Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft
File:                     XX2xSVjPTXheWe9cbGefjvVMHYs.mft (raw, json)
Hash identifier:          s7akMpnLoeNkpc16qgaHEww2ygh1AZP66+XHsgEx9IU=
Subject key identifier:   CF:13:37:20:94:D3:95:0C:E9:BD:82:E7:E0:6D:A4:8E:72:52:85:A2
Authority key identifier: 5D:7D:B1:49:58:CF:4D:78:5E:59:EF:5C:6C:67:9F:8E:F5:4C:1D:8B
Certificate issuer:       /CN=5d7db14958cf4d785e59ef5c6c679f8ef54c1d8b
Certificate serial:       01962F06E0252A4ADDD7B0EB1908ACE51D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XX2xSVjPTXheWe9cbGefjvVMHYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft
Manifest number:          04D2
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: XX2xSVjPTXheWe9cbGefjvVMHYs.crl (hash: j5EIdJUzwKkVfVF0yrO8UQylph8+QZQmqr7JXvFDW3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:25:2a:4a:dd:d7:b0:eb:19:08:ac:e5:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7db14958cf4d785e59ef5c6c679f8ef54c1d8b
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=cf13372094d3950ce9bd82e7e06da48e725285a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:f9:3a:2b:54:f8:ba:9b:73:83:73:ff:4a:
                    43:77:1b:ff:0d:63:22:0c:9d:6d:7a:3d:b3:66:e8:
                    0a:6b:6b:d0:04:1e:c1:54:c8:95:de:91:75:b9:da:
                    56:38:76:5c:e5:7e:1c:d3:07:a0:71:ea:22:6b:d4:
                    e4:07:6d:3c:a6:db:f2:2d:8e:09:67:06:96:98:1f:
                    ac:13:63:7f:f4:58:6d:47:fd:e7:63:49:ff:a0:05:
                    48:50:fe:10:89:9a:a3:31:5b:b8:ae:b2:a4:63:19:
                    e6:ef:3c:02:8d:2c:d3:96:0b:d5:79:dc:77:43:15:
                    15:5e:e4:27:0c:b2:6e:bd:cd:e5:34:2c:a3:28:49:
                    76:0b:c2:5f:8d:fb:dd:3c:9a:8d:4c:50:76:d2:cb:
                    44:4e:5c:37:ad:c0:df:53:6a:d5:74:8d:59:ae:61:
                    76:0e:51:b2:e3:41:3d:77:1e:92:4d:ea:dd:de:2d:
                    bf:76:23:75:a0:89:e5:ac:76:39:bf:2d:04:ca:97:
                    a0:df:30:8e:fb:57:c3:d5:05:f5:c4:62:ee:1c:79:
                    64:a0:fe:e2:c5:eb:ee:0c:38:50:6c:c6:49:80:57:
                    92:6a:2d:c2:08:3e:2f:03:b0:20:5f:23:d3:ea:53:
                    89:86:6d:c0:b8:e8:1b:0b:96:01:27:b8:ad:58:f1:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:37:20:94:D3:95:0C:E9:BD:82:E7:E0:6D:A4:8E:72:52:85:A2
            X509v3 Authority Key Identifier:
                keyid:5D:7D:B1:49:58:CF:4D:78:5E:59:EF:5C:6C:67:9F:8E:F5:4C:1D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX2xSVjPTXheWe9cbGefjvVMHYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/217e97-6b2c-4a5d-915b-949c628e5f3c/1/XX2xSVjPTXheWe9cbGefjvVMHYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6d:46:93:0c:fd:65:97:e0:03:51:53:e3:3c:62:0f:42:89:
         ba:ad:53:eb:0c:83:e3:5b:09:fa:5c:b9:a0:74:ca:f1:35:fd:
         d4:99:eb:5b:37:52:53:1c:56:4c:64:17:b2:7c:cc:3e:39:e4:
         83:35:77:a1:55:b6:b5:3e:e4:dd:55:cc:0f:ec:37:5e:e2:9a:
         d4:f3:9c:db:97:6c:99:f7:e3:e3:32:9e:f7:7c:b1:49:37:e8:
         dc:ac:81:07:5e:de:51:c7:ef:e7:5a:29:ba:90:ef:8d:99:d2:
         7c:06:f0:13:9c:2f:6e:8d:f0:0b:04:e9:05:9a:ff:86:42:51:
         3b:44:47:f9:6a:8e:ef:44:9b:c7:5e:26:e0:b9:40:cb:47:12:
         de:df:01:b5:a3:aa:36:a5:4b:04:c7:87:08:a0:d9:6a:0f:82:
         15:c1:ac:3d:91:56:8a:e8:ef:22:e0:42:8b:8c:75:cd:c3:92:
         e0:99:30:31:e6:d9:00:bf:b7:08:cb:39:bd:f1:62:72:c7:c6:
         14:56:12:ed:12:ab:cc:e8:15:b1:73:22:74:d8:0a:35:9e:4a:
         6e:2c:34:3f:08:d9:b4:a6:fc:3a:f9:59:f8:06:d7:96:a8:a6:
         68:01:4d:b3:de:dd:2f:86:43:df:8a:14:16:cb:51:16:97:f1:
         a6:f1:e6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuAlKkrd17DrGQis5R0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2RiMTQ5NThjZjRkNzg1ZTU5ZWY1YzZjNjc5ZjhlZjU0
YzFkOGIwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EyhjZjEzMzcyMDk0ZDM5NTBjZTliZDgyZTdlMDZkYTQ4ZTcyNTI4NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUP5OitU+Lqbc4Nz/0pDdxv/DWMi
DJ1tej2zZugKa2vQBB7BVMiV3pF1udpWOHZc5X4c0wegceoia9TkB208ptvyLY4J
ZwaWmB+sE2N/9FhtR/3nY0n/oAVIUP4QiZqjMVu4rrKkYxnm7zwCjSzTlgvVedx3
QxUVXuQnDLJuvc3lNCyjKEl2C8JfjfvdPJqNTFB20stETlw3rcDfU2rVdI1ZrmF2
DlGy40E9dx6STerd3i2/diN1oInlrHY5vy0Eypeg3zCO+1fD1QX1xGLuHHlkoP7i
xevuDDhQbMZJgFeSai3CCD4vA7AgXyPT6lOJhm3AuOgbC5YBJ7itWPFGuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8TNyCU05UM6b2C5+BtpI5yUoWiMB8GA1UdIwQY
MBaAFF19sUlYz014XlnvXGxnn471TB2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yMTdlOTctNmIyYy00YTVkLTkxNWIt
OTQ5YzYyOGU1ZjNjLzEvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yMTdlOTctNmIyYy00YTVkLTkxNWItOTQ5YzYyOGU1ZjNj
LzEvWFgyeFNWalBUWGhlV2U5Y2JHZWZqdlZNSFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm1Gkwz9
ZZfgA1FT4zxiD0KJuq1T6wyD41sJ+ly5oHTK8TX91JnrWzdSUxxWTGQXsnzMPjnk
gzV3oVW2tT7k3VXMD+w3XuKa1POc25dsmffj4zKe93yxSTfo3KyBB17eUcfv51op
upDvjZnSfAbwE5wvbo3wCwTpBZr/hkJRO0RH+WqO70Sbx14m4LlAy0cS3t8BtaOq
NqVLBMeHCKDZag+CFcGsPZFWiujvIuBCi4x1zcOS4JkwMebZAL+3CMs5vfFicsfG
FFYS7RKrzOgVsXMidNgKNZ5Kbiw0PwjZtKb8OvlZ+AbXlqimaAFNs97dL4ZD34oU
FstRFpfxpvHmAA==
-----END CERTIFICATE-----