Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File:                     Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier:          98BEDVnUM3AUN0r4VNqmVNCvf/nvin7Em7S+TyQz0oQ=
Subject key identifier:   8F:B7:19:5D:3C:EE:37:99:41:8B:7F:AE:13:5D:42:07:B3:D1:25:25
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer:       /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial:       01962E999F401614B15ED393B973B960E39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number:          0949
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: WJ5vSWSebW0BVqisYLElLyUA1/ShZasvQjtbX4SV+uU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9f:40:16:14:b1:5e:d3:93:b9:73:b9:60:e3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=8fb7195d3cee3799418b7fae135d4207b3d12525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:be:91:17:a4:88:3a:da:2c:89:69:aa:50:
                    1b:8e:a0:b7:ec:99:ca:23:ab:76:c0:71:60:b9:24:
                    94:f2:7c:e7:6b:ec:44:49:e2:ac:4a:70:4e:bf:3f:
                    e3:e8:67:f4:83:2a:4b:bb:67:fb:2b:5d:40:99:90:
                    42:8f:0f:4b:4f:1a:c4:fb:bf:4b:77:82:06:01:cc:
                    5c:c9:11:28:59:bf:86:69:45:87:7c:91:44:23:24:
                    04:eb:8f:b0:b7:37:42:0e:44:5a:3f:bb:8b:6e:7a:
                    f1:d1:b8:d6:d2:38:33:10:a8:d1:34:48:ee:73:91:
                    f8:f5:62:46:0c:9c:fb:c8:4d:81:ca:85:36:41:79:
                    0f:60:17:a5:d5:e4:f0:52:b2:ce:92:b1:a3:ce:2d:
                    c9:80:b1:92:7e:87:3b:d2:fc:99:a8:a7:9e:bd:39:
                    54:69:d0:db:fe:4d:4e:16:79:a4:b5:2d:78:72:bb:
                    d9:13:26:37:5d:45:31:29:d0:c9:30:77:97:08:b2:
                    80:85:26:be:84:48:65:74:83:a9:78:5b:57:ca:06:
                    ef:62:ca:5a:ae:2d:86:a9:ef:ad:75:5a:94:e2:80:
                    58:c7:14:a4:02:6b:d0:7b:8f:88:48:2e:f4:4c:6b:
                    e7:8d:0b:de:e8:b6:32:f0:e0:e0:89:36:df:97:68:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:19:5D:3C:EE:37:99:41:8B:7F:AE:13:5D:42:07:B3:D1:25:25
            X509v3 Authority Key Identifier:
                keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:71:28:9d:87:d4:67:71:79:63:34:3a:22:4c:77:8f:34:
         d0:64:47:4e:41:bb:f9:ef:20:a0:e7:c3:f9:cd:1e:a8:4b:0b:
         fc:90:e0:5e:37:a5:6b:21:32:80:51:ec:96:8a:d7:88:a8:2a:
         ff:22:a9:e1:18:04:cf:0b:02:53:22:f6:19:8e:70:09:a8:71:
         21:10:a6:a1:77:3e:f4:7a:b1:86:c4:52:03:3b:2b:67:41:49:
         92:cd:27:f5:20:4c:cc:e9:b5:28:cf:78:f1:fe:31:d4:fe:fc:
         a8:7a:78:7f:9c:b2:63:1c:ad:f4:4a:cb:39:a3:a6:ed:82:ea:
         98:9b:a6:45:34:3c:26:3c:ee:93:ac:17:24:91:67:00:7d:d4:
         04:65:41:83:b0:a2:9d:48:a7:f7:85:40:73:79:0a:3f:1a:13:
         bd:cb:9a:9b:4f:a4:1a:8e:0d:05:3b:66:e8:30:c7:c7:a7:5a:
         0e:15:0f:8f:26:3b:18:14:ab:68:b3:6c:af:28:63:47:82:81:
         31:17:e2:10:db:5d:99:29:c7:6f:b4:03:4b:46:af:0f:d7:a5:
         e8:bc:d9:f7:9c:dd:c6:d5:54:e2:e4:c8:d9:79:c8:d7:71:f8:
         eb:98:6f:65:89:63:10:27:a6:7f:75:a5:d1:ea:0a:34:e7:47:
         5e:a7:81:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumZ9AFhSxXtOTuXO5YOOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy
ZDA0MzUwHhcNMjUwNDEzMTAwMjIxWhcNMjUwNDE0MTAwMjIxWjAzMTEwLwYDVQQD
Eyg4ZmI3MTk1ZDNjZWUzNzk5NDE4YjdmYWUxMzVkNDIwN2IzZDEyNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoli+kRekiDraLIlpqlAbjqC37JnK
I6t2wHFguSSU8nzna+xESeKsSnBOvz/j6Gf0gypLu2f7K11AmZBCjw9LTxrE+79L
d4IGAcxcyREoWb+GaUWHfJFEIyQE64+wtzdCDkRaP7uLbnrx0bjW0jgzEKjRNEju
c5H49WJGDJz7yE2ByoU2QXkPYBel1eTwUrLOkrGjzi3JgLGSfoc70vyZqKeevTlU
adDb/k1OFnmktS14crvZEyY3XUUxKdDJMHeXCLKAhSa+hEhldIOpeFtXygbvYspa
ri2Gqe+tdVqU4oBYxxSkAmvQe4+ISC70TGvnjQve6LYy8ODgiTbfl2hZEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+3GV087jeZQYt/rhNdQgez0SUlMB8GA1UdIwQY
MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt
NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl
LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGxxKJ2H
1GdxeWM0OiJMd4800GRHTkG7+e8goOfD+c0eqEsL/JDgXjelayEygFHslorXiKgq
/yKp4RgEzwsCUyL2GY5wCahxIRCmoXc+9HqxhsRSAzsrZ0FJks0n9SBMzOm1KM94
8f4x1P78qHp4f5yyYxyt9ErLOaOm7YLqmJumRTQ8Jjzuk6wXJJFnAH3UBGVBg7Ci
nUin94VAc3kKPxoTvcuam0+kGo4NBTtm6DDHx6daDhUPjyY7GBSraLNsryhjR4KB
MRfiENtdmSnHb7QDS0avD9el6LzZ95zdxtVU4uTI2XnI13H465hvZYljECemf3Wl
0eoKNOdHXqeByg==
-----END CERTIFICATE-----