Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
File:                     k6EPqeyo7I3dXhJUJkOOjfjIerw.mft (raw, json)
Hash identifier:          OdZDXkHLF7C+osL3IK5K71bdLnlV70unJ1Tx47QFlfY=
Subject key identifier:   9B:F6:0B:02:28:CB:2E:F8:11:6D:C3:1D:07:EE:DD:56:F4:8C:AD:BB
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Certificate issuer:       /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial:       01962F065EEA32D0291B7DB750286B09A673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: 0eBNXDs625wWt3eSViaFroIf-H4.roa (hash: GT9Q8SAk5DHsclX/025XYQZy9SsVDxGpUQis2WozehI=)
                          2: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (hash: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=)
                          3: k6EPqeyo7I3dXhJUJkOOjfjIerw.crl (hash: MCTstysDF3d1x/Pvy6se6lxltlQjNq/dXqaWOJnBWf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:ea:32:d0:29:1b:7d:b7:50:28:6b:09:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=9bf60b0228cb2ef8116dc31d07eedd56f48cadbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:76:9c:83:ff:26:62:64:54:9a:cd:26:20:
                    72:f7:2b:19:aa:8a:c8:39:09:59:85:7a:ee:82:5a:
                    83:82:31:53:18:f0:16:b1:34:de:a4:7e:7f:e6:ca:
                    25:e6:4d:a4:f1:6a:83:89:23:23:36:f1:d4:3f:89:
                    1b:62:ac:3f:a3:9a:4d:31:f2:e0:7f:ae:fb:97:b0:
                    e6:c4:3f:5e:42:2b:2b:1a:82:ed:73:cb:28:ea:76:
                    f9:cf:83:ec:20:e7:90:76:11:f9:17:9f:2d:48:2a:
                    64:fc:70:7e:81:ff:62:5a:67:be:0f:21:52:38:56:
                    74:3e:8a:44:c6:1d:c4:1b:54:91:31:dc:59:96:27:
                    f8:3e:56:e2:8e:0c:0a:1c:2e:5c:92:c8:a7:78:80:
                    26:85:a5:f0:60:a5:54:a7:cb:77:68:cb:b1:1a:5b:
                    ce:7d:41:ea:92:c1:85:2d:48:df:bd:41:cd:ee:72:
                    a6:96:f7:e8:ba:de:3f:17:02:e0:26:76:59:08:27:
                    81:99:08:4f:64:a0:06:0e:6c:3b:53:da:75:fa:84:
                    41:06:da:36:5c:1f:e8:d5:f1:ba:83:e7:54:61:41:
                    69:1c:39:60:1a:09:4b:6a:df:49:27:e6:26:15:c3:
                    b6:de:ce:2a:e4:ba:96:21:e9:82:03:96:dc:31:1b:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:0B:02:28:CB:2E:F8:11:6D:C3:1D:07:EE:DD:56:F4:8C:AD:BB
            X509v3 Authority Key Identifier:
                keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:0b:6e:61:75:88:1d:be:00:b8:a8:ea:3b:c7:71:ef:e4:
         d6:5c:5c:95:72:3d:c3:3a:d3:32:fb:d0:b9:5d:00:cd:e0:6e:
         ca:70:cc:03:b5:24:34:32:f4:81:76:0d:cd:ab:30:60:03:b3:
         c4:dc:ad:6c:c0:b3:60:bc:7f:d4:bc:a4:4f:f4:a3:1b:1a:da:
         18:ce:09:66:2a:05:13:38:8a:9d:dd:cb:45:7a:69:66:2b:df:
         a2:c1:6e:74:07:38:a7:ec:89:75:d9:5d:c0:b0:1e:5e:0c:3d:
         e9:21:38:38:69:91:69:c9:32:fc:c8:85:86:7a:29:27:63:07:
         bb:e0:94:f7:9b:70:96:67:d5:05:38:f4:4f:d4:dc:9f:12:41:
         18:40:df:90:02:bb:8f:a1:e0:aa:ad:79:20:cf:f8:fe:33:0f:
         06:61:ac:5e:6d:e9:3c:e2:39:f9:d6:9d:4a:f4:c5:b5:f9:3a:
         89:f3:59:a1:ac:c1:3e:87:1b:0a:75:fe:04:89:12:f3:8f:6e:
         74:a5:6f:17:50:ef:ef:99:dd:01:30:cf:05:de:c0:01:b7:2e:
         19:80:7c:36:5a:5a:58:83:4a:7b:05:c7:b6:5d:35:7e:66:32:
         55:99:ae:8b:9d:40:5e:33:b7:08:2c:5e:0b:77:b3:6e:33:98:
         0b:17:62:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBl7qMtApG323UChrCaZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTEwZmE5ZWNhOGVjOGRkZDVlMTI1NDI2NDM4ZThkZjhj
ODdhYmMwHhcNMjUwNDEzMTIwMTA4WhcNMjUwNDE0MTIwMTA4WjAzMTEwLwYDVQQD
Eyg5YmY2MGIwMjI4Y2IyZWY4MTE2ZGMzMWQwN2VlZGQ1NmY0OGNhZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRl2nIP/JmJkVJrNJiBy9ysZqorI
OQlZhXruglqDgjFTGPAWsTTepH5/5sol5k2k8WqDiSMjNvHUP4kbYqw/o5pNMfLg
f677l7DmxD9eQisrGoLtc8so6nb5z4PsIOeQdhH5F58tSCpk/HB+gf9iWme+DyFS
OFZ0PopExh3EG1SRMdxZlif4PlbijgwKHC5cksineIAmhaXwYKVUp8t3aMuxGlvO
fUHqksGFLUjfvUHN7nKmlvfout4/FwLgJnZZCCeBmQhPZKAGDmw7U9p1+oRBBto2
XB/o1fG6g+dUYUFpHDlgGglLat9JJ+YmFcO23s4q5LqWIemCA5bcMRuOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv2CwIoyy74EW3DHQfu3Vb0jK27MB8GA1UdIwQY
MBaAFJOhD6nsqOyN3V4SVCZDjo34yHq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjIt
NDg3OTBmNjAwYzY0LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84NWUwMGUtZDlhZS00MDc0LTk2NjItNDg3OTBmNjAwYzY0
LzEvazZFUHFleW83STNkWGhKVUprT09qZmpJZXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXwLbmF1
iB2+ALio6jvHce/k1lxclXI9wzrTMvvQuV0AzeBuynDMA7UkNDL0gXYNzaswYAOz
xNytbMCzYLx/1LykT/SjGxraGM4JZioFEziKnd3LRXppZivfosFudAc4p+yJddld
wLAeXgw96SE4OGmRacky/MiFhnopJ2MHu+CU95twlmfVBTj0T9TcnxJBGEDfkAK7
j6Hgqq15IM/4/jMPBmGsXm3pPOI5+dadSvTFtfk6ifNZoazBPocbCnX+BIkS849u
dKVvF1Dv75ndATDPBd7AAbcuGYB8NlpaWINKewXHtl01fmYyVZmui51AXjO3CCxe
C3ezbjOYCxdiEQ==
-----END CERTIFICATE-----