Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File:                     xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier:          zX3DE7uIDtQ8XFx/PMFL3OLp5gaerFuJbhcMlGnZ2J4=
Subject key identifier:   33:0D:7B:3B:FF:BF:3F:59:77:0B:94:16:A4:E7:A4:3B:B8:E3:96:1B
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer:       /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial:       01962F0738E93397209E73358BA005AFDA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: Di3kjt55W5cGo3jmtP/AY5XDFSQJiRKu5sbfvZsE2i0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:e9:33:97:20:9e:73:35:8b:a0:05:af:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=330d7b3bffbf3f59770b9416a4e7a43bb8e3961b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:b1:05:d2:79:99:be:dd:f8:94:80:ab:50:
                    5d:c3:69:33:36:2a:17:e4:c2:7d:04:67:36:25:be:
                    06:29:37:5f:fd:19:cd:20:4a:a0:5e:da:39:76:85:
                    b2:4a:7a:d6:a3:0f:17:07:da:36:7d:37:19:dd:a7:
                    56:ff:95:f1:b7:5f:99:c4:29:b9:ea:af:7b:1c:4e:
                    d2:cc:1a:de:65:04:0c:93:69:96:32:16:32:ea:d7:
                    a3:9d:3a:9d:7a:21:30:2b:6e:2b:98:71:f8:b1:6a:
                    10:af:1c:08:79:8f:3d:f1:72:20:bf:c2:59:00:11:
                    81:96:05:e5:76:8a:32:98:8c:3e:ac:fd:2a:27:75:
                    a1:3c:25:de:2e:53:1b:1f:53:8e:6f:94:99:e9:00:
                    58:3c:d6:da:46:60:69:59:68:bf:93:2e:cc:a7:0b:
                    27:38:3c:28:37:19:0a:58:18:38:9d:00:11:33:6a:
                    71:49:cb:03:3e:d3:c8:c6:80:ec:fc:ab:13:1f:6f:
                    96:fd:e7:41:c7:e9:d3:ff:01:db:c5:93:e1:83:84:
                    95:9c:a7:fe:1d:97:48:17:37:a5:3b:0b:d7:78:7d:
                    87:d9:13:56:8e:f5:37:cc:a3:e3:2a:a3:24:ea:92:
                    39:36:5f:58:88:9c:f7:65:57:a7:ba:ea:f3:2c:df:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:7B:3B:FF:BF:3F:59:77:0B:94:16:A4:E7:A4:3B:B8:E3:96:1B
            X509v3 Authority Key Identifier:
                keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2c:66:ae:be:b8:49:60:a5:ac:1e:c0:3e:33:25:f9:52:92:
         a4:12:f8:fe:a0:25:83:ca:15:21:8a:72:0a:75:1e:bc:f9:f7:
         fa:d8:80:25:0e:6f:16:d5:f9:c8:0c:13:91:29:47:dc:64:ba:
         53:0b:21:62:99:ca:80:ad:02:3d:36:d2:17:89:cb:dd:36:14:
         fd:14:b5:f2:46:be:65:a3:cf:35:d6:bd:ed:c1:75:1a:fe:ca:
         9a:57:85:f8:72:f9:04:5b:ac:c8:99:56:52:42:0a:a9:2c:68:
         39:75:d6:6e:b3:ef:9f:ce:53:f4:74:43:f2:5a:0f:48:5e:d4:
         88:ae:16:c2:43:a4:4a:f6:b5:81:11:67:bb:85:15:29:9c:4c:
         df:35:23:62:f1:13:f2:d5:6e:b1:69:12:d0:29:75:19:ff:b1:
         e2:35:ab:bb:93:20:50:dd:aa:81:b5:97:23:5b:43:43:98:07:
         1f:c7:5c:9d:71:b5:6d:7d:41:ec:49:ac:1e:19:88:da:29:13:
         20:ac:57:66:97:da:aa:c7:9e:c3:02:c9:c4:d7:09:d7:eb:9b:
         4c:3d:a4:e9:b6:97:7f:6f:b1:b6:96:4b:8f:81:1d:3c:3d:74:
         aa:a8:ed:f4:51:60:51:b9:c4:f2:17:49:d8:5c:c9:2d:d7:e7:
         df:99:a2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzjpM5cgnnM1i6AFr9oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj
YzA5MzMwHhcNMjUwNDEzMTIwMjA0WhcNMjUwNDE0MTIwMjA0WjAzMTEwLwYDVQQD
EygzMzBkN2IzYmZmYmYzZjU5NzcwYjk0MTZhNGU3YTQzYmI4ZTM5NjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/mxBdJ5mb7d+JSAq1Bdw2kzNioX
5MJ9BGc2Jb4GKTdf/RnNIEqgXto5doWySnrWow8XB9o2fTcZ3adW/5Xxt1+ZxCm5
6q97HE7SzBreZQQMk2mWMhYy6tejnTqdeiEwK24rmHH4sWoQrxwIeY898XIgv8JZ
ABGBlgXldooymIw+rP0qJ3WhPCXeLlMbH1OOb5SZ6QBYPNbaRmBpWWi/ky7Mpwsn
ODwoNxkKWBg4nQARM2pxScsDPtPIxoDs/KsTH2+W/edBx+nT/wHbxZPhg4SVnKf+
HZdIFzelOwvXeH2H2RNWjvU3zKPjKqMk6pI5Nl9YiJz3ZVenuurzLN8eTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMNezv/vz9ZdwuUFqTnpDu445YbMB8GA1UdIwQY
MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt
YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx
LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyxmrr64
SWClrB7APjMl+VKSpBL4/qAlg8oVIYpyCnUevPn3+tiAJQ5vFtX5yAwTkSlH3GS6
UwshYpnKgK0CPTbSF4nL3TYU/RS18ka+ZaPPNda97cF1Gv7KmleF+HL5BFusyJlW
UkIKqSxoOXXWbrPvn85T9HRD8loPSF7UiK4WwkOkSva1gRFnu4UVKZxM3zUjYvET
8tVusWkS0Cl1Gf+x4jWru5MgUN2qgbWXI1tDQ5gHH8dcnXG1bX1B7EmsHhmI2ikT
IKxXZpfaqseewwLJxNcJ1+ubTD2k6baXf2+xtpZLj4EdPD10qqjt9FFgUbnE8hdJ
2FzJLdfn35miDg==
-----END CERTIFICATE-----