21:d6:7a:1c:28:ce:82:f8:
         d9:30:02:60:97:e4:8b:4a:fb:b4:f3:24:82:ec:4d:d5:f0:4a:
         fb:17:a4:40:53:1e:00:29:7e:f2:cc:50:a9:fb:8d:1d:2a:aa:
         09:df:cd:f7:18:48:e2:85:03:37:88:61:74:40:fc:95:51:a4:
         04:b1:3c:9e:5d:51:78:23:63:e6:d5:60:99:c2:46:02:4e:f3:
         f8:a4:fe:50:de:f2:be:2d:90:55:46:31:6c:60:5c:37:03:5a:
         2a:76:6a:77:f6:9f:be:02:23:31:e0:3e:d8:88:59:64:c6:7b:
         9f:b9:61:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2K6sL0+qrGuuslniXdCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3
MGIzNTUwHhcNMjUwMzI5MDMwMTE0WhcNMjUwMzMwMDMwMTE0WjAzMTEwLwYDVQQD
Eyg4YWY0YWI3NmY0NWFmMDZkN2ZhYjI3NWNiYWQwZDZmYzgxMzdkOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRPcJaUSnUbS82uCdts4ZQCCE4Dz
Jq2TTHLm+F8VQulVgRhmKVhg6po7/6/uVzBVB/0w2NyrVypC/5BUBCGdk+c4WjPk
K6bytKp3KFxSAN4Fc1G1sDzDNhKDUaWFhTXSGEWWT11CUV77gWubCGGuIA8N/cjV
BgU5bP+BHiXozuBUGyyanNWpNwAqfreONkAKWa0OpVGiR4vkteBHO+VGubJL2OvZ
fzIkiCZ0zKcN5JYixMA6l3hKJVWj1KXzXa6zatp4SzrKJnPqJHz1LbJyVavKSgN/
iq/UcpPkvrCS9gHxvlk3Rr/EP8Pi48IfKpm0bFyS21lJSau/mLXHc0Td4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr0q3b0WvBtf6snXLrQ1vyBN9lGMB8GA1UdIwQY
MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt
ZTE1NDM3MzgwMDk5LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5
LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZlTuq1v
JpwjF/ZO2ulSnaT9WK/ikRq3W9pFYfmnBEZnTytsSKw61zARTH2PMlPqBhQ0Nhjo
lulAq1ZoIRdVx1fIjzWXKh8l8nIg2XqpgO2mReTLFKOp6GLzC4SHrCOy0RE4LzpI
aiIbEi73+NEaQSU4AI1TRR5CIUdiE0triH5bkLd9RWnVsiHWehwozoL42TACYJfk
i0r7tPMkguxN1fBK+xekQFMeACl+8sxQqfuNHSqqCd/N9xhI4oUDN4hhdED8lVGk
BLE8nl1ReCNj5tVgmcJGAk7z+KT+UN7yvi2QVUYxbGBcNwNaKnZqd/afvgIjMeA+
2IhZZMZ7n7lhJw==
-----END CERTIFICATE-----