Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File:                     kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier:          dxlCdj963Sm68Xjs68eMTIZ8ETMYQHlu3r3Zk1gNVAU=
Subject key identifier:   63:DB:F7:F0:10:81:19:B3:4C:22:A5:7D:79:B2:A9:2E:B5:4E:C2:BD
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer:       /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial:       01962E987F7378AB87B208E884FF4FD36C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
                          2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: uOI83ad+PlGLZsT6fFTRw/xwafpZfAwlmtDb4okAjuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:73:78:ab:87:b2:08:e8:84:ff:4f:d3:6c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=63dbf7f0108119b34c22a57d79b2a92eb54ec2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:1d:83:c9:d0:cc:4f:ed:24:d7:57:1a:50:
                    e5:0e:11:43:33:13:43:6b:05:2d:d2:b3:27:1f:57:
                    d4:5c:bf:9d:25:d7:99:29:44:ca:58:28:92:b9:88:
                    67:4f:ef:70:42:81:28:2b:cc:d5:fc:96:b5:ff:8d:
                    f3:f8:36:67:af:5b:cd:f2:29:63:12:5e:4f:b8:1c:
                    40:76:59:81:a5:b8:f9:4b:39:4f:50:46:76:17:01:
                    07:33:52:1e:64:e0:4b:6e:cb:09:9f:90:a4:32:65:
                    ea:33:4c:03:1a:b5:b7:27:92:f6:81:fa:be:02:2a:
                    90:07:6a:ad:c9:64:55:30:8a:64:d0:2a:a9:fb:31:
                    f0:ca:99:db:2d:c4:80:fe:ac:9d:f4:2a:97:ed:0d:
                    24:d1:3b:cb:26:ee:fb:27:10:e4:d1:89:d2:8e:6a:
                    39:22:b9:5d:04:af:62:fd:12:08:5c:e3:48:80:1d:
                    ed:88:a5:2e:65:3c:b1:74:ef:b8:d3:6e:e9:4d:61:
                    5b:b9:bc:4d:c9:cd:80:9c:79:a5:58:f7:3a:dd:fc:
                    3c:d0:5d:06:98:ea:ad:2e:2d:e8:54:09:86:26:58:
                    cb:01:e5:23:cb:19:cb:c3:be:8a:99:29:75:4f:28:
                    e2:a9:00:c6:49:35:42:6f:df:3f:9b:40:7a:6d:dd:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:F7:F0:10:81:19:B3:4C:22:A5:7D:79:B2:A9:2E:B5:4E:C2:BD
            X509v3 Authority Key Identifier:
                keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:55:ce:72:6c:2a:51:5e:03:43:e2:64:1e:21:c7:e0:3b:89:
         e7:82:dd:0a:f3:b8:99:d0:12:81:e1:a5:73:61:5f:3f:c4:d2:
         da:49:b5:5e:26:b8:68:41:26:9b:73:98:b0:ae:90:a7:6d:c0:
         25:f6:20:06:c7:7a:87:61:f0:7a:e1:f2:a1:03:a2:8b:a7:71:
         a7:5f:03:41:eb:f1:99:3e:59:4b:78:d7:59:cd:ce:91:ab:17:
         46:f4:de:42:52:78:d6:73:1b:4a:6e:ee:81:20:47:13:00:4c:
         9a:21:58:aa:df:90:5c:09:d9:96:b2:c1:f6:5d:39:a5:23:b7:
         68:17:ca:9c:a1:2a:12:c2:80:bb:ef:a3:32:64:d1:3e:f4:60:
         c9:5a:22:55:48:c8:4c:5c:26:4c:e1:7e:b1:63:3b:1d:4e:2d:
         4a:e2:4c:d5:c4:8c:d4:63:ad:bf:1a:51:4e:8a:bb:f2:3d:f7:
         d2:4b:04:44:e0:b0:c9:9e:c9:d1:f5:64:ce:a5:5f:f8:94:48:
         fe:b3:23:df:ec:51:c2:a5:5e:d8:c3:39:55:d4:e1:62:78:7f:
         72:34:32:59:33:7c:69:28:9c:53:d1:7c:5d:0c:08:e0:08:b4:
         2b:26:e5:92:e5:34:2c:d2:ec:b2:51:57:d3:68:e6:f2:3a:5c:
         3b:39:23:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumH9zeKuHsgjohP9P02wOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOTRiODU3YzAzN2E3ZDdjYjA1NzVlMzU4MjNlNWUyODAz
MmJkYTMwHhcNMjUwNDEzMTAwMTA3WhcNMjUwNDE0MTAwMTA3WjAzMTEwLwYDVQQD
Eyg2M2RiZjdmMDEwODExOWIzNGMyMmE1N2Q3OWIyYTkyZWI1NGVjMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2sdg8nQzE/tJNdXGlDlDhFDMxND
awUt0rMnH1fUXL+dJdeZKUTKWCiSuYhnT+9wQoEoK8zV/Ja1/43z+DZnr1vN8ilj
El5PuBxAdlmBpbj5SzlPUEZ2FwEHM1IeZOBLbssJn5CkMmXqM0wDGrW3J5L2gfq+
AiqQB2qtyWRVMIpk0Cqp+zHwypnbLcSA/qyd9CqX7Q0k0TvLJu77JxDk0YnSjmo5
IrldBK9i/RIIXONIgB3tiKUuZTyxdO+4027pTWFbubxNyc2AnHmlWPc63fw80F0G
mOqtLi3oVAmGJljLAeUjyxnLw76KmSl1TyjiqQDGSTVCb98/m0B6bd2yuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPb9/AQgRmzTCKlfXmyqS61TsK9MB8GA1UdIwQY
MBaAFJGUuFfAN6fXywV141gj5eKAMr2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUt
M2JmN2Q3Nzc0OWFiLzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zN2FjNTktODUyOS00YWM5LWJhNGUtM2JmN2Q3Nzc0OWFi
LzEva1pTNFY4QTNwOWZMQlhYaldDUGw0b0F5dmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFXOcmwq
UV4DQ+JkHiHH4DuJ54LdCvO4mdASgeGlc2FfP8TS2km1Xia4aEEmm3OYsK6Qp23A
JfYgBsd6h2HweuHyoQOii6dxp18DQevxmT5ZS3jXWc3OkasXRvTeQlJ41nMbSm7u
gSBHEwBMmiFYqt+QXAnZlrLB9l05pSO3aBfKnKEqEsKAu++jMmTRPvRgyVoiVUjI
TFwmTOF+sWM7HU4tSuJM1cSM1GOtvxpRToq78j330ksEROCwyZ7J0fVkzqVf+JRI
/rMj3+xRwqVe2MM5VdThYnh/cjQyWTN8aSicU9F8XQwI4Ai0KyblkuU0LNLsslFX
02jm8jpcOzkjIA==
-----END CERTIFICATE-----