Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File:                     XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier:          uXp1mQvzSZH0a4V88zWuW2C3iENizlJ7I1jHS0GsnTY=
Subject key identifier:   88:1D:C5:64:5D:D5:FF:0E:6F:8D:A4:BF:67:24:1A:C8:E5:9F:8F:B3
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer:       /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial:       01962E61C424E464DBB276BD5DFB12B42DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: ZbcYhUb6ED3JJxydUwiXI4UjH64nDdUClje2aXQIWws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:24:e4:64:db:b2:76:bd:5d:fb:12:b4:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=881dc5645dd5ff0e6f8da4bf67241ac8e59f8fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:02:5e:f7:35:31:40:db:a6:32:23:4c:4c:
                    99:5f:a0:c3:0d:eb:af:e1:ec:42:b7:87:79:07:05:
                    1a:a1:67:46:08:72:16:4c:a6:03:69:fc:03:19:99:
                    34:c9:44:dd:50:2d:1f:8b:47:3c:87:ce:92:0e:a0:
                    5c:50:9c:ba:7c:43:20:f8:d7:c2:4b:75:fd:6b:dd:
                    65:d3:70:71:a0:80:21:db:98:e3:90:ef:bb:e7:2f:
                    ec:d1:1d:50:f1:d5:3a:04:74:2a:38:e7:02:79:71:
                    26:e5:c9:a9:78:32:a0:e0:49:8c:b7:5d:8c:fd:ef:
                    63:83:2d:c3:65:d0:1f:8d:ff:e9:77:2f:17:90:dd:
                    10:3a:62:fa:50:35:72:d1:41:8e:ae:ee:71:e1:0c:
                    c1:0c:c8:49:7d:ef:43:97:fc:70:ec:3a:2b:64:51:
                    7a:c7:63:8f:ea:36:79:9d:24:04:4c:83:c1:4b:b8:
                    ea:3b:73:57:7f:9a:54:0d:ad:1c:0e:5c:41:8c:70:
                    01:8d:3e:91:72:6c:c0:0a:8c:e2:ec:60:7c:74:74:
                    a6:14:5c:cc:3b:4a:a7:69:94:81:40:07:56:f9:5f:
                    83:cf:4c:7f:f5:f0:60:26:51:5f:35:78:03:79:b1:
                    78:d2:1b:47:ea:3d:06:a1:c3:6f:fb:3c:c4:82:91:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:C5:64:5D:D5:FF:0E:6F:8D:A4:BF:67:24:1A:C8:E5:9F:8F:B3
            X509v3 Authority Key Identifier:
                keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:e3:d6:d6:89:b0:f2:95:d0:57:9d:4f:5a:61:b0:99:03:
         6f:31:19:12:0a:e3:72:23:b3:80:c6:64:6b:9c:3a:98:d4:95:
         e8:ed:b4:be:e9:a3:6d:0a:10:44:b6:e1:fb:6a:37:e7:79:6d:
         47:90:fc:91:97:a5:e2:9f:b2:47:75:2b:a9:ee:d9:92:71:8e:
         49:f0:eb:05:e7:0b:db:f7:35:74:45:0e:76:24:58:cb:c2:de:
         42:b8:aa:54:ff:f1:6e:db:42:97:14:e9:fe:ef:d9:51:5e:d0:
         94:5f:2c:d9:b9:75:d9:db:62:cb:37:63:8d:ff:ad:fc:b1:a8:
         7f:2c:fd:11:79:6b:62:82:54:62:19:72:20:81:5b:dc:8a:be:
         da:36:d5:0c:6c:98:03:9b:96:16:9d:61:c0:61:b8:07:dd:e3:
         07:27:11:a7:7f:c9:b4:f9:af:d8:0c:96:0d:3c:6f:aa:e9:f9:
         fd:57:cc:e0:cd:60:7b:39:c9:0a:ad:6e:8f:1b:36:ce:65:46:
         9f:30:f6:8d:be:24:cc:ec:e8:f8:93:6a:71:df:51:fe:74:b6:
         86:1b:29:1b:0b:dd:27:78:0e:e8:f6:b9:4c:93:6a:93:0d:67:
         62:81:16:e4:fe:04:7c:73:9a:33:62:1d:fa:d7:12:f2:fd:21:
         37:f2:7b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcQk5GTbsna9XfsStC3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZmFhZmI2MWEwYzc0YTA0OWQ5NmJjZGU1OWNiOTQyY2M4
ZDU1NzkwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
Eyg4ODFkYzU2NDVkZDVmZjBlNmY4ZGE0YmY2NzI0MWFjOGU1OWY4ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbECXvc1MUDbpjIjTEyZX6DDDeuv
4exCt4d5BwUaoWdGCHIWTKYDafwDGZk0yUTdUC0fi0c8h86SDqBcUJy6fEMg+NfC
S3X9a91l03BxoIAh25jjkO+75y/s0R1Q8dU6BHQqOOcCeXEm5cmpeDKg4EmMt12M
/e9jgy3DZdAfjf/pdy8XkN0QOmL6UDVy0UGOru5x4QzBDMhJfe9Dl/xw7DorZFF6
x2OP6jZ5nSQETIPBS7jqO3NXf5pUDa0cDlxBjHABjT6RcmzACozi7GB8dHSmFFzM
O0qnaZSBQAdW+V+Dz0x/9fBgJlFfNXgDebF40htH6j0GocNv+zzEgpF10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgdxWRd1f8Ob42kv2ckGsjln4+zMB8GA1UdIwQY
MBaAFF36r7YaDHSgSdlrzeWcuULMjVV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80OTQyZjYtZjU4Yy00ZWVmLTkxOGIt
ZjJkOWYwZTdhNjk3LzEvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80OTQyZjYtZjU4Yy00ZWVmLTkxOGItZjJkOWYwZTdhNjk3
LzEvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlTj1taJ
sPKV0FedT1phsJkDbzEZEgrjciOzgMZka5w6mNSV6O20vumjbQoQRLbh+2o353lt
R5D8kZel4p+yR3Urqe7ZknGOSfDrBecL2/c1dEUOdiRYy8LeQriqVP/xbttClxTp
/u/ZUV7QlF8s2bl12dtiyzdjjf+t/LGofyz9EXlrYoJUYhlyIIFb3Iq+2jbVDGyY
A5uWFp1hwGG4B93jBycRp3/JtPmv2AyWDTxvqun5/VfM4M1geznJCq1ujxs2zmVG
nzD2jb4kzOzo+JNqcd9R/nS2hhspGwvdJ3gO6Pa5TJNqkw1nYoEW5P4EfHOaM2Id
+tcS8v0hN/J75Q==
-----END CERTIFICATE-----