Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File:                     xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier:          YdmWCcS/7IeLJFwVbx4GZM0bEy2mavoZDT7ZGOlpgH0=
Subject key identifier:   C8:82:80:FF:19:4F:60:BF:D8:E9:91:F2:6A:26:6A:17:E5:18:BB:30
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer:       /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial:       01962E62012663A13CA562D3B6AF6E1CD73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number:          0D36
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
                          2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: ykHO1alO6yB7uIpejQjINFYQtCVqb9ZQshNjlC9n8qE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:26:63:a1:3c:a5:62:d3:b6:af:6e:1c:d7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=c88280ff194f60bfd8e991f26a266a17e518bb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:37:3e:b6:85:bf:5d:4e:3d:40:61:46:6b:af:
                    76:e9:80:b2:90:60:9c:96:e2:8b:91:8e:0d:38:eb:
                    c5:f0:17:6f:da:8b:11:81:d8:a5:70:57:c9:51:af:
                    94:8f:3d:49:e7:2f:d5:f8:a7:b0:a1:5b:3a:ed:56:
                    53:b6:6f:57:50:1c:fe:2c:d8:62:e5:67:07:e1:ef:
                    86:c9:96:a6:1b:05:fe:5a:7e:f4:be:3a:5f:69:bb:
                    1f:3c:40:94:0b:92:77:c3:d9:4a:ac:f6:77:70:f3:
                    80:e5:66:0e:8c:09:17:4d:71:b6:76:2c:a1:f6:63:
                    5c:c1:61:8a:aa:81:4e:7c:cf:87:b2:28:25:af:9e:
                    62:d7:75:9b:73:6b:02:40:ce:0e:f8:38:ad:c0:87:
                    5c:f7:23:88:8d:d4:94:e1:c0:b4:c7:db:f7:49:1a:
                    ce:07:bd:24:c5:07:f2:fc:5d:f2:bf:d3:08:73:af:
                    74:d2:d8:83:f4:de:c0:dd:28:fa:35:2f:3e:7f:fe:
                    05:c4:e0:a1:fd:26:e7:dc:17:2e:4f:5b:89:94:68:
                    87:fa:4a:60:ab:ed:c6:04:90:d4:53:49:fd:78:ca:
                    06:56:eb:e5:1e:43:f7:4c:60:ed:6e:50:4c:34:3d:
                    d7:e6:ec:bc:17:5a:01:1c:1c:92:e3:92:4d:c5:10:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:80:FF:19:4F:60:BF:D8:E9:91:F2:6A:26:6A:17:E5:18:BB:30
            X509v3 Authority Key Identifier:
                keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:48:84:38:a1:50:9b:f3:a9:f9:ab:94:93:5b:33:26:04:
         5e:9e:39:46:27:db:11:d4:09:1e:98:49:77:ef:a9:a1:1c:e7:
         f8:8e:93:4d:b6:18:50:06:95:fd:5a:2d:10:db:52:e4:3e:ad:
         35:ff:b1:52:10:4d:9f:6d:b7:72:3f:d9:90:6b:c9:f5:ad:eb:
         e2:3e:58:a1:43:0e:c4:80:00:7e:8e:19:bd:27:f7:6d:2e:75:
         5d:65:3d:01:2b:a3:76:7e:07:81:c6:90:d7:74:5b:a8:bd:15:
         27:f3:f1:9c:95:66:d6:6e:0c:a0:3f:2a:a2:ca:b4:21:4f:80:
         01:fc:01:60:da:1f:3b:bd:42:aa:6f:94:04:84:f2:d4:38:1a:
         c5:74:2f:5d:61:02:56:33:34:dd:2c:db:11:d2:5b:96:91:ed:
         cb:20:bd:0c:c9:a6:4a:4c:69:39:bf:1b:49:44:94:f3:ba:9e:
         12:f9:06:68:fc:91:1f:2c:c2:43:c8:27:4f:04:47:7c:40:55:
         bb:99:59:4f:4c:09:ea:3b:f8:62:54:35:c7:6d:4a:93:47:76:
         25:53:a9:ff:1d:50:29:d8:30:92:4e:67:21:37:21:e1:ac:f5:
         3b:7c:c7:97:53:81:15:4b:f0:b7:f4:f7:ab:17:6b:28:27:f0:
         ef:dd:62:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgEmY6E8pWLTtq9uHNc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
EyhjODgyODBmZjE5NGY2MGJmZDhlOTkxZjI2YTI2NmExN2U1MThiYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDc+toW/XU49QGFGa6926YCykGCc
luKLkY4NOOvF8Bdv2osRgdilcFfJUa+Ujz1J5y/V+KewoVs67VZTtm9XUBz+LNhi
5WcH4e+GyZamGwX+Wn70vjpfabsfPECUC5J3w9lKrPZ3cPOA5WYOjAkXTXG2diyh
9mNcwWGKqoFOfM+Hsiglr55i13Wbc2sCQM4O+DitwIdc9yOIjdSU4cC0x9v3SRrO
B70kxQfy/F3yv9MIc6900tiD9N7A3Sj6NS8+f/4FxOCh/Sbn3BcuT1uJlGiH+kpg
q+3GBJDUU0n9eMoGVuvlHkP3TGDtblBMND3X5uy8F1oBHByS45JNxRCR5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiCgP8ZT2C/2OmR8momahflGLswMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYhIhDih
UJvzqfmrlJNbMyYEXp45RifbEdQJHphJd++poRzn+I6TTbYYUAaV/VotENtS5D6t
Nf+xUhBNn223cj/ZkGvJ9a3r4j5YoUMOxIAAfo4ZvSf3bS51XWU9ASujdn4HgcaQ
13RbqL0VJ/PxnJVm1m4MoD8qosq0IU+AAfwBYNofO71Cqm+UBITy1DgaxXQvXWEC
VjM03SzbEdJblpHtyyC9DMmmSkxpOb8bSUSU87qeEvkGaPyRHyzCQ8gnTwRHfEBV
u5lZT0wJ6jv4YlQ1x21Kk0d2JVOp/x1QKdgwkk5nITch4az1O3zHl1OBFUvwt/T3
qxdrKCfw791igg==
-----END CERTIFICATE-----