Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File:                     xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier:          ZBYqVdq2EPnhG8StoopVeijvi2uBbaWUBTOTvG+MfAY=
Subject key identifier:   41:AB:0A:C6:10:7B:8B:F8:5C:64:D8:50:5A:CE:CE:63:83:A5:CC:F1
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer:       /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial:       01962F3DA4FBDDC7917CC03CED69E532C17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
                          2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: 1NHfpQvYgqsUgYspELXkac/8DxOyYJGSkBC550Vzzqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:fb:dd:c7:91:7c:c0:3c:ed:69:e5:32:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=41ab0ac6107b8bf85c64d8505acece6383a5ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:2f:73:71:c1:15:6c:56:9c:92:ed:1e:5c:
                    9b:8f:ce:5d:8c:2d:d9:2c:07:f3:f6:90:0e:91:ea:
                    68:4c:c5:5d:da:b7:75:44:d7:57:59:ea:86:51:9d:
                    00:c0:22:ff:6b:16:a3:d5:3c:96:b2:cf:fa:46:fb:
                    fa:08:5f:d1:8a:57:3a:9a:40:eb:33:81:36:44:61:
                    e2:db:33:af:ad:1c:14:56:dd:3a:61:be:fe:5a:21:
                    54:4e:25:eb:2c:8a:48:53:81:f8:44:28:dc:0c:15:
                    df:86:2d:d4:b9:71:c3:63:2c:31:23:77:fa:d2:0c:
                    2f:0c:f5:fe:9c:6c:11:5e:15:20:67:a0:a2:7b:94:
                    0d:e4:70:aa:19:ae:7b:20:96:85:d4:b7:d1:ae:ef:
                    f9:2a:51:18:13:00:29:bb:0b:18:ff:c8:c7:cd:33:
                    8a:63:ee:22:21:90:58:e5:50:e8:2c:8f:63:2f:fe:
                    71:d2:18:43:5a:3f:ec:01:25:a5:c6:c9:a7:6a:df:
                    30:f3:d5:ad:5b:be:b1:ac:57:eb:36:6c:d6:f0:f2:
                    d7:de:1b:04:25:7f:1a:62:cd:f4:48:16:b4:7f:1c:
                    c7:80:1c:7b:96:ef:33:42:97:84:80:83:e0:74:8f:
                    b0:f3:6c:cb:ea:91:8b:b9:de:f2:d2:e7:ec:12:bd:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:0A:C6:10:7B:8B:F8:5C:64:D8:50:5A:CE:CE:63:83:A5:CC:F1
            X509v3 Authority Key Identifier:
                keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:97:b5:48:fb:bc:22:24:fc:14:0c:d1:d4:85:29:95:c3:
         4c:1b:3f:40:21:80:5b:d4:51:49:78:d7:aa:4d:a5:3d:ad:c3:
         35:0a:d9:0f:1a:40:d0:4e:00:52:d8:77:3f:29:b7:8c:07:5e:
         d5:d1:43:de:40:15:dc:a5:09:74:e3:34:05:56:ec:07:ee:3b:
         fa:ec:8f:9c:69:e3:6b:11:65:d2:13:83:b9:71:dc:9d:1a:c9:
         6b:49:23:3c:4b:d7:3f:e9:35:8d:a4:80:10:c3:77:8c:35:e2:
         fb:f1:4e:e6:d4:9d:46:02:cc:25:ac:8a:e6:8e:ee:ef:cf:84:
         97:45:18:1b:39:9d:48:30:e7:79:c5:31:3a:63:e1:f4:0d:a6:
         9d:a9:76:f1:15:2e:0c:c7:5d:a4:2c:d1:7c:56:07:20:62:8e:
         10:c3:0d:d4:63:ff:d7:4e:41:1a:43:4e:42:a7:8d:bc:ee:e9:
         28:be:32:59:b1:05:86:50:60:8e:18:11:31:6f:28:3e:27:02:
         e3:75:9d:cf:70:62:1f:2f:02:08:07:f5:c2:88:70:ef:2b:6d:
         12:7d:02:a9:c3:9f:ad:f1:c8:63:b6:1e:71:a2:9f:a1:cc:a1:
         99:42:69:dd:ae:a2:b0:83:b6:c8:7d:42:91:bd:a1:82:dd:21:
         33:08:25:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaT73ceRfMA87WnlMsF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTdjMTlmNmM3MmQ4OTAwYzRkODllYzdhYmIzNWQ0ZmE5
MjExNGIwHhcNMjUwNDEzMTMwMTMxWhcNMjUwNDE0MTMwMTMxWjAzMTEwLwYDVQQD
Eyg0MWFiMGFjNjEwN2I4YmY4NWM2NGQ4NTA1YWNlY2U2MzgzYTVjY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxREvc3HBFWxWnJLtHlybj85djC3Z
LAfz9pAOkepoTMVd2rd1RNdXWeqGUZ0AwCL/axaj1TyWss/6Rvv6CF/Rilc6mkDr
M4E2RGHi2zOvrRwUVt06Yb7+WiFUTiXrLIpIU4H4RCjcDBXfhi3UuXHDYywxI3f6
0gwvDPX+nGwRXhUgZ6Cie5QN5HCqGa57IJaF1LfRru/5KlEYEwApuwsY/8jHzTOK
Y+4iIZBY5VDoLI9jL/5x0hhDWj/sASWlxsmnat8w89WtW76xrFfrNmzW8PLX3hsE
JX8aYs30SBa0fxzHgBx7lu8zQpeEgIPgdI+w82zL6pGLud7y0ufsEr0R1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGrCsYQe4v4XGTYUFrOzmODpczxMB8GA1UdIwQY
MBaAFMVXwZ9sctiQDE2J7Hq7NdT6khFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3Mzgt
MzkwNDZiNGE5MTcwLzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3MzgtMzkwNDZiNGE5MTcw
LzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5SXtUj7
vCIk/BQM0dSFKZXDTBs/QCGAW9RRSXjXqk2lPa3DNQrZDxpA0E4AUth3Pym3jAde
1dFD3kAV3KUJdOM0BVbsB+47+uyPnGnjaxFl0hODuXHcnRrJa0kjPEvXP+k1jaSA
EMN3jDXi+/FO5tSdRgLMJayK5o7u78+El0UYGzmdSDDnecUxOmPh9A2mnal28RUu
DMddpCzRfFYHIGKOEMMN1GP/105BGkNOQqeNvO7pKL4yWbEFhlBgjhgRMW8oPicC
43Wdz3BiHy8CCAf1wohw7yttEn0CqcOfrfHIY7YecaKfocyhmUJp3a6isIO2yH1C
kb2hgt0hMwglGA==
-----END CERTIFICATE-----