Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File:                     XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier:          YAedUwTKWyGg4mSPk1Q2orBDj84DWJpzMySFk49V5KE=
Subject key identifier:   F3:F3:F6:20:A8:1D:89:03:B8:19:CB:A7:13:6B:45:44:68:0A:A4:FF
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer:       /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial:       01962ECFAA56CE85509DE0910C34AB7E156C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number:          13DB
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
                          2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: XPEzdaSLiSHYypub12WKGXfXUgkIPAPqq9a+1eq4udM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:aa:56:ce:85:50:9d:e0:91:0c:34:ab:7e:15:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=f3f3f620a81d8903b819cba7136b4544680aa4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:58:75:16:b4:77:c3:aa:78:15:f5:c0:d7:70:
                    af:bd:b6:a3:27:32:b4:8d:28:14:dd:9b:b3:26:0f:
                    e2:cf:6c:4d:1f:6c:20:1f:c4:b8:cd:66:a3:97:1f:
                    03:70:5d:39:e1:37:21:2b:a3:5e:88:6f:43:3f:44:
                    86:f9:58:83:41:4c:b2:5f:a8:34:c8:6c:c3:e6:d5:
                    0a:53:d4:4b:e2:a7:ec:71:13:b7:0a:0a:d4:34:5a:
                    49:67:4d:9c:4b:b1:52:fc:5e:56:8a:53:01:17:3f:
                    28:b9:dd:1c:e8:a6:8a:48:9c:fe:9e:1f:7e:d9:b8:
                    e8:b0:9d:b7:5d:6a:55:b4:59:99:c1:e2:d7:75:9d:
                    a8:f5:a3:e3:07:14:90:74:6f:49:b1:55:ef:da:40:
                    13:0c:36:95:df:94:39:71:ab:f6:8a:b6:35:20:83:
                    6a:f5:c0:96:8b:46:d3:14:92:7a:1b:79:0c:46:e2:
                    8a:d3:61:d9:ee:3c:df:b0:d0:52:bc:e9:1e:78:33:
                    8c:bc:13:35:04:4a:f8:0c:e6:b8:67:78:71:fe:94:
                    75:81:d1:ae:d4:cd:44:38:5f:b9:49:5b:6b:3d:6e:
                    14:82:21:c4:73:2a:36:88:f2:c1:81:a6:9a:b3:08:
                    80:c9:35:46:3f:cb:55:d3:0d:08:5e:b4:c7:cc:4f:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:F6:20:A8:1D:89:03:B8:19:CB:A7:13:6B:45:44:68:0A:A4:FF
            X509v3 Authority Key Identifier:
                keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:15:20:bb:87:41:ec:03:cf:42:57:d1:d1:f7:7d:ac:1f:41:
         31:3e:a6:d1:57:e6:d4:d4:9f:1a:1b:1c:fd:8d:2f:6c:de:fe:
         e6:7f:04:ed:89:5e:d2:53:ca:87:a5:56:1c:b2:b5:b7:fb:29:
         b4:d3:aa:ba:31:5a:e6:e6:f2:f2:0b:08:ac:92:a3:1a:45:70:
         c7:e6:7e:46:de:84:a1:57:9d:fe:10:af:1d:c1:62:c5:c5:29:
         8d:d2:20:49:8c:ce:3c:fd:4e:51:d2:9e:e6:79:66:bf:18:37:
         26:b3:e6:7d:07:2e:62:fc:d9:c6:d0:32:68:8e:2f:64:53:49:
         6e:1f:9c:41:38:ac:00:f0:c9:61:7c:1a:ad:05:26:98:44:35:
         ca:9d:6b:c0:a4:34:d4:06:81:f4:cd:6e:c2:a3:96:95:08:df:
         fa:6b:68:43:6c:3e:fc:bb:98:f9:99:54:3a:65:9b:e4:ef:ad:
         03:0a:a7:3e:85:b9:53:26:ec:97:82:c6:2e:12:ff:ff:9f:82:
         ec:a8:fc:c8:2b:2b:99:35:86:04:15:67:cd:d2:f9:5c:9c:ff:
         04:08:82:eb:86:a1:e1:96:48:01:33:2c:4a:ed:d2:e1:62:03:
         6b:59:a3:b1:ad:36:71:a3:f1:25:cf:12:30:a4:b9:ca:4f:1e:
         80:2f:54:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz6pWzoVQneCRDDSrfhVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjUwNDEzMTEwMTIzWhcNMjUwNDE0MTEwMTIzWjAzMTEwLwYDVQQD
EyhmM2YzZjYyMGE4MWQ4OTAzYjgxOWNiYTcxMzZiNDU0NDY4MGFhNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVh1FrR3w6p4FfXA13CvvbajJzK0
jSgU3ZuzJg/iz2xNH2wgH8S4zWajlx8DcF054TchK6NeiG9DP0SG+ViDQUyyX6g0
yGzD5tUKU9RL4qfscRO3CgrUNFpJZ02cS7FS/F5WilMBFz8oud0c6KaKSJz+nh9+
2bjosJ23XWpVtFmZweLXdZ2o9aPjBxSQdG9JsVXv2kATDDaV35Q5cav2irY1IINq
9cCWi0bTFJJ6G3kMRuKK02HZ7jzfsNBSvOkeeDOMvBM1BEr4DOa4Z3hx/pR1gdGu
1M1EOF+5SVtrPW4UgiHEcyo2iPLBgaaaswiAyTVGP8tV0w0IXrTHzE+euQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPz9iCoHYkDuBnLpxNrRURoCqT/MB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRUgu4dB
7APPQlfR0fd9rB9BMT6m0Vfm1NSfGhsc/Y0vbN7+5n8E7Yle0lPKh6VWHLK1t/sp
tNOqujFa5uby8gsIrJKjGkVwx+Z+Rt6EoVed/hCvHcFixcUpjdIgSYzOPP1OUdKe
5nlmvxg3JrPmfQcuYvzZxtAyaI4vZFNJbh+cQTisAPDJYXwarQUmmEQ1yp1rwKQ0
1AaB9M1uwqOWlQjf+mtoQ2w+/LuY+ZlUOmWb5O+tAwqnPoW5Uybsl4LGLhL//5+C
7Kj8yCsrmTWGBBVnzdL5XJz/BAiC64ah4ZZIATMsSu3S4WIDa1mjsa02caPxJc8S
MKS5yk8egC9UEQ==
-----END CERTIFICATE-----