Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File:                     xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier:          b1xs5BT2JAsVnxJxWNf/Cvp22qwybsMnDwGkBGECyx8=
Subject key identifier:   E4:25:6B:08:2E:6D:64:24:5D:57:08:75:C1:56:E5:9C:F7:59:44:CF
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer:       /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial:       01962F3DBAE335D73C773F2EF911B20A1F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: L2zGAE1JMln53kgjbQe8z6gc2n3MEH1Zj4fcm/7jXJc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ba:e3:35:d7:3c:77:3f:2e:f9:11:b2:0a:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=e4256b082e6d64245d570875c156e59cf75944cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:38:d0:34:9d:49:6d:75:9e:51:5d:48:6e:
                    00:fa:29:78:70:9e:e8:27:a6:37:97:f5:68:29:1e:
                    4e:21:20:12:50:5d:7e:12:e7:f3:e8:45:8a:fa:cd:
                    cc:77:b5:b1:12:63:47:07:cd:25:60:35:80:2c:46:
                    29:52:f5:8c:74:90:e1:67:94:98:94:ee:fe:52:0d:
                    73:ec:a9:f5:77:1c:f8:60:a4:3b:87:a9:94:b0:d3:
                    9b:d8:30:74:5e:69:e5:95:a5:b2:ca:ce:38:44:eb:
                    54:eb:ef:4d:01:e2:8e:4d:f7:35:c4:36:0a:65:c6:
                    cc:13:1a:e3:eb:f7:f9:79:26:db:bc:77:8b:37:a5:
                    53:b3:63:b0:af:01:e1:21:6a:bc:3e:2d:13:5d:09:
                    9c:bf:73:9e:7f:6b:d3:88:bb:2c:dc:e1:58:7a:fc:
                    fd:e0:11:89:0c:47:c7:c1:ae:1f:e2:a3:6f:31:7d:
                    a3:aa:e7:7d:2b:be:5d:09:87:56:33:b9:6b:e1:2d:
                    17:e4:e8:90:83:6b:41:d0:a8:60:3f:eb:ad:47:d0:
                    61:c0:68:2d:5f:4e:2f:b9:82:a9:bb:e4:c8:7b:9c:
                    7e:42:ea:70:24:b3:0a:e0:5f:ba:fe:73:b9:04:fa:
                    5c:8b:7d:6b:4e:fb:18:04:6e:68:3a:7e:4e:db:6c:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:6B:08:2E:6D:64:24:5D:57:08:75:C1:56:E5:9C:F7:59:44:CF
            X509v3 Authority Key Identifier:
                keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1c:4b:d3:5b:90:cd:55:48:ee:19:63:72:15:ba:6d:1f:cf:
         a5:86:78:55:a0:24:ba:b8:a4:a4:9a:16:2c:be:ff:81:d9:4f:
         1f:54:ad:fe:d2:e8:49:9a:7b:2a:81:0f:83:b1:34:5e:8b:3f:
         45:99:31:6f:bd:75:37:8e:31:fc:e8:10:ff:43:37:57:fe:ba:
         79:f4:aa:31:91:29:02:85:27:15:9c:6c:76:9a:93:f8:7a:88:
         d2:38:0b:a2:91:45:a4:70:23:cd:f8:65:86:05:a3:6e:8c:95:
         bc:f8:e1:61:4d:3e:30:20:9b:d2:11:e0:81:13:ea:94:8c:d5:
         e2:21:48:20:9f:ca:e3:db:23:fb:b7:13:44:05:25:28:27:57:
         76:ba:0d:93:ee:f2:f1:6c:a1:0f:24:bf:bc:8a:c7:8d:9b:11:
         21:f5:c1:cc:5a:d5:50:f0:e8:fd:cb:0f:09:09:98:ab:80:32:
         5d:9f:4e:ce:34:a3:69:5e:c1:17:24:09:6d:fa:e9:8b:66:ce:
         c1:d8:5c:ca:65:b6:1c:40:4c:80:9e:fa:cd:e8:12:0e:03:36:
         99:08:ac:48:0b:83:bf:33:41:79:a5:3b:01:4c:28:67:01:1f:
         e8:c6:12:fc:f4:c6:03:5e:ef:21:ca:02:f8:46:79:93:ca:a0:
         f4:0b:17:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbrjNdc8dz8u+RGyCh8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGE2NTU4ZDY5MjNiZTQyOWQ5Mzg5NTMxYWRjMTAwODc5
NTI3MGIwHhcNMjUwNDEzMTMwMTM2WhcNMjUwNDE0MTMwMTM2WjAzMTEwLwYDVQQD
EyhlNDI1NmIwODJlNmQ2NDI0NWQ1NzA4NzVjMTU2ZTU5Y2Y3NTk0NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTA40DSdSW11nlFdSG4A+il4cJ7o
J6Y3l/VoKR5OISASUF1+Eufz6EWK+s3Md7WxEmNHB80lYDWALEYpUvWMdJDhZ5SY
lO7+Ug1z7Kn1dxz4YKQ7h6mUsNOb2DB0XmnllaWyys44ROtU6+9NAeKOTfc1xDYK
ZcbMExrj6/f5eSbbvHeLN6VTs2OwrwHhIWq8Pi0TXQmcv3Oef2vTiLss3OFYevz9
4BGJDEfHwa4f4qNvMX2jqud9K75dCYdWM7lr4S0X5OiQg2tB0KhgP+utR9BhwGgt
X04vuYKpu+TIe5x+QupwJLMK4F+6/nO5BPpci31rTvsYBG5oOn5O22xHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQlawgubWQkXVcIdcFW5Zz3WUTPMB8GA1UdIwQY
MBaAFMVKZVjWkjvkKdk4lTGtwQCHlScLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2Mt
ZWMyZWQwYjc4MmI3LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2MtZWMyZWQwYjc4MmI3
LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThxL01uQ
zVVI7hljchW6bR/PpYZ4VaAkurikpJoWLL7/gdlPH1St/tLoSZp7KoEPg7E0Xos/
RZkxb711N44x/OgQ/0M3V/66efSqMZEpAoUnFZxsdpqT+HqI0jgLopFFpHAjzfhl
hgWjboyVvPjhYU0+MCCb0hHggRPqlIzV4iFIIJ/K49sj+7cTRAUlKCdXdroNk+7y
8WyhDyS/vIrHjZsRIfXBzFrVUPDo/csPCQmYq4AyXZ9OzjSjaV7BFyQJbfrpi2bO
wdhcymW2HEBMgJ76zegSDgM2mQisSAuDvzNBeaU7AUwoZwEf6MYS/PTGA17vIcoC
+EZ5k8qg9AsX/A==
-----END CERTIFICATE-----