Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File:                     s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier:          aMaRgr2OejILQ0OAM3lapNy+sAY/mif2ipRppnM2ECc=
Subject key identifier:   83:E1:C6:24:ED:B2:63:6A:23:75:93:64:1D:3F:F3:54:F9:0B:DF:CE
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer:       /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial:       01962DF39DDE45D61C30F570BE40A2FD27DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number:          0CF5
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
                          2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: 78rMjuZdApOA3L0XFA7adTWPeMWfLzBtV1PQW2twFv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9d:de:45:d6:1c:30:f5:70:be:40:a2:fd:27:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=83e1c624edb2636a237593641d3ff354f90bdfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:5b:09:15:9c:0b:20:8e:35:c8:7e:8a:2d:
                    d5:55:c2:6c:04:72:32:bc:e6:a0:81:75:69:0f:b3:
                    10:6d:72:71:51:f0:1e:ed:93:e2:bb:15:03:15:b5:
                    e6:db:01:70:f3:c4:38:1f:a5:45:13:46:56:39:24:
                    6e:e1:be:33:b8:9b:4a:d9:83:2d:c6:db:47:9b:26:
                    d2:07:0e:c6:e0:ef:dc:a3:49:ff:70:19:94:75:4b:
                    60:43:47:6e:e9:10:54:55:7f:25:18:99:8f:a7:a0:
                    73:4c:d8:29:9a:37:3c:fb:15:e2:31:7f:0a:ef:76:
                    68:15:5f:82:77:cc:fb:37:9a:1d:f3:24:40:a1:9a:
                    96:84:3c:16:24:3b:6c:eb:cf:dd:f6:9d:ff:b2:ab:
                    17:e7:f0:36:c0:7c:45:d5:bf:2a:21:d5:f9:43:de:
                    e4:2f:4d:aa:5a:32:c2:10:61:f4:ec:2f:6f:e6:48:
                    eb:fa:02:e7:86:6b:a9:69:29:1a:b0:e6:43:c0:b0:
                    ec:b4:a9:d4:e5:c7:3c:39:c5:82:54:ae:36:ed:4c:
                    4f:bd:65:84:87:61:2e:88:9c:c3:07:a5:48:0a:42:
                    51:0b:65:a7:31:e0:5f:b1:7d:3c:91:18:ff:0f:94:
                    a6:d6:ea:84:69:9d:cb:78:34:e5:93:f2:95:25:82:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:C6:24:ED:B2:63:6A:23:75:93:64:1D:3F:F3:54:F9:0B:DF:CE
            X509v3 Authority Key Identifier:
                keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:91:cd:6b:6b:75:83:0c:1e:62:42:26:31:6f:5f:fd:00:
         52:7a:a3:68:12:e9:89:06:5a:c6:22:0a:f8:94:aa:87:1e:dd:
         de:a9:bf:2e:f5:27:05:db:b5:f2:b0:3e:ba:1f:27:91:28:0a:
         20:e3:60:5d:ac:af:4d:d5:be:f1:4a:69:05:fd:37:e1:69:f6:
         d0:9a:0f:8b:a9:4c:ca:e4:d2:42:f5:ee:7a:21:fd:c4:c4:48:
         3c:75:09:91:6d:c9:d1:97:45:cc:35:92:9e:c4:b7:ce:74:0d:
         e0:1f:4a:54:2d:0c:7e:64:fa:68:7f:76:76:41:e7:b6:c5:ce:
         13:b5:c4:27:57:e9:b0:9d:71:45:7f:9d:23:14:84:e5:ef:c1:
         26:fe:76:e2:b0:01:c9:35:0f:15:fe:9c:74:f1:11:5d:8a:e8:
         a5:e1:e2:fd:82:a2:de:35:24:d4:bb:3f:00:a2:bd:30:8e:77:
         17:97:52:dc:cb:59:ff:e4:fe:0e:0b:4b:ee:3e:50:4f:48:ce:
         41:fd:dd:51:6d:34:56:bd:13:98:c7:81:bf:d9:a3:40:47:85:
         ee:90:40:f2:7e:b3:4f:0f:6c:2b:a9:ef:16:64:65:12:4f:2e:
         b1:5c:f0:fe:a5:cd:95:35:f8:37:c6:70:33:5d:c2:e9:0c:ff:
         de:6b:bb:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt853eRdYcMPVwvkCi/SfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjUwNDEzMDcwMTAyWhcNMjUwNDE0MDcwMTAyWjAzMTEwLwYDVQQD
Eyg4M2UxYzYyNGVkYjI2MzZhMjM3NTkzNjQxZDNmZjM1NGY5MGJkZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C5bCRWcCyCONch+ii3VVcJsBHIy
vOaggXVpD7MQbXJxUfAe7ZPiuxUDFbXm2wFw88Q4H6VFE0ZWOSRu4b4zuJtK2YMt
xttHmybSBw7G4O/co0n/cBmUdUtgQ0du6RBUVX8lGJmPp6BzTNgpmjc8+xXiMX8K
73ZoFV+Cd8z7N5od8yRAoZqWhDwWJDts68/d9p3/sqsX5/A2wHxF1b8qIdX5Q97k
L02qWjLCEGH07C9v5kjr+gLnhmupaSkasOZDwLDstKnU5cc8OcWCVK427UxPvWWE
h2EuiJzDB6VICkJRC2WnMeBfsX08kRj/D5Sm1uqEaZ3LeDTlk/KVJYKklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPhxiTtsmNqI3WTZB0/81T5C9/OMB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrqRzWtr
dYMMHmJCJjFvX/0AUnqjaBLpiQZaxiIK+JSqhx7d3qm/LvUnBdu18rA+uh8nkSgK
IONgXayvTdW+8UppBf034Wn20JoPi6lMyuTSQvXueiH9xMRIPHUJkW3J0ZdFzDWS
nsS3znQN4B9KVC0MfmT6aH92dkHntsXOE7XEJ1fpsJ1xRX+dIxSE5e/BJv524rAB
yTUPFf6cdPERXYropeHi/YKi3jUk1Ls/AKK9MI53F5dS3MtZ/+T+DgtL7j5QT0jO
Qf3dUW00Vr0TmMeBv9mjQEeF7pBA8n6zTw9sK6nvFmRlEk8usVzw/qXNlTX4N8Zw
M13C6Qz/3mu7dA==
-----END CERTIFICATE-----