Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File:                     XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier:          YXN5LNSOuRINQTJ6Sekqc2JVb2VhUq/5uUmQm+xPFjc=
Subject key identifier:   2F:00:7A:3A:D9:F2:5C:CF:7A:8D:98:94:73:D5:92:1B:5E:AF:44:B3
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer:       /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial:       01962E98B64F053FF8E02457E450A15A8639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: ZfKJb3W5tfZCDG8DgRPfRWzHiOsCp5cvrUv6DXfypYY=)
                          2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b6:4f:05:3f:f8:e0:24:57:e4:50:a1:5a:86:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=2f007a3ad9f25ccf7a8d989473d5921b5eaf44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:14:d1:cc:3a:83:8c:bc:00:76:4a:27:36:
                    9d:bc:51:c6:9a:71:ac:a3:e2:8b:d4:0f:7d:25:64:
                    d0:d9:7b:45:73:8e:26:05:c2:26:73:98:b4:de:45:
                    82:dc:3a:2b:42:cf:7a:96:bc:9f:9a:77:85:17:43:
                    5e:75:11:dc:7d:b6:a0:61:f2:10:c6:93:d2:7c:5d:
                    98:e0:b7:36:bb:cc:bd:63:36:ac:92:52:e7:bf:35:
                    48:e4:70:0d:55:a4:4f:6e:eb:5b:6c:84:c8:02:27:
                    a2:50:43:03:1d:de:e2:f5:37:c7:b6:b1:9e:9c:4b:
                    a1:ac:a9:bb:20:0d:79:c7:28:87:c5:4f:d1:f6:d7:
                    38:e4:0d:b0:42:a8:fb:3d:ca:56:91:92:34:0e:52:
                    02:17:39:10:44:9b:3e:4c:c4:1e:07:7f:d3:3f:64:
                    68:ff:b2:02:d8:0b:fd:36:62:fc:5c:59:a6:31:c4:
                    3f:fe:c2:ec:47:6d:56:20:d7:ea:49:c0:d5:97:5c:
                    3e:0d:36:97:5e:b9:2e:a3:bc:9c:23:91:12:e9:71:
                    6e:50:85:3d:12:90:60:c2:1e:16:a6:48:42:07:7c:
                    6d:f9:fc:c1:79:cd:72:96:d9:45:d3:72:a6:48:2b:
                    06:ca:97:bd:93:f5:bf:ab:1f:60:95:1f:6d:29:fd:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:7A:3A:D9:F2:5C:CF:7A:8D:98:94:73:D5:92:1B:5E:AF:44:B3
            X509v3 Authority Key Identifier:
                keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:85:f5:22:9a:99:a2:01:0f:67:5a:23:70:bc:84:fd:38:3c:
         4d:c5:77:83:01:85:3a:19:c4:ac:6a:37:4c:ca:ff:2d:a5:8f:
         d9:35:b2:cc:ba:d5:08:82:55:1e:7c:7f:34:80:69:21:b2:26:
         0e:38:cb:6f:41:a3:1c:ce:94:4b:7e:0a:1e:b0:e2:1f:d3:46:
         34:88:1a:3e:9d:ec:4c:36:dd:bb:b9:fb:b0:43:af:2d:a1:ce:
         4d:9f:c2:39:77:41:e4:43:0a:61:3d:6c:a3:fc:46:48:21:61:
         13:02:db:c3:d9:52:b5:0b:dc:a4:e6:ab:ed:28:e8:09:14:83:
         43:3f:c8:c2:49:fe:1e:b2:53:39:e9:3b:b3:82:8b:c5:19:68:
         b6:cc:9b:33:09:73:24:1e:e0:19:24:b8:08:4f:2f:ab:1e:ef:
         65:09:62:60:2e:4e:96:95:3e:b1:2e:50:30:50:4c:27:0c:ac:
         12:6a:cb:cf:16:60:2c:dc:86:3c:18:fe:09:54:4b:0d:18:13:
         87:34:54:e6:81:00:85:bf:34:49:55:b0:c2:c2:e2:29:fa:4f:
         67:7a:55:a7:68:aa:b9:2b:bd:cc:36:f6:43:ab:e1:3f:95:41:
         70:08:7a:b1:4e:6d:bc:fd:08:6a:d9:9c:17:ab:3b:84:f1:e8:
         37:83:18:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLZPBT/44CRX5FChWoY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi
Yzk5MjMwHhcNMjUwNDEzMTAwMTIyWhcNMjUwNDE0MTAwMTIyWjAzMTEwLwYDVQQD
EygyZjAwN2EzYWQ5ZjI1Y2NmN2E4ZDk4OTQ3M2Q1OTIxYjVlYWY0NGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1wU0cw6g4y8AHZKJzadvFHGmnGs
o+KL1A99JWTQ2XtFc44mBcImc5i03kWC3DorQs96lryfmneFF0NedRHcfbagYfIQ
xpPSfF2Y4Lc2u8y9YzasklLnvzVI5HANVaRPbutbbITIAieiUEMDHd7i9TfHtrGe
nEuhrKm7IA15xyiHxU/R9tc45A2wQqj7PcpWkZI0DlICFzkQRJs+TMQeB3/TP2Ro
/7IC2Av9NmL8XFmmMcQ//sLsR21WINfqScDVl1w+DTaXXrkuo7ycI5ES6XFuUIU9
EpBgwh4WpkhCB3xt+fzBec1yltlF03KmSCsGype9k/W/qx9glR9tKf0t3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8AejrZ8lzPeo2YlHPVkhter0SzMB8GA1UdIwQY
MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt
ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx
LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYX1IpqZ
ogEPZ1ojcLyE/Tg8TcV3gwGFOhnErGo3TMr/LaWP2TWyzLrVCIJVHnx/NIBpIbIm
DjjLb0GjHM6US34KHrDiH9NGNIgaPp3sTDbdu7n7sEOvLaHOTZ/COXdB5EMKYT1s
o/xGSCFhEwLbw9lStQvcpOar7SjoCRSDQz/Iwkn+HrJTOek7s4KLxRlotsybMwlz
JB7gGSS4CE8vqx7vZQliYC5OlpU+sS5QMFBMJwysEmrLzxZgLNyGPBj+CVRLDRgT
hzRU5oEAhb80SVWwwsLiKfpPZ3pVp2iquSu9zDb2Q6vhP5VBcAh6sU5tvP0Iatmc
F6s7hPHoN4MY6g==
-----END CERTIFICATE-----