Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File:                     XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier:          I94iOfuBCl4OmAoNvBfHHxb1V/CLkMFqSGDRjb/Btq8=
Subject key identifier:   23:B8:F3:7F:5A:CB:B1:6F:01:0C:C3:57:D4:1B:F9:EA:31:E3:BB:5E
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer:       /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial:       01962F749644FBEB4EF6EC026F46AC5DACCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number:          0751
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: +RN6WFL7ziCxffzprC1wOu+UXvtVgJ9hRvsgOFqEps4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:44:fb:eb:4e:f6:ec:02:6f:46:ac:5d:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=23b8f37f5acbb16f010cc357d41bf9ea31e3bb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:49:1d:f8:02:de:4c:be:9e:47:7e:e2:ad:
                    5a:54:8c:ff:5a:e7:4d:7d:65:39:31:e1:f2:b8:1b:
                    6d:ff:d4:20:49:8d:5e:6f:0d:16:4a:be:7d:c9:2b:
                    59:ed:9d:43:de:05:5d:b5:b8:bc:9d:56:79:6a:cd:
                    2e:6b:db:c5:da:84:2f:cf:55:4b:5f:92:33:8c:6f:
                    29:78:ca:d0:00:80:4a:c4:7b:48:17:35:79:37:38:
                    da:56:85:c6:16:6a:90:93:d1:7c:d3:7e:c8:78:25:
                    35:57:66:78:5d:f9:6e:86:cd:ec:08:40:7a:15:9b:
                    af:fb:e1:03:e1:b6:87:f8:02:07:f3:30:71:5e:6b:
                    73:62:5a:dd:00:48:7f:3a:c1:8a:00:fb:85:cd:7d:
                    52:c9:1d:e3:0c:26:81:7c:ca:b8:be:fd:b6:06:51:
                    e8:45:ba:56:72:c0:f8:07:cd:5a:93:d1:fb:5b:34:
                    fc:cf:74:28:1e:5c:0f:45:0c:6b:d2:1b:12:5f:c5:
                    72:be:e1:fb:ad:e3:09:b6:6b:11:99:70:b0:b8:50:
                    42:f9:da:2c:38:71:97:e2:99:36:14:03:5d:cd:11:
                    67:4d:38:11:72:e6:ff:14:2a:d8:53:44:ae:a0:f4:
                    f1:2a:07:fe:aa:03:45:e1:a0:be:2d:7c:86:d2:0e:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B8:F3:7F:5A:CB:B1:6F:01:0C:C3:57:D4:1B:F9:EA:31:E3:BB:5E
            X509v3 Authority Key Identifier:
                keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:39:df:4d:d5:87:ca:8a:d9:c4:87:82:39:19:cc:5d:7e:84:
         46:32:a8:80:1f:29:2f:6e:11:54:a8:ee:d7:10:82:78:26:9f:
         b9:99:88:2b:39:37:71:3b:e7:c2:ff:8e:9e:79:10:a6:3e:22:
         13:6d:f2:3b:24:e6:27:08:55:0e:02:e5:3e:1e:03:39:8f:ba:
         40:64:3b:3f:1a:37:bd:76:96:00:09:cc:54:cf:cc:0d:2d:f9:
         0e:fa:34:cb:a7:8e:f7:22:f9:c7:35:77:a2:b4:7c:4c:12:d4:
         f9:f4:8e:3b:07:ec:70:1a:a1:63:b4:41:fe:16:f1:31:a7:a7:
         23:2f:92:52:29:1b:89:d9:e7:66:7c:ed:59:41:8f:f7:91:3d:
         b0:07:f2:07:71:23:64:44:1f:f2:d4:24:e1:75:07:32:af:09:
         98:21:ca:8f:21:bb:ba:2b:2d:87:19:60:94:bb:f4:11:09:9a:
         ca:99:f8:6e:92:14:06:10:ec:f1:50:e0:08:e3:ed:13:29:f1:
         aa:e1:ec:ba:13:5c:24:24:7b:1e:54:2e:13:00:b0:63:46:b7:
         58:85:cb:14:c0:0b:5e:eb:c2:6c:18:cd:20:4a:3e:f3:74:fa:
         76:2a:29:9e:b6:83:b4:01:ba:04:1e:66:26:38:b0:95:ae:8b:
         de:03:9d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJZE++tO9uwCb0asXazLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0
YWQ5ZGMwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
EygyM2I4ZjM3ZjVhY2JiMTZmMDEwY2MzNTdkNDFiZjllYTMxZTNiYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0RJHfgC3ky+nkd+4q1aVIz/WudN
fWU5MeHyuBtt/9QgSY1ebw0WSr59yStZ7Z1D3gVdtbi8nVZ5as0ua9vF2oQvz1VL
X5IzjG8peMrQAIBKxHtIFzV5NzjaVoXGFmqQk9F8037IeCU1V2Z4Xfluhs3sCEB6
FZuv++ED4baH+AIH8zBxXmtzYlrdAEh/OsGKAPuFzX1SyR3jDCaBfMq4vv22BlHo
RbpWcsD4B81ak9H7WzT8z3QoHlwPRQxr0hsSX8VyvuH7reMJtmsRmXCwuFBC+dos
OHGX4pk2FANdzRFnTTgRcub/FCrYU0SuoPTxKgf+qgNF4aC+LXyG0g45gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO4839ay7FvAQzDV9Qb+eox47teMB8GA1UdIwQY
MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt
NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy
LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTnfTdWH
yorZxIeCORnMXX6ERjKogB8pL24RVKju1xCCeCafuZmIKzk3cTvnwv+OnnkQpj4i
E23yOyTmJwhVDgLlPh4DOY+6QGQ7Pxo3vXaWAAnMVM/MDS35Dvo0y6eO9yL5xzV3
orR8TBLU+fSOOwfscBqhY7RB/hbxMaenIy+SUikbidnnZnztWUGP95E9sAfyB3Ej
ZEQf8tQk4XUHMq8JmCHKjyG7uisthxlglLv0EQmaypn4bpIUBhDs8VDgCOPtEynx
quHsuhNcJCR7HlQuEwCwY0a3WIXLFMALXuvCbBjNIEo+83T6diopnraDtAG6BB5m
Jjiwla6L3gOdqw==
-----END CERTIFICATE-----