Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          hag19QtGWSsP+7ScZ14DaRaE7b/cHZ0Kqz9/j9bNCJ8=
Subject key identifier:   D8:AD:46:93:4F:F4:11:39:22:77:4C:B6:7A:06:A9:87:70:FC:BC:96
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       01962F3D7C7CD57879530238F41315C6DB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0804
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
                          2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: jNSmG5EU2IvAJMq4V9id12XBmxFTNQY5Q39Qlf2FfNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:7c:d5:78:79:53:02:38:f4:13:15:c6:db:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=d8ad46934ff4113922774cb67a06a98770fcbc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:cc:cb:fa:b0:83:ea:c6:2c:e9:47:27:25:
                    1c:67:0a:8e:0b:78:35:e9:b8:54:59:ba:58:7b:c4:
                    01:f6:6f:8a:41:55:9a:1b:90:91:32:b0:64:16:9f:
                    f0:1c:d2:0b:3f:f1:6b:c1:44:04:04:8a:15:1c:c1:
                    39:86:53:08:73:e6:34:77:f7:3f:d4:38:ef:60:2c:
                    33:4f:00:0d:59:42:ce:b5:25:bb:83:da:be:db:da:
                    d6:27:93:12:fb:49:b9:f3:3a:9c:bc:f1:f6:4c:57:
                    8c:82:ea:f8:db:76:98:a6:95:2c:e7:52:ac:7c:65:
                    1d:27:e7:b1:f0:6b:ff:fd:2a:4a:53:67:a2:fd:6a:
                    e9:8f:7a:fb:66:f2:e9:04:75:4a:1a:1a:cd:e4:96:
                    31:85:9f:ac:90:1b:42:72:bd:d7:c1:d2:9c:f4:e1:
                    1f:96:6e:fa:e1:05:4c:c2:f4:84:67:b7:ee:c0:be:
                    ad:e3:01:6a:47:ce:9c:71:98:53:c0:7e:33:0a:91:
                    3c:7d:1b:44:fe:76:2b:06:4f:4e:7d:a3:56:b7:ee:
                    55:9f:36:80:2b:27:d6:84:53:f1:23:7a:c7:bd:fd:
                    c4:22:91:57:5b:35:94:fc:be:58:ce:f7:1d:fd:48:
                    ce:b0:26:f9:83:e5:5d:10:f3:b8:3b:99:f1:b9:55:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:46:93:4F:F4:11:39:22:77:4C:B6:7A:06:A9:87:70:FC:BC:96
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:64:2c:3f:70:a5:70:75:a0:fc:2d:a0:67:94:ee:c6:96:cf:
         bc:95:84:ff:89:f6:04:08:04:93:ed:43:d4:23:96:cc:b4:4d:
         9e:83:e8:d4:0b:57:02:28:19:f4:95:84:ab:24:de:9c:1a:3b:
         16:8f:0d:60:55:8b:be:d0:a7:63:8a:4d:73:06:44:61:10:2f:
         f7:c5:2b:cb:a8:df:11:a3:d2:42:bf:3c:81:8e:36:83:63:e4:
         29:5d:a4:3d:8f:2a:9c:c0:b9:43:4c:60:22:ba:2d:e5:cf:58:
         4e:96:cc:1c:a1:76:aa:de:ff:8d:31:02:57:1e:0e:09:28:78:
         61:90:de:b0:ab:bf:06:b3:66:c4:4e:c4:2e:c8:b8:4e:2a:94:
         e2:13:0e:78:e8:e4:19:61:ab:16:5c:b3:7d:29:f3:5f:1e:7d:
         be:dd:40:76:de:84:46:bb:b0:eb:e5:8b:3c:6b:95:1d:3c:e4:
         6d:94:f2:c7:31:26:b8:6c:7a:12:71:95:4a:c6:5d:e7:09:8f:
         a9:23:fe:42:40:c5:7c:b8:c5:8a:32:d8:3f:cf:bb:15:27:00:
         e3:a3:43:d2:58:e0:d8:77:f3:99:66:b3:6d:75:f4:7a:bf:df:
         88:69:4b:03:de:41:4d:43:19:97:6c:7a:fa:a8:0d:65:96:16:
         19:71:11:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXx81Xh5UwI49BMVxttkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjUwNDEzMTMwMTIwWhcNMjUwNDE0MTMwMTIwWjAzMTEwLwYDVQQD
EyhkOGFkNDY5MzRmZjQxMTM5MjI3NzRjYjY3YTA2YTk4NzcwZmNiYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApznMy/qwg+rGLOlHJyUcZwqOC3g1
6bhUWbpYe8QB9m+KQVWaG5CRMrBkFp/wHNILP/FrwUQEBIoVHME5hlMIc+Y0d/c/
1DjvYCwzTwANWULOtSW7g9q+29rWJ5MS+0m58zqcvPH2TFeMgur423aYppUs51Ks
fGUdJ+ex8Gv//SpKU2ei/Wrpj3r7ZvLpBHVKGhrN5JYxhZ+skBtCcr3XwdKc9OEf
lm764QVMwvSEZ7fuwL6t4wFqR86ccZhTwH4zCpE8fRtE/nYrBk9OfaNWt+5VnzaA
KyfWhFPxI3rHvf3EIpFXWzWU/L5Yzvcd/UjOsCb5g+VdEPO4O5nxuVWrCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNitRpNP9BE5IndMtnoGqYdw/LyWMB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWQsP3Cl
cHWg/C2gZ5TuxpbPvJWE/4n2BAgEk+1D1COWzLRNnoPo1AtXAigZ9JWEqyTenBo7
Fo8NYFWLvtCnY4pNcwZEYRAv98Ury6jfEaPSQr88gY42g2PkKV2kPY8qnMC5Q0xg
Irot5c9YTpbMHKF2qt7/jTECVx4OCSh4YZDesKu/BrNmxE7ELsi4TiqU4hMOeOjk
GWGrFlyzfSnzXx59vt1Adt6ERruw6+WLPGuVHTzkbZTyxzEmuGx6EnGVSsZd5wmP
qSP+QkDFfLjFijLYP8+7FScA46ND0ljg2HfzmWazbXX0er/fiGlLA95BTUMZl2x6
+qgNZZYWGXERIw==
-----END CERTIFICATE-----