Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          uDa84axeSu+9Gx3J9swG2TbGqOPt7/MVRtbqJVt+RcQ=
Subject key identifier:   83:3C:71:3E:A5:53:B0:75:51:7E:0B:9F:F3:FC:41:65:31:AC:6B:F3
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       01962E9980A7D6DDC9E3F600CFC555B6A93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          0A0A
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: xs0oajGeN0kGhlmx7DRfHsFvsUP4uP2iDiEWaaoNW78=)
                          2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:a7:d6:dd:c9:e3:f6:00:cf:c5:55:b6:a9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=833c713ea553b075517e0b9ff3fc416531ac6bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:9e:e6:c2:7b:c3:39:8d:f9:94:f2:ac:ea:
                    19:cb:68:16:eb:34:14:58:41:a4:1b:af:92:49:04:
                    2a:20:21:47:10:73:d5:79:2e:16:39:78:f2:7b:da:
                    6c:6d:79:c7:4d:7f:72:a0:51:67:7b:e4:c9:86:f5:
                    e6:dd:e4:67:5e:17:f2:2d:6c:0e:54:20:3e:62:08:
                    3c:1e:af:61:cf:95:3f:ff:77:39:5d:a3:07:12:fa:
                    5a:ea:7c:7b:73:8a:8b:b7:47:df:66:9d:ce:30:f4:
                    70:17:60:7f:e7:f4:f3:7d:6f:b1:de:73:d8:b1:76:
                    ec:26:c3:40:cd:ba:6e:e6:78:db:0e:11:08:78:9a:
                    9f:94:0e:b3:34:c5:c4:9a:56:16:48:6e:37:69:99:
                    c9:b4:f2:8e:0b:49:b7:0f:99:9e:c5:24:39:a4:de:
                    3c:11:64:a4:45:a3:5c:47:37:d5:65:21:e8:8a:9e:
                    e8:3f:44:90:f7:66:be:5a:64:f1:f6:65:b7:4e:21:
                    7f:8e:6a:38:bf:b3:74:0c:61:bb:96:d1:c2:90:4d:
                    67:d2:9b:8e:56:ec:47:23:51:d6:25:99:a6:dd:85:
                    f9:f8:71:53:62:3f:92:2e:2d:02:73:3d:bf:8c:0d:
                    ed:b0:fc:cc:19:3c:13:f3:07:87:93:9b:9f:d8:b7:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3C:71:3E:A5:53:B0:75:51:7E:0B:9F:F3:FC:41:65:31:AC:6B:F3
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:7a:9a:d8:43:0c:44:53:20:63:79:35:0b:10:1b:2d:a1:09:
         6a:16:95:aa:11:7f:04:b6:3d:0c:9e:da:36:36:84:03:78:16:
         b7:87:ca:df:11:c2:eb:7c:b2:fd:d8:a1:01:f0:a5:43:f3:5d:
         a0:53:ce:fd:7a:33:c8:f0:89:2f:8f:ea:25:4c:e8:0c:07:cf:
         40:b3:aa:2d:0b:72:f4:85:07:5c:f5:ce:c2:06:e9:b9:9a:93:
         1a:b5:b7:17:59:1f:03:59:78:b0:92:43:82:7f:c5:43:80:81:
         f8:e4:ac:47:d7:6a:bf:b1:a0:79:d7:d3:4d:b7:e8:c9:06:99:
         a1:04:69:49:84:90:30:23:10:90:ba:88:96:4e:a7:84:6f:71:
         1c:5f:0e:f0:e3:d8:13:ff:0e:c1:26:e4:1d:36:8c:2d:41:9a:
         81:df:8b:8b:15:b9:df:6e:ca:c1:13:30:b0:c0:a5:b7:a6:5b:
         db:85:5f:eb:bb:27:d9:01:4a:d6:bc:91:5b:43:f2:88:06:14:
         7b:b0:96:82:5a:ab:af:dc:7a:ab:28:a0:86:53:c2:cd:61:83:
         a9:cd:d6:c5:9b:51:34:34:1e:a3:12:e1:2d:a0:00:0a:fc:92:
         7e:e6:84:68:42:91:c1:90:e1:e9:b0:0d:ad:6e:29:51:71:de:
         0f:5d:b0:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYumYCn1t3J4/YAz8VVtqk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWU5ODgxYmYxMTIwOThhMmJmZDQ5YTBiY2ZmZGNjY2U3
YmMyMDgwHhcNMjUwNDEzMTAwMjEzWhcNMjUwNDE0MTAwMjEzWjAzMTEwLwYDVQQD
Eyg4MzNjNzEzZWE1NTNiMDc1NTE3ZTBiOWZmM2ZjNDE2NTMxYWM2YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKye5sJ7wzmN+ZTyrOoZy2gW6zQU
WEGkG6+SSQQqICFHEHPVeS4WOXjye9psbXnHTX9yoFFne+TJhvXm3eRnXhfyLWwO
VCA+Ygg8Hq9hz5U//3c5XaMHEvpa6nx7c4qLt0ffZp3OMPRwF2B/5/TzfW+x3nPY
sXbsJsNAzbpu5njbDhEIeJqflA6zNMXEmlYWSG43aZnJtPKOC0m3D5mexSQ5pN48
EWSkRaNcRzfVZSHoip7oP0SQ92a+WmTx9mW3TiF/jmo4v7N0DGG7ltHCkE1n0puO
VuxHI1HWJZmm3YX5+HFTYj+SLi0Ccz2/jA3tsPzMGTwT8weHk5uf2LfCjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIM8cT6lU7B1UX4Ln/P8QWUxrGvzMB8GA1UdIwQY
MBaAFPiumIG/ESCYor/UmgvP/czOe8IIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LNllnYjhSSUppaXY5U2FDOF85ek01N3dnZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNWQ5ZjU3LTBmMTAtNGUxNC1iNGFm
LTI1YTE1YTUyNGY4Ny8xLzEtSzZZZ2I4UklKaWl2OVNhQzhfOXpNNTd3Z2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzVkOWY1Ny0wZjEwLTRlMTQtYjRhZi0yNWExNWE1MjRm
ODcvMS8xLUs2WWdiOFJJSmlpdjlTYUM4Xzl6TTU3d2dnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHqa
2EMMRFMgY3k1CxAbLaEJahaVqhF/BLY9DJ7aNjaEA3gWt4fK3xHC63yy/dihAfCl
Q/NdoFPO/XozyPCJL4/qJUzoDAfPQLOqLQty9IUHXPXOwgbpuZqTGrW3F1kfA1l4
sJJDgn/FQ4CB+OSsR9dqv7GgedfTTbfoyQaZoQRpSYSQMCMQkLqIlk6nhG9xHF8O
8OPYE/8OwSbkHTaMLUGagd+LixW5327KwRMwsMClt6Zb24Vf67sn2QFK1ryRW0Py
iAYUe7CWglqrr9x6qyighlPCzWGDqc3WxZtRNDQeoxLhLaAACvySfuaEaEKRwZDh
6bANrW4pUXHeD12wTg==
-----END CERTIFICATE-----