Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
File:                     xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json)
Hash identifier:          TI0pHksDxn22bxy3TfHhefRX/dCt9hoWu24MWbeGq2E=
Subject key identifier:   84:EB:E3:59:AF:DC:57:37:8F:90:A1:52:48:54:21:45:32:7D:12:46
Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64
Certificate issuer:       /CN=c618f03f9874370653aa3a026f6707c2e0e74764
Certificate serial:       01962F743672A6BB58BA212308190AC33C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: 3tRcBqKhacq3xoruieZpNASKUEDsGi2JlAArnoBFEVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:72:a6:bb:58:ba:21:23:08:19:0a:c3:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=84ebe359afdc57378f90a15248542145327d1246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:36:24:50:3f:55:bf:11:c5:c0:7d:02:16:
                    12:fb:a2:3d:d2:fb:60:c1:c3:52:54:31:93:df:86:
                    0d:6e:e0:29:df:65:57:8d:b8:60:62:3c:0c:c9:17:
                    fa:2e:15:ca:73:ef:33:54:48:5b:9a:4b:b4:f1:6e:
                    58:0f:d6:02:95:28:10:6d:44:58:52:2f:c8:28:28:
                    f0:46:ae:57:08:b9:fe:95:27:27:b7:1b:4d:f9:90:
                    2a:a8:53:4a:8a:c9:5d:22:0d:25:eb:16:f9:93:3b:
                    93:0d:1b:14:b3:2b:d4:3d:39:de:3e:79:b9:8d:ff:
                    6f:84:55:10:1d:08:68:6a:78:5c:34:3c:bc:fb:cf:
                    66:e9:ab:5d:29:f2:36:fe:eb:d6:e2:84:41:6f:8d:
                    2c:4b:52:d5:69:53:d9:ce:eb:97:19:f9:db:f7:91:
                    a1:26:89:6b:6e:d4:32:e8:e9:0c:fe:1d:06:23:30:
                    68:f7:78:20:6f:1d:6d:8c:44:82:45:12:54:bf:60:
                    33:64:db:38:47:a1:bb:ea:fb:bf:a5:9b:1b:ab:d7:
                    7d:db:d9:80:e9:35:1e:13:e4:fd:6b:26:e5:ba:8e:
                    94:a6:18:4a:16:8a:74:7c:61:5a:37:d5:a5:b9:12:
                    b5:8d:b3:e6:18:bb:b9:29:88:b6:7d:6e:97:c7:a7:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:E3:59:AF:DC:57:37:8F:90:A1:52:48:54:21:45:32:7D:12:46
            X509v3 Authority Key Identifier:
                keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:74:0e:2a:da:10:59:c0:15:9d:36:92:47:c0:4a:92:c4:55:
         e2:a4:80:f4:62:da:3c:aa:0b:24:bf:8a:2e:77:09:61:9a:b7:
         fa:f9:0c:86:45:20:43:54:15:83:40:c7:84:45:e4:07:56:a7:
         a9:9b:3d:13:1e:f6:56:2d:af:a8:6c:57:e3:37:00:36:50:e7:
         69:fe:c2:83:a2:70:87:a8:ba:7e:12:2f:64:ce:08:59:10:2d:
         60:e9:b2:60:ce:97:66:90:6d:6f:93:bc:6e:3c:de:dc:20:eb:
         09:67:2e:0f:27:e4:b1:8e:7b:18:24:a6:34:60:8a:f0:92:86:
         8a:c6:a9:b3:54:29:00:b8:9b:fb:a8:48:2a:91:18:d5:94:27:
         68:2e:13:9b:0d:db:eb:85:1e:d5:15:11:61:60:67:43:a0:1b:
         ce:e6:96:f9:84:f8:13:82:b3:12:f0:89:fa:a6:fc:e7:d9:a1:
         51:5b:44:6a:00:c7:a8:43:ae:92:19:b7:dd:d4:b2:2b:53:12:
         c0:3e:9d:e7:e4:eb:d2:06:6c:38:bc:44:0a:67:fc:f6:63:b3:
         0d:a2:8e:53:d9:fe:4d:7f:9e:fc:ab:db:4e:33:ec:79:5a:b7:
         f9:ad:2a:ca:7d:7c:9f:a5:00:06:9f:20:20:05:54:2d:d2:85:
         b4:84:cd:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDZyprtYuiEjCBkKwzxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl
NzQ3NjQwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
Eyg4NGViZTM1OWFmZGM1NzM3OGY5MGExNTI0ODU0MjE0NTMyN2QxMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T82JFA/Vb8RxcB9AhYS+6I90vtg
wcNSVDGT34YNbuAp32VXjbhgYjwMyRf6LhXKc+8zVEhbmku08W5YD9YClSgQbURY
Ui/IKCjwRq5XCLn+lScntxtN+ZAqqFNKisldIg0l6xb5kzuTDRsUsyvUPTnePnm5
jf9vhFUQHQhoanhcNDy8+89m6atdKfI2/uvW4oRBb40sS1LVaVPZzuuXGfnb95Gh
JolrbtQy6OkM/h0GIzBo93ggbx1tjESCRRJUv2AzZNs4R6G76vu/pZsbq9d929mA
6TUeE+T9aybluo6UphhKFop0fGFaN9WluRK1jbPmGLu5KYi2fW6Xx6fRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITr41mv3Fc3j5ChUkhUIUUyfRJGMB8GA1UdIwQY
MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt
NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz
LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXQOKtoQ
WcAVnTaSR8BKksRV4qSA9GLaPKoLJL+KLncJYZq3+vkMhkUgQ1QVg0DHhEXkB1an
qZs9Ex72Vi2vqGxX4zcANlDnaf7Cg6Jwh6i6fhIvZM4IWRAtYOmyYM6XZpBtb5O8
bjze3CDrCWcuDyfksY57GCSmNGCK8JKGisaps1QpALib+6hIKpEY1ZQnaC4Tmw3b
64Ue1RURYWBnQ6AbzuaW+YT4E4KzEvCJ+qb859mhUVtEagDHqEOukhm33dSyK1MS
wD6d5+Tr0gZsOLxECmf89mOzDaKOU9n+TX+e/KvbTjPseVq3+a0qyn18n6UABp8g
IAVULdKFtITNjQ==
-----END CERTIFICATE-----