Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File:                     X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier:          60nWkGYu0XH4u45C7IXw4OV3fYwNjywMdCTtMiJh8S4=
Subject key identifier:   8D:37:CA:4D:CD:7A:1C:8C:55:91:7A:46:F8:4F:68:48:F0:E1:37:7B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       01962FAB58001812E382BEF2B9572BCA2063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number:          0276
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: dX7izU/zoONqyYQn6L6vOB+0Nn5mj1+Zj2GF0jOHY1U=)
                          2: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (hash: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=)
                          3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:00:18:12:e3:82:be:f2:b9:57:2b:ca:20:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=8d37ca4dcd7a1c8c55917a46f84f6848f0e1377b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:cc:b0:88:7d:9c:3e:99:1f:93:f6:78:84:
                    32:c6:f3:ed:fb:48:0b:e5:98:03:4c:cc:3c:f2:c2:
                    22:89:df:2d:7c:2a:4f:68:ec:86:db:ab:9e:75:ba:
                    22:61:0d:74:bb:f4:3f:4a:e5:84:ea:9f:02:98:c1:
                    f9:f3:ca:e3:16:af:b6:8b:84:f0:2f:18:64:1e:9e:
                    24:1c:95:bc:e1:9f:a0:65:d6:af:b9:b9:ee:02:61:
                    7b:2c:70:95:ba:d2:77:6d:2a:f7:3a:af:76:2f:33:
                    e6:ba:37:c0:5a:07:15:a9:b9:56:e6:c9:a8:3f:1b:
                    b8:07:93:18:11:ae:c3:eb:bc:b7:00:73:e3:7b:53:
                    18:19:b2:a7:a1:b4:eb:af:12:73:d9:90:d9:be:fb:
                    82:7f:e6:7e:ea:1d:7e:6a:89:24:1f:7d:8d:d3:f2:
                    3c:3c:d0:9c:55:47:0c:2c:30:e1:d8:33:1d:34:df:
                    b8:b7:98:12:ed:af:b5:58:db:e2:21:e7:cd:3b:6f:
                    10:3f:08:49:76:df:34:67:f3:f0:60:ed:50:7b:d3:
                    2d:35:87:3d:7f:18:10:5b:76:80:68:21:a1:9d:da:
                    62:20:57:26:b1:c7:73:35:95:60:8e:06:ea:9a:68:
                    a1:b6:ab:97:f5:49:29:fa:3b:27:73:fa:a6:98:b1:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:CA:4D:CD:7A:1C:8C:55:91:7A:46:F8:4F:68:48:F0:E1:37:7B
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:71:68:b4:1e:8d:b9:fa:5e:14:92:67:ca:0e:08:e2:4c:4f:
         bc:d7:5f:90:79:df:bf:39:39:79:95:e8:4d:b1:89:d2:30:f2:
         7e:6e:5d:55:0b:bb:32:51:59:f8:93:69:2c:e3:03:9f:7e:12:
         ff:14:a7:e2:03:ba:74:b8:f7:38:5a:a6:0e:2a:95:67:90:75:
         93:ed:91:79:33:de:70:ed:82:ca:56:5e:b8:cb:12:fe:25:e3:
         d2:eb:08:e9:a8:6c:5c:8f:1d:07:43:4a:96:66:11:22:a9:ab:
         7b:7b:da:08:5d:da:17:de:e5:ca:91:ea:0e:eb:9c:0f:c4:d4:
         d5:ee:48:e6:84:ee:b2:f3:a1:bb:91:80:7b:8b:fe:1d:63:28:
         eb:7f:62:c4:8c:54:46:38:c6:f1:e6:75:7d:e4:aa:6a:e6:e3:
         ae:e3:e1:3d:fa:2a:47:28:4a:5b:76:f9:9d:aa:23:6b:8e:f6:
         dd:88:95:48:cc:e2:63:ad:ff:cd:ad:84:17:f3:8a:0f:35:dd:
         74:3d:ec:b9:e7:5f:2b:63:d2:42:70:58:2c:45:6f:3d:fb:51:
         9b:ef:ab:5e:29:dd:0e:35:40:93:09:54:4a:67:96:34:fe:7f:
         61:1b:36:ec:0e:78:c8:48:e1:43:2e:75:3e:51:1e:a7:85:fe:
         c6:0f:e4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1gAGBLjgr7yuVcryiBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
Eyg4ZDM3Y2E0ZGNkN2ExYzhjNTU5MTdhNDZmODRmNjg0OGYwZTEzNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ/MsIh9nD6ZH5P2eIQyxvPt+0gL
5ZgDTMw88sIiid8tfCpPaOyG26uedboiYQ10u/Q/SuWE6p8CmMH588rjFq+2i4Tw
LxhkHp4kHJW84Z+gZdavubnuAmF7LHCVutJ3bSr3Oq92LzPmujfAWgcVqblW5smo
Pxu4B5MYEa7D67y3AHPje1MYGbKnobTrrxJz2ZDZvvuCf+Z+6h1+aokkH32N0/I8
PNCcVUcMLDDh2DMdNN+4t5gS7a+1WNviIefNO28QPwhJdt80Z/PwYO1Qe9MtNYc9
fxgQW3aAaCGhndpiIFcmscdzNZVgjgbqmmihtquX9Ukp+jsnc/qmmLFL8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI03yk3NehyMVZF6RvhPaEjw4Td7MB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnFotB6N
ufpeFJJnyg4I4kxPvNdfkHnfvzk5eZXoTbGJ0jDyfm5dVQu7MlFZ+JNpLOMDn34S
/xSn4gO6dLj3OFqmDiqVZ5B1k+2ReTPecO2CylZeuMsS/iXj0usI6ahsXI8dB0NK
lmYRIqmre3vaCF3aF97lypHqDuucD8TU1e5I5oTusvOhu5GAe4v+HWMo639ixIxU
RjjG8eZ1feSqaubjruPhPfoqRyhKW3b5naoja4723YiVSMziY63/za2EF/OKDzXd
dD3suedfK2PSQnBYLEVvPftRm++rXindDjVAkwlUSmeWNP5/YRs27A54yEjhQy51
PlEep4X+xg/kiQ==
-----END CERTIFICATE-----