Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File:                     XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier:          i/fIQRQqnWTfQxFKQ9RoP180LHf3d5j9HKL3uHdSnH0=
Subject key identifier:   DD:10:0B:BB:F6:D0:89:6B:DB:32:D4:75:82:C8:E7:88:47:AA:17:52
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer:       /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial:       01962E9965C2E29D067507952B8354C6C82A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number:          09F6
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: /t7vG/PqRtaw5hzQSgq7VT59EELjs1jPartjiAgpWpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:65:c2:e2:9d:06:75:07:95:2b:83:54:c6:c8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=dd100bbbf6d0896bdb32d47582c8e78847aa1752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:40:51:ef:5d:03:4a:8d:c1:5d:f6:fc:6f:
                    51:90:fc:60:c3:d0:5e:91:f3:7c:e7:ab:8a:76:1c:
                    b1:aa:8b:d9:3e:0e:9b:f8:8c:42:d2:09:76:84:15:
                    96:b8:be:47:83:34:37:8b:f1:9c:32:b6:54:74:29:
                    a3:a2:75:56:82:54:2a:a8:3d:1e:57:63:1e:21:39:
                    9a:10:32:9c:56:18:60:2c:20:df:8a:7c:54:97:94:
                    26:62:98:5d:6e:2c:13:bc:4f:3c:48:88:f3:25:e3:
                    63:c7:b6:23:2b:e9:5f:60:d0:16:ed:fb:64:5e:be:
                    a6:52:3b:a4:87:55:ff:6f:ef:b4:8a:3c:48:b4:b2:
                    4b:53:05:82:b4:c0:b2:58:d2:4c:b7:0c:a8:06:88:
                    80:22:fa:de:6e:9e:b5:a8:3d:ec:ed:ed:07:9c:c8:
                    d4:72:c6:38:db:d9:fb:f9:5f:23:bb:61:9a:9c:60:
                    b3:41:73:03:65:3c:b2:46:e8:2d:56:e3:42:1c:5c:
                    50:16:0e:c6:5c:3a:2b:05:b2:96:72:d3:9b:e4:ae:
                    91:02:4f:de:71:6d:f6:00:dc:e9:5d:70:7d:82:2e:
                    35:74:33:91:4a:67:9b:1d:d1:a5:ea:d7:f0:7f:86:
                    c3:af:05:91:7f:25:d0:92:dd:74:85:bb:f1:2f:2c:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:0B:BB:F6:D0:89:6B:DB:32:D4:75:82:C8:E7:88:47:AA:17:52
            X509v3 Authority Key Identifier:
                keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:d5:e0:b8:67:82:f3:f6:ff:82:17:e9:89:1c:91:1a:0d:
         19:3d:fd:d2:ea:b6:d4:84:d4:b0:b2:4a:27:08:39:2d:d3:b7:
         60:af:f5:a1:3e:75:f5:49:f9:74:0f:11:a6:eb:6b:11:b3:47:
         1c:f3:9c:28:9a:c7:e3:a2:24:55:b3:3f:04:9e:43:3b:f7:4b:
         c3:ec:be:22:1c:d7:1c:e6:bd:4a:20:12:bc:85:91:6b:26:10:
         df:66:ed:07:07:4f:fb:b4:e2:77:47:7d:ff:3f:b3:80:52:77:
         d0:51:85:58:f9:16:68:5e:7f:bb:81:64:77:a2:99:24:18:cb:
         fb:e4:99:9e:5a:1a:d2:00:fd:04:3c:ae:5e:52:de:85:22:b6:
         2f:ee:88:a1:e7:20:e8:6e:36:a5:fc:d1:50:b3:b7:18:fe:89:
         2f:5d:8e:86:3e:19:ca:93:be:34:5a:d5:00:3e:dc:93:e3:b0:
         ae:0f:cd:48:78:99:61:6d:e3:87:82:9a:52:c9:64:17:66:17:
         bf:92:92:0a:46:60:25:be:8f:b4:39:03:ec:8d:2d:d6:bf:0b:
         f4:bb:01:15:ae:5f:85:4c:58:0e:a7:b0:d4:c8:ce:2f:2c:2a:
         b9:74:8b:aa:3b:a5:54:92:83:85:cd:67:0d:71:b6:45:7f:4b:
         2a:8b:d6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWXC4p0GdQeVK4NUxsgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTY5YzkxZDQ1MzM5NmJmYTE2NmYwNTFiZjhmMDZjMDNh
MDg1Y2IwHhcNMjUwNDEzMTAwMjA3WhcNMjUwNDE0MTAwMjA3WjAzMTEwLwYDVQQD
EyhkZDEwMGJiYmY2ZDA4OTZiZGIzMmQ0NzU4MmM4ZTc4ODQ3YWExNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCdAUe9dA0qNwV32/G9RkPxgw9Be
kfN856uKdhyxqovZPg6b+IxC0gl2hBWWuL5HgzQ3i/GcMrZUdCmjonVWglQqqD0e
V2MeITmaEDKcVhhgLCDfinxUl5QmYphdbiwTvE88SIjzJeNjx7YjK+lfYNAW7ftk
Xr6mUjukh1X/b++0ijxItLJLUwWCtMCyWNJMtwyoBoiAIvrebp61qD3s7e0HnMjU
csY429n7+V8ju2GanGCzQXMDZTyyRugtVuNCHFxQFg7GXDorBbKWctOb5K6RAk/e
cW32ANzpXXB9gi41dDORSmebHdGl6tfwf4bDrwWRfyXQkt10hbvxLyxnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0QC7v20Ilr2zLUdYLI54hHqhdSMB8GA1UdIwQY
MBaAFFzmnJHUUzlr+hZvBRv48GwDoIXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQt
YTU5N2VlNjM3ZGI0LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQtYTU5N2VlNjM3ZGI0
LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4HV4Lhn
gvP2/4IX6YkckRoNGT390uq21ITUsLJKJwg5LdO3YK/1oT519Un5dA8RputrEbNH
HPOcKJrH46IkVbM/BJ5DO/dLw+y+IhzXHOa9SiASvIWRayYQ32btBwdP+7Tid0d9
/z+zgFJ30FGFWPkWaF5/u4Fkd6KZJBjL++SZnloa0gD9BDyuXlLehSK2L+6Ioecg
6G42pfzRULO3GP6JL12Ohj4ZypO+NFrVAD7ck+Owrg/NSHiZYW3jh4KaUslkF2YX
v5KSCkZgJb6PtDkD7I0t1r8L9LsBFa5fhUxYDqew1MjOLywquXSLqjulVJKDhc1n
DXG2RX9LKovWNw==
-----END CERTIFICATE-----