Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
File:                     rxfon-6kxRdLi_2Ud2xRk0HZems.mft (raw, json)
Hash identifier:          bV1iB6yvO2oqp+38y+LJBoq1nyhG0IUefj/ZPxAaUL0=
Subject key identifier:   28:07:BA:60:74:0F:6F:7F:99:C0:F5:FA:C6:03:0E:FF:58:72:4C:37
Authority key identifier: AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B
Certificate issuer:       /CN=af17e89feea4c5174b8bfd94776c519341d97a6b
Certificate serial:       01962E997D25E93C418CF3FE439FBCAF7497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft
Manifest number:          14B6
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: rxfon-6kxRdLi_2Ud2xRk0HZems.crl (hash: u6jhyKYmzOuVw8io6FwRkOrM9IJUeUIyLbatTAz5TNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:25:e9:3c:41:8c:f3:fe:43:9f:bc:af:74:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af17e89feea4c5174b8bfd94776c519341d97a6b
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=2807ba60740f6f7f99c0f5fac6030eff58724c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:c5:d4:c1:49:53:2b:33:29:34:e1:95:63:
                    7a:eb:20:47:2a:29:e5:fe:71:81:d6:6e:74:d4:07:
                    7f:d0:59:76:63:af:52:60:97:1b:28:70:3e:ab:bd:
                    a1:d8:0a:bd:a6:99:d5:b3:5b:34:d2:47:ca:13:f5:
                    e9:85:7c:b3:79:ee:8a:2a:e0:61:72:1f:aa:6c:19:
                    e3:49:17:b9:36:21:8a:2e:a5:22:47:f5:fb:8e:d8:
                    08:f4:3e:8a:dd:04:03:21:c1:a0:4e:17:91:1a:5d:
                    4e:97:07:16:e0:48:ba:a7:6a:96:2f:de:88:0c:08:
                    e8:d4:d9:f6:df:12:ef:a6:99:bc:6b:7c:ce:33:98:
                    68:50:ba:1f:c6:2c:db:4e:0a:0b:8a:8f:14:31:4b:
                    47:ea:d2:c5:22:83:e7:a0:2f:11:ad:37:37:29:df:
                    81:0d:d1:42:4e:2a:9a:32:76:77:a9:89:a5:6e:3b:
                    a5:20:26:08:d0:1b:ec:34:75:c1:8c:09:f5:32:dd:
                    4f:a3:ae:f3:83:ff:a0:96:92:64:80:fc:5f:89:03:
                    eb:7d:2e:20:a2:a5:86:80:93:27:fb:2b:4a:ea:22:
                    d2:76:dd:98:3c:bf:3d:31:67:86:2b:72:42:ab:3e:
                    f7:d4:a5:06:e1:42:e5:9f:de:9f:80:b6:9a:12:4e:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:BA:60:74:0F:6F:7F:99:C0:F5:FA:C6:03:0E:FF:58:72:4C:37
            X509v3 Authority Key Identifier:
                keyid:AF:17:E8:9F:EE:A4:C5:17:4B:8B:FD:94:77:6C:51:93:41:D9:7A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfon-6kxRdLi_2Ud2xRk0HZems.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5d43b2-573d-4a29-9c26-d5d92a06754d/1/rxfon-6kxRdLi_2Ud2xRk0HZems.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:23:19:d5:4f:da:dd:a8:ef:b8:59:af:95:1c:70:34:ab:
         62:a0:88:e5:e5:ee:ab:25:77:9b:6a:17:e6:36:38:db:49:57:
         4a:da:34:e5:67:ab:b1:46:10:ef:c1:f2:22:3c:c6:71:e0:e2:
         7e:22:1e:09:25:ea:42:84:1d:43:31:96:84:56:ba:4f:37:6c:
         f4:49:73:7e:38:ae:aa:88:41:c4:cc:6a:e8:74:dd:e0:c6:a5:
         41:0d:04:a3:e3:42:78:42:03:32:b8:a0:15:f8:18:94:71:cc:
         8a:40:9b:96:cd:f8:8a:2c:96:81:9e:c0:7d:76:f3:40:28:8c:
         51:fe:ef:35:70:66:17:b5:d4:25:da:77:1e:34:75:2d:42:18:
         9c:a7:dd:ee:a4:cf:df:00:32:54:be:94:e3:7e:a9:3b:ce:4d:
         c7:6e:f6:fd:48:e9:a7:7b:a2:3f:4d:03:22:ba:87:eb:fb:f4:
         da:0e:34:b7:0c:68:af:a6:e3:70:34:37:0e:68:eb:18:70:7c:
         f7:b6:27:43:49:1e:9f:6f:41:cc:ad:64:92:24:35:18:f0:b8:
         2c:f0:a5:bc:53:c9:5f:6f:60:37:30:0a:d6:cf:3f:b7:7e:3a:
         8e:e3:ae:b9:2a:b5:4a:7c:6a:7e:1c:d1:28:b5:6d:be:c8:bb:
         39:15:3f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumX0l6TxBjPP+Q5+8r3SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTdlODlmZWVhNGM1MTc0YjhiZmQ5NDc3NmM1MTkzNDFk
OTdhNmIwHhcNMjUwNDEzMTAwMjEzWhcNMjUwNDE0MTAwMjEzWjAzMTEwLwYDVQQD
EygyODA3YmE2MDc0MGY2ZjdmOTljMGY1ZmFjNjAzMGVmZjU4NzI0YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8zF1MFJUyszKTThlWN66yBHKinl
/nGB1m501Ad/0Fl2Y69SYJcbKHA+q72h2Aq9ppnVs1s00kfKE/XphXyzee6KKuBh
ch+qbBnjSRe5NiGKLqUiR/X7jtgI9D6K3QQDIcGgTheRGl1OlwcW4Ei6p2qWL96I
DAjo1Nn23xLvppm8a3zOM5hoULofxizbTgoLio8UMUtH6tLFIoPnoC8RrTc3Kd+B
DdFCTiqaMnZ3qYmlbjulICYI0BvsNHXBjAn1Mt1Po67zg/+glpJkgPxfiQPrfS4g
oqWGgJMn+ytK6iLSdt2YPL89MWeGK3JCqz731KUG4ULln96fgLaaEk4FFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgHumB0D29/mcD1+sYDDv9Yckw3MB8GA1UdIwQY
MBaAFK8X6J/upMUXS4v9lHdsUZNB2XprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhmb24tNmt4UmRMaV8yVWQyeFJrMEhaZW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81ZDQzYjItNTczZC00YTI5LTljMjYt
ZDVkOTJhMDY3NTRkLzEvcnhmb24tNmt4UmRMaV8yVWQyeFJrMEhaZW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81ZDQzYjItNTczZC00YTI5LTljMjYtZDVkOTJhMDY3NTRk
LzEvcnhmb24tNmt4UmRMaV8yVWQyeFJrMEhaZW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5QjGdVP
2t2o77hZr5UccDSrYqCI5eXuqyV3m2oX5jY420lXSto05WersUYQ78HyIjzGceDi
fiIeCSXqQoQdQzGWhFa6Tzds9ElzfjiuqohBxMxq6HTd4MalQQ0Eo+NCeEIDMrig
FfgYlHHMikCbls34iiyWgZ7AfXbzQCiMUf7vNXBmF7XUJdp3HjR1LUIYnKfd7qTP
3wAyVL6U436pO85Nx272/Ujpp3uiP00DIrqH6/v02g40twxor6bjcDQ3DmjrGHB8
97YnQ0ken29BzK1kkiQ1GPC4LPClvFPJX29gNzAK1s8/t346juOuuSq1SnxqfhzR
KLVtvsi7ORU/Kg==
-----END CERTIFICATE-----