Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File:                     XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier:          OA6P6aXib5uUkbo1BjKE/bh9aQrbDk8Q9eV1X/ymcR4=
Subject key identifier:   EC:CB:FD:8B:27:CA:57:4A:04:AD:1C:45:E0:30:B8:89:8F:24:5B:59
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer:       /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial:       01962E98D650AFD3D455AD46C4A0A680E352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: 8DmM4kEJKnFW6vX8cXcELlgJFLEITcdy0fKnYHWNO90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d6:50:af:d3:d4:55:ad:46:c4:a0:a6:80:e3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=eccbfd8b27ca574a04ad1c45e030b8898f245b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:ed:6f:5a:d4:b4:40:75:b4:10:42:52:d1:
                    48:ad:ef:4f:a2:27:bc:69:01:a7:76:ae:70:01:28:
                    72:b6:84:cd:e7:bf:24:72:34:5f:4d:f9:8c:0e:e7:
                    94:9d:55:ac:31:83:32:a5:44:9e:b7:14:da:c2:1f:
                    05:3d:aa:b5:eb:86:6b:29:d1:de:02:af:f5:18:3d:
                    52:d5:6e:72:38:3e:f9:0a:d9:3d:5f:13:f5:6c:92:
                    b5:eb:37:5c:fc:c8:a3:2b:63:e4:b7:5a:ee:73:28:
                    47:f8:c0:7a:83:73:d2:be:1a:4e:95:45:f1:af:22:
                    18:d7:b7:fe:26:41:a8:ed:57:8d:6f:a8:b0:78:5d:
                    11:1e:da:49:09:bf:68:fe:fd:ce:9f:41:62:b9:8a:
                    a3:5d:03:fe:16:a1:dc:0b:b0:9b:05:d4:fa:1f:0f:
                    95:0d:26:14:69:37:19:58:3a:90:78:ff:74:45:4f:
                    aa:9c:bb:ff:07:03:2b:e3:a1:6d:14:58:a8:1c:8e:
                    1b:b3:25:b3:1b:7a:5f:26:db:75:95:ef:e8:1a:6c:
                    af:fc:e1:21:f2:1b:cc:3a:f7:88:ec:72:d0:01:da:
                    5d:31:c1:55:61:42:4d:c7:38:31:45:8b:05:74:f6:
                    6e:ee:8f:64:ce:11:b4:d7:56:1f:8b:3c:3d:8a:aa:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:FD:8B:27:CA:57:4A:04:AD:1C:45:E0:30:B8:89:8F:24:5B:59
            X509v3 Authority Key Identifier:
                keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:58:c5:55:57:0e:26:35:6f:85:8f:4f:db:31:cf:63:81:
         ea:0d:c8:e7:af:73:0d:aa:e2:f3:43:ae:29:0d:72:ce:b1:bb:
         6a:59:41:89:f6:97:ab:d7:69:6a:d6:f0:9d:c3:0a:1b:73:a4:
         6d:fb:8b:0b:6c:f2:03:e8:2e:13:70:8b:99:64:52:3a:94:5d:
         1e:ee:c6:ed:e9:8e:38:32:4d:83:c5:93:26:1f:4b:03:bd:f7:
         b6:42:6d:d6:f5:f7:d7:a1:10:2a:26:28:3f:02:da:06:52:3b:
         67:d5:a9:99:7c:ed:5e:0a:c3:bd:58:f9:c1:15:06:c4:5d:58:
         8a:2f:84:c9:20:0d:69:3b:47:18:fe:65:2e:c6:a3:8e:19:69:
         61:da:79:f1:4d:e5:bc:2d:d5:38:ea:2f:bd:13:14:fe:6c:8d:
         32:5f:e6:8f:fc:e9:9a:97:93:53:2a:b0:b3:77:5c:ac:33:09:
         2b:77:2c:e9:63:24:61:8c:16:95:74:0e:df:3c:0f:0b:41:26:
         e9:b5:a8:09:6e:4f:fc:d4:01:17:19:a9:2e:ff:da:43:d1:ae:
         91:3d:f9:8c:d9:d7:a8:c8:76:bc:2e:ca:55:25:ee:20:f6:c2:
         e2:eb:31:ea:42:32:85:d2:45:7b:34:0d:2a:bd:2e:50:76:0a:
         95:c2:0e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNZQr9PUVa1GxKCmgONSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzQ0YTFhYzBjYmZjNDBjNzVhMGNmYzdiZWM5NmM3YzM1
YmQyN2IwHhcNMjUwNDEzMTAwMTMwWhcNMjUwNDE0MTAwMTMwWjAzMTEwLwYDVQQD
EyhlY2NiZmQ4YjI3Y2E1NzRhMDRhZDFjNDVlMDMwYjg4OThmMjQ1YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjbtb1rUtEB1tBBCUtFIre9Poie8
aQGndq5wAShytoTN578kcjRfTfmMDueUnVWsMYMypUSetxTawh8FPaq164ZrKdHe
Aq/1GD1S1W5yOD75Ctk9XxP1bJK16zdc/MijK2Pkt1rucyhH+MB6g3PSvhpOlUXx
ryIY17f+JkGo7VeNb6iweF0RHtpJCb9o/v3On0FiuYqjXQP+FqHcC7CbBdT6Hw+V
DSYUaTcZWDqQeP90RU+qnLv/BwMr46FtFFioHI4bsyWzG3pfJtt1le/oGmyv/OEh
8hvMOveI7HLQAdpdMcFVYUJNxzgxRYsFdPZu7o9kzhG011Yfizw9iqoi8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzL/YsnyldKBK0cReAwuImPJFtZMB8GA1UdIwQY
MBaAFFw0ShrAy/xAx1oM/HvslsfDW9J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5Yzgt
Y2QxODUxMGVkY2RmLzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5YzgtY2QxODUxMGVkY2Rm
LzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6ZYxVVX
DiY1b4WPT9sxz2OB6g3I569zDari80OuKQ1yzrG7allBifaXq9dpatbwncMKG3Ok
bfuLC2zyA+guE3CLmWRSOpRdHu7G7emOODJNg8WTJh9LA733tkJt1vX316EQKiYo
PwLaBlI7Z9WpmXztXgrDvVj5wRUGxF1Yii+EySANaTtHGP5lLsajjhlpYdp58U3l
vC3VOOovvRMU/myNMl/mj/zpmpeTUyqws3dcrDMJK3cs6WMkYYwWlXQO3zwPC0Em
6bWoCW5P/NQBFxmpLv/aQ9GukT35jNnXqMh2vC7KVSXuIPbC4usx6kIyhdJFezQN
Kr0uUHYKlcIO7A==
-----END CERTIFICATE-----