Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File:                     XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier:          8Rp9nbt03p2B4tgOWqmvlfDdQBn27rdPJR+HoyVxpnk=
Subject key identifier:   6B:E8:EC:23:A9:7F:C7:F7:1E:C8:C7:86:B7:6E:E4:52:D2:0C:4D:62
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer:       /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial:       01962E2AEDB787E163326A78C36A6AB032C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number:          1456
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 2ywpCRCtpz6hrb_B5Z2UyYL2m-g.roa (hash: Z+2VK2G2lzN86LoPcE9VgbDrrppkQUiQOHGoi5RCAY8=)
                          2: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: FR9SVZ4ApI+4hS17+U80TiIi93LLoRtOCofrd0t9NiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ed:b7:87:e1:63:32:6a:78:c3:6a:6a:b0:32:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=6be8ec23a97fc7f71ec8c786b76ee452d20c4d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:cc:8d:44:10:1a:c3:5c:53:84:5c:77:a5:
                    a8:52:f6:b8:40:25:a9:90:83:46:1f:b5:2f:cc:c7:
                    2d:d0:11:d3:7c:2c:84:5b:46:da:7e:c2:25:f1:47:
                    fb:00:b8:45:64:65:ab:27:30:17:a9:5f:16:fd:e6:
                    2d:bb:65:50:ef:03:e3:ed:82:ea:9d:0c:91:7f:68:
                    48:8c:40:b1:8f:56:c8:97:c0:98:64:3b:21:da:94:
                    5b:78:fd:59:3a:60:28:60:e7:48:6b:a7:63:56:cd:
                    b6:40:5c:94:ca:90:db:8d:57:71:ac:99:38:17:41:
                    8c:b6:bb:bc:02:50:6f:9e:1e:5a:23:8b:5a:ef:57:
                    55:bd:02:e7:ec:e5:4f:6b:02:6f:66:aa:60:8a:6b:
                    60:f4:c3:97:3d:05:82:4a:6e:38:79:71:eb:f9:12:
                    b4:5d:14:57:0e:8a:bc:6b:e7:98:7b:cc:a8:87:85:
                    2b:fa:d6:5a:1c:d8:b3:48:02:39:e8:d4:ec:0f:5f:
                    2a:c9:a0:08:99:ed:5e:34:9b:b9:c4:dc:dd:30:4d:
                    4b:e0:b1:11:71:15:47:f6:88:b9:b9:c2:cb:0d:5f:
                    5d:0b:55:11:68:26:7a:6f:5e:a9:ef:6d:de:ec:6b:
                    e7:93:0e:84:14:13:4f:9b:5b:2e:6d:c7:75:a0:18:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:EC:23:A9:7F:C7:F7:1E:C8:C7:86:B7:6E:E4:52:D2:0C:4D:62
            X509v3 Authority Key Identifier:
                keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:af:fc:40:36:19:4d:05:9d:24:e5:00:c2:60:2a:db:bf:bc:
         33:39:e1:1b:bc:67:cd:bd:e5:0b:c9:87:58:0d:a8:7e:54:23:
         07:d6:57:21:f7:99:cd:d9:c0:84:d0:eb:bd:8a:dd:2b:87:7b:
         ba:d1:01:ba:3f:0d:5c:2d:e4:73:18:5a:ce:e6:09:f7:6b:cf:
         7d:2f:f4:fb:7c:47:99:dd:3a:52:69:c7:c0:c7:bb:28:e0:8f:
         b3:84:c6:c5:30:4d:01:d7:e3:39:6f:db:f8:db:cd:aa:5f:17:
         30:63:8e:74:19:4a:8b:b7:a5:41:8d:9d:5a:20:40:80:96:9a:
         f9:e7:7c:46:93:ff:dd:8e:e1:4f:c5:c6:c2:7b:cb:51:78:d0:
         d0:54:0f:a4:9e:e7:43:4a:12:0f:80:da:a5:51:93:e8:76:cb:
         7d:d6:3a:3c:7d:00:05:0d:ad:56:37:15:ea:5d:2d:87:8c:5c:
         38:37:c6:ea:76:44:e7:4e:87:c5:d0:5e:f4:bb:ac:1b:9b:59:
         9a:ad:6f:54:a6:6f:e8:53:a0:2f:bb:9b:38:4b:93:26:e7:16:
         51:60:a2:83:c6:f3:ee:8d:46:c8:99:3f:cd:4a:23:9c:7b:30:
         39:13:d1:12:d3:a6:5e:d3:25:76:fb:e7:69:dc:83:6f:ab:c9:
         09:5a:6d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu23h+FjMmp4w2pqsDLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzgyMjM4Mjg5YTg4MDJjZjUyYjY3ZDliZjRhZTg3YTUw
OTMzYzMwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
Eyg2YmU4ZWMyM2E5N2ZjN2Y3MWVjOGM3ODZiNzZlZTQ1MmQyMGM0ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmfMjUQQGsNcU4Rcd6WoUva4QCWp
kINGH7UvzMct0BHTfCyEW0bafsIl8Uf7ALhFZGWrJzAXqV8W/eYtu2VQ7wPj7YLq
nQyRf2hIjECxj1bIl8CYZDsh2pRbeP1ZOmAoYOdIa6djVs22QFyUypDbjVdxrJk4
F0GMtru8AlBvnh5aI4ta71dVvQLn7OVPawJvZqpgimtg9MOXPQWCSm44eXHr+RK0
XRRXDoq8a+eYe8yoh4Ur+tZaHNizSAI56NTsD18qyaAIme1eNJu5xNzdME1L4LER
cRVH9oi5ucLLDV9dC1URaCZ6b16p723e7Gvnkw6EFBNPm1subcd1oBh5TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvo7COpf8f3HsjHhrdu5FLSDE1iMB8GA1UdIwQY
MBaAFF04IjgomogCz1K2fZv0roelCTPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDIt
ODg1NzU3YzEyNDhmLzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDItODg1NzU3YzEyNDhm
LzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK/8QDYZ
TQWdJOUAwmAq27+8MznhG7xnzb3lC8mHWA2oflQjB9ZXIfeZzdnAhNDrvYrdK4d7
utEBuj8NXC3kcxhazuYJ92vPfS/0+3xHmd06UmnHwMe7KOCPs4TGxTBNAdfjOW/b
+NvNql8XMGOOdBlKi7elQY2dWiBAgJaa+ed8RpP/3Y7hT8XGwnvLUXjQ0FQPpJ7n
Q0oSD4DapVGT6HbLfdY6PH0ABQ2tVjcV6l0th4xcODfG6nZE506HxdBe9LusG5tZ
mq1vVKZv6FOgL7ubOEuTJucWUWCig8bz7o1GyJk/zUojnHswORPREtOmXtMldvvn
adyDb6vJCVptCw==
-----END CERTIFICATE-----