Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File:                     FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier:          rFkJQpstphUqFGeW8aBeloFoO49A5JY/nLWp+RjELu4=
Subject key identifier:   AA:85:F4:18:63:20:36:05:04:CC:A5:32:E1:CA:81:09:23:52:4B:C9
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer:       /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial:       01962E996FE040DA776E33A48A0EA8F210CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number:          0588
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: /ttK6Gw4KWI2FZ6eMi3wRw+qAz7dlQ5TJak5JPGJKc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:e0:40:da:77:6e:33:a4:8a:0e:a8:f2:10:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=aa85f4186320360504cca532e1ca810923524bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:a4:02:47:63:31:9e:0a:40:e1:a2:b0:52:
                    64:7e:7f:92:d6:1a:80:87:9e:e7:17:fe:ea:f9:56:
                    ae:a4:23:cb:a8:68:5c:6b:0f:a9:97:fd:5d:58:54:
                    e1:45:d0:04:34:a7:66:a8:b3:88:27:72:39:08:6e:
                    4b:2b:4f:10:a7:5f:38:78:d9:ca:7e:a3:1d:28:a0:
                    fc:28:54:14:1a:3d:78:1e:c2:ea:2d:52:e8:19:5c:
                    a5:fd:a2:83:97:0d:b5:be:b2:e3:e1:8d:1b:10:26:
                    cc:39:80:8b:85:89:7d:59:6a:39:82:d0:58:d1:57:
                    d4:1a:82:4e:6a:24:96:15:27:5d:0d:e7:b4:13:65:
                    15:e3:d2:35:77:b0:8a:bc:31:17:60:d9:97:3d:09:
                    17:f0:18:b6:47:e7:19:33:9c:1d:34:5e:b1:55:18:
                    8b:15:5f:90:f2:9c:f0:9a:23:b3:24:73:15:63:47:
                    56:48:c0:55:9a:70:0f:96:bc:87:f7:b3:94:42:3e:
                    e6:1f:ee:d9:aa:0a:b6:fd:55:1f:92:b7:df:98:9b:
                    c1:ae:88:b7:b1:f2:96:6d:10:b1:3a:4b:68:f4:cf:
                    7c:69:b9:64:f0:13:5b:d8:ed:2f:e2:84:2b:4a:44:
                    6d:fe:db:85:d7:70:0c:32:78:86:2b:46:12:b7:f3:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:85:F4:18:63:20:36:05:04:CC:A5:32:E1:CA:81:09:23:52:4B:C9
            X509v3 Authority Key Identifier:
                keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:9c:73:85:35:76:5e:5e:50:0b:af:37:f5:d5:be:46:57:
         57:d3:11:37:5a:54:a7:9e:01:8e:1f:92:2c:98:4e:72:0b:5d:
         0f:2d:4e:c5:02:cf:9e:2a:c3:21:05:29:3e:99:c6:27:dd:4e:
         c3:e4:ac:40:c6:8b:da:ba:c5:b5:ef:c1:f0:38:c5:96:34:da:
         c7:4b:88:38:1b:70:37:94:aa:62:fe:a5:e0:8e:23:cd:6a:84:
         d6:88:3b:e8:d3:8f:da:b8:f5:e2:d9:e1:9e:b6:fb:d5:73:49:
         4f:09:89:fc:b0:b8:0f:f9:04:23:d7:e9:b2:7f:5f:dc:db:b2:
         5d:3c:db:88:9f:f1:17:ba:13:f8:0b:81:28:31:fa:e5:59:9a:
         be:67:13:66:8f:a2:4e:50:ae:d5:c4:eb:4c:4b:b6:af:f7:cb:
         74:4e:71:ea:eb:82:19:50:87:98:f8:ea:e1:38:96:ef:77:a5:
         8a:34:56:d4:a8:7f:d7:ab:d5:43:32:bd:82:7f:4c:f6:06:4f:
         2d:01:6c:58:20:84:09:d6:ca:ff:4e:11:b1:38:52:fc:92:53:
         e4:82:97:75:cb:75:9c:e6:8c:62:a3:5b:d0:e0:40:be:54:2a:
         2d:8e:38:0a:d2:d8:fd:d4:a5:14:32:e0:97:64:57:d1:75:88:
         3e:30:e4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumW/gQNp3bjOkig6o8hDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTE4MDcxY2MxZmFkOWMyZjkyYTEyMjkyMWFkNDc4YjEz
NDdiMGUwHhcNMjUwNDEzMTAwMjA5WhcNMjUwNDE0MTAwMjA5WjAzMTEwLwYDVQQD
EyhhYTg1ZjQxODYzMjAzNjA1MDRjY2E1MzJlMWNhODEwOTIzNTI0YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31qkAkdjMZ4KQOGisFJkfn+S1hqA
h57nF/7q+VaupCPLqGhcaw+pl/1dWFThRdAENKdmqLOIJ3I5CG5LK08Qp184eNnK
fqMdKKD8KFQUGj14HsLqLVLoGVyl/aKDlw21vrLj4Y0bECbMOYCLhYl9WWo5gtBY
0VfUGoJOaiSWFSddDee0E2UV49I1d7CKvDEXYNmXPQkX8Bi2R+cZM5wdNF6xVRiL
FV+Q8pzwmiOzJHMVY0dWSMBVmnAPlryH97OUQj7mH+7Zqgq2/VUfkrffmJvBroi3
sfKWbRCxOkto9M98ablk8BNb2O0v4oQrSkRt/tuF13AMMniGK0YSt/NICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqF9BhjIDYFBMylMuHKgQkjUkvJMB8GA1UdIwQY
MBaAFBcRgHHMH62cL5KhIpIa1HixNHsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYt
ZTkwZjE2ZmM2ZmM0LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYtZTkwZjE2ZmM2ZmM0
LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4Wcc4U1
dl5eUAuvN/XVvkZXV9MRN1pUp54Bjh+SLJhOcgtdDy1OxQLPnirDIQUpPpnGJ91O
w+SsQMaL2rrFte/B8DjFljTax0uIOBtwN5SqYv6l4I4jzWqE1og76NOP2rj14tnh
nrb71XNJTwmJ/LC4D/kEI9fpsn9f3NuyXTzbiJ/xF7oT+AuBKDH65VmavmcTZo+i
TlCu1cTrTEu2r/fLdE5x6uuCGVCHmPjq4TiW73elijRW1Kh/16vVQzK9gn9M9gZP
LQFsWCCECdbK/04RsThS/JJT5IKXdct1nOaMYqNb0OBAvlQqLY44CtLY/dSlFDLg
l2RX0XWIPjDkHQ==
-----END CERTIFICATE-----