Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File:                     xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier:          tNZiv5nKd6IaPDsC0vK4kpJG+qf82pwey7F+Or0XkJo=
Subject key identifier:   DA:78:F8:28:D6:76:4B:AF:CB:55:1A:68:AA:E3:C3:D6:62:22:E6:9D
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer:       /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial:       01962E61B3520A9F79F01237CA1B99B96A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number:          085D
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: CJPP1HZUv8IQvCDgl/QhbgH6AhkyB2fzVrX5Hm17JUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:52:0a:9f:79:f0:12:37:ca:1b:99:b9:6a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=da78f828d6764bafcb551a68aae3c3d66222e69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:76:63:50:ad:3c:5a:c6:ca:52:f9:80:c9:
                    4c:91:2d:ab:3a:49:3c:cf:c3:e0:a2:37:ba:c8:8e:
                    84:76:ce:af:70:81:5c:de:f0:47:45:95:75:75:78:
                    c6:bd:d6:bc:53:f3:ed:fe:22:0f:05:a0:41:b5:90:
                    94:78:d2:54:cb:41:e1:ad:5b:d2:e9:c0:3f:24:c1:
                    67:a8:e1:22:ca:e8:67:21:85:2b:85:d7:ac:ba:6a:
                    0e:6a:fb:76:32:51:d8:17:e0:45:77:9a:0a:0e:bc:
                    fa:20:7b:ab:06:8b:5b:0f:de:b5:9c:74:e2:2e:1f:
                    9a:f8:5f:91:12:4f:fa:c0:e6:06:72:11:12:2c:fe:
                    8f:bc:0a:34:52:9e:e8:24:37:2f:7a:8f:ed:46:d8:
                    61:ac:a9:a6:17:a9:43:f6:e1:81:26:4b:ea:55:44:
                    b2:85:d1:9d:a6:3b:ba:79:da:4d:10:56:8b:5e:09:
                    f2:8f:fa:a0:35:ee:78:ff:73:b8:81:4e:34:59:bc:
                    73:94:4c:52:90:ca:b6:35:ac:02:d2:3d:e7:67:ce:
                    53:4e:db:d1:4b:0f:97:ff:85:0a:e1:26:b5:6b:f8:
                    63:84:5d:14:02:93:9a:01:9d:6a:cf:a7:9a:c0:19:
                    fc:ba:5c:84:b0:20:6d:c6:27:a5:c5:22:a7:84:1e:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:F8:28:D6:76:4B:AF:CB:55:1A:68:AA:E3:C3:D6:62:22:E6:9D
            X509v3 Authority Key Identifier:
                keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:aa:99:14:ba:09:fd:de:20:1e:3d:df:83:8a:fe:d3:49:
         49:c0:96:ed:a0:44:8c:36:a6:a9:6d:57:d1:d6:ba:fa:5c:cf:
         aa:74:06:3f:b8:d3:af:83:e5:55:63:82:59:0b:9b:29:12:e6:
         ed:bf:9f:a1:60:10:80:d5:41:a6:09:ad:6f:20:33:ca:e0:41:
         a9:90:99:11:36:5a:55:43:89:3e:6a:bf:ba:0d:8d:ff:38:57:
         16:9b:78:f9:8d:aa:b3:9d:08:f2:43:8f:92:5b:e4:9e:a0:a2:
         bf:36:4f:5c:82:60:fa:37:47:0c:5d:e2:81:7b:73:59:5f:ee:
         a0:07:b0:2d:6c:dc:22:e0:7f:d4:63:84:79:83:48:02:47:86:
         6a:18:bc:bf:fb:18:dd:8a:be:f6:b7:7e:52:4a:b2:dd:b8:b3:
         64:19:83:a1:72:d4:7d:36:ea:fc:00:ea:63:38:69:f9:ad:52:
         21:24:b4:d8:9b:b5:ec:a2:2b:5c:ef:3c:8c:10:f9:38:f4:3f:
         f4:b8:2e:64:15:50:a1:0d:5e:12:08:58:98:7e:cb:0c:7b:e0:
         30:25:25:00:c4:54:c8:cf:e4:a5:69:b8:1b:27:ec:16:01:36:
         ef:2a:cf:60:a5:97:c2:d7:c5:27:79:7f:93:ac:a0:80:6d:8c:
         53:cc:0d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbNSCp958BI3yhuZuWqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OThhZDU3OTdjYWQ5MTUwYWVkMmJjMGI1ZDM5Yjg4YjFi
ZjJiZjQwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
EyhkYTc4ZjgyOGQ2NzY0YmFmY2I1NTFhNjhhYWUzYzNkNjYyMjJlNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrV2Y1CtPFrGylL5gMlMkS2rOkk8
z8Pgoje6yI6Eds6vcIFc3vBHRZV1dXjGvda8U/Pt/iIPBaBBtZCUeNJUy0HhrVvS
6cA/JMFnqOEiyuhnIYUrhdesumoOavt2MlHYF+BFd5oKDrz6IHurBotbD961nHTi
Lh+a+F+REk/6wOYGchESLP6PvAo0Up7oJDcveo/tRthhrKmmF6lD9uGBJkvqVUSy
hdGdpju6edpNEFaLXgnyj/qgNe54/3O4gU40WbxzlExSkMq2NawC0j3nZ85TTtvR
Sw+X/4UK4Sa1a/hjhF0UApOaAZ1qz6eawBn8ulyEsCBtxielxSKnhB7rbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp4+CjWdkuvy1UaaKrjw9ZiIuadMB8GA1UdIwQY
MBaAFMSYrVeXytkVCu0rwLXTm4ixvyv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzIt
YTZjNGNjOWY3ODQwLzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzItYTZjNGNjOWY3ODQw
LzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvqqmRS6
Cf3eIB4934OK/tNJScCW7aBEjDamqW1X0da6+lzPqnQGP7jTr4PlVWOCWQubKRLm
7b+foWAQgNVBpgmtbyAzyuBBqZCZETZaVUOJPmq/ug2N/zhXFpt4+Y2qs50I8kOP
klvknqCivzZPXIJg+jdHDF3igXtzWV/uoAewLWzcIuB/1GOEeYNIAkeGahi8v/sY
3Yq+9rd+Ukqy3bizZBmDoXLUfTbq/ADqYzhp+a1SISS02Ju17KIrXO88jBD5OPQ/
9LguZBVQoQ1eEghYmH7LDHvgMCUlAMRUyM/kpWm4GyfsFgE27yrPYKWXwtfFJ3l/
k6yggG2MU8wNDQ==
-----END CERTIFICATE-----