Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File:                     xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier:          NWWzvS0Xzp7xBpeWU8AF+B78OqH96p2TcLZ5VBnwsUU=
Subject key identifier:   27:AE:27:6B:DB:7C:A5:09:A4:94:6C:C1:10:68:E4:E8:E9:F3:02:33
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer:       /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial:       01962E61A288F4650D8E3A7C8581FF3B68D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number:          0438
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
                          2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: MVIzfGwrTispV+P+NmGzfAIQtKHLQRZZWt2Xb12fB68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a2:88:f4:65:0d:8e:3a:7c:85:81:ff:3b:68:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=27ae276bdb7ca509a4946cc11068e4e8e9f30233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:63:18:91:bf:7a:36:c5:a0:35:f6:82:2f:
                    15:3a:bc:90:1e:b5:23:45:22:cb:b9:ff:50:27:59:
                    f3:b3:73:dd:46:82:29:48:5f:6e:0c:29:f8:fd:7d:
                    8d:76:54:e6:23:6e:8a:6c:a8:75:15:ed:0f:ed:c1:
                    3b:db:2e:73:5c:c1:78:1b:b7:e1:04:eb:d7:11:ef:
                    d5:6a:a7:37:d8:3c:ab:14:97:ed:e3:ce:dd:bd:35:
                    87:d7:da:41:f5:4e:82:5b:5c:96:96:6e:10:3e:03:
                    66:b0:61:4c:69:7b:14:bb:d6:11:4d:a2:b5:4b:87:
                    fc:92:27:9e:f1:4c:4d:72:5d:2a:14:57:ee:c2:67:
                    57:f3:28:44:e6:f4:5f:78:0c:de:03:dc:b8:8b:7e:
                    1a:ab:24:8d:b4:63:75:25:46:e7:74:fc:f1:ba:58:
                    90:d7:5b:89:68:88:11:51:b1:62:3b:3e:f7:20:85:
                    8f:4d:2d:ab:48:02:ff:5a:be:7f:65:5a:d3:0a:fd:
                    69:d5:7f:94:1f:c7:45:a6:4d:57:77:b5:92:0d:e3:
                    d9:3d:51:d4:4d:c3:17:3c:0d:6e:da:c0:9f:00:87:
                    3f:df:d7:f3:c6:ef:f2:50:a3:2a:23:62:cc:7d:4e:
                    ed:46:28:cc:42:d1:ab:07:ed:af:d0:8a:6b:5e:ad:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:27:6B:DB:7C:A5:09:A4:94:6C:C1:10:68:E4:E8:E9:F3:02:33
            X509v3 Authority Key Identifier:
                keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4d:85:dd:89:75:f0:93:25:1f:0b:96:9b:84:12:15:00:74:
         03:72:ea:36:ef:64:ab:fd:e3:84:cb:c6:3e:fa:97:07:cd:11:
         9b:c4:b6:40:6b:99:e8:0e:95:ea:f8:31:27:6b:86:e5:fb:8e:
         3a:59:fb:30:b7:e6:76:d7:19:fa:e8:a9:5a:7c:a1:c9:72:bb:
         01:26:2c:7f:e2:0f:7b:e8:81:fd:bc:27:c5:20:42:c2:24:80:
         e7:a5:ee:93:7f:69:a9:05:95:81:6c:0c:e5:36:ce:32:7d:c4:
         60:4e:5e:cb:c0:a6:28:ba:eb:e6:ab:42:00:01:0f:84:dc:45:
         76:62:c7:55:31:20:c6:ee:30:c9:d7:bb:1f:8c:70:e7:b2:6b:
         24:9f:52:33:35:8a:1f:80:cb:8c:bb:01:7d:f2:fe:1b:39:1e:
         33:c2:9c:46:c3:31:f7:4d:37:ee:b7:32:b6:1a:0d:dc:57:f3:
         d0:6d:ff:37:f7:d0:05:ff:e3:fa:a0:fc:db:27:66:94:43:7d:
         d6:a0:7b:1b:69:1c:b0:c3:62:4a:0b:49:e4:05:be:85:a3:44:
         fb:9f:7a:63:ce:b3:58:0f:da:38:a2:27:cd:9c:e8:28:f1:9a:
         dd:16:2b:f8:a6:7d:8c:e8:06:bf:da:e4:9e:23:0c:f8:92:4f:
         7a:ac:97:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaKI9GUNjjp8hYH/O2jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi
ZmJiN2EwHhcNMjUwNDEzMDkwMTEyWhcNMjUwNDE0MDkwMTEyWjAzMTEwLwYDVQQD
EygyN2FlMjc2YmRiN2NhNTA5YTQ5NDZjYzExMDY4ZTRlOGU5ZjMwMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lFjGJG/ejbFoDX2gi8VOryQHrUj
RSLLuf9QJ1nzs3PdRoIpSF9uDCn4/X2NdlTmI26KbKh1Fe0P7cE72y5zXMF4G7fh
BOvXEe/Vaqc32DyrFJft487dvTWH19pB9U6CW1yWlm4QPgNmsGFMaXsUu9YRTaK1
S4f8kiee8UxNcl0qFFfuwmdX8yhE5vRfeAzeA9y4i34aqySNtGN1JUbndPzxuliQ
11uJaIgRUbFiOz73IIWPTS2rSAL/Wr5/ZVrTCv1p1X+UH8dFpk1Xd7WSDePZPVHU
TcMXPA1u2sCfAIc/39fzxu/yUKMqI2LMfU7tRijMQtGrB+2v0IprXq20lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeuJ2vbfKUJpJRswRBo5Ojp8wIzMB8GA1UdIwQY
MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt
NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx
LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv02F3Yl1
8JMlHwuWm4QSFQB0A3LqNu9kq/3jhMvGPvqXB80Rm8S2QGuZ6A6V6vgxJ2uG5fuO
Oln7MLfmdtcZ+uipWnyhyXK7ASYsf+IPe+iB/bwnxSBCwiSA56Xuk39pqQWVgWwM
5TbOMn3EYE5ey8CmKLrr5qtCAAEPhNxFdmLHVTEgxu4wyde7H4xw57JrJJ9SMzWK
H4DLjLsBffL+GzkeM8KcRsMx90037rcythoN3Ffz0G3/N/fQBf/j+qD82ydmlEN9
1qB7G2kcsMNiSgtJ5AW+haNE+596Y86zWA/aOKInzZzoKPGa3RYr+KZ9jOgGv9rk
niMM+JJPeqyXwA==
-----END CERTIFICATE-----