Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File:                     xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier:          HuYXR1Qfu4fBlCp0RkvvizNPyiKSP6NKF2Knh0beRmc=
Subject key identifier:   83:F3:B1:6E:16:AB:47:E6:8A:F3:63:5A:35:8E:48:18:4A:E9:05:32
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer:       /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial:       01962E99363CEAABC4D4D2B98C2CB4FD35D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
                          2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: LZXLSRy2CMjuVJQdkSeVLRa2s1/b1E6VbVbpnJDpFug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:36:3c:ea:ab:c4:d4:d2:b9:8c:2c:b4:fd:35:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=83f3b16e16ab47e68af3635a358e48184ae90532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:c4:a9:58:65:f3:33:bc:71:0c:e1:bc:c0:
                    da:1a:38:20:ec:84:20:2b:9c:ac:3c:2d:a8:b2:3b:
                    d2:f4:40:9e:cf:74:ed:93:fd:c8:94:79:5d:33:8d:
                    fb:c8:c6:93:31:68:11:02:72:26:b5:8b:e9:3c:81:
                    c5:00:6a:98:04:66:c9:4e:88:a7:57:1b:17:10:4d:
                    85:a9:34:c8:22:d9:7e:34:5e:0c:41:ec:a2:be:f7:
                    39:da:f1:41:54:67:09:79:84:c6:71:40:da:a0:a1:
                    11:1b:a2:70:17:c6:c8:e9:e6:b0:36:dd:b2:1c:4f:
                    9f:88:99:83:c2:b5:59:94:7f:d9:68:d6:75:d3:b2:
                    43:ec:6c:4c:f2:9e:1c:10:1e:d0:75:af:24:4c:1d:
                    70:8f:37:26:03:f4:68:83:ef:43:ba:46:81:ed:db:
                    43:74:c8:09:cd:cf:22:09:94:a9:77:28:a5:34:65:
                    e2:2d:e8:8c:df:e6:9c:7b:41:6d:ef:97:2d:02:a9:
                    16:7a:f0:7b:60:0d:3f:6c:2c:8b:c9:3e:7f:19:8c:
                    d6:17:d7:c5:a0:73:bc:10:fe:3f:db:33:e7:79:92:
                    fe:c1:96:ea:6f:d7:82:29:60:f7:82:40:4b:4d:13:
                    4c:cb:dc:3a:6c:79:35:fc:5f:a1:9e:33:3d:41:05:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:B1:6E:16:AB:47:E6:8A:F3:63:5A:35:8E:48:18:4A:E9:05:32
            X509v3 Authority Key Identifier:
                keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:62:55:54:2f:9a:9d:94:03:c2:35:63:b7:7c:ef:4c:60:
         5d:d8:65:0b:df:f2:00:f0:51:d6:5e:09:87:1a:ea:6f:c2:44:
         60:e4:a9:6c:61:ae:01:89:a6:ac:46:35:cf:1d:62:14:39:6c:
         a6:17:17:ec:04:fa:6d:b5:94:e7:9f:b7:db:06:a4:fa:00:e8:
         ea:2f:cd:9e:10:51:57:08:4a:d8:86:91:95:c5:3f:ce:39:cd:
         5a:05:67:9c:65:b8:b9:13:98:d4:ab:d6:2e:c0:ad:70:82:89:
         73:f4:5c:bd:8b:f4:f1:b0:07:dc:04:6b:a3:6d:b8:05:6f:bf:
         39:04:df:d2:1b:65:7a:72:11:92:66:6b:19:8f:c0:05:86:80:
         67:ff:96:ae:cb:de:9e:21:a0:c3:ca:82:e4:0d:1b:db:05:4a:
         f2:8b:4c:d0:78:1a:ff:1b:16:06:5b:ae:2e:34:d8:d0:b7:fb:
         b7:89:99:04:2a:d2:d4:b8:a4:31:d1:f8:56:c9:f5:9c:3f:1f:
         1d:c9:b9:e7:85:8a:1d:17:b9:c9:60:6a:2f:7f:7e:a8:a1:b9:
         48:88:1d:61:bf:a3:43:a0:10:f7:96:f2:d9:34:6a:c8:19:0c:
         02:00:f2:05:04:76:9b:cd:cc:8c:65:a6:c2:d8:ba:d1:ce:a3:
         0b:6a:80:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTY86qvE1NK5jCy0/TXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MGRiZjU1NTg3MGI1NTZhY2ZhYjQyOGM3NGVhY2VlNTZm
N2IyMjIwHhcNMjUwNDEzMTAwMTU0WhcNMjUwNDE0MTAwMTU0WjAzMTEwLwYDVQQD
Eyg4M2YzYjE2ZTE2YWI0N2U2OGFmMzYzNWEzNThlNDgxODRhZTkwNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjLEqVhl8zO8cQzhvMDaGjgg7IQg
K5ysPC2osjvS9ECez3Ttk/3IlHldM437yMaTMWgRAnImtYvpPIHFAGqYBGbJToin
VxsXEE2FqTTIItl+NF4MQeyivvc52vFBVGcJeYTGcUDaoKERG6JwF8bI6eawNt2y
HE+fiJmDwrVZlH/ZaNZ107JD7GxM8p4cEB7Qda8kTB1wjzcmA/Rog+9DukaB7dtD
dMgJzc8iCZSpdyilNGXiLeiM3+ace0Ft75ctAqkWevB7YA0/bCyLyT5/GYzWF9fF
oHO8EP4/2zPneZL+wZbqb9eCKWD3gkBLTRNMy9w6bHk1/F+hnjM9QQUy0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPzsW4Wq0fmivNjWjWOSBhK6QUyMB8GA1UdIwQY
MBaAFMcNv1VYcLVWrPq0KMdOrO5W97IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUt
MzJkYTFkYjRiMjAzLzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ODJiN2YtNjBjMy00MTFhLTk2MjUtMzJkYTFkYjRiMjAz
LzEveHcyX1ZWaHd0VmFzLXJRb3gwNnM3bGIzc2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnl1iVVQv
mp2UA8I1Y7d870xgXdhlC9/yAPBR1l4Jhxrqb8JEYOSpbGGuAYmmrEY1zx1iFDls
phcX7AT6bbWU55+32wak+gDo6i/NnhBRVwhK2IaRlcU/zjnNWgVnnGW4uROY1KvW
LsCtcIKJc/RcvYv08bAH3ARro224BW+/OQTf0htlenIRkmZrGY/ABYaAZ/+Wrsve
niGgw8qC5A0b2wVK8otM0Hga/xsWBluuLjTY0Lf7t4mZBCrS1LikMdH4Vsn1nD8f
Hcm554WKHRe5yWBqL39+qKG5SIgdYb+jQ6AQ95by2TRqyBkMAgDyBQR2m83MjGWm
wti60c6jC2qAzQ==
-----END CERTIFICATE-----