Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File:                     XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier:          X6MQXjqLxG0b3k720O45JMsyEnaw8mMRH48RK0+02T8=
Subject key identifier:   02:81:2A:43:37:42:DD:7D:01:D7:1B:00:35:ED:5A:2F:68:3D:1D:20
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer:       /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial:       01962F74ED02973F5BBBBF5C4336988145FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number:          06A7
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
                          2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: 9MklIjPORNshJYivPV8aikRt9sEJj6+wlvYPC/kkHF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ed:02:97:3f:5b:bb:bf:5c:43:36:98:81:45:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=02812a433742dd7d01d71b0035ed5a2f683d1d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:a8:7c:61:d3:20:71:28:6e:13:00:33:e7:
                    dd:1a:93:d9:4b:d0:81:a7:63:03:26:cb:11:7c:64:
                    3b:47:a9:b9:7f:ce:97:0a:e4:ab:8f:6f:51:a1:68:
                    46:58:6e:a2:be:d4:7d:89:6c:84:dc:79:67:be:b9:
                    45:05:f8:49:b2:d3:c8:e9:8e:9e:ec:ce:9c:22:da:
                    a7:53:82:74:6b:c3:27:5e:37:7f:7d:fe:ce:79:3e:
                    a0:0a:b3:b6:dd:2b:2d:f9:cf:63:49:b8:75:72:fa:
                    43:64:cb:73:9f:eb:f2:3d:86:3c:eb:5c:be:37:35:
                    e7:26:5d:1c:1c:0d:d6:f0:47:05:c0:a1:5f:f9:c9:
                    83:b9:d0:17:eb:dd:a3:72:3a:98:82:53:d7:a7:f6:
                    b5:88:51:01:65:44:ec:28:53:09:0f:b1:81:c9:d0:
                    35:7f:c7:4e:8e:27:34:0a:eb:7b:1d:05:c2:f2:b6:
                    f9:73:af:e0:18:41:ff:80:b9:46:1e:73:57:8d:7b:
                    e7:26:80:b7:db:0c:4c:10:9f:fc:58:b6:05:5f:50:
                    6e:9c:55:6d:b3:4d:c5:d5:86:4b:b1:8a:64:5c:0a:
                    3e:1f:ac:9b:1f:74:9a:81:27:88:d5:5d:96:c1:ea:
                    9d:a1:90:18:04:ba:7c:1d:32:ed:52:24:ff:4f:db:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:2A:43:37:42:DD:7D:01:D7:1B:00:35:ED:5A:2F:68:3D:1D:20
            X509v3 Authority Key Identifier:
                keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:10:d5:9b:a5:b2:fe:4b:23:cb:7d:b6:e7:ac:a9:ec:89:
         c2:3b:a8:de:ce:e0:4d:ac:5c:c3:13:36:5c:98:bf:da:14:98:
         00:af:b2:73:60:26:d6:29:83:58:41:10:a8:49:e7:c8:de:82:
         22:bd:49:34:c3:c0:8b:3c:d8:d2:b1:cb:1c:f5:63:56:d8:0c:
         17:c7:2f:5d:95:24:f9:aa:f9:c3:f1:ce:6d:f4:97:24:7d:6f:
         a8:eb:cc:a3:a6:75:0a:2f:21:57:31:83:74:86:65:07:39:8f:
         c5:a8:f9:28:d7:54:c8:5e:45:2a:23:67:ab:b9:b4:91:d8:3e:
         33:d9:d5:62:87:0c:a2:68:42:73:23:e5:5b:ce:85:81:f6:40:
         20:ec:30:fd:37:c3:42:d5:a1:ed:82:cd:1d:ba:1c:11:8e:b5:
         60:f8:cf:1b:69:82:15:b7:a2:7d:3a:34:2d:3f:91:2c:ea:3c:
         8b:40:70:87:b6:d7:82:d1:b4:41:77:46:a8:37:52:ec:85:d6:
         4e:42:69:32:bb:a3:a7:c7:4e:e1:c1:44:e5:3d:32:ee:d9:83:
         86:28:43:8a:1b:b9:af:6b:ef:3d:a8:60:5a:f3:67:dd:32:f6:
         a0:07:d6:6d:a5:86:37:94:cd:4c:50:dc:a8:84:93:1a:7c:5f:
         83:04:8b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdO0Clz9bu79cQzaYgUX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1
ZDQ5MWUwHhcNMjUwNDEzMTQwMTU0WhcNMjUwNDE0MTQwMTU0WjAzMTEwLwYDVQQD
EygwMjgxMmE0MzM3NDJkZDdkMDFkNzFiMDAzNWVkNWEyZjY4M2QxZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6ofGHTIHEobhMAM+fdGpPZS9CB
p2MDJssRfGQ7R6m5f86XCuSrj29RoWhGWG6ivtR9iWyE3HlnvrlFBfhJstPI6Y6e
7M6cItqnU4J0a8MnXjd/ff7OeT6gCrO23Sst+c9jSbh1cvpDZMtzn+vyPYY861y+
NzXnJl0cHA3W8EcFwKFf+cmDudAX692jcjqYglPXp/a1iFEBZUTsKFMJD7GBydA1
f8dOjic0Cut7HQXC8rb5c6/gGEH/gLlGHnNXjXvnJoC32wxMEJ/8WLYFX1BunFVt
s03F1YZLsYpkXAo+H6ybH3SagSeI1V2WweqdoZAYBLp8HTLtUiT/T9vNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKBKkM3Qt19AdcbADXtWi9oPR0gMB8GA1UdIwQY
MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt
YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw
LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcMQ1Zul
sv5LI8t9tuesqeyJwjuo3s7gTaxcwxM2XJi/2hSYAK+yc2Am1imDWEEQqEnnyN6C
Ir1JNMPAizzY0rHLHPVjVtgMF8cvXZUk+ar5w/HObfSXJH1vqOvMo6Z1Ci8hVzGD
dIZlBzmPxaj5KNdUyF5FKiNnq7m0kdg+M9nVYocMomhCcyPlW86FgfZAIOww/TfD
QtWh7YLNHbocEY61YPjPG2mCFbeifTo0LT+RLOo8i0Bwh7bXgtG0QXdGqDdS7IXW
TkJpMrujp8dO4cFE5T0y7tmDhihDihu5r2vvPahgWvNn3TL2oAfWbaWGN5TNTFDc
qISTGnxfgwSLCA==
-----END CERTIFICATE-----