Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File:                     kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier:          6upjSKLD0SrZjR4De5WHJDoRS1KhNGMarBor/xwKRjk=
Subject key identifier:   87:0A:E3:D1:DD:C6:B5:6F:FC:4E:B4:79:6A:77:44:35:FE:CF:72:AC
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer:       /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial:       01962F0742E3FFCD5B0049260AE9C75C8F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number:          0DF9
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
                          2: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
                          3: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: wATm8Aqoc/hqIY4a3Bbt+aViWJqfCZM0+aVCrWLw3GM=)
                          4: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
                          5: shTn7GqCkQHNe5th-DoeAc9YFfk.roa (hash: aySq0BgEVOrK/vhv+t0wKgyn8II5kEUij+WlbV5t6wE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:e3:ff:cd:5b:00:49:26:0a:e9:c7:5c:8f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=870ae3d1ddc6b56ffc4eb4796a774435fecf72ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:3e:af:e7:cb:2b:66:16:ac:53:09:f2:e3:
                    a7:d5:7a:84:61:6b:b9:d6:ae:2e:03:f2:d8:20:4e:
                    34:8a:8a:7b:a1:5f:90:75:1e:92:a0:12:3d:bf:ad:
                    b0:e6:0d:3f:5f:b6:30:99:61:1a:76:80:60:01:5b:
                    0b:a5:1c:07:9d:65:18:c7:60:bb:1c:32:2e:90:69:
                    90:dc:30:9b:58:01:ca:6e:82:b3:bd:8b:8e:7e:33:
                    a3:5b:25:45:f7:03:30:1c:35:0b:53:12:db:38:2d:
                    08:6c:5c:a4:1c:a1:2a:e3:b2:e8:3a:60:eb:54:b7:
                    92:7a:b9:f8:27:73:2c:d3:55:03:36:fe:1d:16:de:
                    41:5a:f3:db:32:0a:c4:34:13:c4:2d:74:25:99:d5:
                    8b:0b:14:06:1a:2c:80:7d:5c:7d:19:54:ed:c6:da:
                    f8:b8:ce:c7:a7:e4:94:69:4f:19:aa:dd:34:94:fe:
                    be:80:0f:7e:f8:57:59:bb:71:c0:7a:9f:2a:b1:5c:
                    a7:10:6b:dc:92:bb:07:81:ed:cf:ac:6f:24:db:54:
                    8e:b2:75:3c:e8:71:1c:5f:85:b1:56:fd:e9:3f:2d:
                    7b:67:8c:8e:4f:c3:b7:0b:9e:30:46:41:81:5d:63:
                    f7:e5:c2:f4:07:ec:45:40:0a:06:99:f2:b6:c3:e8:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0A:E3:D1:DD:C6:B5:6F:FC:4E:B4:79:6A:77:44:35:FE:CF:72:AC
            X509v3 Authority Key Identifier:
                keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:6c:0f:c0:2f:11:cd:87:ba:58:bf:a3:6c:b5:6f:36:4d:
         73:db:e8:f1:ed:25:4c:d2:f5:8c:be:0f:2b:65:0d:5d:8a:7d:
         a4:7b:af:ca:43:8b:2a:c0:ad:02:9c:a6:93:a1:64:47:c9:79:
         7e:1e:e9:b2:44:1a:e4:ed:61:28:67:00:28:42:0f:82:de:a4:
         6d:6b:31:da:fb:68:78:7f:e7:36:e3:c8:8a:b7:1a:b4:43:0d:
         36:cf:3a:3f:05:81:18:a4:3e:e0:ac:fd:07:9d:3e:85:c8:3a:
         3f:08:57:80:5d:16:93:7c:39:27:f0:b6:3a:1a:82:d8:fd:ab:
         73:54:38:37:f4:85:d8:60:de:ff:bf:31:76:88:3f:d0:db:72:
         25:cc:d2:26:98:12:a8:f8:73:b8:ce:86:e8:fe:a2:07:55:be:
         7d:a2:ff:4d:60:f3:2a:75:24:46:85:a6:3c:5a:f0:ba:8f:0e:
         cd:c2:43:0e:88:e9:9d:3e:23:fe:0e:ac:f6:b5:f7:64:28:d9:
         52:0b:5e:bf:de:ec:c2:96:90:57:cc:04:0d:af:06:27:5d:bf:
         c7:56:37:85:37:f0:8f:7d:fb:bd:be:e7:09:20:c0:81:8f:a8:
         0e:2c:7f:43:8e:f4:c2:8c:5c:fc:bd:43:66:af:3e:cf:d6:33:
         d3:12:84:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0Lj/81bAEkmCunHXI9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODkwMTY2MmE4ZWM1ZmY0ZDNmNDhkMjkwOTkyMzBhMDU3
NWVjOGEwHhcNMjUwNDEzMTIwMjA3WhcNMjUwNDE0MTIwMjA3WjAzMTEwLwYDVQQD
Eyg4NzBhZTNkMWRkYzZiNTZmZmM0ZWI0Nzk2YTc3NDQzNWZlY2Y3MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAc+r+fLK2YWrFMJ8uOn1XqEYWu5
1q4uA/LYIE40iop7oV+QdR6SoBI9v62w5g0/X7YwmWEadoBgAVsLpRwHnWUYx2C7
HDIukGmQ3DCbWAHKboKzvYuOfjOjWyVF9wMwHDULUxLbOC0IbFykHKEq47LoOmDr
VLeSern4J3Ms01UDNv4dFt5BWvPbMgrENBPELXQlmdWLCxQGGiyAfVx9GVTtxtr4
uM7Hp+SUaU8Zqt00lP6+gA9++FdZu3HAep8qsVynEGvckrsHge3PrG8k21SOsnU8
6HEcX4WxVv3pPy17Z4yOT8O3C54wRkGBXWP35cL0B+xFQAoGmfK2w+hFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcK49HdxrVv/E60eWp3RDX+z3KsMB8GA1UdIwQY
MBaAFJGJAWYqjsX/TT9I0pCZIwoFdeyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQt
ZTgxMWUyM2MxODA0LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81YjkyYTctMjgzNy00NjllLTgyMTQtZTgxMWUyM2MxODA0
LzEva1lrQlppcU94ZjlOUDBqU2tKa2pDZ1YxN0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqZsD8Av
Ec2Huli/o2y1bzZNc9vo8e0lTNL1jL4PK2UNXYp9pHuvykOLKsCtApymk6FkR8l5
fh7pskQa5O1hKGcAKEIPgt6kbWsx2vtoeH/nNuPIircatEMNNs86PwWBGKQ+4Kz9
B50+hcg6PwhXgF0Wk3w5J/C2OhqC2P2rc1Q4N/SF2GDe/78xdog/0NtyJczSJpgS
qPhzuM6G6P6iB1W+faL/TWDzKnUkRoWmPFrwuo8OzcJDDojpnT4j/g6s9rX3ZCjZ
Ugtev97swpaQV8wEDa8GJ12/x1Y3hTfwj337vb7nCSDAgY+oDix/Q470woxc/L1D
Zq8+z9Yz0xKEqw==
-----END CERTIFICATE-----