Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File:                     x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier:          uM3jHhi3dH6+Q6M4SQ4dzbyPKKk+381XD2aTCve3048=
Subject key identifier:   3D:82:47:0D:58:F9:55:7F:51:DA:93:D7:6F:9C:6F:9F:7F:6A:3D:4C
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer:       /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial:       01962F74A56B0DD7D3D74395636AE59DC8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
                          2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: t3wEXRNMph8uGukKk/+aweP6Dikz+Aokp+wJq0EXCbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:6b:0d:d7:d3:d7:43:95:63:6a:e5:9d:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=3d82470d58f9557f51da93d76f9c6f9f7f6a3d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:33:7e:15:3e:77:3e:e8:b5:40:23:13:c4:
                    6e:a0:6c:c2:ee:61:7a:f2:d7:77:58:c0:fa:15:3e:
                    c2:95:70:b3:95:4a:41:f7:54:50:4a:ed:bb:05:0a:
                    fe:4b:32:0a:e3:bc:b4:68:39:b8:fc:d3:51:e9:ba:
                    89:de:1e:58:29:dd:b0:71:6b:e6:2a:7c:8b:ec:ce:
                    08:7f:e6:5c:f0:77:10:24:6d:7e:d2:69:39:83:34:
                    75:ac:71:f4:de:9f:43:8d:db:0b:d1:91:07:6c:93:
                    26:d2:2e:ed:dd:1d:a7:e8:2b:02:6b:05:d8:16:a4:
                    aa:da:24:d5:0c:cd:2c:50:26:ab:7f:c3:d9:1e:43:
                    a3:15:00:6c:db:5a:f4:61:3f:81:03:30:ed:00:32:
                    2a:30:d3:f9:dd:6f:39:30:24:4b:77:7b:59:f3:fa:
                    82:51:4e:78:2f:3e:c4:52:72:49:6e:13:0b:fa:58:
                    95:a7:6b:94:ff:4d:f2:7d:2e:b4:65:fc:3a:9f:15:
                    f9:41:60:d5:28:74:93:f7:f9:f1:f7:74:00:b3:8e:
                    2b:ce:cb:95:70:58:36:0f:67:84:6c:d7:d1:a0:2d:
                    7a:35:fa:c5:29:12:3a:98:bf:80:7e:6b:d6:06:49:
                    21:13:c5:70:19:64:89:64:a0:12:d8:39:5a:4a:88:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:47:0D:58:F9:55:7F:51:DA:93:D7:6F:9C:6F:9F:7F:6A:3D:4C
            X509v3 Authority Key Identifier:
                keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:68:fe:8d:e3:f8:e8:27:05:37:d4:ff:07:94:c8:c5:20:
         97:b4:41:1f:9e:cb:e4:5d:1a:53:0f:eb:fc:0c:c8:c5:22:8a:
         c3:b1:21:3a:b4:9d:eb:3a:89:28:82:7e:6c:66:30:de:0e:68:
         c8:61:0e:44:99:e6:e2:f9:be:b7:ea:1a:a0:48:d6:24:a1:d7:
         b1:96:e6:5a:9c:20:65:a3:80:8e:ae:0a:40:4a:68:57:d1:30:
         57:09:8c:00:dc:a2:d1:63:68:28:ff:1f:f9:31:23:c1:96:8f:
         5f:50:fb:70:3e:64:be:81:bb:39:f4:6e:b6:61:0d:77:8d:40:
         c0:09:4b:bc:94:48:67:ed:0e:4c:fd:5a:cf:2c:c4:87:5f:ab:
         2f:5c:75:6a:01:b4:7d:90:a2:bd:30:b6:1f:ed:48:19:0c:6c:
         19:24:1e:ed:ee:5b:bf:67:be:af:f1:9b:01:3e:73:87:68:7d:
         41:84:2e:8d:01:fd:f4:cf:c4:f2:ea:52:11:40:53:69:65:99:
         07:35:61:d3:f8:b9:82:a7:35:47:70:59:ee:4d:b1:5e:16:fc:
         84:92:9c:aa:06:cc:60:3c:c0:75:62:9e:80:12:c9:d6:c7:99:
         62:61:65:64:53:50:a0:cb:ca:41:7d:09:b6:9e:b8:bc:6f:21:
         c0:f0:03:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKVrDdfT10OVY2rlnci7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2
OWQzMGQwHhcNMjUwNDEzMTQwMTM1WhcNMjUwNDE0MTQwMTM1WjAzMTEwLwYDVQQD
EygzZDgyNDcwZDU4Zjk1NTdmNTFkYTkzZDc2ZjljNmY5ZjdmNmEzZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcIzfhU+dz7otUAjE8RuoGzC7mF6
8td3WMD6FT7ClXCzlUpB91RQSu27BQr+SzIK47y0aDm4/NNR6bqJ3h5YKd2wcWvm
KnyL7M4If+Zc8HcQJG1+0mk5gzR1rHH03p9DjdsL0ZEHbJMm0i7t3R2n6CsCawXY
FqSq2iTVDM0sUCarf8PZHkOjFQBs21r0YT+BAzDtADIqMNP53W85MCRLd3tZ8/qC
UU54Lz7EUnJJbhML+liVp2uU/03yfS60Zfw6nxX5QWDVKHST9/nx93QAs44rzsuV
cFg2D2eEbNfRoC16NfrFKRI6mL+AfmvWBkkhE8VwGWSJZKAS2DlaSoii4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2CRw1Y+VV/UdqT12+cb59/aj1MMB8GA1UdIwQY
MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt
MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl
LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7to/o3j
+OgnBTfU/weUyMUgl7RBH57L5F0aUw/r/AzIxSKKw7EhOrSd6zqJKIJ+bGYw3g5o
yGEORJnm4vm+t+oaoEjWJKHXsZbmWpwgZaOAjq4KQEpoV9EwVwmMANyi0WNoKP8f
+TEjwZaPX1D7cD5kvoG7OfRutmENd41AwAlLvJRIZ+0OTP1azyzEh1+rL1x1agG0
fZCivTC2H+1IGQxsGSQe7e5bv2e+r/GbAT5zh2h9QYQujQH99M/E8upSEUBTaWWZ
BzVh0/i5gqc1R3BZ7k2xXhb8hJKcqgbMYDzAdWKegBLJ1seZYmFlZFNQoMvKQX0J
tp64vG8hwPADPg==
-----END CERTIFICATE-----