Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File:                     xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier:          C38Y6UsqSc8VT7yUXBfPJqdurBJZX1Kf1taqQBSvn6g=
Subject key identifier:   49:F1:65:04:12:EF:03:74:92:DF:D3:8B:37:4E:DE:15:0F:D2:8D:6C
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer:       /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial:       01962F3D369FB26D0CB9A164B0EF251A84E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number:          0B2B
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: XIEs3VBiLuYePpAdyz5XqRhx13GTCMKl2C8JOTvX9Uk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:9f:b2:6d:0c:b9:a1:64:b0:ef:25:1a:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=49f1650412ef037492dfd38b374ede150fd28d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:8e:7a:a5:50:9a:e8:dd:0f:19:bd:c6:6c:
                    30:2d:c9:b4:04:26:6f:5c:05:c4:0d:55:e5:62:f0:
                    94:b4:c3:df:ac:d6:7f:70:96:78:4c:e6:44:59:ee:
                    3d:4e:9d:8e:fd:11:47:f4:77:a6:13:fb:cd:ae:2b:
                    1e:cc:0e:8f:47:19:8d:ae:9b:5e:84:f7:6c:d1:e9:
                    7b:79:8b:12:e4:7e:a6:a1:06:cf:76:d2:65:bd:2b:
                    04:da:ca:bc:a2:ce:79:58:41:87:98:c7:97:cc:40:
                    60:ab:ad:13:18:5b:94:1d:f0:a5:96:23:6e:6b:e0:
                    a3:1d:e5:99:11:04:a6:74:a9:b2:ec:f3:c9:d3:76:
                    bf:6e:13:c8:7e:9e:43:a3:a9:16:5c:35:87:ee:21:
                    24:32:6b:b9:56:d3:4d:74:1b:f6:43:57:2d:74:db:
                    b3:f0:5e:0f:2c:22:73:88:12:86:2d:2e:de:82:8e:
                    51:36:6b:52:ce:b3:59:f2:d6:fd:7d:54:24:81:b2:
                    37:c0:82:db:47:92:67:17:3f:53:05:df:74:4f:6d:
                    bb:b9:49:f9:47:ec:f6:ea:fc:46:5c:5a:77:ba:e2:
                    0e:c1:4e:0b:83:a7:15:13:90:93:4e:89:e0:32:84:
                    83:48:a3:b5:bc:b3:59:25:d6:ad:92:74:ba:29:c7:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:65:04:12:EF:03:74:92:DF:D3:8B:37:4E:DE:15:0F:D2:8D:6C
            X509v3 Authority Key Identifier:
                keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:d3:86:9c:3e:41:2b:49:9a:e2:5b:1d:50:e6:22:14:a6:
         70:52:98:27:44:a8:a2:da:5c:06:37:87:03:bc:03:52:69:91:
         6d:ce:9d:87:47:ca:44:33:e3:15:be:79:04:1c:13:ce:a8:a4:
         0e:29:90:fa:ff:ba:4b:f6:e5:bc:2c:0a:f7:3b:4f:f3:7e:16:
         71:1f:c4:62:79:ac:81:3b:d1:26:13:45:db:41:20:e0:63:a1:
         9a:a8:ee:c3:01:c2:56:2c:0b:13:71:f2:d6:42:d3:af:f6:2a:
         f7:29:ec:f0:2d:18:aa:5f:eb:60:3f:2a:17:8e:ea:df:c9:46:
         9c:58:68:c1:4d:a1:cc:b8:0a:f9:38:6d:70:f5:77:a9:06:65:
         5c:40:f9:92:11:25:4d:65:80:49:48:1b:80:57:2a:ae:12:7e:
         3a:26:d2:24:a9:cb:bc:c6:74:10:60:d6:36:db:37:c9:f8:95:
         0c:7f:81:52:94:f6:ac:6a:25:29:5d:54:7f:58:d8:fa:82:39:
         b3:29:3e:51:13:02:b1:c4:76:16:9c:3a:31:6d:58:45:14:37:
         14:0b:75:7c:93:e5:46:be:f9:8a:6f:50:88:24:4b:de:ab:7b:
         90:89:e5:a2:23:3c:e8:51:bc:15:bd:39:4f:d5:16:f1:93:13:
         fd:d7:a1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPTafsm0MuaFksO8lGoTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw
M2E2YzEwHhcNMjUwNDEzMTMwMTAyWhcNMjUwNDE0MTMwMTAyWjAzMTEwLwYDVQQD
Eyg0OWYxNjUwNDEyZWYwMzc0OTJkZmQzOGIzNzRlZGUxNTBmZDI4ZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY6OeqVQmujdDxm9xmwwLcm0BCZv
XAXEDVXlYvCUtMPfrNZ/cJZ4TOZEWe49Tp2O/RFH9HemE/vNrisezA6PRxmNrpte
hPds0el7eYsS5H6moQbPdtJlvSsE2sq8os55WEGHmMeXzEBgq60TGFuUHfClliNu
a+CjHeWZEQSmdKmy7PPJ03a/bhPIfp5Do6kWXDWH7iEkMmu5VtNNdBv2Q1ctdNuz
8F4PLCJziBKGLS7ego5RNmtSzrNZ8tb9fVQkgbI3wILbR5JnFz9TBd90T227uUn5
R+z26vxGXFp3uuIOwU4Lg6cVE5CTTongMoSDSKO1vLNZJdatknS6KcfBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnxZQQS7wN0kt/TizdO3hUP0o1sMB8GA1UdIwQY
MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt
MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi
LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphfThpw+
QStJmuJbHVDmIhSmcFKYJ0SootpcBjeHA7wDUmmRbc6dh0fKRDPjFb55BBwTzqik
DimQ+v+6S/blvCwK9ztP834WcR/EYnmsgTvRJhNF20Eg4GOhmqjuwwHCViwLE3Hy
1kLTr/Yq9yns8C0Yql/rYD8qF47q38lGnFhowU2hzLgK+ThtcPV3qQZlXED5khEl
TWWASUgbgFcqrhJ+OibSJKnLvMZ0EGDWNts3yfiVDH+BUpT2rGolKV1Uf1jY+oI5
syk+URMCscR2Fpw6MW1YRRQ3FAt1fJPlRr75im9QiCRL3qt7kInloiM86FG8Fb05
T9UW8ZMT/deh5g==
-----END CERTIFICATE-----