Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File:                     XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier:          SqorwlJ0PUUf7GB69eACrc9pluK52ezL648N4Nq1Sc0=
Subject key identifier:   89:90:90:7A:FF:4C:BD:A2:F9:49:3F:AD:ED:7F:F2:04:9B:D9:DE:06
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer:       /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial:       01962E98F3173913775003BC135CB5F4771C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number:          0778
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: baZGIeo/CgX5dQVbcCF5Xcc8oePpcp4eW1iAEBDjNlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f3:17:39:13:77:50:03:bc:13:5c:b5:f4:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=8990907aff4cbda2f9493faded7ff2049bd9de06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:81:77:13:fd:0b:47:96:20:44:07:d2:77:
                    c6:ef:31:f7:f1:fd:bd:8c:e6:d0:f9:25:6f:aa:ff:
                    4c:c3:6e:f7:4e:a2:61:8d:b3:19:37:c1:5c:c4:49:
                    2f:e0:20:c9:79:b6:0a:ae:b8:3c:63:2e:79:0d:a5:
                    d0:06:5e:eb:47:69:c3:7c:94:8d:fc:1d:be:60:18:
                    55:21:4d:d7:c7:b2:fb:d8:48:88:24:ca:e2:a1:07:
                    54:2f:7b:ec:5e:69:43:bd:46:17:62:08:48:54:b1:
                    71:f4:bb:a9:b0:ec:b3:00:86:cd:ce:3f:72:a2:10:
                    59:1b:32:c9:d6:54:4c:06:01:12:08:78:14:10:64:
                    e3:35:11:f7:5d:90:f1:46:40:9d:b7:b8:58:39:86:
                    bf:ee:b6:d1:a8:4f:c7:40:46:90:b7:0b:cd:34:4d:
                    47:6b:2b:ea:6b:35:36:2a:42:57:be:31:75:a1:ff:
                    84:31:84:68:37:27:2a:14:eb:f0:f5:ac:64:6d:7d:
                    6c:c4:d3:48:82:c6:f0:ec:9b:a6:64:bc:53:15:ba:
                    d4:ef:d3:4e:5a:0b:15:76:32:f5:07:31:e1:4d:3c:
                    72:fb:81:f2:d3:a0:7f:18:3b:e8:fe:7c:82:68:05:
                    e8:f6:77:b5:5e:29:c3:68:34:44:e7:8d:dd:0b:3b:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:90:7A:FF:4C:BD:A2:F9:49:3F:AD:ED:7F:F2:04:9B:D9:DE:06
            X509v3 Authority Key Identifier:
                keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:45:5d:fc:98:cd:be:48:dc:ce:b8:ec:62:09:76:a3:8a:
         cc:e6:f9:da:8d:42:f2:13:fb:d9:ac:42:c8:24:29:0b:05:32:
         3a:e9:fe:81:a4:15:26:b9:b7:c0:e6:4d:b8:78:e3:f0:c9:da:
         89:53:d4:14:fb:9b:5e:59:9a:fe:11:a2:f6:4f:2a:a7:3e:0a:
         75:f7:a8:fa:5f:bd:9e:41:a7:c2:7f:c1:7a:2c:11:fd:87:47:
         2f:79:50:fa:94:78:34:6f:78:09:f4:eb:13:b8:75:90:40:15:
         e1:15:10:f6:ea:58:6f:f1:30:d2:4f:f6:8f:93:88:3b:21:65:
         4f:3f:5f:cf:c0:bb:ea:a9:8c:77:e0:15:7d:81:29:41:5f:b8:
         17:7a:e1:07:c1:2e:de:8e:89:18:e4:18:20:2e:48:d9:b0:e0:
         07:f7:45:5a:02:cd:e8:d7:12:40:01:03:72:8f:4d:97:43:49:
         4d:7d:e6:da:99:3c:33:05:24:57:7b:c0:50:94:f9:d7:5d:0f:
         97:36:c5:db:58:54:a2:81:20:d8:02:a6:be:89:20:bc:fc:96:
         86:6d:2b:ee:a5:c8:fd:00:16:2b:d9:a0:2d:ac:0e:ef:71:fd:
         82:3a:90:0b:bb:9e:c9:cc:20:be:4c:6e:fe:2b:ee:9b:74:9b:
         6f:ff:57:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPMXORN3UAO8E1y19HccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkM2IxNzJlODE2MWM4MWNlOGU5NTRhZmQzNWE3M2IyZmFk
MGJiM2EwHhcNMjUwNDEzMTAwMTM3WhcNMjUwNDE0MTAwMTM3WjAzMTEwLwYDVQQD
Eyg4OTkwOTA3YWZmNGNiZGEyZjk0OTNmYWRlZDdmZjIwNDliZDlkZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvOBdxP9C0eWIEQH0nfG7zH38f29
jObQ+SVvqv9Mw273TqJhjbMZN8FcxEkv4CDJebYKrrg8Yy55DaXQBl7rR2nDfJSN
/B2+YBhVIU3Xx7L72EiIJMrioQdUL3vsXmlDvUYXYghIVLFx9LupsOyzAIbNzj9y
ohBZGzLJ1lRMBgESCHgUEGTjNRH3XZDxRkCdt7hYOYa/7rbRqE/HQEaQtwvNNE1H
ayvqazU2KkJXvjF1of+EMYRoNycqFOvw9axkbX1sxNNIgsbw7JumZLxTFbrU79NO
WgsVdjL1BzHhTTxy+4Hy06B/GDvo/nyCaAXo9ne1XinDaDRE543dCzuxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImQkHr/TL2i+Uk/re1/8gSb2d4GMB8GA1UdIwQY
MBaAFF07Fy6BYcgc6OlUr9Nac7L60Ls6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEt
MzJjNjEzZjczNjYxLzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEtMzJjNjEzZjczNjYx
LzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZBFXfyY
zb5I3M647GIJdqOKzOb52o1C8hP72axCyCQpCwUyOun+gaQVJrm3wOZNuHjj8Mna
iVPUFPubXlma/hGi9k8qpz4Kdfeo+l+9nkGnwn/BeiwR/YdHL3lQ+pR4NG94CfTr
E7h1kEAV4RUQ9upYb/Ew0k/2j5OIOyFlTz9fz8C76qmMd+AVfYEpQV+4F3rhB8Eu
3o6JGOQYIC5I2bDgB/dFWgLN6NcSQAEDco9Nl0NJTX3m2pk8MwUkV3vAUJT5110P
lzbF21hUooEg2AKmvokgvPyWhm0r7qXI/QAWK9mgLawO73H9gjqQC7ueycwgvkxu
/ivum3Sbb/9XzA==
-----END CERTIFICATE-----