Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File:                     xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier:          NwxWaJqUZ4PBOzH1jN2OKvmXUPNGBzY4cFODwhvzmbM=
Subject key identifier:   58:8B:DC:97:CA:FC:0E:59:F1:85:96:C5:DD:29:45:56:04:02:B6:DC
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer:       /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial:       01962DF3F1084EC27010B5221EB8E51CE691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number:          0818
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
                          2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: HB56+zmvS6vtYk7iqaGfdZjTLoFofvY4Qb268Ob2iyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:08:4e:c2:70:10:b5:22:1e:b8:e5:1c:e6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=588bdc97cafc0e59f18596c5dd2945560402b6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8d:8a:ac:4c:a4:a2:d2:24:dd:a1:89:05:ed:
                    a3:62:22:62:41:21:14:f5:58:05:b9:35:2c:ff:4b:
                    1b:23:e0:8a:f7:33:ef:24:90:ef:93:43:cf:11:fe:
                    55:d8:f7:f7:8b:db:16:63:fe:bf:12:c9:de:fb:4a:
                    28:a2:86:99:0c:9f:1e:5f:fa:dc:06:0f:3a:3a:9e:
                    8f:1e:13:eb:a7:33:b5:5a:6c:53:fe:7d:b8:72:42:
                    1e:97:ac:55:72:6d:ce:08:20:0b:d5:42:2f:6e:4d:
                    02:2c:cd:2f:f1:b1:ad:49:41:40:9b:d5:8d:15:b7:
                    24:31:d3:87:0c:4c:77:64:d3:cf:40:f1:15:fc:b5:
                    fd:44:90:82:60:e3:e9:a3:fa:c1:0d:85:da:c0:ce:
                    dd:83:9c:04:87:35:2b:b4:53:f7:c0:af:d2:50:ea:
                    fe:41:9f:63:b9:44:42:29:2e:e4:ba:73:54:78:8c:
                    90:c8:d0:58:7a:d1:68:5e:17:ea:43:00:7c:da:5c:
                    c2:d2:dd:c5:b2:28:87:b8:da:d6:3c:ce:52:8a:99:
                    64:25:f4:6a:95:65:a0:fb:3e:b7:70:26:88:d7:fc:
                    fe:18:50:4f:b1:f7:64:c8:5b:13:3f:03:3f:c0:d3:
                    47:3f:3b:fe:db:b8:ff:66:ee:18:ae:48:b2:f8:9d:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8B:DC:97:CA:FC:0E:59:F1:85:96:C5:DD:29:45:56:04:02:B6:DC
            X509v3 Authority Key Identifier:
                keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:37:ad:d9:99:37:f0:54:02:83:6a:ed:48:ff:8a:fc:8c:
         12:e2:b5:86:db:1b:0f:a1:4a:7d:b2:d3:c1:7d:02:3a:c5:87:
         2b:9e:e6:4c:66:c3:13:44:9a:44:d0:f3:a5:f2:4a:95:dd:cd:
         8b:b1:d9:89:de:43:1f:dc:2a:c8:fb:88:e8:fe:38:b1:56:a2:
         05:9d:7a:d3:0a:82:1e:1f:1d:cf:63:d8:f4:50:4b:6f:08:2b:
         cf:4c:f3:e9:89:7e:6e:a1:8e:89:26:c0:13:0a:87:64:c2:73:
         e4:d8:90:40:74:d4:0b:f8:bf:66:41:eb:2c:9a:ae:8c:36:32:
         43:bc:7e:07:c3:1a:c3:e6:57:91:69:03:dd:43:f0:78:d5:15:
         4c:11:d7:12:96:8a:8d:df:c4:9a:e4:9d:6c:53:77:0c:e5:44:
         23:58:57:dd:09:bb:a1:ae:62:68:56:75:6d:51:32:fa:95:b4:
         a6:e3:9b:74:a5:56:3a:b8:92:27:1c:08:a1:8d:7e:3c:22:2c:
         7c:e1:50:ea:db:6f:aa:8c:3f:be:ba:ff:b4:54:61:09:b2:a7:
         44:4d:55:e3:4f:01:37:7f:27:6c:2f:2c:72:0c:f9:d5:f5:34:
         f5:08:b7:24:f3:e7:d5:42:f4:a8:85:e3:bb:49:81:d2:42:0b:
         51:7d:73:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/EITsJwELUiHrjlHOaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjUwNDEzMDcwMTIzWhcNMjUwNDE0MDcwMTIzWjAzMTEwLwYDVQQD
Eyg1ODhiZGM5N2NhZmMwZTU5ZjE4NTk2YzVkZDI5NDU1NjA0MDJiNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y2KrEykotIk3aGJBe2jYiJiQSEU
9VgFuTUs/0sbI+CK9zPvJJDvk0PPEf5V2Pf3i9sWY/6/Esne+0ooooaZDJ8eX/rc
Bg86Op6PHhPrpzO1WmxT/n24ckIel6xVcm3OCCAL1UIvbk0CLM0v8bGtSUFAm9WN
FbckMdOHDEx3ZNPPQPEV/LX9RJCCYOPpo/rBDYXawM7dg5wEhzUrtFP3wK/SUOr+
QZ9juURCKS7kunNUeIyQyNBYetFoXhfqQwB82lzC0t3FsiiHuNrWPM5SiplkJfRq
lWWg+z63cCaI1/z+GFBPsfdkyFsTPwM/wNNHPzv+27j/Zu4Yrkiy+J12OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiL3JfK/A5Z8YWWxd0pRVYEArbcMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBQ3rdmZ
N/BUAoNq7Uj/ivyMEuK1htsbD6FKfbLTwX0COsWHK57mTGbDE0SaRNDzpfJKld3N
i7HZid5DH9wqyPuI6P44sVaiBZ160wqCHh8dz2PY9FBLbwgrz0zz6Yl+bqGOiSbA
EwqHZMJz5NiQQHTUC/i/ZkHrLJqujDYyQ7x+B8Maw+ZXkWkD3UPweNUVTBHXEpaK
jd/EmuSdbFN3DOVEI1hX3Qm7oa5iaFZ1bVEy+pW0puObdKVWOriSJxwIoY1+PCIs
fOFQ6ttvqow/vrr/tFRhCbKnRE1V408BN38nbC8scgz51fU09Qi3JPPn1UL0qIXj
u0mB0kILUX1zhw==
-----END CERTIFICATE-----