Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File:                     xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier:          0SgyUUOFIGjhqFwYQ/vbvE6CwHUMVOUJZrHPLaYBSeY=
Subject key identifier:   D6:63:51:D2:FE:97:32:66:BA:18:C0:A0:5C:52:83:3F:5A:55:84:C2
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer:       /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial:       01962F06FA20C4B56D74CBBA188B0C5EDB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number:          0274
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: 1n4Ap9qxQKFgJanixEimQqsrfnMu2FoHTQ7udiS8y+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:20:c4:b5:6d:74:cb:ba:18:8b:0c:5e:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=d66351d2fe973266ba18c0a05c52833f5a5584c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:e5:24:85:b5:ed:2a:9f:0e:46:a9:da:ec:
                    f4:86:f5:7e:f0:9c:1e:13:96:7b:5a:3b:dd:9d:a8:
                    a7:fc:da:12:17:d4:20:ae:b2:7a:fe:63:99:d7:f1:
                    e7:e1:37:36:f5:9b:1e:a5:de:5d:50:8d:ea:27:56:
                    a2:a4:e5:f3:72:f4:27:ce:04:ba:01:8b:32:47:8c:
                    29:08:89:e2:bb:67:c6:4b:8d:5b:40:8d:0e:0d:a2:
                    27:3b:db:32:6f:e2:4e:bd:e8:39:49:55:b7:b6:db:
                    a5:9f:d7:95:31:7c:53:bd:4c:cf:3d:ce:2c:07:85:
                    7f:fc:53:59:4d:57:17:db:d0:8b:52:2d:89:45:c7:
                    52:c2:ec:06:99:d0:b2:7a:bb:6e:20:31:42:08:7a:
                    7c:4b:9a:ad:9e:2c:cb:b2:93:54:56:db:01:34:60:
                    40:8d:eb:15:65:09:df:1f:a0:60:37:59:45:d9:8a:
                    f5:68:61:d0:5f:ed:c8:23:1c:b0:4b:1f:b8:80:8b:
                    1d:a8:d4:9f:db:6c:5c:c5:06:42:f0:bb:c5:56:ae:
                    c6:60:4b:c9:50:36:90:45:26:10:87:d8:93:54:1f:
                    1e:f3:b8:90:dd:64:f0:63:82:57:58:ed:8d:4d:b4:
                    f1:ab:af:d6:b6:d7:23:32:be:ca:0a:c9:98:6c:c7:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:63:51:D2:FE:97:32:66:BA:18:C0:A0:5C:52:83:3F:5A:55:84:C2
            X509v3 Authority Key Identifier:
                keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:af:86:84:b2:98:c3:f8:d6:83:2e:9d:d1:f0:ed:27:b8:63:
         2b:65:e9:4b:38:50:ce:8e:a8:4b:77:9e:50:20:9d:2c:48:bb:
         ee:30:d3:54:ae:b4:a6:67:2d:f9:57:ff:37:2e:34:ae:60:59:
         2f:2c:c3:21:d4:8b:ec:f0:c5:f7:25:a8:33:02:8d:11:85:98:
         b6:10:ee:a5:6d:c6:ef:07:df:ad:9c:39:8c:7c:c8:c7:79:71:
         58:83:23:22:11:d6:fa:b0:1d:29:56:23:d8:f4:f6:90:94:a9:
         3b:6e:bd:20:d2:8f:8b:a6:0a:57:d9:44:b8:6e:77:81:2d:0b:
         96:ae:94:ea:34:c3:27:04:31:66:03:a9:9d:56:cd:47:08:67:
         a9:4b:a4:5f:80:f7:0a:cd:e5:ab:f9:be:4f:2e:ac:aa:af:65:
         cd:ce:04:d1:ce:a1:cc:f7:51:38:88:13:94:0a:ab:a9:c7:fd:
         43:33:34:dd:15:77:67:7c:ef:9d:ea:7c:05:8d:2d:3c:0a:de:
         01:2c:da:a5:db:c9:b1:0c:75:89:ea:37:e8:1c:c4:1b:f0:70:
         b4:db:f8:5e:27:16:d6:a2:1e:63:ad:64:aa:af:fd:12:d1:4c:
         09:3d:e9:e1:9d:5c:24:e3:e6:7b:ad:c7:a9:83:6c:9a:3e:17:
         60:5a:15:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvogxLVtdMu6GIsMXtsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjUwNDEzMTIwMTQ4WhcNMjUwNDE0MTIwMTQ4WjAzMTEwLwYDVQQD
EyhkNjYzNTFkMmZlOTczMjY2YmExOGMwYTA1YzUyODMzZjVhNTU4NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGnlJIW17SqfDkap2uz0hvV+8Jwe
E5Z7Wjvdnain/NoSF9QgrrJ6/mOZ1/Hn4Tc29Zsepd5dUI3qJ1aipOXzcvQnzgS6
AYsyR4wpCIniu2fGS41bQI0ODaInO9syb+JOveg5SVW3ttuln9eVMXxTvUzPPc4s
B4V//FNZTVcX29CLUi2JRcdSwuwGmdCyertuIDFCCHp8S5qtnizLspNUVtsBNGBA
jesVZQnfH6BgN1lF2Yr1aGHQX+3IIxywSx+4gIsdqNSf22xcxQZC8LvFVq7GYEvJ
UDaQRSYQh9iTVB8e87iQ3WTwY4JXWO2NTbTxq6/WttcjMr7KCsmYbMcEWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZjUdL+lzJmuhjAoFxSgz9aVYTCMB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABa+GhLKY
w/jWgy6d0fDtJ7hjK2XpSzhQzo6oS3eeUCCdLEi77jDTVK60pmct+Vf/Ny40rmBZ
LyzDIdSL7PDF9yWoMwKNEYWYthDupW3G7wffrZw5jHzIx3lxWIMjIhHW+rAdKVYj
2PT2kJSpO269INKPi6YKV9lEuG53gS0Llq6U6jTDJwQxZgOpnVbNRwhnqUukX4D3
Cs3lq/m+Ty6sqq9lzc4E0c6hzPdROIgTlAqrqcf9QzM03RV3Z3zvnep8BY0tPAre
ASzapdvJsQx1ieo36BzEG/BwtNv4XicW1qIeY61kqq/9EtFMCT3p4Z1cJOPme63H
qYNsmj4XYFoVlg==
-----END CERTIFICATE-----