Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
File:                     xndznw-VRrTwJXcsXCsXl4WSOFI.mft (raw, json)
Hash identifier:          xcpiPju0ZHTZgNMneJx44biN8cHtVCOaOOPL3P56Wmk=
Subject key identifier:   36:FC:C5:12:38:97:DC:2C:38:E2:56:20:7C:B1:16:32:8D:E8:8B:88
Authority key identifier: C6:77:73:9F:0F:95:46:B4:F0:25:77:2C:5C:2B:17:97:85:92:38:52
Certificate issuer:       /CN=c677739f0f9546b4f025772c5c2b179785923852
Certificate serial:       01962F3D7DAC9CB04BA1B997AFEB175D7342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xndznw-VRrTwJXcsXCsXl4WSOFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft
Manifest number:          12FC
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: xndznw-VRrTwJXcsXCsXl4WSOFI.crl (hash: 2nZymIfNhpr2hsTSqGcCdbPiL58gwKHmt3lAIPyDud8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7d:ac:9c:b0:4b:a1:b9:97:af:eb:17:5d:73:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c677739f0f9546b4f025772c5c2b179785923852
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=36fcc5123897dc2c38e256207cb116328de88b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:fa:7c:72:f9:e0:da:81:16:bc:9b:8d:93:
                    c3:32:ec:a5:cf:c5:b4:b8:5c:61:42:55:3f:e7:77:
                    98:28:db:0f:80:bb:65:0d:16:99:51:67:36:79:d9:
                    e8:17:d2:ff:46:48:c5:1b:fc:56:4b:03:4f:c9:7a:
                    9f:9c:a8:20:dc:24:75:ee:72:0f:5c:3f:c5:23:df:
                    35:8b:5b:75:8a:33:3c:26:92:5d:ab:ab:61:07:0a:
                    2f:96:77:d6:73:79:08:0c:03:01:c4:e0:95:2e:a2:
                    58:1d:70:fe:bd:ac:40:82:7e:92:21:22:68:ba:04:
                    9c:7a:b4:34:92:00:0a:c7:dc:e5:52:de:3a:a4:2e:
                    c0:99:58:0b:b2:29:f4:31:64:51:01:72:5c:5b:20:
                    ec:a8:ff:42:d2:8d:cd:57:c5:32:54:56:52:f6:e5:
                    a6:33:f4:33:16:a3:09:88:e3:08:db:bd:a9:1f:d9:
                    1d:97:8f:1c:06:75:7c:e9:11:2a:b2:6a:96:2d:4f:
                    10:79:ec:01:c8:90:dd:eb:fe:64:cb:28:d3:46:a4:
                    47:82:74:71:f9:75:a9:5a:a2:53:9e:dd:a2:42:4d:
                    37:8e:75:0a:c1:69:46:a2:97:2f:d9:45:3d:14:66:
                    37:d0:2c:0c:19:bc:a5:78:81:48:11:65:c5:f3:ad:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FC:C5:12:38:97:DC:2C:38:E2:56:20:7C:B1:16:32:8D:E8:8B:88
            X509v3 Authority Key Identifier:
                keyid:C6:77:73:9F:0F:95:46:B4:F0:25:77:2C:5C:2B:17:97:85:92:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xndznw-VRrTwJXcsXCsXl4WSOFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d60291-d840-4901-a85d-c685fa916b07/1/xndznw-VRrTwJXcsXCsXl4WSOFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:de:2f:9d:fb:6a:89:3e:7a:4a:28:ac:af:e5:37:9f:ef:
         00:eb:b7:18:6f:e6:91:c1:1c:9e:e4:a1:0d:29:4b:8e:17:ab:
         b5:46:25:ed:81:dc:94:de:1d:ac:6f:99:5d:f6:22:41:3e:86:
         08:05:53:23:56:58:93:5b:bd:97:77:89:03:01:f8:32:59:f8:
         ca:ef:a8:bd:f0:47:2a:e2:12:1f:f2:85:8b:ce:d9:a8:90:f2:
         68:2e:a9:6b:8b:24:00:93:4f:81:4b:9f:38:87:8d:29:01:8a:
         5c:10:1c:de:72:25:46:bd:2f:54:b6:2d:72:3d:af:58:f1:a8:
         b5:7c:5a:c2:93:0f:eb:5e:04:7b:1b:28:c8:11:bf:fa:96:de:
         3f:0c:d8:5c:07:51:2d:d3:df:d6:e1:a8:fd:a6:2d:2f:4b:80:
         77:0b:be:c9:ea:22:35:1e:ca:cd:37:6f:cd:9a:f1:d7:d0:23:
         8c:4a:e4:f8:1a:18:01:67:45:de:ea:fb:1c:c3:73:0b:af:64:
         24:52:c2:d4:e6:df:03:a0:3e:56:d6:40:40:10:89:26:ac:a1:
         73:67:f2:85:de:d2:f4:30:3c:ca:46:26:23:22:ee:9b:8c:4e:
         6d:47:7f:a4:75:ca:d3:f0:9a:41:34:8e:e1:ae:33:75:fd:a3:
         e6:ea:72:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX2snLBLobmXr+sXXXNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Nzc3MzlmMGY5NTQ2YjRmMDI1NzcyYzVjMmIxNzk3ODU5
MjM4NTIwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EygzNmZjYzUxMjM4OTdkYzJjMzhlMjU2MjA3Y2IxMTYzMjhkZTg4Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoj6fHL54NqBFrybjZPDMuylz8W0
uFxhQlU/53eYKNsPgLtlDRaZUWc2ednoF9L/RkjFG/xWSwNPyXqfnKgg3CR17nIP
XD/FI981i1t1ijM8JpJdq6thBwovlnfWc3kIDAMBxOCVLqJYHXD+vaxAgn6SISJo
ugScerQ0kgAKx9zlUt46pC7AmVgLsin0MWRRAXJcWyDsqP9C0o3NV8UyVFZS9uWm
M/QzFqMJiOMI272pH9kdl48cBnV86REqsmqWLU8QeewByJDd6/5kyyjTRqRHgnRx
+XWpWqJTnt2iQk03jnUKwWlGopcv2UU9FGY30CwMGbyleIFIEWXF863OZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb8xRI4l9wsOOJWIHyxFjKN6IuIMB8GA1UdIwQY
MBaAFMZ3c58PlUa08CV3LFwrF5eFkjhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5kem53LVZSclR3Slhjc1hDc1hsNFdTT0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNjAyOTEtZDg0MC00OTAxLWE4NWQt
YzY4NWZhOTE2YjA3LzEveG5kem53LVZSclR3Slhjc1hDc1hsNFdTT0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kNjAyOTEtZDg0MC00OTAxLWE4NWQtYzY4NWZhOTE2YjA3
LzEveG5kem53LVZSclR3Slhjc1hDc1hsNFdTT0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3veL537
aok+ekoorK/lN5/vAOu3GG/mkcEcnuShDSlLjhertUYl7YHclN4drG+ZXfYiQT6G
CAVTI1ZYk1u9l3eJAwH4Mln4yu+ovfBHKuISH/KFi87ZqJDyaC6pa4skAJNPgUuf
OIeNKQGKXBAc3nIlRr0vVLYtcj2vWPGotXxawpMP614EexsoyBG/+pbePwzYXAdR
LdPf1uGo/aYtL0uAdwu+yeoiNR7KzTdvzZrx19AjjErk+BoYAWdF3ur7HMNzC69k
JFLC1ObfA6A+VtZAQBCJJqyhc2fyhd7S9DA8ykYmIyLum4xObUd/pHXK0/CaQTSO
4a4zdf2j5upyVw==
-----END CERTIFICATE-----