Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File:                     xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier:          RQDrSk78bH6coALPdhG5cuzlA/cd+qNiwZs90DPgsoo=
Subject key identifier:   81:C6:4D:D3:78:0B:D6:87:F1:F4:E1:AD:04:B6:33:BF:D0:F4:C1:99
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer:       /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial:       01962F0671857432B0775A19195B1C6C2F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number:          F1
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: /QzVjnzbNfjIMXBGBKnbeDITx/sym3rwjChttHAeKbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:85:74:32:b0:77:5a:19:19:5b:1c:6c:2f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=81c64dd3780bd687f1f4e1ad04b633bfd0f4c199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:87:b9:08:b0:25:8b:41:be:72:3c:55:05:
                    49:80:0b:51:cf:91:d5:6d:e2:0c:3c:5c:5f:c4:4c:
                    12:86:ba:f5:03:12:db:dc:90:7a:09:23:ed:c4:86:
                    88:e7:fb:91:e5:3c:cc:a0:0a:aa:30:a6:e3:8d:6e:
                    e9:bb:c4:2c:30:98:5d:83:c7:21:fd:9c:2c:59:1b:
                    9d:0d:a0:10:94:3d:73:7b:9f:8c:75:bb:8e:67:88:
                    b4:84:dc:5d:4f:4d:9e:a1:89:fd:86:e4:47:82:d5:
                    ef:6c:c5:52:87:34:83:df:0e:a4:e4:44:23:55:93:
                    9f:84:98:b2:2f:af:1a:0c:d8:91:27:79:62:33:d1:
                    03:bd:cd:80:71:9e:d0:34:d0:a0:f5:41:a3:64:cb:
                    60:9a:a4:bd:30:d8:75:b2:5f:be:e8:a2:8b:c8:67:
                    8d:2a:95:c4:5d:2b:5b:5e:9b:e5:1b:f4:80:8f:cd:
                    65:91:3e:6f:ca:e4:2a:6d:9c:15:6e:1f:11:cf:25:
                    7c:1d:9b:4c:b7:51:95:98:56:c4:af:a7:4f:55:3c:
                    4b:91:4c:55:35:86:6b:29:4e:49:11:ec:86:af:0c:
                    df:be:b3:6a:e2:37:3a:b4:2e:c9:d9:83:de:55:d3:
                    c4:90:d8:0a:d6:a6:62:d2:9f:d0:93:c6:9d:75:d4:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C6:4D:D3:78:0B:D6:87:F1:F4:E1:AD:04:B6:33:BF:D0:F4:C1:99
            X509v3 Authority Key Identifier:
                keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:54:d1:3d:95:2a:55:ba:cc:26:46:05:68:39:c0:a2:27:
         8a:3d:36:42:23:a8:58:87:93:a3:c5:e0:ac:2d:4d:c2:68:61:
         53:23:c1:45:56:d3:12:2d:87:99:c2:31:44:46:4d:ad:fc:e2:
         cd:89:e6:6b:ec:26:e7:6f:f8:d2:ea:4e:a1:86:2d:cd:3b:d2:
         16:fc:db:0b:65:38:19:f7:4e:de:a8:8a:ae:2c:20:69:3e:db:
         98:46:f0:8c:9e:75:ce:7c:12:ad:93:b3:b8:9e:6b:ee:7d:a0:
         05:53:e9:11:88:08:c4:b5:08:2f:88:3f:e9:02:5d:2a:31:88:
         c7:f6:48:e2:bc:e2:06:f7:2e:31:e2:6b:fa:35:a0:6a:64:70:
         74:e0:eb:9f:8c:4c:35:a0:70:bb:10:37:6b:74:55:68:71:65:
         57:6b:c1:fd:0a:3f:af:f7:c1:3f:11:6d:4d:37:b5:23:31:a6:
         7f:20:7a:bf:82:11:b4:35:09:f4:43:17:3a:ca:7e:ba:37:91:
         f7:d0:a5:76:f3:d5:4c:92:ce:63:d3:ee:b2:80:6a:77:0f:c6:
         15:d0:c6:63:65:cc:af:02:f8:86:84:aa:52:ea:44:63:a9:ab:
         a4:26:45:49:05:94:72:3b:cd:84:84:97:0d:89:5d:40:e4:3c:
         43:cf:d1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnGFdDKwd1oZGVscbC9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjMxNWYyNmNhMWNkYjg0NDExMTY4MGMzY2YwNDM3YjRj
MTI3ZTYwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg4MWM2NGRkMzc4MGJkNjg3ZjFmNGUxYWQwNGI2MzNiZmQwZjRjMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqqHuQiwJYtBvnI8VQVJgAtRz5HV
beIMPFxfxEwShrr1AxLb3JB6CSPtxIaI5/uR5TzMoAqqMKbjjW7pu8QsMJhdg8ch
/ZwsWRudDaAQlD1ze5+MdbuOZ4i0hNxdT02eoYn9huRHgtXvbMVShzSD3w6k5EQj
VZOfhJiyL68aDNiRJ3liM9EDvc2AcZ7QNNCg9UGjZMtgmqS9MNh1sl++6KKLyGeN
KpXEXStbXpvlG/SAj81lkT5vyuQqbZwVbh8RzyV8HZtMt1GVmFbEr6dPVTxLkUxV
NYZrKU5JEeyGrwzfvrNq4jc6tC7J2YPeVdPEkNgK1qZi0p/Qk8adddSQcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHGTdN4C9aH8fThrQS2M7/Q9MGZMB8GA1UdIwQY
MBaAFMSzFfJsoc24RBEWgMPPBDe0wSfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDct
MTE2M2ZjM2EyMjFlLzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xMGFhM2QtMTk1Mi00ZGRlLTgwZDctMTE2M2ZjM2EyMjFl
LzEveExNVjhteWh6YmhFRVJhQXc4OEVON1RCSi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo1U0T2V
KlW6zCZGBWg5wKInij02QiOoWIeTo8XgrC1NwmhhUyPBRVbTEi2HmcIxREZNrfzi
zYnma+wm52/40upOoYYtzTvSFvzbC2U4GfdO3qiKriwgaT7bmEbwjJ51znwSrZOz
uJ5r7n2gBVPpEYgIxLUIL4g/6QJdKjGIx/ZI4rziBvcuMeJr+jWgamRwdODrn4xM
NaBwuxA3a3RVaHFlV2vB/Qo/r/fBPxFtTTe1IzGmfyB6v4IRtDUJ9EMXOsp+ujeR
99CldvPVTJLOY9PusoBqdw/GFdDGY2XMrwL4hoSqUupEY6mrpCZFSQWUcjvNhISX
DYldQOQ8Q8/RqA==
-----END CERTIFICATE-----