Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File:                     xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier:          oAgi/LOs/UXN8/I17ePotmNFNzcgntKjG3cqTCe9UmI=
Subject key identifier:   77:D4:30:E8:A1:42:77:42:57:72:86:FA:0F:A9:9F:73:C2:06:C1:15
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer:       /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial:       01962FAB3C76279D5A17D8BC355D7B8BC214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
                          2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
                          3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: k9xfkQ5qOO3UkSOaNkjl76lwcV25U68bnb06qq/qqUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:76:27:9d:5a:17:d8:bc:35:5d:7b:8b:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=77d430e8a1427742577286fa0fa99f73c206c115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:aa:85:27:28:53:8b:8c:f5:83:3f:b1:a0:
                    25:98:c9:6b:48:16:6a:84:e9:25:c8:dd:54:45:c3:
                    43:81:98:e8:1e:84:5c:24:03:82:41:e0:40:db:7c:
                    c4:60:2b:39:2d:5c:b0:2e:6c:61:62:5e:3c:bf:f2:
                    e4:9f:54:35:63:f1:5c:f9:ff:f7:f1:3b:cb:11:80:
                    e2:47:9d:f2:3e:cd:6e:cb:14:6a:a9:d4:52:a8:09:
                    08:44:be:e6:53:55:ce:48:ec:1e:c2:fc:85:93:4b:
                    f9:fe:e7:c1:e8:82:3d:42:3b:06:1f:41:27:a7:5d:
                    ff:4a:51:e5:a9:57:ea:cb:97:75:b0:d2:73:dd:5c:
                    a3:d5:26:ad:d0:32:a1:e6:d0:ab:53:0d:e3:b5:85:
                    f6:b4:d8:b3:17:de:74:7f:33:1e:25:ec:bf:d4:93:
                    7c:24:9b:13:76:b9:1a:49:12:84:6d:c7:93:73:de:
                    bd:0f:01:de:22:6b:d2:69:c3:94:f3:12:99:e4:00:
                    be:87:9e:a4:83:dd:24:21:32:ec:df:05:63:e8:25:
                    ff:18:ec:73:6c:95:97:fa:d3:7d:c1:d1:6f:14:ab:
                    7b:4f:bc:34:1f:cc:63:e2:48:ff:64:ba:2b:9b:0a:
                    0b:d1:be:08:36:75:d7:e1:9d:91:96:15:ba:13:e2:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:30:E8:A1:42:77:42:57:72:86:FA:0F:A9:9F:73:C2:06:C1:15
            X509v3 Authority Key Identifier:
                keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:91:a1:5f:66:f0:92:c3:1d:9c:02:f8:f1:b9:34:06:41:5a:
         87:4a:21:9b:c0:12:41:1a:d1:75:e1:77:f2:a6:95:37:e5:dc:
         2d:be:30:89:a8:3a:5b:da:4a:8f:3f:24:bc:f9:c6:a3:b8:44:
         36:51:d3:28:8b:c7:65:6e:19:7c:4a:3a:e2:35:2d:2c:28:38:
         de:17:82:84:04:ae:34:fb:47:16:a1:2e:fb:9c:ae:1b:e2:57:
         bf:ed:0a:ba:6f:7e:ab:f7:cf:8c:ff:2d:c1:ba:07:34:91:dd:
         45:70:d6:2e:51:2e:32:83:14:b9:ab:92:aa:a3:54:a7:69:46:
         d4:79:42:b8:65:a1:f7:0a:6a:c8:62:27:c5:ad:c8:1d:58:e9:
         0f:de:98:25:eb:42:00:ac:a9:8a:ce:bc:4d:96:62:fd:cd:50:
         42:9c:3a:89:a7:a2:89:28:89:8c:9e:a0:a1:d6:70:0e:9c:7b:
         d7:0f:b6:de:1b:04:69:f8:c1:62:0e:f1:80:ec:cc:18:96:a3:
         3d:93:d1:16:21:e9:fb:72:0d:c0:aa:8f:15:1c:8d:03:7a:76:
         b8:33:3c:41:30:a2:b7:df:51:b6:2a:0c:29:50:ce:64:5a:50:
         61:51:50:22:d2:28:dc:58:69:74:09:68:33:c1:bf:c0:36:f4:
         84:8d:70:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzx2J51aF9i8NV17i8IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzU4ZWQxYWY5NjRhNzY2OGU0NDM5NzYxOWVlMTk4NWEy
NDkxYzUwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
Eyg3N2Q0MzBlOGExNDI3NzQyNTc3Mjg2ZmEwZmE5OWY3M2MyMDZjMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSqhScoU4uM9YM/saAlmMlrSBZq
hOklyN1URcNDgZjoHoRcJAOCQeBA23zEYCs5LVywLmxhYl48v/Lkn1Q1Y/Fc+f/3
8TvLEYDiR53yPs1uyxRqqdRSqAkIRL7mU1XOSOwewvyFk0v5/ufB6II9QjsGH0En
p13/SlHlqVfqy5d1sNJz3Vyj1Sat0DKh5tCrUw3jtYX2tNizF950fzMeJey/1JN8
JJsTdrkaSRKEbceTc969DwHeImvSacOU8xKZ5AC+h56kg90kITLs3wVj6CX/GOxz
bJWX+tN9wdFvFKt7T7w0H8xj4kj/ZLormwoL0b4INnXX4Z2RlhW6E+KqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfUMOihQndCV3KG+g+pn3PCBsEVMB8GA1UdIwQY
MBaAFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2Mt
MWM4YWZkMTlmZGJiLzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mYzI4MTUtZDI5My00MGFmLWJmM2MtMWM4YWZkMTlmZGJi
LzEveHNXTzBhLVdTblpvNUVPWFlaN2htRm9ra2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpGhX2bw
ksMdnAL48bk0BkFah0ohm8ASQRrRdeF38qaVN+XcLb4wiag6W9pKjz8kvPnGo7hE
NlHTKIvHZW4ZfEo64jUtLCg43heChASuNPtHFqEu+5yuG+JXv+0Kum9+q/fPjP8t
wboHNJHdRXDWLlEuMoMUuauSqqNUp2lG1HlCuGWh9wpqyGInxa3IHVjpD96YJetC
AKypis68TZZi/c1QQpw6iaeiiSiJjJ6godZwDpx71w+23hsEafjBYg7xgOzMGJaj
PZPRFiHp+3INwKqPFRyNA3p2uDM8QTCit99RtioMKVDOZFpQYVFQItIo3FhpdAlo
M8G/wDb0hI1w4Q==
-----END CERTIFICATE-----