Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File:                     dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier:          vhyxARf1uXi3h+tMzt1HDU1qj0eI2ZeTPkir3rRLQos=
Subject key identifier:   65:5D:89:20:82:E5:5A:BB:62:D6:38:E9:25:94:D2:56:7A:F4:4E:72
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer:       /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial:       01962DF3F977BEC80A264B0A2997F05E3248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:25 +0000
Files and hashes:         1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: VdYzubx51RpupKY5wkNVFdT0WSjuYwKCZB0vjQFRbCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f9:77:be:c8:0a:26:4b:0a:29:97:f0:5e:32:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
        Validity
            Not Before: Apr 13 07:01:25 2025 GMT
            Not After : Apr 14 07:01:25 2025 GMT
        Subject: CN=655d892082e55abb62d638e92594d2567af44e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:81:0b:0c:c6:8d:40:89:3a:17:04:66:ca:
                    84:d3:3e:c9:a1:dc:f4:38:02:5c:0d:0f:10:b4:7f:
                    cf:7d:74:81:9d:8b:f3:f2:f3:74:21:36:32:da:03:
                    73:1d:71:fa:3d:b1:a8:9c:22:39:a3:b6:71:ba:2c:
                    de:c6:a4:fd:ad:c8:f7:0e:9e:22:8a:63:ff:07:ee:
                    70:19:cb:c8:48:7e:65:61:32:f4:a6:bd:35:15:7a:
                    23:83:d2:87:c8:a8:2a:26:cb:9b:af:7c:26:53:c8:
                    a2:cc:ca:9f:b1:ae:4d:b3:45:c6:4b:b4:b7:98:69:
                    55:ff:67:d7:42:5f:54:6c:9d:99:1d:69:e8:ec:46:
                    24:6f:57:d9:2b:4e:4b:5e:bb:60:70:13:56:48:fb:
                    ea:b7:30:6f:d6:0c:a2:dc:7c:65:33:af:fe:a8:8b:
                    f3:55:ca:a6:86:63:b8:f2:f0:90:6d:6f:0e:87:4c:
                    a6:9a:a0:5f:61:11:8e:2f:ea:12:37:72:e9:d6:33:
                    d8:8b:9f:06:3c:05:26:45:0b:a1:66:0c:dd:19:b8:
                    ff:a2:6d:3f:92:57:17:c4:04:25:48:c2:75:4e:13:
                    d2:83:bc:a3:da:19:5b:ac:04:60:05:07:f6:70:62:
                    88:8c:60:cf:4e:c6:9e:4f:ff:dd:01:ab:38:9f:d4:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5D:89:20:82:E5:5A:BB:62:D6:38:E9:25:94:D2:56:7A:F4:4E:72
            X509v3 Authority Key Identifier:
                keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:9d:2a:83:01:1a:71:1a:3b:ba:6a:02:39:ee:98:d7:1e:
         59:39:14:9b:77:46:06:c0:91:2c:01:67:c5:fd:47:3e:6d:f2:
         62:8b:cf:65:2e:36:ef:41:77:fe:21:40:54:88:05:f7:16:fb:
         7f:f0:3c:4b:d4:04:46:f2:13:8f:e6:71:a0:37:a9:bb:14:ae:
         de:fb:6c:44:fb:f0:74:70:bd:75:cc:1d:87:fe:4e:ce:18:02:
         2f:53:25:cc:5b:c7:a8:67:b7:4c:ef:aa:19:bb:d6:7d:f9:25:
         d9:ad:26:55:19:62:4d:1b:67:6f:7a:34:8a:88:02:c7:8b:05:
         f9:68:2a:12:d6:9d:ed:93:f3:14:58:8e:03:42:13:6b:ec:aa:
         47:1c:ef:ca:6d:ae:43:c1:2d:f7:17:a0:b7:97:e8:96:14:d9:
         2d:b3:a5:ee:dd:e9:5d:8a:f3:ae:16:dc:0a:d2:da:1a:f5:c3:
         f3:fa:4f:12:5c:4b:95:9a:44:30:75:c4:f5:8c:2b:68:70:fe:
         96:dc:b1:1d:96:ca:52:78:71:e4:ea:6c:43:32:20:00:a3:39:
         38:de:a3:ba:30:03:2e:de:94:3a:ff:98:b9:4f:23:9b:6c:73:
         3e:db:eb:08:4b:55:34:5c:1a:99:aa:ba:7d:34:db:18:9b:9e:
         5e:8a:42:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/l3vsgKJksKKZfwXjJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2
ZDhhOGIwHhcNMjUwNDEzMDcwMTI1WhcNMjUwNDE0MDcwMTI1WjAzMTEwLwYDVQQD
Eyg2NTVkODkyMDgyZTU1YWJiNjJkNjM4ZTkyNTk0ZDI1NjdhZjQ0ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCqBCwzGjUCJOhcEZsqE0z7Jodz0
OAJcDQ8QtH/PfXSBnYvz8vN0ITYy2gNzHXH6PbGonCI5o7ZxuizexqT9rcj3Dp4i
imP/B+5wGcvISH5lYTL0pr01FXojg9KHyKgqJsubr3wmU8iizMqfsa5Ns0XGS7S3
mGlV/2fXQl9UbJ2ZHWno7EYkb1fZK05LXrtgcBNWSPvqtzBv1gyi3HxlM6/+qIvz
VcqmhmO48vCQbW8Oh0ymmqBfYRGOL+oSN3Lp1jPYi58GPAUmRQuhZgzdGbj/om0/
klcXxAQlSMJ1ThPSg7yj2hlbrARgBQf2cGKIjGDPTsaeT//dAas4n9TysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVdiSCC5Vq7YtY46SWU0lZ69E5yMB8GA1UdIwQY
MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt
YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm
LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYydKoMB
GnEaO7pqAjnumNceWTkUm3dGBsCRLAFnxf1HPm3yYovPZS4270F3/iFAVIgF9xb7
f/A8S9QERvITj+ZxoDepuxSu3vtsRPvwdHC9dcwdh/5OzhgCL1MlzFvHqGe3TO+q
GbvWffkl2a0mVRliTRtnb3o0iogCx4sF+WgqEtad7ZPzFFiOA0ITa+yqRxzvym2u
Q8Et9xegt5folhTZLbOl7t3pXYrzrhbcCtLaGvXD8/pPElxLlZpEMHXE9YwraHD+
ltyxHZbKUnhx5OpsQzIgAKM5ON6jujADLt6UOv+YuU8jm2xzPtvrCEtVNFwamaq6
fTTbGJueXopCrg==
-----END CERTIFICATE-----