Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File:                     xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier:          sFhXSnpw+NOsh6rdbWd8cTu88bBQvbD5vM5YbC4at0A=
Subject key identifier:   3A:14:4F:18:29:2E:A6:00:42:EC:77:DC:E7:A5:CD:07:51:D8:06:A0
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer:       /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial:       01962E2AC0CFBE4A1D46D50D75A5D021BBDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
                          2: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (hash: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=)
                          3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: EXz0iTZLOB2q08jUprpbJ7/XiAimhcCwP5CAVyXhI18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c0:cf:be:4a:1d:46:d5:0d:75:a5:d0:21:bb:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=3a144f18292ea60042ec77dce7a5cd0751d806a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:be:1c:68:c0:6b:b2:bc:61:8f:9b:20:4b:
                    87:67:87:2e:bb:3e:be:dc:00:9d:ee:23:7b:ec:ff:
                    b1:fe:43:19:17:28:e2:3a:ba:cb:50:03:a0:dd:24:
                    49:d4:d1:00:ca:e7:f8:fc:28:1a:1f:9f:f0:96:6e:
                    e1:49:c2:b7:76:db:4e:07:5a:7e:6f:57:ff:8f:60:
                    b5:17:84:4c:39:2d:3f:ca:38:d6:e1:e7:94:84:8b:
                    d1:21:d6:0b:67:9e:eb:85:c1:0c:7d:3e:a7:dd:26:
                    71:28:d6:22:b5:e6:46:9d:cf:f3:b0:cc:c9:75:7e:
                    77:2a:1d:9c:3a:55:f9:5d:50:44:60:89:60:c7:56:
                    19:2a:5d:3e:58:f1:f4:8a:00:06:33:f8:9b:51:17:
                    9d:1e:b4:d4:87:ea:cb:ff:eb:24:55:2e:f2:7a:61:
                    b9:c1:cd:d6:d9:80:86:6c:cb:0a:e5:a6:0c:2f:07:
                    ca:03:3a:ea:c7:00:b8:43:fa:b7:2c:a7:0a:5e:e5:
                    a2:b3:d6:7a:b2:3b:93:9a:81:d0:78:d5:69:0c:9b:
                    4a:e9:dd:59:e5:a8:95:19:2e:c1:36:c9:6c:53:1b:
                    eb:26:2c:dc:39:64:87:b1:ec:6b:ec:2d:25:69:a5:
                    d1:0c:a7:4d:ee:a1:ae:6c:73:46:dc:2f:9f:6a:f8:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:14:4F:18:29:2E:A6:00:42:EC:77:DC:E7:A5:CD:07:51:D8:06:A0
            X509v3 Authority Key Identifier:
                keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:7c:c8:b9:49:f2:64:f1:ad:95:fc:85:10:a4:fe:d0:d0:
         8a:61:c7:69:8f:2f:1c:4b:69:ab:4f:5c:e3:b1:f8:c5:14:39:
         f4:1a:b9:d7:35:b6:b5:a2:e6:fd:54:2a:66:0f:64:11:20:fb:
         f3:6f:50:c8:23:50:97:bb:3c:1f:96:0b:5e:ca:af:29:b7:85:
         f5:71:38:2b:40:f8:50:fe:21:d8:d3:1f:32:8b:cf:74:90:d4:
         2d:dd:d9:33:24:4f:82:66:b5:e1:8f:77:b0:52:31:cf:df:4e:
         71:d0:ea:80:44:78:5d:2a:ee:2b:45:ca:25:80:24:4f:99:34:
         75:02:32:16:99:ed:60:82:c2:89:49:40:3e:3a:17:ad:6e:43:
         b6:26:bc:d3:36:da:1a:17:6b:c0:cd:5c:19:3a:a5:c2:b5:5b:
         7a:89:3b:18:c9:d8:59:02:ee:c3:52:ed:6b:95:60:48:26:f1:
         00:7b:f2:d8:bd:0c:0b:66:87:17:d9:9b:30:a6:cc:5b:fd:91:
         af:42:39:e4:ff:54:19:b7:bb:e8:e7:f8:c6:d7:ad:b4:60:1c:
         4a:7c:bb:fa:99:1e:c9:22:05:0b:c5:59:c4:dc:34:f0:ec:ad:
         28:e1:47:3b:8c:0c:dc:5f:21:47:c8:f3:8d:83:30:23:3d:f5:
         b7:5b:b4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsDPvkodRtUNdaXQIbvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4
ZGNhODcwHhcNMjUwNDEzMDgwMTE1WhcNMjUwNDE0MDgwMTE1WjAzMTEwLwYDVQQD
EygzYTE0NGYxODI5MmVhNjAwNDJlYzc3ZGNlN2E1Y2QwNzUxZDgwNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IG+HGjAa7K8YY+bIEuHZ4cuuz6+
3ACd7iN77P+x/kMZFyjiOrrLUAOg3SRJ1NEAyuf4/CgaH5/wlm7hScK3dttOB1p+
b1f/j2C1F4RMOS0/yjjW4eeUhIvRIdYLZ57rhcEMfT6n3SZxKNYiteZGnc/zsMzJ
dX53Kh2cOlX5XVBEYIlgx1YZKl0+WPH0igAGM/ibURedHrTUh+rL/+skVS7yemG5
wc3W2YCGbMsK5aYMLwfKAzrqxwC4Q/q3LKcKXuWis9Z6sjuTmoHQeNVpDJtK6d1Z
5aiVGS7BNslsUxvrJizcOWSHsexr7C0laaXRDKdN7qGubHNG3C+favhDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoUTxgpLqYAQux33OelzQdR2AagMB8GA1UdIwQY
MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt
ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh
LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypp8yLlJ
8mTxrZX8hRCk/tDQimHHaY8vHEtpq09c47H4xRQ59Bq51zW2taLm/VQqZg9kESD7
829QyCNQl7s8H5YLXsqvKbeF9XE4K0D4UP4h2NMfMovPdJDULd3ZMyRPgma14Y93
sFIxz99OcdDqgER4XSruK0XKJYAkT5k0dQIyFpntYILCiUlAPjoXrW5Dtia80zba
GhdrwM1cGTqlwrVbeok7GMnYWQLuw1Lta5VgSCbxAHvy2L0MC2aHF9mbMKbMW/2R
r0I55P9UGbe76Of4xtettGAcSny7+pkeySIFC8VZxNw08OytKOFHO4wM3F8hR8jz
jYMwIz31t1u0/Q==
-----END CERTIFICATE-----