Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File:                     55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier:          XWA4uiHhdPWXVrBWCHbHx3ZYn6QOWjZFXZkLqDRvUDE=
Subject key identifier:   26:89:A0:22:E2:B2:5D:A3:48:C9:41:16:FD:8A:47:0D:75:06:E8:55
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer:       /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial:       01962F7471D4AD1BEC1A45E49C16AB01B8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number:          11CA
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: 6f/ALnhChlFNaLf5AnP//6QBUY6n9yuAsjdM7XPFDTg=)
                          2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
                          3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:d4:ad:1b:ec:1a:45:e4:9c:16:ab:01:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=2689a022e2b25da348c94116fd8a470d7506e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:f4:05:d2:44:17:8b:c7:82:74:4f:43:27:
                    b4:23:09:02:ee:70:1a:2b:eb:cf:c2:44:b5:40:89:
                    82:0d:67:15:70:72:23:97:39:bc:48:41:00:61:c8:
                    17:ec:3c:7a:6a:c4:c1:f8:46:2f:c3:c9:ed:73:7a:
                    d4:07:a1:d0:ce:62:d3:1e:a4:c9:12:9b:c6:82:7d:
                    83:94:61:4f:ef:2f:21:05:3e:9f:6f:67:c4:3d:78:
                    dc:b1:38:ae:07:85:c7:80:b1:99:c6:ba:51:4f:d1:
                    80:bd:fd:bc:46:52:d0:6d:e5:a0:10:cc:ab:c3:fa:
                    76:b5:1c:9c:bd:1a:0f:74:b5:d6:6b:07:b4:2e:7e:
                    64:c8:1e:d2:39:50:22:2d:30:0d:6e:86:e1:b7:61:
                    db:02:fe:e4:57:83:fe:84:c3:f7:46:86:3d:a9:9d:
                    f3:08:93:fa:ca:13:d6:08:d3:2a:f9:da:6a:4f:fa:
                    5c:6e:f8:86:c9:bc:5b:fe:06:b6:91:a4:bb:eb:7a:
                    7e:13:f5:48:9a:1d:71:18:f7:47:a9:d6:80:4e:d1:
                    cb:ec:d5:02:64:07:a7:91:4d:72:ea:8c:4e:d4:4a:
                    ba:5b:58:b0:14:d0:a2:b7:54:49:a6:54:4c:09:9b:
                    e6:f3:ae:11:4f:ea:b9:8d:17:5c:af:77:50:f8:c3:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:A0:22:E2:B2:5D:A3:48:C9:41:16:FD:8A:47:0D:75:06:E8:55
            X509v3 Authority Key Identifier:
                keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:be:9c:c3:40:7e:a8:17:55:8b:63:50:ea:c5:e0:9f:0d:7a:
         47:8f:45:9e:51:70:58:2c:44:db:19:77:6a:2b:c7:2f:cc:9a:
         97:e3:8e:e3:bf:54:ef:f7:e8:62:09:a2:fe:d7:36:de:83:55:
         4b:b8:a2:a9:85:70:71:b5:d8:80:1d:66:6d:b4:67:35:ed:98:
         a8:36:9a:03:31:b2:10:8a:1a:c8:73:3e:db:37:df:45:e3:86:
         fd:dd:be:84:61:d7:1c:88:9f:cf:12:a5:12:0e:73:81:b4:5b:
         57:4b:cb:2e:a9:a6:ee:fb:db:ad:71:e9:7d:22:c7:21:8a:92:
         59:1c:ac:ae:43:61:c1:d0:bf:da:0f:91:c5:c1:98:1a:96:34:
         b3:37:15:b9:a6:45:3d:d4:97:20:91:9f:29:62:eb:9c:26:2f:
         7b:8a:b4:f7:54:13:03:89:61:29:c9:b6:2f:2d:df:4f:d9:e9:
         6d:a1:c0:28:fd:37:59:5d:96:b2:04:d9:2b:03:40:4b:80:b1:
         a6:48:ce:b9:51:9b:28:b1:e3:5b:4b:5d:e8:0f:e7:54:16:76:
         7c:e7:ee:dc:24:9a:ef:85:b5:ea:1d:cb:9d:f3:a6:c9:d9:1c:
         79:86:34:bf:2c:4c:0b:2a:18:50:f3:7c:f6:3d:98:5c:ec:18:
         99:e0:90:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHHUrRvsGkXknBarAbisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh
YzQ3ZjIwHhcNMjUwNDEzMTQwMTIyWhcNMjUwNDE0MTQwMTIyWjAzMTEwLwYDVQQD
EygyNjg5YTAyMmUyYjI1ZGEzNDhjOTQxMTZmZDhhNDcwZDc1MDZlODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsob0BdJEF4vHgnRPQye0IwkC7nAa
K+vPwkS1QImCDWcVcHIjlzm8SEEAYcgX7Dx6asTB+EYvw8ntc3rUB6HQzmLTHqTJ
EpvGgn2DlGFP7y8hBT6fb2fEPXjcsTiuB4XHgLGZxrpRT9GAvf28RlLQbeWgEMyr
w/p2tRycvRoPdLXWawe0Ln5kyB7SOVAiLTANbobht2HbAv7kV4P+hMP3RoY9qZ3z
CJP6yhPWCNMq+dpqT/pcbviGybxb/ga2kaS763p+E/VImh1xGPdHqdaATtHL7NUC
ZAenkU1y6oxO1Eq6W1iwFNCit1RJplRMCZvm864RT+q5jRdcr3dQ+MOe8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaJoCLisl2jSMlBFv2KRw11BuhVMB8GA1UdIwQY
MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt
ZDU0MGRmODg2YmFiLzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi
LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYb6cw0B+
qBdVi2NQ6sXgnw16R49FnlFwWCxE2xl3aivHL8yal+OO479U7/foYgmi/tc23oNV
S7iiqYVwcbXYgB1mbbRnNe2YqDaaAzGyEIoayHM+2zffReOG/d2+hGHXHIifzxKl
Eg5zgbRbV0vLLqmm7vvbrXHpfSLHIYqSWRysrkNhwdC/2g+RxcGYGpY0szcVuaZF
PdSXIJGfKWLrnCYve4q091QTA4lhKcm2Ly3fT9npbaHAKP03WV2WsgTZKwNAS4Cx
pkjOuVGbKLHjW0td6A/nVBZ2fOfu3CSa74W16h3LnfOmydkceYY0vyxMCyoYUPN8
9j2YXOwYmeCQSQ==
-----END CERTIFICATE-----