Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File:                     xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier:          ep5yqFEUnEvZWN1U/VJPefX97gmkzUD81YgyD5DGOeg=
Subject key identifier:   DC:82:62:D4:54:D7:9E:21:D5:A9:BC:6D:24:B7:9D:85:86:52:C2:35
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       01962E98AF9B07AAD359D115CE3A500AED9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number:          0CE7
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 1Jb9tAxmFTyhZIq_yfShXZumtdc.roa (hash: yIbenr0anVlVM6N8wz8OLk3Jjwi6TZT3YGqtsrL35mA=)
                          2: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
                          3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
                          4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
                          5: QlCwyQKF71fuohxKobdXyGZU--o.roa (hash: N/eSkZcDwZffzOIdUdxhPBMt3dshG8LnVO3fiqCtOvc=)
                          6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
                          7: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: yQo9XrV8VzBmCqHNo7MFVT9zDFWjtLIQBwrp2hwg6rQ=)
                          8: y02l4BHQuyRZqxTlB4lq90WzamI.roa (hash: FIL756ErnkjMbz7N2d2705a0LI8O0H0MYSn8Dn1Ekik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:9b:07:aa:d3:59:d1:15:ce:3a:50:0a:ed:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=dc8262d454d79e21d5a9bc6d24b79d858652c235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:f9:87:1f:de:27:1a:61:d3:ba:76:09:2a:
                    d8:9e:85:28:3e:8e:b1:b1:fd:5b:8d:3b:72:a2:a7:
                    c0:20:ad:c5:14:af:84:9a:56:99:e8:74:6e:af:64:
                    4c:3a:a4:9c:a1:e9:f7:7b:b3:a7:95:00:fb:10:f2:
                    a8:c4:f5:12:30:5a:29:95:3f:9a:10:73:23:dd:9a:
                    c2:ea:a0:05:11:d8:33:80:e0:26:45:88:f6:ac:68:
                    c8:d1:b1:3b:70:41:63:7d:79:7f:00:03:60:94:7e:
                    7e:45:36:44:14:2b:fe:b9:1d:84:f9:8f:f2:4f:3a:
                    bd:64:4b:45:3b:05:d8:2b:9a:9a:b1:d0:95:87:48:
                    ce:72:08:96:c1:05:ee:ab:9f:af:56:49:99:b0:b9:
                    52:bf:29:83:79:4b:ff:4b:10:0a:3c:1a:bc:23:07:
                    10:6a:45:d2:f7:05:df:6f:17:cb:19:e2:33:cb:2a:
                    59:40:a6:69:0e:f5:c8:16:11:53:68:79:dc:e8:34:
                    13:70:4d:b1:33:46:57:5e:c0:60:f1:8f:a8:ab:d1:
                    82:06:5f:58:30:07:23:f3:da:f2:41:2a:53:0e:b4:
                    c5:8a:43:fc:1f:ac:fe:2d:9d:23:58:57:a3:f5:1f:
                    06:a2:73:5d:22:cc:fb:36:4e:22:32:6d:ba:59:40:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:62:D4:54:D7:9E:21:D5:A9:BC:6D:24:B7:9D:85:86:52:C2:35
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:36:ae:fe:e4:14:28:7f:a6:cb:c5:a2:9c:02:12:83:c6:
         38:2e:6c:62:80:36:6d:50:6d:84:5b:5f:2e:15:7e:a8:79:25:
         25:82:f4:54:6b:4e:00:e2:c9:c1:91:ca:5a:8b:13:04:25:c5:
         4e:3a:2a:fd:63:d3:3f:28:9d:f9:d9:2d:e8:5c:cd:58:74:43:
         5e:65:0d:01:a2:67:bd:26:44:9a:b9:99:4a:aa:77:53:51:c9:
         ef:56:11:19:7d:70:92:66:53:fc:aa:b3:96:7a:d2:66:d8:ac:
         a2:f9:3a:1a:c2:a1:ad:81:52:1a:05:25:94:f2:5b:8d:a6:c6:
         52:16:95:d1:ab:1f:47:e5:ff:33:a8:78:63:8e:85:c1:4d:e6:
         69:e6:cb:cc:ab:e7:a8:da:29:98:65:5a:93:0b:6e:53:54:c7:
         eb:62:49:20:7a:43:83:fc:02:96:75:95:24:4e:e9:ff:da:b1:
         f3:65:48:6b:a1:17:41:ab:dc:44:9d:6f:27:d7:11:2a:33:12:
         da:74:db:4a:b1:5a:51:e6:fa:37:17:e0:ce:ea:bf:9b:ab:d8:
         ff:ff:7f:a7:4d:6d:23:7a:37:0b:76:93:96:75:dd:d3:b7:9f:
         93:a6:45:0f:e8:a4:00:7f:4c:0f:1d:c7:0a:5e:f4:f7:f1:0c:
         10:9a:ec:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumK+bB6rTWdEVzjpQCu2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjUwNDEzMTAwMTIwWhcNMjUwNDE0MTAwMTIwWjAzMTEwLwYDVQQD
EyhkYzgyNjJkNDU0ZDc5ZTIxZDVhOWJjNmQyNGI3OWQ4NTg2NTJjMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU35hx/eJxph07p2CSrYnoUoPo6x
sf1bjTtyoqfAIK3FFK+EmlaZ6HRur2RMOqScoen3e7OnlQD7EPKoxPUSMFoplT+a
EHMj3ZrC6qAFEdgzgOAmRYj2rGjI0bE7cEFjfXl/AANglH5+RTZEFCv+uR2E+Y/y
Tzq9ZEtFOwXYK5qasdCVh0jOcgiWwQXuq5+vVkmZsLlSvymDeUv/SxAKPBq8IwcQ
akXS9wXfbxfLGeIzyypZQKZpDvXIFhFTaHnc6DQTcE2xM0ZXXsBg8Y+oq9GCBl9Y
MAcj89ryQSpTDrTFikP8H6z+LZ0jWFej9R8GonNdIsz7Nk4iMm26WUCM9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyCYtRU154h1am8bSS3nYWGUsI1MB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrA2rv7k
FCh/psvFopwCEoPGOC5sYoA2bVBthFtfLhV+qHklJYL0VGtOAOLJwZHKWosTBCXF
Tjoq/WPTPyid+dkt6FzNWHRDXmUNAaJnvSZEmrmZSqp3U1HJ71YRGX1wkmZT/Kqz
lnrSZtisovk6GsKhrYFSGgUllPJbjabGUhaV0asfR+X/M6h4Y46FwU3maebLzKvn
qNopmGVakwtuU1TH62JJIHpDg/wClnWVJE7p/9qx82VIa6EXQavcRJ1vJ9cRKjMS
2nTbSrFaUeb6Nxfgzuq/m6vY//9/p01tI3o3C3aTlnXd07efk6ZFD+ikAH9MDx3H
Cl709/EMEJrsIQ==
-----END CERTIFICATE-----