Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File:                     sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier:          o4cnlxEi+rR0yTbQhJfsdVQlqfrBxoHVcHTzXt0qyHU=
Subject key identifier:   95:C1:6C:AB:4A:84:DC:3B:52:D0:40:3B:B6:07:6B:9D:77:FD:69:A8
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer:       /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial:       01962F3DD4154E1BAD1C2EA116F2A3F37362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number:          0CE9
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: ARKwIFR5tP7jVphIjyXEY83zzlTkKBGWCjDy8q94nro=)
                          2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d4:15:4e:1b:ad:1c:2e:a1:16:f2:a3:f3:73:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=95c16cab4a84dc3b52d0403bb6076b9d77fd69a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:67:8a:f7:15:23:d2:8c:4f:01:a8:c7:f3:2b:
                    84:e3:f7:60:11:4b:6c:df:ff:b2:d2:eb:66:48:a7:
                    d9:6d:07:08:2d:15:81:89:8b:4b:aa:a5:56:b4:f6:
                    50:fe:30:8e:40:69:a6:28:ec:51:38:ca:4c:ec:dd:
                    b7:99:8d:7d:f3:cc:c0:c4:de:1a:9e:bc:c0:74:a7:
                    53:a8:38:b2:38:d9:b4:99:5a:d3:b8:c2:3f:96:d3:
                    7a:77:50:82:6a:5f:49:72:21:a1:56:f5:98:79:5c:
                    bd:0e:4c:89:02:7d:0f:bd:7b:ff:ed:3e:60:21:e8:
                    b0:0d:74:28:7e:26:c8:62:4d:3a:ac:14:18:af:ad:
                    54:11:a3:3a:c1:f7:f4:13:d8:d4:3a:a5:40:bf:08:
                    40:4f:8a:d2:99:2f:40:fd:23:d3:43:cd:2c:19:80:
                    5f:69:31:3f:c3:84:6c:c8:d5:0a:16:1e:55:07:35:
                    c2:9d:8f:53:1d:84:70:6c:2c:ca:f7:ae:2f:c3:fe:
                    e4:0c:60:70:6d:75:27:6e:94:c0:bb:c2:cc:39:09:
                    b2:46:d0:4d:f4:31:ba:74:c8:fd:27:cd:1c:49:26:
                    e0:3e:bc:24:e2:40:21:43:19:ea:eb:5e:80:6b:56:
                    10:52:ad:31:d4:f4:ac:a8:2d:16:9f:e1:bb:97:bd:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C1:6C:AB:4A:84:DC:3B:52:D0:40:3B:B6:07:6B:9D:77:FD:69:A8
            X509v3 Authority Key Identifier:
                keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:86:78:e4:66:59:34:54:98:34:5d:8b:64:03:a2:c9:37:
         c6:1d:2b:ad:7d:a6:f6:c4:b8:fc:00:fc:9c:55:32:92:96:8c:
         04:2c:dc:5c:8e:75:ce:6b:6f:7f:e4:c5:90:b7:b6:52:98:15:
         4f:50:bb:10:d4:11:51:e2:98:a4:87:cd:e5:e7:b1:4c:e1:9a:
         9d:f3:28:55:bf:c9:8d:5a:06:5b:6f:fe:6a:d3:f2:24:8a:d0:
         a7:02:c0:37:31:d6:b5:ab:fa:5a:fd:e0:0f:4b:78:4e:e4:b1:
         9d:77:2a:21:3c:a6:21:70:1a:f7:3a:38:db:1c:18:31:1d:6a:
         3a:88:05:47:45:2d:4b:ab:26:e5:69:a0:d4:3c:04:a4:77:da:
         5a:9b:5f:c3:3e:b5:03:46:14:5f:2b:35:d8:6e:17:67:01:1b:
         b6:d5:37:61:fd:d4:fb:d4:77:93:0a:13:2c:50:2d:60:f2:9f:
         99:81:6e:87:42:45:94:b2:37:a7:87:1f:8f:59:b1:ef:13:3d:
         1f:3f:cd:30:fb:05:7d:fc:3f:f5:9f:a8:ab:d0:76:76:33:40:
         b1:19:3e:7a:82:a3:fe:e8:53:8a:e2:cd:5b:ab:8e:44:62:e8:
         a8:7b:79:95:21:ff:51:a2:07:90:7f:a8:56:3f:6d:f9:05:01:
         e0:e1:9d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdQVThutHC6hFvKj83NiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGVhNThiNWE1MzJlMjhhY2M2MTExZmY1NTAyNzFhZTFi
Y2RmZTgwHhcNMjUwNDEzMTMwMTQzWhcNMjUwNDE0MTMwMTQzWjAzMTEwLwYDVQQD
Eyg5NWMxNmNhYjRhODRkYzNiNTJkMDQwM2JiNjA3NmI5ZDc3ZmQ2OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GeK9xUj0oxPAajH8yuE4/dgEUts
3/+y0utmSKfZbQcILRWBiYtLqqVWtPZQ/jCOQGmmKOxROMpM7N23mY1988zAxN4a
nrzAdKdTqDiyONm0mVrTuMI/ltN6d1CCal9JciGhVvWYeVy9DkyJAn0PvXv/7T5g
IeiwDXQofibIYk06rBQYr61UEaM6wff0E9jUOqVAvwhAT4rSmS9A/SPTQ80sGYBf
aTE/w4RsyNUKFh5VBzXCnY9THYRwbCzK964vw/7kDGBwbXUnbpTAu8LMOQmyRtBN
9DG6dMj9J80cSSbgPrwk4kAhQxnq616Aa1YQUq0x1PSsqC0Wn+G7l72bCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXBbKtKhNw7UtBAO7YHa513/WmoMB8GA1UdIwQY
MBaAFLJOpYtaUy4orMYRH/VQJxrhvN/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQt
NjA4MzMwYmU2YmE3LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jNGNmNzYtMjQ0MS00YmNkLThjMWQtNjA4MzMwYmU2YmE3
LzEvc2s2bGkxcFRMaWlzeGhFZjlWQW5HdUc4My1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3+GeORm
WTRUmDRdi2QDosk3xh0rrX2m9sS4/AD8nFUykpaMBCzcXI51zmtvf+TFkLe2UpgV
T1C7ENQRUeKYpIfN5eexTOGanfMoVb/JjVoGW2/+atPyJIrQpwLANzHWtav6Wv3g
D0t4TuSxnXcqITymIXAa9zo42xwYMR1qOogFR0UtS6sm5Wmg1DwEpHfaWptfwz61
A0YUXys12G4XZwEbttU3Yf3U+9R3kwoTLFAtYPKfmYFuh0JFlLI3p4cfj1mx7xM9
Hz/NMPsFffw/9Z+oq9B2djNAsRk+eoKj/uhTiuLNW6uORGLoqHt5lSH/UaIHkH+o
Vj9t+QUB4OGdiA==
-----END CERTIFICATE-----