Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File:                     rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier:          6gnX5/Aom+jfi6OFf1LW+8WRACfczplgqCij5WGJU1s=
Subject key identifier:   1E:8C:FF:FC:EA:A2:18:76:B5:5F:03:8B:C3:72:48:F6:5B:64:33:4D
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer:       /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial:       01962F06A482362A2274DDE63107C7005F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number:          0C9A
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: xRLwjxWaNaph7p1br8msHR+OeIFubv6VeCzfvlee0LM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a4:82:36:2a:22:74:dd:e6:31:07:c7:00:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=1e8cfffceaa21876b55f038bc37248f65b64334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:36:73:dc:ac:32:36:26:e2:f9:ee:c0:c5:
                    3b:e0:fc:12:7b:25:ec:6e:12:fe:f6:a9:a3:c2:14:
                    fb:89:d9:81:6f:9c:a1:83:c3:11:30:04:54:60:25:
                    d8:67:a8:ef:a9:77:3c:04:50:79:2f:b4:d1:39:92:
                    71:03:a0:b6:3b:93:d8:ec:da:05:c5:1e:1f:e5:7d:
                    1a:ba:d3:76:49:46:81:08:a1:0d:0e:42:a8:e8:dd:
                    96:9d:8d:e0:76:95:56:c1:5f:a0:02:5d:65:d4:fb:
                    e8:81:6a:a3:42:cd:54:ec:72:ca:70:a2:e2:91:1f:
                    fb:c8:7d:8d:ba:36:60:a6:10:5a:dd:5b:b0:f8:ce:
                    e1:8b:5e:ee:3e:d3:12:6f:9f:e9:70:19:cf:f2:25:
                    d2:f4:c5:c6:77:20:3c:84:dc:b2:e6:25:a9:9a:ab:
                    6d:62:3e:9e:e2:7e:11:42:69:6d:8d:97:4f:91:c8:
                    17:7e:2c:24:27:4c:84:b0:16:a9:17:98:cd:67:a7:
                    d7:4a:e9:72:c5:05:af:e9:0e:b9:de:58:5e:dc:82:
                    44:89:ad:bc:0a:c1:a9:dc:8c:b4:88:be:ce:cb:2b:
                    5b:29:3c:e6:4e:23:0e:9f:7a:d7:fa:45:0d:7e:37:
                    46:9a:8b:49:35:da:9b:3d:12:d0:df:d8:17:cf:96:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8C:FF:FC:EA:A2:18:76:B5:5F:03:8B:C3:72:48:F6:5B:64:33:4D
            X509v3 Authority Key Identifier:
                keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:73:c5:13:67:96:07:56:f3:ad:71:c2:fa:c1:38:86:04:
         e9:fa:26:8d:82:55:23:f6:3a:f8:61:fa:97:3c:bf:5c:e1:0e:
         f5:e5:98:cd:87:5b:ac:ce:a3:7c:3e:e3:6b:40:37:6d:de:42:
         84:72:bf:9f:66:ba:9d:67:60:a2:a8:45:62:48:d6:0d:42:e7:
         8a:ae:d5:1d:d3:88:d1:84:1b:5e:cc:a3:ee:95:69:22:3d:c2:
         d9:ac:d6:d6:42:96:cd:de:bb:72:64:6a:81:40:32:91:39:b0:
         75:6f:78:58:a0:49:2d:1f:3c:b5:f5:c0:5b:e3:b5:bc:6f:55:
         86:97:b4:94:aa:a7:ca:a9:de:f2:2e:d8:a4:f6:42:5e:d1:22:
         88:0a:44:13:05:dd:b2:90:0e:02:93:20:b1:c4:46:e8:ce:63:
         d0:f4:92:63:dc:a9:7b:9c:42:5a:5e:ab:c0:13:45:70:75:5c:
         3b:bc:4d:b3:cf:ef:e6:35:c0:46:42:9b:65:76:67:e9:b1:08:
         ea:ff:db:3f:f6:17:fd:d1:5a:48:07:b1:0b:c6:c8:51:d4:52:
         a5:6a:e7:cb:e8:e3:c0:c3:ae:03:62:d9:36:4b:32:9c:e4:59:
         2f:3d:ce:ed:08:9a:bb:78:92:00:bb:b5:d8:65:56:53:be:8e:
         9b:ca:b2:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqSCNioidN3mMQfHAF86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3
NzRiZjgwHhcNMjUwNDEzMTIwMTI2WhcNMjUwNDE0MTIwMTI2WjAzMTEwLwYDVQQD
EygxZThjZmZmY2VhYTIxODc2YjU1ZjAzOGJjMzcyNDhmNjViNjQzMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qc2c9ysMjYm4vnuwMU74PwSeyXs
bhL+9qmjwhT7idmBb5yhg8MRMARUYCXYZ6jvqXc8BFB5L7TROZJxA6C2O5PY7NoF
xR4f5X0autN2SUaBCKENDkKo6N2WnY3gdpVWwV+gAl1l1PvogWqjQs1U7HLKcKLi
kR/7yH2NujZgphBa3Vuw+M7hi17uPtMSb5/pcBnP8iXS9MXGdyA8hNyy5iWpmqtt
Yj6e4n4RQmltjZdPkcgXfiwkJ0yEsBapF5jNZ6fXSulyxQWv6Q653lhe3IJEia28
CsGp3Iy0iL7OyytbKTzmTiMOn3rX+kUNfjdGmotJNdqbPRLQ39gXz5Y/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6M//zqohh2tV8Di8NySPZbZDNNMB8GA1UdIwQY
MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt
NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1
LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+dzxRNn
lgdW861xwvrBOIYE6fomjYJVI/Y6+GH6lzy/XOEO9eWYzYdbrM6jfD7ja0A3bd5C
hHK/n2a6nWdgoqhFYkjWDULniq7VHdOI0YQbXsyj7pVpIj3C2azW1kKWzd67cmRq
gUAykTmwdW94WKBJLR88tfXAW+O1vG9Vhpe0lKqnyqne8i7YpPZCXtEiiApEEwXd
spAOApMgscRG6M5j0PSSY9ype5xCWl6rwBNFcHVcO7xNs8/v5jXARkKbZXZn6bEI
6v/bP/YX/dFaSAexC8bIUdRSpWrny+jjwMOuA2LZNksynORZLz3O7Qiau3iSALu1
2GVWU76Om8qyGg==
-----END CERTIFICATE-----