Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File:                     kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier:          uyFfrncYvS+BUedw8d/FVj/NCI229ugfQCfaYP7pI8M=
Subject key identifier:   9D:66:5D:D7:2A:AF:C9:0A:A8:A9:23:BE:16:C3:A4:30:DB:C2:CF:A0
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer:       /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial:       01962E2B295576635123EF7FF52F5071BBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number:          13C2
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
                          2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: VxzDcwfcOD6ycS5cSj92xssqMWbTMX6QXOEO99IwwMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:55:76:63:51:23:ef:7f:f5:2f:50:71:bb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=9d665dd72aafc90aa8a923be16c3a430dbc2cfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:c1:29:2b:9d:20:41:f5:d8:58:ae:4d:72:
                    67:44:ae:e1:5d:9e:07:35:79:33:6b:97:d9:fa:5b:
                    bb:1a:f6:60:c9:ee:85:f5:d0:22:60:7c:04:ed:3e:
                    be:e4:8c:5d:4d:5c:ff:44:93:e7:3e:35:40:75:8e:
                    a7:16:83:2e:1a:cc:83:72:e9:4a:c1:f7:54:de:06:
                    24:68:81:4d:50:f9:48:3d:4d:d0:7d:08:1d:f0:c0:
                    24:53:32:f4:0c:86:f4:f9:cd:b1:3f:22:84:93:ba:
                    3a:3b:5e:50:c7:85:85:30:d6:6e:90:59:ca:42:b0:
                    69:af:c5:b2:5a:b6:7a:f0:fb:61:7b:58:49:92:a9:
                    06:b2:7b:7f:8f:f4:10:cd:89:43:88:f3:35:2c:5c:
                    9d:df:f5:dd:5a:87:15:4c:02:43:c7:a1:11:a0:4c:
                    d1:3e:da:41:2b:d4:cf:73:30:1e:56:8f:e7:c9:e4:
                    7a:2d:ff:fe:9f:d1:f8:de:7b:dd:ce:f0:58:5b:53:
                    be:cb:3d:73:18:67:0d:08:70:01:ef:4c:af:67:56:
                    f8:dd:7d:ad:ab:71:9e:7f:4d:4a:06:4b:80:bb:df:
                    38:c4:89:fe:28:6e:64:ab:a4:87:10:25:e8:5e:b9:
                    28:0f:aa:47:ed:e4:ca:46:90:07:5c:48:e5:ad:50:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:5D:D7:2A:AF:C9:0A:A8:A9:23:BE:16:C3:A4:30:DB:C2:CF:A0
            X509v3 Authority Key Identifier:
                keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:f4:27:be:c7:b2:7d:92:eb:0f:ff:22:57:83:dd:cb:44:
         d9:5d:8e:b0:26:29:a7:be:94:d2:0a:21:c5:82:b2:31:99:ec:
         cd:88:10:72:73:e1:91:9a:b4:5f:dd:83:b6:d3:37:ba:32:a4:
         4f:f7:0b:8b:d1:77:fb:af:48:2e:9c:39:e2:6f:31:58:00:23:
         5f:f5:f6:35:31:97:c4:94:23:37:18:c2:10:95:98:89:7b:6d:
         a6:e2:63:b0:e9:c9:43:7d:f3:66:77:81:db:1f:1c:89:ce:38:
         c4:7d:40:51:12:37:4d:bf:08:52:85:d1:ea:72:16:76:93:57:
         7e:72:73:36:98:2b:37:bc:13:0c:c8:c2:79:b4:bc:7e:d9:fa:
         ad:f3:a8:b0:82:86:30:21:60:37:f5:cf:c0:cf:37:05:aa:f7:
         93:e0:88:56:9a:32:31:9a:f9:83:b2:da:a5:77:cc:4b:a8:2e:
         5f:b6:fa:8d:9d:da:26:ab:e2:29:2f:7c:55:f6:74:ec:25:d3:
         d2:e8:48:ad:d9:50:61:61:eb:03:d0:16:21:66:0a:6f:a1:d9:
         a4:15:9a:30:58:13:a0:7e:44:56:1a:cc:15:f8:3a:b9:8a:c1:
         4d:54:3c:50:39:aa:9a:89:df:28:b3:0a:37:23:f1:0b:fa:65:
         56:d1:5f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKylVdmNRI+9/9S9Qcbv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg5ZDY2NWRkNzJhYWZjOTBhYThhOTIzYmUxNmMzYTQzMGRiYzJjZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4TBKSudIEH12FiuTXJnRK7hXZ4H
NXkza5fZ+lu7GvZgye6F9dAiYHwE7T6+5IxdTVz/RJPnPjVAdY6nFoMuGsyDculK
wfdU3gYkaIFNUPlIPU3QfQgd8MAkUzL0DIb0+c2xPyKEk7o6O15Qx4WFMNZukFnK
QrBpr8WyWrZ68Pthe1hJkqkGsnt/j/QQzYlDiPM1LFyd3/XdWocVTAJDx6ERoEzR
PtpBK9TPczAeVo/nyeR6Lf/+n9H43nvdzvBYW1O+yz1zGGcNCHAB70yvZ1b43X2t
q3Gef01KBkuAu984xIn+KG5kq6SHECXoXrkoD6pH7eTKRpAHXEjlrVDymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1mXdcqr8kKqKkjvhbDpDDbws+gMB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa870J77H
sn2S6w//IleD3ctE2V2OsCYpp76U0gohxYKyMZnszYgQcnPhkZq0X92DttM3ujKk
T/cLi9F3+69ILpw54m8xWAAjX/X2NTGXxJQjNxjCEJWYiXttpuJjsOnJQ33zZneB
2x8cic44xH1AURI3Tb8IUoXR6nIWdpNXfnJzNpgrN7wTDMjCebS8ftn6rfOosIKG
MCFgN/XPwM83Bar3k+CIVpoyMZr5g7LapXfMS6guX7b6jZ3aJqviKS98VfZ07CXT
0uhIrdlQYWHrA9AWIWYKb6HZpBWaMFgToH5EVhrMFfg6uYrBTVQ8UDmqmonfKLMK
NyPxC/plVtFfmw==
-----END CERTIFICATE-----