Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File:                     XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier:          4yPo0FLmRhjFGqm5OIWef3vbzXbKlq2wTtiZoh9o3ao=
Subject key identifier:   65:2E:17:0D:06:21:B6:FC:75:28:39:39:EB:50:25:0E:8C:F9:FA:15
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer:       /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial:       01962E9894FD15A8D7792BB1848FDD2D3EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number:          0E08
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
                          2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: u0RXz7h1FEPUnbrKDGX9W1kBBzOHbRNzGeL7c0n1mzs=)
                          3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:fd:15:a8:d7:79:2b:b1:84:8f:dd:2d:3e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=652e170d0621b6fc75283939eb50250e8cf9fa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:83:3a:fe:a2:47:09:dd:41:e0:2d:b0:21:
                    22:d3:20:37:f3:69:00:6d:2b:a9:3f:d5:6e:af:32:
                    01:d1:a2:b4:65:2e:29:f5:9a:12:33:86:1c:3d:ac:
                    18:c3:68:81:af:af:04:c3:7f:3b:ed:ff:88:6a:f7:
                    64:62:b4:95:ff:81:0e:16:b6:eb:5e:df:cc:a5:40:
                    a6:f6:b3:35:a7:18:df:91:45:4f:ac:97:08:ea:5a:
                    f0:7e:b6:05:db:a2:50:09:88:df:5a:71:9d:f8:06:
                    b6:37:2b:06:c2:32:7a:c1:a5:33:0a:b9:7a:44:13:
                    0f:ae:5e:36:15:98:d0:f1:41:ba:c8:18:a0:d9:d5:
                    dd:71:53:67:25:47:af:e5:f9:b8:3d:97:d1:65:77:
                    1d:79:0e:05:c0:a0:b9:09:3c:f4:e2:6b:c6:40:a3:
                    2e:62:a0:91:ac:b5:0a:01:82:4d:e1:6b:db:a8:22:
                    c6:ea:2a:35:ea:d9:ce:2b:50:21:1b:a3:ee:ed:ef:
                    a2:bd:bf:42:fb:b3:35:0b:ae:a2:75:27:a7:a2:71:
                    9f:d5:11:a0:ce:77:2a:f1:dd:da:a9:90:50:6e:ad:
                    28:0b:9f:4f:b6:66:54:37:c5:48:6b:03:1f:f1:38:
                    d8:02:68:bc:41:6d:36:4b:5e:60:fb:23:b2:c4:b4:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2E:17:0D:06:21:B6:FC:75:28:39:39:EB:50:25:0E:8C:F9:FA:15
            X509v3 Authority Key Identifier:
                keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:27:f0:7b:77:5d:c8:40:88:2d:67:b0:6f:73:ca:18:aa:3b:
         94:33:7a:d0:e8:71:a6:84:93:2c:07:c5:61:d5:e3:a8:bf:75:
         23:41:89:6b:be:b7:c0:ea:56:e8:f6:b0:76:81:6e:15:7f:46:
         10:b5:9f:f2:7c:86:94:1c:64:63:16:b9:4b:ff:2e:38:c6:a1:
         b4:ba:e3:23:e8:aa:26:0b:6f:33:72:1c:d7:9d:56:13:6f:ef:
         81:e4:7d:b0:1d:90:7c:c6:ac:42:f1:ac:5b:48:62:ee:07:89:
         58:e3:05:d1:7c:44:c3:ce:d7:8f:d1:19:69:a1:12:21:b4:6d:
         7d:87:a3:c4:88:7f:b0:c0:aa:ab:6e:a2:e4:03:75:6b:64:b4:
         b2:1f:b6:03:6f:0b:36:ed:59:10:b7:5c:7d:7e:e2:9d:3b:94:
         d8:7d:49:a7:34:28:b4:fa:b9:1c:fb:fe:e2:2f:f8:96:3c:ce:
         e1:91:e5:cc:79:8a:99:13:07:f7:d5:a9:d9:89:62:f5:95:98:
         b2:76:18:1c:13:61:d0:06:cc:e0:fa:ef:fd:f6:63:16:7a:3a:
         8a:56:91:32:94:ce:d5:4d:9f:3c:03:8e:39:3c:98:53:63:f7:
         3c:ee:d8:c0:89:4f:99:2d:8f:58:9d:8d:7c:35:40:47:49:54:
         ab:4b:14:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJT9FajXeSuxhI/dLT7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1
ZDAzZGIwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
Eyg2NTJlMTcwZDA2MjFiNmZjNzUyODM5MzllYjUwMjUwZThjZjlmYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXCDOv6iRwndQeAtsCEi0yA382kA
bSupP9VurzIB0aK0ZS4p9ZoSM4YcPawYw2iBr68Ew3877f+IavdkYrSV/4EOFrbr
Xt/MpUCm9rM1pxjfkUVPrJcI6lrwfrYF26JQCYjfWnGd+Aa2NysGwjJ6waUzCrl6
RBMPrl42FZjQ8UG6yBig2dXdcVNnJUev5fm4PZfRZXcdeQ4FwKC5CTz04mvGQKMu
YqCRrLUKAYJN4WvbqCLG6io16tnOK1AhG6Pu7e+ivb9C+7M1C66idSenonGf1RGg
zncq8d3aqZBQbq0oC59PtmZUN8VIawMf8TjYAmi8QW02S15g+yOyxLQjkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUuFw0GIbb8dSg5OetQJQ6M+foVMB8GA1UdIwQY
MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt
OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm
LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCfwe3dd
yECILWewb3PKGKo7lDN60OhxpoSTLAfFYdXjqL91I0GJa763wOpW6PawdoFuFX9G
ELWf8nyGlBxkYxa5S/8uOMahtLrjI+iqJgtvM3Ic151WE2/vgeR9sB2QfMasQvGs
W0hi7geJWOMF0XxEw87Xj9EZaaESIbRtfYejxIh/sMCqq26i5AN1a2S0sh+2A28L
Nu1ZELdcfX7inTuU2H1JpzQotPq5HPv+4i/4ljzO4ZHlzHmKmRMH99Wp2Yli9ZWY
snYYHBNh0AbM4Prv/fZjFno6ilaRMpTO1U2fPAOOOTyYU2P3PO7YwIlPmS2PWJ2N
fDVAR0lUq0sU6g==
-----END CERTIFICATE-----