Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File:                     kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier:          vgxeshzZS8/TIocM3r7PARzJUXMULwTOM9NKV41NiYM=
Subject key identifier:   F1:D1:B0:D0:07:9D:54:D0:35:7A:D4:82:C0:50:3F:76:1E:DC:0A:16
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer:       /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial:       01962F06F2F774D5953D357D9189A741BD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number:          0345
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
                          2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
                          3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: oYd79/DDzkFAhDwt1yMHa1EGkr7cZoMJD9dBgSUmY/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f2:f7:74:d5:95:3d:35:7d:91:89:a7:41:bd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=f1d1b0d0079d54d0357ad482c0503f761edc0a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:ba:b7:6e:d5:3a:c9:1b:c8:a5:03:03:06:
                    31:d9:c4:bb:c9:2f:7b:a0:29:a5:a9:49:35:ee:71:
                    0a:4d:d7:92:6e:d8:e7:f0:12:3c:b5:d9:e2:fd:e2:
                    04:b1:a0:bf:35:fe:1d:ca:f8:a8:41:64:21:2b:58:
                    02:52:53:16:c5:54:08:26:81:3f:31:64:03:6c:4c:
                    13:7a:9c:09:91:75:f6:3f:a3:d9:bf:e5:37:07:1a:
                    ba:0e:ab:b5:c6:e7:53:56:81:d1:c0:a7:23:19:d2:
                    c8:44:c6:27:d6:90:a7:ca:4f:9a:8d:34:5d:fb:2f:
                    5d:3d:2b:a2:14:9a:55:58:1f:c4:64:5c:d5:23:61:
                    34:d7:61:8a:1d:21:cc:77:9a:b0:76:9f:0d:a5:98:
                    cc:27:72:e5:76:4a:61:cd:33:78:93:e1:25:0f:be:
                    c3:ef:4c:f3:48:79:61:4b:4a:3c:52:94:50:94:ba:
                    aa:f5:d6:6e:a6:e4:1b:51:d5:15:07:b5:52:1a:9b:
                    c2:76:46:4d:3a:9d:7f:4d:9e:3c:b4:6a:42:0a:a0:
                    8f:e9:b4:f1:83:67:eb:b8:9f:f9:7e:7a:20:c4:b0:
                    cf:a8:58:30:dd:92:94:b9:2d:e3:eb:3a:7e:82:3a:
                    f9:0f:c2:90:e9:cf:d3:82:cb:cf:b8:0e:08:67:a2:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D1:B0:D0:07:9D:54:D0:35:7A:D4:82:C0:50:3F:76:1E:DC:0A:16
            X509v3 Authority Key Identifier:
                keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:c4:1d:d0:8a:e8:4b:b9:03:a5:c1:8a:9f:8e:b4:6c:df:
         52:8b:e1:c2:4d:c8:b9:dd:6c:d5:85:66:48:a8:0c:f5:40:e2:
         d1:78:d3:50:ef:2f:69:4b:20:3a:dc:a1:e3:24:76:7b:57:99:
         c7:fa:0b:c6:ae:de:b7:ed:23:7b:c8:dc:ac:0a:16:a2:20:e4:
         17:56:53:ad:1d:f3:21:20:f6:4d:5b:54:93:de:d1:d8:9a:60:
         bf:fb:bd:49:56:e9:ee:9d:e1:fa:f1:93:e9:d2:e4:42:1a:da:
         d7:a2:5f:75:d2:a2:48:fa:3a:45:73:95:e4:95:56:6f:ca:96:
         0e:de:d6:98:80:a0:15:50:38:57:86:1e:ec:af:7d:1b:0d:92:
         b2:79:e0:6f:84:03:cc:95:d9:d8:f3:ea:1a:ca:30:e7:87:78:
         e2:d7:53:a8:47:73:40:de:3c:b6:9e:bb:74:49:36:e0:08:04:
         99:b4:8b:9f:f8:39:5e:0f:4f:7c:3a:ed:63:e2:38:be:04:68:
         7a:74:c6:4c:4d:71:3b:80:32:24:2d:ad:77:5d:66:a0:78:af:
         93:dc:87:0f:1d:ea:c4:b6:ee:06:04:5d:78:07:81:e7:f2:eb:
         69:bb:c8:01:c7:29:85:73:79:60:88:56:3c:f4:3b:f8:63:ee:
         9a:8d:24:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvL3dNWVPTV9kYmnQb0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjUwNDEzMTIwMTQ2WhcNMjUwNDE0MTIwMTQ2WjAzMTEwLwYDVQQD
EyhmMWQxYjBkMDA3OWQ1NGQwMzU3YWQ0ODJjMDUwM2Y3NjFlZGMwYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKW6t27VOskbyKUDAwYx2cS7yS97
oCmlqUk17nEKTdeSbtjn8BI8tdni/eIEsaC/Nf4dyvioQWQhK1gCUlMWxVQIJoE/
MWQDbEwTepwJkXX2P6PZv+U3Bxq6Dqu1xudTVoHRwKcjGdLIRMYn1pCnyk+ajTRd
+y9dPSuiFJpVWB/EZFzVI2E012GKHSHMd5qwdp8NpZjMJ3LldkphzTN4k+ElD77D
70zzSHlhS0o8UpRQlLqq9dZupuQbUdUVB7VSGpvCdkZNOp1/TZ48tGpCCqCP6bTx
g2fruJ/5fnogxLDPqFgw3ZKUuS3j6zp+gjr5D8KQ6c/TgsvPuA4IZ6LIXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHRsNAHnVTQNXrUgsBQP3Ye3AoWMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0jEHdCK
6Eu5A6XBip+OtGzfUovhwk3Iud1s1YVmSKgM9UDi0XjTUO8vaUsgOtyh4yR2e1eZ
x/oLxq7et+0je8jcrAoWoiDkF1ZTrR3zISD2TVtUk97R2Jpgv/u9SVbp7p3h+vGT
6dLkQhra16JfddKiSPo6RXOV5JVWb8qWDt7WmICgFVA4V4Ye7K99Gw2Ssnngb4QD
zJXZ2PPqGsow54d44tdTqEdzQN48tp67dEk24AgEmbSLn/g5Xg9PfDrtY+I4vgRo
enTGTE1xO4AyJC2td11moHivk9yHDx3qxLbuBgRdeAeB5/LrabvIAccphXN5YIhW
PPQ7+GPumo0kvw==
-----END CERTIFICATE-----