Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File:                     kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier:          jPb+9hWsHZQ/iFu1BS3kgXqx26E4CuM3UXH84n21FC0=
Subject key identifier:   E9:C3:40:19:91:15:76:32:F0:5B:9D:61:02:86:81:7F:C3:04:8F:FE
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer:       /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial:       01962FAB2A445E8229C795E9424C3C3FAF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
                          2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: 0lQuap3WgyVH2bGgIN580JMNmDmgygAZaiH1R5gEs30=)
                          3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2a:44:5e:82:29:c7:95:e9:42:4c:3c:3f:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=e9c3401991157632f05b9d610286817fc3048ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:b0:47:d8:be:a0:bd:09:fb:34:ee:1e:fe:
                    bc:2e:1c:31:b8:93:3b:4f:65:fd:f4:84:60:bf:e7:
                    e8:4b:9c:cf:03:cb:35:34:76:b3:41:53:bb:e5:59:
                    4f:f1:5b:e9:a4:ce:8a:83:62:2e:fc:39:b3:b5:3c:
                    6c:87:71:f3:0f:cc:37:ed:df:72:a9:28:d6:a4:2e:
                    6c:56:10:4f:b7:2c:47:f0:6f:77:71:91:e4:46:20:
                    ae:a4:7e:42:5a:1e:83:05:b6:9c:9a:76:94:e2:0d:
                    6b:e6:62:a6:96:79:5c:a4:8e:0a:87:b1:9b:6d:dc:
                    b1:95:9a:41:ea:a4:e4:48:9c:7c:40:10:9f:73:12:
                    fd:f0:94:7f:8b:06:1e:cd:59:f8:8b:b5:5a:a1:ff:
                    c5:5b:db:fe:ac:70:eb:0e:36:9c:ec:20:9f:b4:4d:
                    50:99:3a:dc:70:c3:fa:47:13:d3:40:d6:cb:9d:0d:
                    e9:d1:2a:2b:c1:97:5e:94:1d:c5:69:b3:35:01:33:
                    aa:74:7d:b2:46:21:4c:fb:23:10:6f:b8:bf:cf:32:
                    32:d4:8b:ab:c5:cc:b3:a9:96:12:6f:b1:da:63:d4:
                    19:f6:07:a1:ff:66:3e:96:8f:fa:21:79:1c:34:0f:
                    af:71:79:59:b2:9f:15:f2:cc:4a:61:09:70:11:2b:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C3:40:19:91:15:76:32:F0:5B:9D:61:02:86:81:7F:C3:04:8F:FE
            X509v3 Authority Key Identifier:
                keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:6f:69:7c:29:fc:aa:21:08:e4:5b:36:62:ea:e0:a4:12:
         49:19:8b:87:fe:6d:0d:97:94:5b:f2:e0:db:64:de:fa:6b:19:
         67:86:0a:11:5c:d6:a0:1c:af:b0:bf:4f:e0:bf:d3:1d:d0:c9:
         95:99:53:ea:c0:0d:cf:6b:bd:fb:0b:8e:e3:1b:a4:36:af:af:
         87:70:fe:37:9b:75:0a:9f:17:78:5d:12:c0:df:72:61:2d:fb:
         a5:75:0f:71:b4:73:1b:68:59:6a:16:18:5a:5f:32:5b:44:ae:
         e0:8b:b9:d7:12:86:2e:95:0b:10:54:c1:a7:7b:36:7b:63:ac:
         63:55:6f:05:bd:25:e5:b3:48:4f:8b:14:5c:9d:37:8d:c7:58:
         d7:44:03:4b:47:6d:a5:45:db:9a:7c:2c:14:1b:c9:a1:7f:42:
         14:87:98:6f:a0:e1:14:14:5a:a6:c3:b7:e8:b3:62:b2:9b:6d:
         47:4d:52:f4:61:22:23:bb:37:87:7d:9b:f5:a3:0a:2c:8d:9f:
         7e:77:ed:3a:88:98:10:d2:7a:8e:02:3d:9e:1a:19:44:bd:5e:
         56:02:f0:c8:68:29:b3:7b:16:4e:07:4c:c8:07:bc:49:66:51:
         51:90:75:ba:38:ed:c2:b5:9c:b9:16:d5:0f:14:cb:b4:9e:2a:
         15:8c:91:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqypEXoIpx5XpQkw8P68cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGM1NzNjMmQ4M2M3ZDhmZDJhM2NmOWE3ZjUzNmY5Mjky
NWEzYmQwHhcNMjUwNDEzMTUwMTA4WhcNMjUwNDE0MTUwMTA4WjAzMTEwLwYDVQQD
EyhlOWMzNDAxOTkxMTU3NjMyZjA1YjlkNjEwMjg2ODE3ZmMzMDQ4ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz+wR9i+oL0J+zTuHv68LhwxuJM7
T2X99IRgv+foS5zPA8s1NHazQVO75VlP8VvppM6Kg2Iu/DmztTxsh3HzD8w37d9y
qSjWpC5sVhBPtyxH8G93cZHkRiCupH5CWh6DBbacmnaU4g1r5mKmlnlcpI4Kh7Gb
bdyxlZpB6qTkSJx8QBCfcxL98JR/iwYezVn4i7Vaof/FW9v+rHDrDjac7CCftE1Q
mTrccMP6RxPTQNbLnQ3p0SorwZdelB3FabM1ATOqdH2yRiFM+yMQb7i/zzIy1Iur
xcyzqZYSb7HaY9QZ9geh/2Y+lo/6IXkcNA+vcXlZsp8V8sxKYQlwESvhZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnDQBmRFXYy8FudYQKGgX/DBI/+MB8GA1UdIwQY
MBaAFJCMVzwtg8fY/So8+af1NvkpJaO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEt
NGU4NWJmZDdkMDU4LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEtNGU4NWJmZDdkMDU4
LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITtvaXwp
/KohCORbNmLq4KQSSRmLh/5tDZeUW/Lg22Te+msZZ4YKEVzWoByvsL9P4L/THdDJ
lZlT6sANz2u9+wuO4xukNq+vh3D+N5t1Cp8XeF0SwN9yYS37pXUPcbRzG2hZahYY
Wl8yW0Su4Iu51xKGLpULEFTBp3s2e2OsY1VvBb0l5bNIT4sUXJ03jcdY10QDS0dt
pUXbmnwsFBvJoX9CFIeYb6DhFBRapsO36LNispttR01S9GEiI7s3h32b9aMKLI2f
fnftOoiYENJ6jgI9nhoZRL1eVgLwyGgps3sWTgdMyAe8SWZRUZB1ujjtwrWcuRbV
DxTLtJ4qFYyRMQ==
-----END CERTIFICATE-----