Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File:                     xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier:          3qRM4F00v+IK3So8MHwR3zAZ4KpNWloZ0xGMq92JVTY=
Subject key identifier:   79:A3:7C:15:31:AB:7D:C6:7D:4B:E1:44:8B:FF:B0:54:C7:E9:3C:A0
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer:       /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial:       01962F74DA1528C934B99250C2543E5609E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number:          1078
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: 1Uqo6nu7C13cxMdlV+J1uiePHiyNn9lkqiOCLu8Lj+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:15:28:c9:34:b9:92:50:c2:54:3e:56:09:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=79a37c1531ab7dc67d4be1448bffb054c7e93ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:95:e6:15:f8:81:19:5f:e9:78:a4:f1:50:
                    65:bb:81:4b:c6:3c:6f:50:bc:87:12:f1:dc:4e:38:
                    88:f3:59:07:8e:ec:97:ad:88:52:28:52:0a:e0:85:
                    43:7c:59:1d:95:32:2b:0b:76:56:32:a8:d7:40:b7:
                    89:3c:8a:a1:ef:e9:59:62:71:42:15:55:5f:82:bc:
                    da:cd:63:76:d7:29:58:59:48:35:69:05:87:45:49:
                    f3:76:f6:48:5d:c6:6b:2e:34:af:e3:40:a1:e1:fc:
                    c8:17:6a:9a:13:9d:fa:f4:74:0b:0f:f9:8a:56:5f:
                    a9:85:18:ff:85:4e:c6:f2:84:18:46:9c:0d:34:dd:
                    74:58:09:85:46:a5:f2:00:a2:62:d1:f2:83:21:3c:
                    1e:65:4e:62:b8:0d:12:7f:2d:d8:6a:bd:8c:04:6f:
                    a5:46:c1:93:4d:ee:76:a4:fc:f8:e2:60:0d:08:ab:
                    61:fb:43:2e:c3:d1:d1:7f:8f:70:88:a3:ca:3f:3f:
                    46:d2:6f:9c:57:4b:4c:ac:2a:97:e6:0f:ea:30:82:
                    f0:fa:6b:ae:a8:8c:37:b2:99:22:58:8c:0a:33:81:
                    a4:23:04:18:59:68:22:c3:be:15:49:7f:d0:05:bd:
                    f9:4c:e2:e4:f7:0b:2c:ff:9a:02:77:2e:4f:cd:1b:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:7C:15:31:AB:7D:C6:7D:4B:E1:44:8B:FF:B0:54:C7:E9:3C:A0
            X509v3 Authority Key Identifier:
                keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:b7:93:83:d9:9d:97:51:12:9d:fa:2c:01:ba:79:f2:20:
         b3:ff:82:14:60:e3:e0:cb:19:ae:f8:45:2d:7b:1b:e0:ec:4a:
         eb:26:0c:24:bb:61:84:61:15:70:25:90:92:b7:57:0d:44:07:
         ca:c1:d7:9f:06:e6:21:24:a4:c0:af:d5:f9:33:2f:4c:e8:08:
         7e:8f:83:10:db:3a:ab:a1:c3:f6:e7:cd:e5:2a:d8:1c:0e:6f:
         24:49:c9:ea:2a:4c:5d:6b:83:1d:26:cd:60:04:c7:88:0b:a9:
         bc:b1:44:b2:84:93:df:c5:73:7e:37:53:2f:ed:e9:d9:94:22:
         c5:9d:a8:6f:44:21:39:cd:5f:0c:0f:76:95:c8:af:00:dd:62:
         be:71:8f:ef:99:18:b0:31:09:88:85:20:54:4c:16:ac:d7:de:
         79:ca:36:05:1c:ea:d8:11:ef:3c:ed:a4:43:70:ee:56:f7:4e:
         53:b1:2b:1f:6f:1e:f0:44:12:53:c6:a9:f9:6c:75:d8:52:3d:
         e0:b6:fc:cb:2a:e6:aa:70:4b:58:35:f6:e0:5e:8e:aa:43:88:
         e1:a3:06:49:3b:57:b0:3c:72:c4:8f:9b:0b:ac:35:77:06:8e:
         fc:cf:45:74:bd:48:5c:4f:9c:eb:dd:9f:7d:44:cb:1f:84:fa:
         7a:d4:2a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNoVKMk0uZJQwlQ+VgnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzdlNDM2OTNhNTMyZDNkNmVmNDExODZkNzBkN2E2YzU1
ZmJhZGUwHhcNMjUwNDEzMTQwMTQ5WhcNMjUwNDE0MTQwMTQ5WjAzMTEwLwYDVQQD
Eyg3OWEzN2MxNTMxYWI3ZGM2N2Q0YmUxNDQ4YmZmYjA1NGM3ZTkzY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz2V5hX4gRlf6Xik8VBlu4FLxjxv
ULyHEvHcTjiI81kHjuyXrYhSKFIK4IVDfFkdlTIrC3ZWMqjXQLeJPIqh7+lZYnFC
FVVfgrzazWN21ylYWUg1aQWHRUnzdvZIXcZrLjSv40Ch4fzIF2qaE5369HQLD/mK
Vl+phRj/hU7G8oQYRpwNNN10WAmFRqXyAKJi0fKDITweZU5iuA0Sfy3Yar2MBG+l
RsGTTe52pPz44mANCKth+0Muw9HRf49wiKPKPz9G0m+cV0tMrCqX5g/qMILw+muu
qIw3spkiWIwKM4GkIwQYWWgiw74VSX/QBb35TOLk9wss/5oCdy5PzRsBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmjfBUxq33GfUvhRIv/sFTH6TygMB8GA1UdIwQY
MBaAFMbH5DaTpTLT1u9BGG1w16bFX7reMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGFjZTktMzE5My00MzU4LWI1ZTct
NTRhYjllOTViN2I0LzEveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZGFjZTktMzE5My00MzU4LWI1ZTctNTRhYjllOTViN2I0
LzEveHNma05wT2xNdFBXNzBFWWJYRFhwc1ZmdXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGy3k4PZ
nZdREp36LAG6efIgs/+CFGDj4MsZrvhFLXsb4OxK6yYMJLthhGEVcCWQkrdXDUQH
ysHXnwbmISSkwK/V+TMvTOgIfo+DENs6q6HD9ufN5SrYHA5vJEnJ6ipMXWuDHSbN
YATHiAupvLFEsoST38VzfjdTL+3p2ZQixZ2ob0QhOc1fDA92lcivAN1ivnGP75kY
sDEJiIUgVEwWrNfeeco2BRzq2BHvPO2kQ3DuVvdOU7ErH28e8EQSU8ap+Wx12FI9
4Lb8yyrmqnBLWDX24F6OqkOI4aMGSTtXsDxyxI+bC6w1dwaO/M9FdL1IXE+c692f
fUTLH4T6etQqZQ==
-----END CERTIFICATE-----