Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File:                     xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier:          hznPtUNnQrKB4ZDfwUTrYcclJSqHbM/ug8JgTQA93GI=
Subject key identifier:   FE:9A:C6:9E:12:D9:39:F5:8D:EA:62:EA:A3:5F:8D:DC:9C:79:EB:00
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer:       /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial:       01962DF3E54C0D72F5265A5D9119595866E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
                          2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: ob8TJ4IcbszpZ5zrOtTrPr3wBziRG1LzN451yOwdmj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e5:4c:0d:72:f5:26:5a:5d:91:19:59:58:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=fe9ac69e12d939f58dea62eaa35f8ddc9c79eb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:15:1f:98:44:03:de:79:8b:95:93:50:91:
                    82:e7:c2:74:77:88:42:be:ed:ec:da:86:87:dd:55:
                    26:02:11:57:17:ce:93:aa:1b:3e:23:4c:64:43:d2:
                    46:6f:cd:33:4b:2a:0b:1f:ec:ce:b2:15:83:b1:38:
                    42:0f:31:46:2d:b1:ab:3f:07:b0:e6:53:a9:91:73:
                    38:61:9c:44:cb:84:09:a7:af:fa:ab:77:80:ad:b6:
                    e6:a5:6a:41:7f:a4:86:0a:e6:92:51:ab:d1:af:30:
                    76:f9:03:07:8c:bf:83:a8:23:27:11:53:d2:b4:18:
                    0a:4e:02:89:09:6a:e9:c6:2f:2c:42:f0:88:35:b2:
                    94:b2:f0:a5:36:b9:a7:71:36:65:98:00:02:1a:37:
                    20:52:88:38:9c:28:e9:1e:b4:d5:63:ed:d6:a0:46:
                    96:0b:92:65:f6:f4:11:1c:14:dc:4d:cc:14:21:80:
                    6a:f6:4c:ed:0a:06:64:95:d0:7b:fa:ec:69:32:e0:
                    4b:9f:7c:f1:e4:76:24:f6:c3:ca:4b:d8:9d:e3:5d:
                    93:7d:36:37:42:ce:c4:80:fe:e0:ee:8f:d9:45:5c:
                    f8:f3:f7:5e:2f:68:bc:a6:71:8c:39:aa:68:a0:25:
                    17:2a:d6:06:2f:83:05:03:57:58:69:02:3d:e1:93:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:C6:9E:12:D9:39:F5:8D:EA:62:EA:A3:5F:8D:DC:9C:79:EB:00
            X509v3 Authority Key Identifier:
                keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:c6:85:2c:b5:d1:a0:ae:ec:84:2c:20:4e:b4:36:8d:70:
         9a:78:73:c8:28:a0:ee:26:19:91:0f:78:60:e3:ba:fb:0d:4d:
         0c:20:0e:6d:ea:42:66:49:8e:29:d0:06:42:a7:27:b1:b1:4f:
         bc:d8:3a:8f:3a:62:45:9e:26:10:28:43:b4:ab:9d:9c:b7:70:
         6d:26:b3:f2:28:82:c8:71:00:bb:bf:29:b8:f8:55:20:94:18:
         0c:a4:c1:5d:2f:e1:94:e4:4d:ea:dc:42:b5:93:ae:d5:68:49:
         49:23:31:ee:5b:d5:3e:90:e9:00:c8:c1:8e:e9:4c:b7:56:12:
         48:7a:cd:de:5a:43:3a:b4:62:58:95:bd:c8:a0:39:fc:f2:d6:
         1e:98:47:f6:9d:b8:61:b0:01:a8:96:13:8b:af:af:43:54:99:
         5a:4a:9c:ae:db:af:4a:44:cd:d2:a7:c6:20:34:c9:e4:42:6b:
         9c:a4:04:cd:26:aa:46:51:57:84:35:78:29:d7:9e:2d:47:bb:
         38:bb:03:ed:be:bc:18:c0:c0:9a:30:61:1b:5d:5a:ca:a2:60:
         8e:10:db:48:53:42:f4:fe:14:31:33:12:bc:2c:de:87:25:c9:
         a2:02:54:d4:ef:3a:1f:21:d4:79:c1:8e:22:ee:3a:fd:93:ef:
         47:66:40:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+VMDXL1JlpdkRlZWGblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzVhY2M3ZjdlYzJiNDViNDNkMjU0N2M5NjQ2NGMwMDg5
MzNkNTIwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
EyhmZTlhYzY5ZTEyZDkzOWY1OGRlYTYyZWFhMzVmOGRkYzljNzllYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXoVH5hEA955i5WTUJGC58J0d4hC
vu3s2oaH3VUmAhFXF86Tqhs+I0xkQ9JGb80zSyoLH+zOshWDsThCDzFGLbGrPwew
5lOpkXM4YZxEy4QJp6/6q3eArbbmpWpBf6SGCuaSUavRrzB2+QMHjL+DqCMnEVPS
tBgKTgKJCWrpxi8sQvCINbKUsvClNrmncTZlmAACGjcgUog4nCjpHrTVY+3WoEaW
C5Jl9vQRHBTcTcwUIYBq9kztCgZkldB7+uxpMuBLn3zx5HYk9sPKS9id412TfTY3
Qs7EgP7g7o/ZRVz48/deL2i8pnGMOapooCUXKtYGL4MFA1dYaQI94ZMkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6axp4S2Tn1jepi6qNfjdyceesAMB8GA1UdIwQY
MBaAFMXFrMf37CtFtD0lR8lkZMAIkz1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQt
OWMwODhjMzQ1YWU2LzEveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My85ZjUzNmQtMGRkNi00M2VhLWE5MTQtOWMwODhjMzQ1YWU2
LzEveGNXc3hfZnNLMFcwUFNWSHlXUmt3QWlUUFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMLGhSy1
0aCu7IQsIE60No1wmnhzyCig7iYZkQ94YOO6+w1NDCAObepCZkmOKdAGQqcnsbFP
vNg6jzpiRZ4mEChDtKudnLdwbSaz8iiCyHEAu78puPhVIJQYDKTBXS/hlORN6txC
tZOu1WhJSSMx7lvVPpDpAMjBjulMt1YSSHrN3lpDOrRiWJW9yKA5/PLWHphH9p24
YbABqJYTi6+vQ1SZWkqcrtuvSkTN0qfGIDTJ5EJrnKQEzSaqRlFXhDV4KdeeLUe7
OLsD7b68GMDAmjBhG11ayqJgjhDbSFNC9P4UMTMSvCzehyXJogJU1O86HyHUecGO
Iu46/ZPvR2ZAgg==
-----END CERTIFICATE-----