Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft
File:                     kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft (raw, json)
Hash identifier:          5radsts7CpVXQtyp31u6SLSi3ySAtKARWzaZ/qwKJNA=
Subject key identifier:   78:F1:BB:CA:B7:4F:98:1B:D7:53:EE:FC:72:F9:5B:75:13:5C:43:C6
Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
Certificate issuer:       /CN=90ccd913a99bafd893e07ba968a67434e3df5420
Certificate serial:       01962E61DDEE9BE5F435F255972BED5CA9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft
Manifest number:          1442
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: 7ma8rm9Nc8aP0i9rOur_HEzgHJs.roa (hash: GInuicNk1jMv1+rnjCpEDF87yGDttTl9tUwBgJS9KiA=)
                          2: kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl (hash: qwZUHQr15ZP/eLlyLdj9zUNczsN5Ki8LFK+pW8M8A7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:ee:9b:e5:f4:35:f2:55:97:2b:ed:5c:a9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=78f1bbcab74f981bd753eefc72f95b75135c43c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8c:4b:a9:d2:be:d0:79:92:e4:7f:e9:0d:14:
                    07:70:d3:7f:00:a1:6d:c2:f8:ed:5c:4a:1e:50:d7:
                    67:32:6f:b3:36:17:2e:b1:b5:84:55:9c:5d:8e:02:
                    65:38:c1:20:43:a4:69:3b:cd:ee:7d:85:b2:e0:ec:
                    43:f1:33:32:cf:90:d7:42:cc:fc:cf:26:d2:88:81:
                    27:ae:53:b3:b9:60:f2:c7:3a:02:ee:32:11:9e:e5:
                    6f:61:f5:63:6e:d2:c2:83:77:4c:f2:7e:b9:1c:03:
                    66:a6:e1:8b:59:a9:22:e1:7b:90:9e:d7:17:57:35:
                    d5:2b:19:78:72:a3:37:b3:9d:9e:61:8b:39:1d:b3:
                    85:75:97:05:4f:8e:4c:85:9f:21:2a:3f:31:0e:ad:
                    4f:30:e6:87:d1:2f:44:2f:bb:46:1e:e2:e6:3a:5e:
                    02:0a:0a:91:4d:c8:41:bc:0a:32:0c:c5:6b:04:da:
                    cd:95:59:1a:57:87:99:ba:80:3e:ba:fa:08:ec:b6:
                    e1:77:73:d2:56:27:da:42:f6:fd:c7:36:1c:e2:b1:
                    a0:8d:0d:7b:40:1c:88:23:32:f3:45:c4:66:e0:68:
                    18:65:c8:fa:e7:62:f4:27:a5:53:fc:4d:b9:a7:b7:
                    95:e7:34:03:45:13:78:9a:4f:4b:73:e5:7d:86:12:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:BB:CA:B7:4F:98:1B:D7:53:EE:FC:72:F9:5B:75:13:5C:43:C6
            X509v3 Authority Key Identifier:
                keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:de:b7:c1:09:83:9d:c6:74:f7:c6:0d:a6:79:11:07:c3:91:
         96:35:ed:4d:7b:e5:48:83:3d:d3:68:ba:f1:2d:5b:29:cb:ca:
         26:a2:83:48:7f:f8:fe:1e:7a:43:2c:8c:c0:b8:c3:26:a5:4f:
         c0:86:d1:c4:03:f0:8a:72:d7:aa:3e:e7:92:0c:27:9f:c5:f9:
         a8:e5:48:18:ca:0e:1c:4d:11:df:0b:17:05:d1:a8:74:72:55:
         eb:76:5b:11:21:6b:26:97:93:0d:d2:66:98:6d:f9:4c:1a:d1:
         17:d3:f6:c2:5f:f9:29:a8:a7:da:4f:1e:a2:3c:3e:82:7f:82:
         b5:60:18:29:3e:e4:6f:20:86:df:52:71:36:92:e2:1a:b9:1f:
         65:bc:92:dc:9f:27:48:4f:4a:e0:35:ae:dd:2a:fd:c4:51:9a:
         dc:c7:f9:88:a1:d3:a3:a2:02:e4:d5:22:87:01:b6:59:48:80:
         07:a4:d0:ba:61:0b:43:fe:62:7e:6f:55:a2:55:ae:d3:f5:30:
         a0:5c:3d:96:d8:fa:88:09:40:9b:00:f8:5a:d0:36:0f:64:85:
         7e:a0:eb:77:94:aa:f5:a7:06:37:94:93:3f:79:17:5f:0d:2e:
         89:b5:d9:75:20:24:4f:7c:de:97:48:49:46:6a:b1:62:b4:c0:
         06:83:54:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYd3um+X0NfJVlyvtXKnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwY2NkOTEzYTk5YmFmZDg5M2UwN2JhOTY4YTY3NDM0ZTNk
ZjU0MjAwHhcNMjUwNDEzMDkwMTI3WhcNMjUwNDE0MDkwMTI3WjAzMTEwLwYDVQQD
Eyg3OGYxYmJjYWI3NGY5ODFiZDc1M2VlZmM3MmY5NWI3NTEzNWM0M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoxLqdK+0HmS5H/pDRQHcNN/AKFt
wvjtXEoeUNdnMm+zNhcusbWEVZxdjgJlOMEgQ6RpO83ufYWy4OxD8TMyz5DXQsz8
zybSiIEnrlOzuWDyxzoC7jIRnuVvYfVjbtLCg3dM8n65HANmpuGLWaki4XuQntcX
VzXVKxl4cqM3s52eYYs5HbOFdZcFT45MhZ8hKj8xDq1PMOaH0S9EL7tGHuLmOl4C
CgqRTchBvAoyDMVrBNrNlVkaV4eZuoA+uvoI7Lbhd3PSVifaQvb9xzYc4rGgjQ17
QByIIzLzRcRm4GgYZcj652L0J6VT/E25p7eV5zQDRRN4mk9Lc+V9hhJ1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjxu8q3T5gb11Pu/HL5W3UTXEPGMB8GA1UdIwQY
MBaAFJDM2ROpm6/Yk+B7qWimdDTj31QgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kM2NiMTQtMzBhZC00MjEzLTgxNWIt
ZjZhNTEzZGUyZmVhLzEva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kM2NiMTQtMzBhZC00MjEzLTgxNWItZjZhNTEzZGUyZmVh
LzEva016WkU2bWJyOWlUNEh1cGFLWjBOT1BmVkNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN63wQmD
ncZ098YNpnkRB8ORljXtTXvlSIM902i68S1bKcvKJqKDSH/4/h56QyyMwLjDJqVP
wIbRxAPwinLXqj7nkgwnn8X5qOVIGMoOHE0R3wsXBdGodHJV63ZbESFrJpeTDdJm
mG35TBrRF9P2wl/5Kain2k8eojw+gn+CtWAYKT7kbyCG31JxNpLiGrkfZbyS3J8n
SE9K4DWu3Sr9xFGa3Mf5iKHTo6IC5NUihwG2WUiAB6TQumELQ/5ifm9VolWu0/Uw
oFw9ltj6iAlAmwD4WtA2D2SFfqDrd5Sq9acGN5STP3kXXw0uibXZdSAkT3zel0hJ
RmqxYrTABoNUhg==
-----END CERTIFICATE-----