Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
File:                     xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft (raw, json)
Hash identifier:          RdNKG8OinSD1Dax9FYHaS3PvMwFgnT6la7yOsEZ99zg=
Subject key identifier:   BE:9F:B5:D2:E7:EE:CB:DA:04:18:7F:09:A9:2A:08:E6:8F:80:5A:31
Authority key identifier: C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
Certificate issuer:       /CN=c551f11c83b52a764ffca83d99047062d8167f4f
Certificate serial:       01962E99B9C6D06148EB6F33569E11CC9019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
Manifest number:          0AE5
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl (hash: DF8WOK+dkFxXUZrrg0rseTotY43B6U62es6yHrJC9TA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:c6:d0:61:48:eb:6f:33:56:9e:11:cc:90:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551f11c83b52a764ffca83d99047062d8167f4f
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=be9fb5d2e7eecbda04187f09a92a08e68f805a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:ff:73:cd:3f:b5:a6:b4:05:9e:6b:c0:0f:
                    9f:71:5e:8c:0b:f5:e8:dd:34:50:01:ce:22:dc:c7:
                    2b:03:ab:4a:ef:cb:f4:8a:7b:fb:0e:d8:42:cc:e4:
                    32:23:2c:8b:df:40:a7:8f:60:67:9c:a7:b6:06:f4:
                    b0:ed:91:29:9d:da:1f:73:e6:03:e6:b4:70:94:9f:
                    02:9e:df:6a:de:b5:00:85:2b:9e:28:7e:bc:82:7b:
                    1a:11:e6:80:2d:16:d4:75:8d:23:40:f9:e7:7f:1c:
                    1f:96:b7:ac:cb:f2:5d:4c:68:e0:c2:72:a4:42:5c:
                    2f:12:c9:ec:ac:0f:ea:70:e0:2b:cf:3d:3b:2d:64:
                    6c:e3:68:80:74:80:24:7b:ee:a2:8d:c1:be:2b:9e:
                    3a:85:8a:f6:f4:c9:25:5e:e9:4f:1f:02:30:68:d2:
                    5b:27:35:d1:7f:b8:6b:7e:f2:55:ed:7c:ec:ee:14:
                    7a:38:da:b0:94:cf:0d:ca:06:54:8b:21:f7:d0:c4:
                    12:1e:b1:76:57:d5:a7:0d:12:8e:e9:bd:08:0d:d7:
                    e5:e5:33:c2:51:b9:72:f2:c0:83:a6:19:81:25:b4:
                    1c:87:f6:36:53:16:a8:48:71:27:08:36:0c:21:0c:
                    fa:af:56:5a:d7:70:2c:c6:7e:d9:26:7a:e9:70:e6:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:B5:D2:E7:EE:CB:DA:04:18:7F:09:A9:2A:08:E6:8F:80:5A:31
            X509v3 Authority Key Identifier:
                keyid:C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:5f:18:8a:23:92:78:f2:6b:fd:a9:d7:7d:2e:71:ac:2c:
         11:ce:e6:4d:7e:b5:0e:99:85:32:2a:3b:70:80:13:fd:b4:c4:
         62:7a:70:db:c3:ba:b2:49:d2:03:7d:85:0f:98:c2:1e:10:84:
         3c:3b:bb:55:b5:79:d1:1e:6d:11:ef:f8:aa:9b:8e:7f:63:ac:
         d5:3d:8c:1f:6a:dd:9c:a9:ef:8a:ea:db:fa:5e:bb:d1:0d:c0:
         7b:1b:bb:dc:10:64:86:b0:20:6d:97:96:11:f8:13:ad:bb:b9:
         0e:17:9f:b5:9c:0f:96:2c:53:af:21:ea:f6:80:8e:b7:1f:33:
         95:c3:82:0c:3b:8d:90:80:a4:ef:a5:85:ce:33:1a:63:58:c8:
         46:c0:05:65:41:32:17:0d:97:0c:d3:11:36:a9:49:e5:0d:4e:
         e9:ba:f0:72:bb:0f:c0:14:94:98:1b:bc:f3:33:24:fd:47:c2:
         eb:5e:54:fb:14:33:3c:d8:cb:b5:b2:ef:bd:4b:66:b1:2f:43:
         e0:7b:57:b9:b3:58:25:ce:d6:3c:8a:4e:89:7c:b3:38:60:aa:
         6f:66:a6:c2:d9:15:5f:01:fb:b9:da:16:16:e1:b2:1e:39:e2:
         5c:35:9e:14:30:cd:21:96:df:d9:ba:6d:ab:7d:29:7d:13:51:
         5a:2a:92:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumbnG0GFI628zVp4RzJAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTFmMTFjODNiNTJhNzY0ZmZjYTgzZDk5MDQ3MDYyZDgx
NjdmNGYwHhcNMjUwNDEzMTAwMjI4WhcNMjUwNDE0MTAwMjI4WjAzMTEwLwYDVQQD
EyhiZTlmYjVkMmU3ZWVjYmRhMDQxODdmMDlhOTJhMDhlNjhmODA1YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4b/c80/taa0BZ5rwA+fcV6MC/Xo
3TRQAc4i3McrA6tK78v0inv7DthCzOQyIyyL30Cnj2BnnKe2BvSw7ZEpndofc+YD
5rRwlJ8Cnt9q3rUAhSueKH68gnsaEeaALRbUdY0jQPnnfxwflresy/JdTGjgwnKk
QlwvEsnsrA/qcOArzz07LWRs42iAdIAke+6ijcG+K546hYr29MklXulPHwIwaNJb
JzXRf7hrfvJV7Xzs7hR6ONqwlM8NygZUiyH30MQSHrF2V9WnDRKO6b0IDdfl5TPC
Ubly8sCDphmBJbQch/Y2UxaoSHEnCDYMIQz6r1Za13Asxn7ZJnrpcOaGVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6ftdLn7svaBBh/CakqCOaPgFoxMB8GA1UdIwQY
MBaAFMVR8RyDtSp2T/yoPZkEcGLYFn9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZIeEhJTzFLblpQX0tnOW1RUndZdGdXZjA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MmMwN2UtYjUwYS00NTU4LWFkYTUt
MDcyNTA3NTEzODA5LzEveFZIeEhJTzFLblpQX0tnOW1RUndZdGdXZjA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MmMwN2UtYjUwYS00NTU4LWFkYTUtMDcyNTA3NTEzODA5
LzEveFZIeEhJTzFLblpQX0tnOW1RUndZdGdXZjA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibJfGIoj
knjya/2p130ucawsEc7mTX61DpmFMio7cIAT/bTEYnpw28O6sknSA32FD5jCHhCE
PDu7VbV50R5tEe/4qpuOf2Os1T2MH2rdnKnviurb+l670Q3Aexu73BBkhrAgbZeW
EfgTrbu5DheftZwPlixTryHq9oCOtx8zlcOCDDuNkICk76WFzjMaY1jIRsAFZUEy
Fw2XDNMRNqlJ5Q1O6brwcrsPwBSUmBu88zMk/UfC615U+xQzPNjLtbLvvUtmsS9D
4HtXubNYJc7WPIpOiXyzOGCqb2amwtkVXwH7udoWFuGyHjniXDWeFDDNIZbf2bpt
q30pfRNRWiqSDg==
-----END CERTIFICATE-----