Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          pmR/x3knBAHLaU847qKlyl+m7wzW4TnfolkJXgfEBH8=
Subject key identifier:   7D:35:C5:58:1C:2C:82:D6:CE:37:36:BA:D1:FC:AB:FB:3C:78:0F:CD
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       01962F06975CFE27FBE70E1D9132BC283B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          0F4F
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: ca+PcGwYNBwKmBJwFFIM7A15uOXmolf7P/hJREd8K8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:5c:fe:27:fb:e7:0e:1d:91:32:bc:28:3b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=7d35c5581c2c82d6ce3736bad1fcabfb3c780fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:35:13:7f:3b:94:3c:07:31:cd:a0:af:f0:
                    08:7d:49:7b:7d:7f:14:c8:80:8b:e0:6c:50:e8:25:
                    fa:00:6f:5b:28:b7:9c:3a:4e:7a:20:f1:e0:6e:68:
                    b7:5d:19:8e:e5:f5:40:81:92:04:af:62:93:16:de:
                    7c:90:f1:af:0a:aa:d9:07:11:0b:17:72:18:fe:f4:
                    66:24:bc:e8:48:7a:d5:f4:b6:aa:5e:19:ca:c6:ec:
                    8d:ba:32:0a:22:9f:71:4a:46:91:ec:00:60:1e:98:
                    4d:4e:3c:67:23:bf:ec:6e:d6:22:2d:1a:d4:01:f2:
                    70:89:05:f4:9b:a1:53:9d:12:28:f0:10:16:d1:35:
                    82:b2:cc:ee:8d:cb:23:3e:45:48:db:7e:eb:24:7d:
                    06:91:51:42:03:6b:2e:41:d2:07:b6:ab:3f:ec:90:
                    96:16:e0:42:86:6f:d6:ac:17:c8:98:2e:39:c6:05:
                    39:51:56:70:0a:a5:92:0d:3b:4b:3d:13:8c:ff:31:
                    31:8e:78:b1:ae:b2:e5:d2:62:6c:64:78:66:5f:38:
                    4d:6b:bf:09:c6:b0:30:cb:56:84:30:c1:e2:a8:4b:
                    a6:b6:ce:3f:10:c3:0e:15:66:f9:01:dd:b9:d7:97:
                    da:82:f0:fc:c1:56:6a:12:17:a2:cb:70:e8:d8:31:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:C5:58:1C:2C:82:D6:CE:37:36:BA:D1:FC:AB:FB:3C:78:0F:CD
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:dd:80:4a:74:82:b3:f5:ee:7a:4b:50:7a:83:9c:68:eb:a7:
         4c:ea:2c:52:a7:7d:8e:4d:70:76:97:9b:a8:74:5c:58:57:8c:
         4e:97:a4:fa:6c:00:99:d6:67:f3:2f:9f:ed:35:d8:a7:ba:73:
         44:a1:2e:69:40:fb:fd:7f:af:f5:86:c9:4a:20:eb:45:32:94:
         ad:15:ec:e0:9f:73:1e:88:a7:37:15:c0:d9:d2:7e:6b:53:5e:
         95:e0:f0:5d:a4:c6:56:9a:1d:55:b1:34:2c:21:97:b3:6a:bf:
         71:66:c8:c2:0f:c4:7b:e0:51:cc:4d:f1:2e:95:cd:52:02:50:
         f0:8b:63:f5:f6:36:3a:80:22:55:a8:6e:95:cf:d0:19:71:50:
         a8:4b:3e:58:6e:5e:3d:bf:b4:81:ee:74:2a:79:b2:f9:e4:93:
         07:aa:40:4d:3b:a2:c7:8f:99:ed:12:e8:a3:33:48:88:6d:d0:
         6a:27:52:c9:60:5c:73:50:d8:1e:18:f5:cb:15:b5:61:f3:38:
         86:04:de:a5:68:aa:5b:d4:98:f0:5f:69:25:8a:54:58:89:38:
         3d:33:8b:53:56:94:7d:d4:fc:01:69:3c:cc:d8:55:18:9e:d6:
         a1:3b:f3:ba:73:d9:7f:08:26:6d:ec:f5:40:38:73:85:ed:50:
         8f:71:9b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpdc/if75w4dkTK8KDsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk
NWMxMWEwHhcNMjUwNDEzMTIwMTIzWhcNMjUwNDE0MTIwMTIzWjAzMTEwLwYDVQQD
Eyg3ZDM1YzU1ODFjMmM4MmQ2Y2UzNzM2YmFkMWZjYWJmYjNjNzgwZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCw1E387lDwHMc2gr/AIfUl7fX8U
yICL4GxQ6CX6AG9bKLecOk56IPHgbmi3XRmO5fVAgZIEr2KTFt58kPGvCqrZBxEL
F3IY/vRmJLzoSHrV9LaqXhnKxuyNujIKIp9xSkaR7ABgHphNTjxnI7/sbtYiLRrU
AfJwiQX0m6FTnRIo8BAW0TWCsszujcsjPkVI237rJH0GkVFCA2suQdIHtqs/7JCW
FuBChm/WrBfImC45xgU5UVZwCqWSDTtLPROM/zExjnixrrLl0mJsZHhmXzhNa78J
xrAwy1aEMMHiqEumts4/EMMOFWb5Ad2515fagvD8wVZqEheiy3Do2DEbpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH01xVgcLILWzjc2utH8q/s8eA/NMB8GA1UdIwQY
MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt
ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0
LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsN2ASnSC
s/XuektQeoOcaOunTOosUqd9jk1wdpebqHRcWFeMTpek+mwAmdZn8y+f7TXYp7pz
RKEuaUD7/X+v9YbJSiDrRTKUrRXs4J9zHoinNxXA2dJ+a1NeleDwXaTGVpodVbE0
LCGXs2q/cWbIwg/Ee+BRzE3xLpXNUgJQ8Itj9fY2OoAiVahulc/QGXFQqEs+WG5e
Pb+0ge50Knmy+eSTB6pATTuix4+Z7RLoozNIiG3QaidSyWBcc1DYHhj1yxW1YfM4
hgTepWiqW9SY8F9pJYpUWIk4PTOLU1aUfdT8AWk8zNhVGJ7WoTvzunPZfwgmbez1
QDhzhe1Qj3GbUA==
-----END CERTIFICATE-----