Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File:                     xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier:          dkwu8wr+l1FCPs3Z6SRjNDkLycR2hgRfW1hlduFDbRU=
Subject key identifier:   D8:63:2C:67:68:85:74:6D:37:F5:7B:60:22:67:C1:A7:BE:7F:1E:45
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer:       /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial:       01962F741ADBB294E5609B0DA90DFC9B6A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number:          0922
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: IzmeYXYlO_xmlW74WeQyL7gffpE.roa (hash: Z5XX/V/bAHCE8fRhzNUzhUtEMOMQ14B1YoCinHSL1lM=)
                          2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: llZ6NBBDqsRXfFhgp2sWtz0z1wQSqBsEI+Bh0LZ/Vi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:db:b2:94:e5:60:9b:0d:a9:0d:fc:9b:6a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=d8632c676885746d37f57b602267c1a7be7f1e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:51:09:19:84:e5:84:e2:49:00:3b:8e:44:
                    3e:c8:76:7b:ce:a6:7b:3d:97:2c:51:62:12:fa:05:
                    f1:77:10:ac:34:9b:d0:3b:85:e1:4e:02:22:08:7b:
                    2b:9b:0b:5b:c4:a8:9a:82:4d:a1:6d:b0:58:24:93:
                    c6:99:4f:bd:91:98:7f:66:e3:6b:ac:cc:98:2e:c8:
                    ba:00:fa:f3:cd:89:bc:ad:a0:6f:18:db:42:5f:08:
                    83:94:fc:df:19:5f:76:1b:ce:ef:60:51:59:75:59:
                    4b:44:30:88:6e:95:fd:ee:c4:a6:c5:c4:7a:d2:2c:
                    55:9c:43:68:c3:0d:2c:15:64:36:25:5e:dd:77:6f:
                    ed:f4:3c:82:a0:ff:25:18:00:ba:84:37:be:ae:60:
                    e5:ba:e5:4a:a9:18:9b:a1:64:a7:f8:6e:28:81:46:
                    2d:b7:62:0f:86:34:97:08:07:f2:ba:d1:43:12:b1:
                    b5:0a:05:66:ca:a6:f6:ce:dd:77:73:70:d2:89:ad:
                    03:53:97:3d:23:39:6b:78:19:d4:a7:71:16:0c:8e:
                    bc:40:2b:b1:1e:01:c2:e8:73:40:d4:43:f5:51:49:
                    33:72:d1:9c:36:d8:a1:3c:85:50:3f:32:ad:08:65:
                    87:a2:f1:32:24:ae:13:7f:79:bd:08:c8:ed:1b:85:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:2C:67:68:85:74:6D:37:F5:7B:60:22:67:C1:A7:BE:7F:1E:45
            X509v3 Authority Key Identifier:
                keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:7e:d3:a3:43:71:2d:e1:56:45:25:06:46:f6:8b:2d:64:
         83:58:61:50:a2:ee:b3:94:68:72:2b:e3:75:62:8e:6b:79:f0:
         8a:ab:1d:d5:5c:f8:34:2a:9d:40:f5:dd:de:63:16:ec:34:02:
         85:f1:2c:ce:90:39:96:c3:cc:56:5f:a3:ee:52:b7:91:d6:5a:
         f9:df:cb:45:e2:c2:11:dd:8a:6c:b7:ba:67:c9:ba:8b:7a:d9:
         cb:ba:b5:aa:0c:7f:50:54:f4:13:f0:02:4b:69:84:7a:56:a4:
         ca:d3:b8:d1:07:84:46:14:07:97:22:e0:00:aa:4d:a1:86:87:
         89:7c:02:68:d4:8b:01:5d:90:60:8f:53:6b:fc:1d:30:d7:ab:
         ee:fd:45:12:b2:c0:db:ee:ca:b4:9d:03:21:60:3d:ac:fe:b6:
         9d:eb:4f:be:1c:58:c0:89:fa:62:53:63:74:47:c3:68:fb:6c:
         48:82:c8:46:2f:0d:47:61:19:da:66:00:34:8e:f6:bd:c4:c8:
         22:60:30:98:fc:52:a2:c4:e7:7b:df:fd:cb:54:20:38:87:ad:
         87:df:bc:81:e0:f3:37:fe:1c:53:c4:61:57:6a:b0:ed:94:ef:
         c9:39:11:df:ee:d5:8f:48:83:2e:68:dd:c9:05:ff:b2:b6:4a:
         ff:d1:d9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBrbspTlYJsNqQ38m2oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmZhNzFhNTExM2ZlZDgyNDY0Nzc2YzE0MzcxNTE0Yzky
MThlZjUwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EyhkODYzMmM2NzY4ODU3NDZkMzdmNTdiNjAyMjY3YzFhN2JlN2YxZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypJRCRmE5YTiSQA7jkQ+yHZ7zqZ7
PZcsUWIS+gXxdxCsNJvQO4XhTgIiCHsrmwtbxKiagk2hbbBYJJPGmU+9kZh/ZuNr
rMyYLsi6APrzzYm8raBvGNtCXwiDlPzfGV92G87vYFFZdVlLRDCIbpX97sSmxcR6
0ixVnENoww0sFWQ2JV7dd2/t9DyCoP8lGAC6hDe+rmDluuVKqRiboWSn+G4ogUYt
t2IPhjSXCAfyutFDErG1CgVmyqb2zt13c3DSia0DU5c9IzlreBnUp3EWDI68QCux
HgHC6HNA1EP1UUkzctGcNtihPIVQPzKtCGWHovEyJK4Tf3m9CMjtG4VwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhjLGdohXRtN/V7YCJnwae+fx5FMB8GA1UdIwQY
MBaAFMW/pxpRE/7YJGR3bBQ3FRTJIY71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYt
NmZjZTAzMzI1YjNmLzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYtNmZjZTAzMzI1YjNm
LzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnZ+06ND
cS3hVkUlBkb2iy1kg1hhUKLus5RocivjdWKOa3nwiqsd1Vz4NCqdQPXd3mMW7DQC
hfEszpA5lsPMVl+j7lK3kdZa+d/LReLCEd2KbLe6Z8m6i3rZy7q1qgx/UFT0E/AC
S2mEelakytO40QeERhQHlyLgAKpNoYaHiXwCaNSLAV2QYI9Ta/wdMNer7v1FErLA
2+7KtJ0DIWA9rP62netPvhxYwIn6YlNjdEfDaPtsSILIRi8NR2EZ2mYANI72vcTI
ImAwmPxSosTne9/9y1QgOIeth9+8geDzN/4cU8RhV2qw7ZTvyTkR3+7Vj0iDLmjd
yQX/srZK/9HZaw==
-----END CERTIFICATE-----