Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/5-NW_YhXluXT_jxKtRqMf9Lorlw.mft
File:                     5-NW_YhXluXT_jxKtRqMf9Lorlw.mft (raw, json)
Hash identifier:          5zp6tS0sp86kMsIldrD3JIVR6j/AhHmVa3YVlWabojU=
Subject key identifier:   B4:9D:68:45:21:15:8F:71:E5:33:C7:C2:08:A0:B4:BB:57:50:DE:25
Authority key identifier: E7:E3:56:FD:88:57:96:E5:D3:FE:3C:4A:B5:1A:8C:7F:D2:E8:AE:5C
Certificate issuer:       /CN=e7e356fd885796e5d3fe3c4ab51a8c7fd2e8ae5c
Certificate serial:       0195E1FDCC70B8D1CBA3DD6A3466776B713F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-NW_YhXluXT_jxKtRqMf9Lorlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/5-NW_YhXluXT_jxKtRqMf9Lorlw.mft
Manifest number:          16
Signing time:             Sat 29 Mar 2025 13:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 13:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 13:01:01 +0000
Files and hashes:         1: 5-NW_YhXluXT_jxKtRqMf9Lorlw.crl (hash: linG2+d39kMFj5Eqq8ifn5Rbo+rVWU+Ere0ytxvLLOY=)
                          2: M2fwGzBU6nDKxpm-Pc1IFuJ4Nag.roa (hash: vrxm3TrBX7K8TL87BNMaN8PEU+ZSVIUj0UnP2LzffAE=)
                          3: TVvIcX-QpAgY2-XhAXccg1jFrRg.roa (hash: WjfluRc0Fup/iu8TvUhwhH3tTXWhtQSLGQGQQCQnqlU=)
                          4: UXzMFsylNOI_YT0FdMMlgIvcB8U.roa (hash: sTwN1iNQy02Trg9mPsrQnfv8l5kinXrqcYtMAUmzLLU=)
                          5: YwrBtGeaku_-WnsDDw1TfJix8FQ.roa (hash: ukCjnU6qDGipuaiBu3zJOyHzRciXy0B8bXniccRLO5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:fd:cc:70:b8:d1:cb:a3:dd:6a:34:66:77:6b:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e356fd885796e5d3fe3c4ab51a8c7fd2e8ae5c
        Validity
            Not Before: Mar 29 13:01:01 2025 GMT
            Not After : Mar 30 13:01:01 2025 GMT
        Subject: CN=b49d684521158f71e533c7c208a0b4bb5750de25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:97:f1:74:5f:57:cf:82:31:eb:cb:33:1c:
                    c9:ce:4a:47:9b:23:9f:c0:fb:63:5e:6d:b1:59:aa:
                    96:2c:3f:a2:ce:47:8a:f7:09:d3:aa:72:e8:54:36:
                    34:fb:87:d4:8a:47:97:ec:ef:01:f6:27:16:e0:af:
                    c4:ac:c4:1c:56:d4:36:6c:a4:f7:03:94:be:26:47:
                    49:4b:54:0d:12:bf:76:15:04:42:b0:f9:ed:d1:39:
                    19:ca:11:0a:4d:d8:da:4d:88:52:af:13:61:0e:73:
                    83:8a:eb:d5:36:df:d1:17:63:2f:4f:f5:fd:e8:65:
                    bc:98:aa:7f:01:b8:7e:a2:d9:47:53:bb:e2:27:51:
                    17:03:ba:ec:e7:18:b1:b7:77:7b:44:f4:46:85:f7:
                    46:42:97:05:fb:50:4a:aa:46:2c:52:b7:8b:29:0b:
                    a7:21:c8:ff:c1:63:03:62:6f:1b:77:df:dd:44:64:
                    99:6b:2d:7c:07:ca:13:23:62:00:75:fc:5b:5e:27:
                    93:b7:d3:8f:3d:be:51:00:23:71:01:a8:ca:ff:21:
                    86:2f:eb:18:c6:f7:3e:37:bb:46:96:20:48:54:83:
                    4b:f8:48:bd:e8:c0:18:75:b1:6b:e7:17:64:a4:9b:
                    e4:bd:cf:a2:2d:9a:84:b1:df:6f:b5:6a:39:0e:98:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:68:45:21:15:8F:71:E5:33:C7:C2:08:A0:B4:BB:57:50:DE:25
            X509v3 Authority Key Identifier:
                keyid:E7:E3:56:FD:88:57:96:E5:D3:FE:3C:4A:B5:1A:8C:7F:D2:E8:AE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-NW_YhXluXT_jxKtRqMf9Lorlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/5-NW_YhXluXT_jxKtRqMf9Lorlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/5-NW_YhXluXT_jxKtRqMf9Lorlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:aa:b3:8d:5b:d4:81:d0:9e:fd:25:ba:32:90:f3:23:6f:
         d3:bc:42:f9:fc:49:5b:6c:74:4f:7f:7e:08:80:0e:ed:26:26:
         86:6e:ff:d7:17:79:09:bf:d3:60:61:d9:8e:da:86:d6:7d:10:
         2d:d7:04:87:20:13:e8:a8:0d:f3:1e:7a:9b:39:e3:75:85:42:
         ec:57:96:95:0a:10:ff:b1:84:97:0e:e5:b2:b5:bb:86:3f:33:
         69:19:75:38:a9:94:56:36:7e:7a:0b:8a:54:0a:5b:d5:11:dc:
         b1:de:72:8d:96:2c:d8:30:07:fc:3d:05:de:46:e9:6f:c2:ef:
         5b:2c:79:83:80:97:bb:d4:0e:c7:0f:61:cb:ed:29:98:56:8e:
         f5:cc:ef:86:af:a0:03:3a:46:91:97:fe:9a:68:f6:e2:9b:6a:
         80:7b:46:ab:8e:d7:de:fa:6a:8f:cf:79:90:e4:8e:a4:1e:14:
         7a:ed:a3:24:51:ec:84:36:41:9b:3c:bf:51:32:a5:3b:21:18:
         a2:cd:b6:d5:af:f9:45:53:53:61:27:0f:24:ff:d9:d0:8e:9a:
         ff:8a:07:36:82:0b:b1:66:bb:fd:84:f8:3b:e9:3a:45:c0:74:
         4c:f2:45:b9:6b:f5:2f:b5:0d:47:5c:17:2b:85:37:85:ec:8b:
         ea:15:99:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXh/cxwuNHLo91qNGZ3a3E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTM1NmZkODg1Nzk2ZTVkM2ZlM2M0YWI1MWE4YzdmZDJl
OGFlNWMwHhcNMjUwMzI5MTMwMTAxWhcNMjUwMzMwMTMwMTAxWjAzMTEwLwYDVQQD
EyhiNDlkNjg0NTIxMTU4ZjcxZTUzM2M3YzIwOGEwYjRiYjU3NTBkZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVGX8XRfV8+CMevLMxzJzkpHmyOf
wPtjXm2xWaqWLD+izkeK9wnTqnLoVDY0+4fUikeX7O8B9icW4K/ErMQcVtQ2bKT3
A5S+JkdJS1QNEr92FQRCsPnt0TkZyhEKTdjaTYhSrxNhDnODiuvVNt/RF2MvT/X9
6GW8mKp/Abh+otlHU7viJ1EXA7rs5xixt3d7RPRGhfdGQpcF+1BKqkYsUreLKQun
Icj/wWMDYm8bd9/dRGSZay18B8oTI2IAdfxbXieTt9OPPb5RACNxAajK/yGGL+sY
xvc+N7tGliBIVINL+Ei96MAYdbFr5xdkpJvkvc+iLZqEsd9vtWo5Dpg+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSdaEUhFY9x5TPHwgigtLtXUN4lMB8GA1UdIwQY
MBaAFOfjVv2IV5bl0/48SrUajH/S6K5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1OV19ZaFhsdVhUX2p4S3RScU1mOUxvcmx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjg5MWQtNjY1Mi00ZmMyLWI5OTIt
MTM4NmY0OTBiMWJmLzEvNS1OV19ZaFhsdVhUX2p4S3RScU1mOUxvcmx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lMjg5MWQtNjY1Mi00ZmMyLWI5OTItMTM4NmY0OTBiMWJm
LzEvNS1OV19ZaFhsdVhUX2p4S3RScU1mOUxvcmx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT+qs41b
1IHQnv0lujKQ8yNv07xC+fxJW2x0T39+CIAO7SYmhm7/1xd5Cb/TYGHZjtqG1n0Q
LdcEhyAT6KgN8x56mznjdYVC7FeWlQoQ/7GElw7lsrW7hj8zaRl1OKmUVjZ+eguK
VApb1RHcsd5yjZYs2DAH/D0F3kbpb8LvWyx5g4CXu9QOxw9hy+0pmFaO9czvhq+g
AzpGkZf+mmj24ptqgHtGq47X3vpqj895kOSOpB4Ueu2jJFHshDZBmzy/UTKlOyEY
os221a/5RVNTYScPJP/Z0I6a/4oHNoILsWa7/YT4O+k6RcB0TPJFuWv1L7UNR1wX
K4U3heyL6hWZLg==
-----END CERTIFICATE-----