Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File:                     xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier:          2rpNolL0v9qOPmQ4npZP8Ymmxrxk4bjn/x7eLpPbDxw=
Subject key identifier:   73:19:A5:D5:C2:40:1C:3D:9B:E9:17:5B:5D:CA:A9:EB:51:B5:BA:F0
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer:       /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial:       01962F0737B9A99DDD7DC02274DC9EF998BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number:          0DEA
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: JgidTO/dyKEx+LkGlgNUUCKllQLvnZfWCItyLRPTWXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:b9:a9:9d:dd:7d:c0:22:74:dc:9e:f9:98:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=7319a5d5c2401c3d9be9175b5dcaa9eb51b5baf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:e8:94:4e:3f:31:8a:a7:08:81:fb:22:3e:
                    a6:33:c3:97:a1:d9:ac:7c:8f:e1:80:47:99:1f:f0:
                    3a:8f:04:6c:3b:04:fb:e0:85:fb:00:df:06:18:3d:
                    19:d4:f1:c5:2b:18:50:fb:cd:02:66:af:d1:91:59:
                    5f:b5:63:9b:98:2a:78:4c:64:d8:00:17:bf:b0:3d:
                    41:7a:fd:5b:d3:94:77:ac:ea:43:51:c2:71:08:68:
                    1e:08:13:19:21:a3:38:44:69:d4:aa:83:2a:52:75:
                    9e:67:e1:55:35:63:dc:9b:83:7b:bd:32:ee:09:33:
                    2a:2c:5f:d7:cb:12:81:24:b8:1a:83:f1:bf:cf:5b:
                    ad:47:a1:4d:e5:d9:5c:e0:7b:75:a6:c7:fd:20:44:
                    ad:11:68:34:3f:5f:e8:33:02:bc:a4:ba:78:ac:1a:
                    46:c3:cd:37:d6:2f:6d:ae:29:cf:57:12:54:b4:df:
                    53:ae:d3:26:e9:54:fe:c9:6f:c8:f4:e3:62:e2:58:
                    7c:b2:0a:30:df:64:54:a0:98:78:26:6c:15:50:d3:
                    3f:14:ca:2b:ab:87:cb:48:69:9c:df:2a:74:ee:1e:
                    33:f5:3d:c4:dd:f1:cf:a8:e7:9e:8c:f5:1f:79:4e:
                    fd:84:e8:40:2e:ea:fd:14:a2:d9:d0:b0:2a:2c:30:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:A5:D5:C2:40:1C:3D:9B:E9:17:5B:5D:CA:A9:EB:51:B5:BA:F0
            X509v3 Authority Key Identifier:
                keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:de:81:39:80:1a:e4:85:f9:79:6b:1f:b7:ce:2d:bc:a4:84:
         be:fd:e7:46:8e:49:57:db:64:a9:43:bc:f6:0f:a8:0b:d3:65:
         12:a1:49:9a:5c:48:85:51:18:f9:4e:0d:87:d2:6c:e5:79:1a:
         94:d2:9a:b3:ff:a2:36:d4:85:b3:b1:27:d7:d3:e3:80:77:7f:
         74:ef:00:68:97:fc:fd:8b:55:a4:92:52:08:f0:5a:03:42:44:
         7a:1d:1e:aa:64:63:7f:c8:55:2b:fa:a3:f9:be:4b:5f:9b:d6:
         5d:3a:d2:e2:57:9c:20:9f:d8:85:73:28:f6:9f:52:02:0f:c6:
         b6:af:ad:b6:70:6e:01:5a:3c:78:b4:c5:d7:39:e8:4c:21:14:
         42:3d:12:90:36:04:f7:fe:33:5c:e6:fd:b9:81:e7:58:25:7d:
         5b:f1:9d:d8:61:25:0d:c5:b5:81:87:f9:bc:dc:69:97:a8:69:
         58:15:c9:0f:7a:2e:31:19:ac:0c:09:c9:fb:67:90:05:6c:6a:
         84:a8:f6:23:7e:f9:80:df:00:b2:ad:b5:dc:ef:a9:44:2d:f1:
         23:6b:14:b9:8a:bb:ed:70:1d:6d:19:ae:69:18:4c:c4:9b:be:
         29:f1:0f:7e:40:bb:90:7d:9f:eb:a3:ab:a6:6c:31:9e:68:bd:
         f9:cd:7f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBze5qZ3dfcAidNye+Zi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE4NDk2OTIxNDJhZWM1NmQ3ZDBkZGM4ZGQ0ZGRiNDFj
ZjgzYzEwHhcNMjUwNDEzMTIwMjA0WhcNMjUwNDE0MTIwMjA0WjAzMTEwLwYDVQQD
Eyg3MzE5YTVkNWMyNDAxYzNkOWJlOTE3NWI1ZGNhYTllYjUxYjViYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1zolE4/MYqnCIH7Ij6mM8OXodms
fI/hgEeZH/A6jwRsOwT74IX7AN8GGD0Z1PHFKxhQ+80CZq/RkVlftWObmCp4TGTY
ABe/sD1Bev1b05R3rOpDUcJxCGgeCBMZIaM4RGnUqoMqUnWeZ+FVNWPcm4N7vTLu
CTMqLF/XyxKBJLgag/G/z1utR6FN5dlc4Ht1psf9IEStEWg0P1/oMwK8pLp4rBpG
w8031i9trinPVxJUtN9TrtMm6VT+yW/I9ONi4lh8sgow32RUoJh4JmwVUNM/FMor
q4fLSGmc3yp07h4z9T3E3fHPqOeejPUfeU79hOhALur9FKLZ0LAqLDBAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMZpdXCQBw9m+kXW13KqetRtbrwMB8GA1UdIwQY
MBaAFMW6hJaSFCrsVtfQ3cjdTdtBz4PBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgt
MjM3OTdhZWFiYjBmLzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgtMjM3OTdhZWFiYjBm
LzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt6BOYAa
5IX5eWsft84tvKSEvv3nRo5JV9tkqUO89g+oC9NlEqFJmlxIhVEY+U4Nh9Js5Xka
lNKas/+iNtSFs7En19PjgHd/dO8AaJf8/YtVpJJSCPBaA0JEeh0eqmRjf8hVK/qj
+b5LX5vWXTrS4lecIJ/YhXMo9p9SAg/Gtq+ttnBuAVo8eLTF1znoTCEUQj0SkDYE
9/4zXOb9uYHnWCV9W/Gd2GElDcW1gYf5vNxpl6hpWBXJD3ouMRmsDAnJ+2eQBWxq
hKj2I375gN8Asq213O+pRC3xI2sUuYq77XAdbRmuaRhMxJu+KfEPfkC7kH2f66Or
pmwxnmi9+c1/Ug==
-----END CERTIFICATE-----