Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
File:                     xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json)
Hash identifier:          RhJt+ssKd7v3O5sFBXGgSrwY5DpHWJRgQzGMBvmIeg8=
Subject key identifier:   09:5A:91:CA:31:43:7B:DF:8B:84:35:B1:96:A4:52:E8:82:82:E1:6F
Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21
Certificate issuer:       /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
Certificate serial:       01962DF3A58E09F0AD4AFADC706033D21B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: h84GRmxtaBmTAEjCLmWwu8G53Wgf6UVGHt6wyMPy9p0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a5:8e:09:f0:ad:4a:fa:dc:70:60:33:d2:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=095a91ca31437bdf8b8435b196a452e88282e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:ef:6e:d5:6e:cc:a3:8b:07:3e:66:be:8a:
                    a4:b8:92:ca:09:6f:5a:36:38:72:b5:1c:5d:13:e7:
                    4a:b7:d3:79:75:5b:52:b9:85:2b:76:29:e3:3a:97:
                    f8:0c:3d:75:e7:02:50:fb:75:2e:ca:72:04:99:19:
                    59:af:ba:1e:97:6d:61:21:f8:ab:13:ab:71:05:47:
                    9a:4c:e3:cb:65:2c:73:9c:a8:9d:68:73:e3:42:b3:
                    b6:93:14:d5:01:ed:e5:0e:a4:82:2f:a4:3e:a5:9c:
                    58:c7:61:ff:e3:79:32:d6:19:f3:09:d6:38:d7:84:
                    36:b5:7b:81:9d:8a:87:65:46:d4:e8:e8:b8:6d:48:
                    df:c2:a1:ae:09:83:3f:45:1d:ce:43:a9:b4:e6:ad:
                    c9:07:4f:c7:36:5c:e8:37:8d:10:30:04:fb:18:4b:
                    c9:5f:79:78:aa:f1:8d:9e:67:a9:c4:b8:93:fe:7e:
                    2e:a1:8c:57:50:ca:5b:06:8e:4b:ca:a0:48:09:92:
                    20:3a:96:31:e3:f4:d2:4d:82:df:84:f8:e1:7d:c7:
                    ed:51:53:0b:a2:da:92:ee:1e:d2:10:e5:f3:ce:d2:
                    08:49:9d:19:68:87:84:aa:f0:1e:c5:9d:1f:74:d8:
                    5c:95:cf:40:ad:c0:91:74:bb:b1:ef:0a:fc:d7:c9:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:91:CA:31:43:7B:DF:8B:84:35:B1:96:A4:52:E8:82:82:E1:6F
            X509v3 Authority Key Identifier:
                keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:3c:0c:96:ea:0c:7f:65:af:97:0d:73:b4:10:f7:e3:3d:
         69:bd:ea:ef:3d:7f:cc:21:f2:91:a1:fe:b4:eb:82:e5:aa:fe:
         2a:5f:eb:57:77:f4:44:e8:e0:db:ae:9b:65:a3:f3:30:ee:c4:
         11:cc:30:2e:2a:f7:99:fa:80:90:83:a3:f2:3b:2d:1c:81:7a:
         1f:6d:c9:40:cb:06:7c:ae:c0:f0:21:74:2d:63:5f:07:c6:92:
         1d:da:23:2a:3c:5e:33:44:8a:87:07:6b:5d:43:bb:35:9f:05:
         85:57:bf:e8:29:be:7e:2d:89:db:be:e1:5e:8b:64:8e:a8:4b:
         78:d2:5f:31:6a:51:4c:2e:93:97:74:ed:72:a1:49:1c:3c:26:
         f9:89:cc:02:c1:d3:a6:c1:23:cf:f8:24:50:22:5a:79:7c:a7:
         92:b6:c0:92:4c:bd:67:2f:bc:73:d6:06:9e:5e:fe:8c:e9:36:
         de:b6:1c:56:c0:ca:a1:77:fa:22:c6:18:7d:00:0e:45:a1:c2:
         bc:bf:a3:94:dd:18:02:ec:d2:b9:b9:4a:b4:b5:0e:b9:a4:4f:
         29:d8:f4:73:78:89:d1:29:70:02:8f:43:9f:68:83:92:f3:c3:
         68:3f:cb:86:d0:79:e3:61:27:24:05:b8:cf:b4:a4:10:59:f2:
         d9:65:c1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86WOCfCtSvrccGAz0htBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MGNiY2VjZjI1YTg2NjVjMzVhNzhjODIxZDExZWIzYTY0
MjM2MjEwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
EygwOTVhOTFjYTMxNDM3YmRmOGI4NDM1YjE5NmE0NTJlODgyODJlMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiffvbtVuzKOLBz5mvoqkuJLKCW9a
NjhytRxdE+dKt9N5dVtSuYUrdinjOpf4DD115wJQ+3UuynIEmRlZr7oel21hIfir
E6txBUeaTOPLZSxznKidaHPjQrO2kxTVAe3lDqSCL6Q+pZxYx2H/43ky1hnzCdY4
14Q2tXuBnYqHZUbU6Oi4bUjfwqGuCYM/RR3OQ6m05q3JB0/HNlzoN40QMAT7GEvJ
X3l4qvGNnmepxLiT/n4uoYxXUMpbBo5LyqBICZIgOpYx4/TSTYLfhPjhfcftUVML
otqS7h7SEOXzztIISZ0ZaIeEqvAexZ0fdNhclc9ArcCRdLux7wr818ku5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlakcoxQ3vfi4Q1sZakUuiCguFvMB8GA1UdIwQY
MBaAFMcMvOzyWoZlw1p4yCHRHrOmQjYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgt
ZTY5N2JiNTc2NGMzLzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgtZTY5N2JiNTc2NGMz
LzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZw8DJbq
DH9lr5cNc7QQ9+M9ab3q7z1/zCHykaH+tOuC5ar+Kl/rV3f0ROjg266bZaPzMO7E
EcwwLir3mfqAkIOj8jstHIF6H23JQMsGfK7A8CF0LWNfB8aSHdojKjxeM0SKhwdr
XUO7NZ8FhVe/6Cm+fi2J277hXotkjqhLeNJfMWpRTC6Tl3TtcqFJHDwm+YnMAsHT
psEjz/gkUCJaeXynkrbAkky9Zy+8c9YGnl7+jOk23rYcVsDKoXf6IsYYfQAORaHC
vL+jlN0YAuzSublKtLUOuaRPKdj0c3iJ0SlwAo9Dn2iDkvPDaD/LhtB542EnJAW4
z7SkEFny2WXB2w==
-----END CERTIFICATE-----