Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
File:                     kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json)
Hash identifier:          p2vTntw+gX7ch7R43AH9r+6bYjNaOUwTyWSP8WEGCBE=
Subject key identifier:   C4:76:19:38:8E:A7:B7:27:EC:17:EE:1B:8F:BB:93:9A:E2:1B:AE:FC
Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17
Certificate issuer:       /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
Certificate serial:       01962E61ECF3B0F5B3951379A058A9E49DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft
Manifest number:          07DF
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=)
                          2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=)
                          3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: ySA/bZCUsreSFM1o1gZdqDfmoa/iNmSQ7SzDWHvLFLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ec:f3:b0:f5:b3:95:13:79:a0:58:a9:e4:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=c47619388ea7b727ec17ee1b8fbb939ae21baefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:07:39:8f:9f:94:1a:b4:dd:0a:37:b5:8f:
                    e3:95:da:f2:cf:de:af:b0:62:2f:25:71:f9:cc:1b:
                    ac:43:ba:bc:68:fd:0a:a6:8b:19:43:4b:d4:59:8c:
                    c9:c4:73:08:31:4f:3c:f5:48:1f:2b:be:70:cb:ff:
                    42:62:0b:a6:65:95:cf:4f:ce:45:84:34:74:73:f9:
                    60:3d:9f:45:e3:be:0d:c0:c6:be:8f:e3:d4:24:ae:
                    d1:76:cc:8f:8f:3b:ee:ac:73:0f:70:97:8f:e0:f3:
                    cc:e6:24:11:26:8d:ff:e5:f3:d6:76:38:ea:d0:7c:
                    1c:5a:28:7e:f3:5d:4f:c4:6b:80:ea:10:63:f6:48:
                    99:bc:a5:67:db:74:74:52:01:46:2b:50:c4:83:f3:
                    04:d8:64:c8:2b:8f:2b:13:8e:ce:c8:36:fa:4e:12:
                    f7:45:ce:c4:1f:b7:a1:11:1b:15:33:87:65:12:ee:
                    09:05:61:2e:4d:21:be:23:76:a7:09:43:f0:01:73:
                    b8:33:c1:ad:5e:f8:c9:30:65:55:73:a0:02:d7:f7:
                    b0:7e:ef:a4:50:b9:d6:ed:f1:01:28:cb:b1:8b:28:
                    ee:8d:3f:9e:56:60:81:ac:a0:11:f8:2a:c9:7b:7a:
                    17:86:62:d4:1b:df:d8:19:31:d2:4d:6a:20:b3:4b:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:19:38:8E:A7:B7:27:EC:17:EE:1B:8F:BB:93:9A:E2:1B:AE:FC
            X509v3 Authority Key Identifier:
                keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2c:13:23:92:00:b7:1d:dc:57:18:3f:fb:4b:ab:00:42:3c:
         ad:6c:08:ba:c6:53:5d:67:ba:99:7a:6b:c1:14:72:04:44:20:
         e5:2a:f3:2d:aa:e9:1b:57:04:ec:b3:20:e2:c6:d9:06:ab:06:
         e3:ba:7f:80:1d:fc:fe:0e:af:7e:5a:12:cd:30:ad:78:96:9f:
         03:a3:b9:05:67:cb:75:ff:de:25:cf:5d:a3:c9:22:a2:05:2e:
         92:ab:2a:ff:96:a1:e1:49:f7:70:24:d9:4a:da:95:4b:8d:e3:
         b7:5b:19:4f:ac:89:5f:90:2c:3a:50:71:05:2a:f5:a1:c4:1e:
         23:68:e7:62:43:1d:81:7b:9f:97:02:2e:c2:df:be:df:b5:72:
         ab:90:a6:9a:9b:3f:1a:9d:e0:11:79:f5:b5:0d:70:38:33:e5:
         53:e6:7a:63:18:92:56:34:c0:7b:b2:b1:43:7e:81:15:c8:e9:
         eb:60:f9:d1:e8:0b:74:ac:d0:71:94:db:c8:25:d5:fa:e2:30:
         c0:ed:30:97:7d:63:7c:df:73:08:db:f8:03:6a:cb:a7:90:87:
         b3:dd:65:71:67:4c:8a:36:1b:6a:1c:f4:8d:93:7a:b2:2e:d0:
         5e:4b:d6:9a:98:d5:79:5a:9e:d6:17:e4:32:9f:17:10:9f:6c:
         c4:f6:8d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYezzsPWzlRN5oFip5J3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx
OGY1MTcwHhcNMjUwNDEzMDkwMTMxWhcNMjUwNDE0MDkwMTMxWjAzMTEwLwYDVQQD
EyhjNDc2MTkzODhlYTdiNzI3ZWMxN2VlMWI4ZmJiOTM5YWUyMWJhZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmoHOY+flBq03Qo3tY/jldryz96v
sGIvJXH5zBusQ7q8aP0KposZQ0vUWYzJxHMIMU889UgfK75wy/9CYgumZZXPT85F
hDR0c/lgPZ9F474NwMa+j+PUJK7RdsyPjzvurHMPcJeP4PPM5iQRJo3/5fPWdjjq
0HwcWih+811PxGuA6hBj9kiZvKVn23R0UgFGK1DEg/ME2GTIK48rE47OyDb6ThL3
Rc7EH7ehERsVM4dlEu4JBWEuTSG+I3anCUPwAXO4M8GtXvjJMGVVc6AC1/ewfu+k
ULnW7fEBKMuxiyjujT+eVmCBrKAR+CrJe3oXhmLUG9/YGTHSTWogs0t8tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR2GTiOp7cn7BfuG4+7k5riG678MB8GA1UdIwQY
MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt
ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm
LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSwTI5IA
tx3cVxg/+0urAEI8rWwIusZTXWe6mXprwRRyBEQg5SrzLarpG1cE7LMg4sbZBqsG
47p/gB38/g6vfloSzTCteJafA6O5BWfLdf/eJc9do8kiogUukqsq/5ah4Un3cCTZ
StqVS43jt1sZT6yJX5AsOlBxBSr1ocQeI2jnYkMdgXuflwIuwt++37Vyq5Cmmps/
Gp3gEXn1tQ1wODPlU+Z6YxiSVjTAe7KxQ36BFcjp62D50egLdKzQcZTbyCXV+uIw
wO0wl31jfN9zCNv4A2rLp5CHs91lcWdMijYbahz0jZN6si7QXkvWmpjVeVqe1hfk
Mp8XEJ9sxPaNOQ==
-----END CERTIFICATE-----