Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File:                     6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier:          zQQ9sEL/0LsYt7F4gpdSCcsl1g2Jt0Or5lqQx7ilTsw=
Subject key identifier:   59:CE:4C:0D:66:A0:DA:B5:46:71:93:E0:E8:52:A0:39:5C:14:7F:C5
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer:       /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial:       01962E2B299871EDF363902BAAF70D23EFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: /pO/VDkVNIt2g3JC2/y6VMXGr2bETBj8S7iTmCHONlg=)
                          2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:98:71:ed:f3:63:90:2b:aa:f7:0d:23:ef:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=59ce4c0d66a0dab5467193e0e852a0395c147fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:2e:b8:6e:23:16:30:5c:14:12:01:b8:c2:
                    b5:5e:0b:57:af:a9:03:e9:ab:c1:86:6e:54:63:be:
                    7c:e0:af:1f:36:4f:00:80:6c:dc:a9:b3:bf:20:c4:
                    25:4c:28:87:27:00:00:48:83:87:d1:ec:d1:83:4a:
                    ea:73:f2:92:90:3a:a6:9d:20:df:3b:07:fb:b0:f5:
                    83:d5:aa:2c:3e:4d:80:7c:a8:41:47:de:2b:d6:55:
                    90:55:d6:b9:fe:1b:81:47:1d:46:f3:ac:c0:81:a3:
                    4a:58:83:2f:2d:16:17:2f:6e:7c:1f:6b:e6:e6:58:
                    31:dd:86:6f:14:98:5a:c4:32:0d:2b:23:00:18:e6:
                    31:1c:c0:97:6e:22:d3:32:b9:cd:72:a9:b5:57:00:
                    cd:57:18:d4:7d:cb:89:e2:a9:c9:b0:4b:2d:17:f0:
                    ce:3e:cc:39:17:42:a4:9b:29:c2:74:05:2f:e7:46:
                    1f:a8:2a:b7:cb:81:53:be:c0:fe:ed:b2:85:cf:c3:
                    9f:77:62:7b:f5:d6:7c:10:00:bc:d7:75:89:60:84:
                    fe:63:21:8f:8e:3d:35:9d:eb:46:e6:04:ee:63:30:
                    80:5d:97:34:8e:0e:46:a6:24:0b:54:14:06:a2:56:
                    7b:c3:97:3c:70:b2:f7:4d:b5:a7:f8:c4:4f:f8:95:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:4C:0D:66:A0:DA:B5:46:71:93:E0:E8:52:A0:39:5C:14:7F:C5
            X509v3 Authority Key Identifier:
                keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:2b:dc:cf:b1:6a:53:aa:d9:50:6f:38:af:16:a3:ea:b2:
         5b:61:01:87:76:22:05:87:a4:46:c1:fb:82:4c:17:e4:1e:d2:
         72:88:e1:e8:3a:0e:bd:30:c4:43:03:76:06:17:d9:43:bb:e5:
         4e:9c:5d:90:5d:b2:1a:3f:27:3e:fe:da:4d:47:63:2e:12:78:
         11:dc:07:41:6a:53:5a:6e:3c:be:05:46:7f:f5:21:43:c5:72:
         37:9e:99:80:5c:c7:5c:19:94:4e:f6:6a:2c:2a:c1:dc:8a:43:
         b5:f7:ea:40:2a:03:ac:ef:14:d3:40:40:2e:c8:f4:55:63:a4:
         69:96:34:54:e2:ca:d3:37:e0:19:56:b7:1f:56:95:7d:39:2b:
         66:55:1e:b4:26:5d:24:08:6b:2a:ca:0f:a4:53:fb:80:6f:8b:
         d2:1c:33:71:08:d1:af:3b:dd:9f:50:d1:94:31:ed:a3:76:6f:
         05:75:ad:1a:2c:d1:65:7d:33:ec:22:f3:e8:cb:69:b7:10:08:
         13:55:d6:27:9e:fe:e9:bb:9e:5f:f6:69:7b:6d:4c:6b:9f:8d:
         be:bc:39:ae:57:06:69:fd:12:11:81:56:e9:6f:f0:57:4f:47:
         06:de:cb:90:a3:ea:3e:4c:82:f1:73:4b:be:b5:b5:e5:e1:69:
         27:04:de:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKymYce3zY5ArqvcNI++nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZTRmZGQxNzJkZjg1OTc1NmNhODUxZGRkZTEzNjcwZjQ4
MTdlZTAwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg1OWNlNGMwZDY2YTBkYWI1NDY3MTkzZTBlODUyYTAzOTVjMTQ3ZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxUuuG4jFjBcFBIBuMK1XgtXr6kD
6avBhm5UY7584K8fNk8AgGzcqbO/IMQlTCiHJwAASIOH0ezRg0rqc/KSkDqmnSDf
Owf7sPWD1aosPk2AfKhBR94r1lWQVda5/huBRx1G86zAgaNKWIMvLRYXL258H2vm
5lgx3YZvFJhaxDINKyMAGOYxHMCXbiLTMrnNcqm1VwDNVxjUfcuJ4qnJsEstF/DO
Psw5F0KkmynCdAUv50YfqCq3y4FTvsD+7bKFz8Ofd2J79dZ8EAC813WJYIT+YyGP
jj01netG5gTuYzCAXZc0jg5GpiQLVBQGolZ7w5c8cLL3TbWn+MRP+JUtbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnOTA1moNq1RnGT4OhSoDlcFH/FMB8GA1UdIwQY
MBaAFOvk/dFy34WXVsqFHd3hNnD0gX7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEt
Njk2NzAzNzM2NjIxLzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTk2OWYtYzAxNi00NTMzLTljYmEtNjk2NzAzNzM2NjIx
LzEvNi1UOTBYTGZoWmRXeW9VZDNlRTJjUFNCZnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduwr3M+x
alOq2VBvOK8Wo+qyW2EBh3YiBYekRsH7gkwX5B7Scojh6DoOvTDEQwN2BhfZQ7vl
TpxdkF2yGj8nPv7aTUdjLhJ4EdwHQWpTWm48vgVGf/UhQ8VyN56ZgFzHXBmUTvZq
LCrB3IpDtffqQCoDrO8U00BALsj0VWOkaZY0VOLK0zfgGVa3H1aVfTkrZlUetCZd
JAhrKsoPpFP7gG+L0hwzcQjRrzvdn1DRlDHto3ZvBXWtGizRZX0z7CLz6MtptxAI
E1XWJ57+6bueX/Zpe21Ma5+Nvrw5rlcGaf0SEYFW6W/wV09HBt7LkKPqPkyC8XNL
vrW15eFpJwTejw==
-----END CERTIFICATE-----