Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
File:                     XLOiFF-bTUZgWCrca3NUlp4InKk.mft (raw, json)
Hash identifier:          bQNldYYQhex+2jCtnTYpx7tW17UnCFMBHc1WC/xmydA=
Subject key identifier:   73:C9:C4:D1:3D:1E:F6:76:08:A1:4B:53:98:40:CD:C5:C5:1F:BF:0A
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Certificate issuer:       /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial:       01962F3DD7C54BD75B5612B0888E7821EE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft
Manifest number:          0C9A
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 8rSm2TYmCggVgedhJYf2d5mO9bY.roa (hash: u5F6NWnwd9MOKoxteUtWCw1+tPwzMsMfG5qFtnCO6pk=)
                          2: XLOiFF-bTUZgWCrca3NUlp4InKk.crl (hash: vza9iFKkc+Mw0miMHgg+1rDy1kHqqx3O3MD+nH+g6d4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d7:c5:4b:d7:5b:56:12:b0:88:8e:78:21:ee:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=73c9c4d13d1ef67608a14b539840cdc5c51fbf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:1e:d8:3d:2a:a2:66:c6:72:da:ca:28:76:
                    0e:7d:68:db:dc:6e:bc:2f:52:ee:e0:bc:6e:9c:36:
                    a9:19:8d:dc:89:f1:85:2c:c6:5c:63:63:87:8d:2f:
                    95:77:0b:81:e5:98:08:a9:72:87:e0:a6:d2:6d:d5:
                    30:78:3a:7a:dc:1e:a4:3f:6e:73:ff:1e:95:8f:48:
                    a5:38:0a:53:bc:fe:7d:c8:e4:cc:b0:28:b1:76:5c:
                    83:2b:50:da:7c:3c:7b:8b:92:72:0d:8c:66:01:6b:
                    79:58:4d:4f:c3:f3:56:c8:4f:e7:92:6c:23:8f:ee:
                    03:48:1e:74:40:12:d7:11:74:45:68:28:b4:b9:50:
                    dc:2d:10:03:e9:65:8e:db:5e:ba:3b:20:92:3f:55:
                    cd:9c:00:a5:c3:bd:8b:a9:95:8a:d8:da:7e:e7:8e:
                    aa:a0:cd:6b:87:f8:50:62:cc:8c:2c:3e:f4:e3:90:
                    a7:57:09:43:24:db:6f:21:91:ed:6c:86:4a:9f:27:
                    2f:67:59:64:e0:55:73:2c:64:e3:ee:e7:70:8f:ea:
                    ee:d9:0f:6a:cf:8a:64:3d:93:01:a4:b8:a9:9d:01:
                    69:d6:18:f7:e3:23:99:a9:3d:52:bb:f2:81:ff:89:
                    3b:0f:5a:17:2b:86:0a:4d:9e:54:3c:fd:58:37:20:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C9:C4:D1:3D:1E:F6:76:08:A1:4B:53:98:40:CD:C5:C5:1F:BF:0A
            X509v3 Authority Key Identifier:
                keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:7b:c8:2e:30:25:04:72:c6:2e:14:34:39:34:52:d4:fb:
         8b:b3:19:af:a5:e0:39:d5:e6:2a:d8:3c:40:e0:61:75:42:14:
         00:6b:f6:d1:49:86:e8:58:7e:c8:e5:32:23:4c:a0:b2:bd:00:
         f5:b0:01:cc:48:7d:28:cd:10:01:9d:c5:6b:41:c8:85:d4:81:
         69:34:b9:3d:a5:7a:a7:1e:7a:e3:9e:20:a1:a4:cb:c1:30:64:
         3c:0d:df:7d:55:67:89:ed:0c:ee:38:42:bf:7d:5e:87:98:4b:
         68:a0:2e:8e:12:98:30:8f:2d:5f:4b:c3:cc:45:e2:d5:18:36:
         5c:24:d0:b2:29:b7:cd:f5:77:f1:a5:cf:dd:be:ae:08:61:8a:
         2a:e5:f0:1f:f1:cf:e5:c1:97:be:28:d7:eb:59:dd:6d:f3:a7:
         47:3b:7b:96:e2:70:4c:3a:21:95:91:f9:17:c7:c0:64:a6:c4:
         2f:f6:f1:a5:5b:b2:a2:7e:1b:d1:c6:94:69:49:dd:17:da:1d:
         d4:fb:b8:bf:71:d7:b7:0b:91:6a:e0:3b:26:01:96:3d:a3:ea:
         db:8b:a0:93:74:84:e5:42:d6:34:b6:41:1c:6c:d0:f4:19:1e:
         8f:4d:75:c8:0c:7e:5f:bf:ca:a5:98:64:38:1d:dc:0e:f4:41:
         ad:96:ab:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdfFS9dbVhKwiI54Ie4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYjNhMjE0NWY5YjRkNDY2MDU4MmFkYzZiNzM1NDk2OWUw
ODljYTkwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg3M2M5YzRkMTNkMWVmNjc2MDhhMTRiNTM5ODQwY2RjNWM1MWZiZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArowe2D0qombGctrKKHYOfWjb3G68
L1Lu4LxunDapGY3cifGFLMZcY2OHjS+VdwuB5ZgIqXKH4KbSbdUweDp63B6kP25z
/x6Vj0ilOApTvP59yOTMsCixdlyDK1DafDx7i5JyDYxmAWt5WE1Pw/NWyE/nkmwj
j+4DSB50QBLXEXRFaCi0uVDcLRAD6WWO2166OyCSP1XNnAClw72LqZWK2Np+546q
oM1rh/hQYsyMLD7045CnVwlDJNtvIZHtbIZKnycvZ1lk4FVzLGTj7udwj+ru2Q9q
z4pkPZMBpLipnQFp1hj34yOZqT1Su/KB/4k7D1oXK4YKTZ5UPP1YNyBbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPJxNE9HvZ2CKFLU5hAzcXFH78KMB8GA1UdIwQY
MBaAFFyzohRfm01GYFgq3GtzVJaeCJypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTct
MTM5ODAwYThjNzVmLzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kMDY2MWMtY2ViYi00ZTIyLWIxOTctMTM5ODAwYThjNzVm
LzEvWExPaUZGLWJUVVpnV0NyY2EzTlVscDRJbktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMV7yC4w
JQRyxi4UNDk0UtT7i7MZr6XgOdXmKtg8QOBhdUIUAGv20UmG6Fh+yOUyI0ygsr0A
9bABzEh9KM0QAZ3Fa0HIhdSBaTS5PaV6px56454goaTLwTBkPA3ffVVnie0M7jhC
v31eh5hLaKAujhKYMI8tX0vDzEXi1Rg2XCTQsim3zfV38aXP3b6uCGGKKuXwH/HP
5cGXvijX61ndbfOnRzt7luJwTDohlZH5F8fAZKbEL/bxpVuyon4b0caUaUndF9od
1Pu4v3HXtwuRauA7JgGWPaPq24ugk3SE5ULWNLZBHGzQ9Bkej011yAx+X7/KpZhk
OB3cDvRBrZar+w==
-----END CERTIFICATE-----