Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File:                     kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier:          qE/gxyfSLLXAP3nSW8F3uyGBsqsytl2mYtG/qKv3gPo=
Subject key identifier:   76:7A:ED:45:8E:8A:B3:71:74:F9:27:5F:43:E3:F8:7A:F6:D6:69:39
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer:       /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial:       01962F74C2989DCACF433535E1A717B71BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number:          085C
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: dnPJKhzVpIgPCLqPR87IMIe6JR9muXv2nHMUqernJUs=)
                          2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c2:98:9d:ca:cf:43:35:35:e1:a7:17:b7:1b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=767aed458e8ab37174f9275f43e3f87af6d66939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:95:72:ba:80:bd:8b:93:2d:cf:cd:3a:2e:
                    3c:84:09:5b:e9:2f:bd:29:40:ef:1b:60:57:04:ed:
                    34:f7:32:65:0e:5b:aa:ef:a4:58:cb:51:3e:0f:bd:
                    dd:01:b8:76:f8:5c:68:1d:34:5a:16:eb:b3:6c:11:
                    e8:a3:36:8f:8c:be:30:e9:80:eb:2e:14:6a:b8:8b:
                    a5:8f:90:b4:3c:5b:e1:e6:e2:cf:a1:f7:57:2b:a9:
                    bd:cb:29:ff:73:f5:a3:8b:51:5e:92:e8:67:d1:2d:
                    45:b8:47:dc:a6:85:77:8a:40:ea:99:46:45:15:1a:
                    f7:e0:05:01:f0:31:ff:45:af:d7:cb:4d:73:0c:fe:
                    6a:ab:de:9a:f5:a3:1a:b6:36:62:28:37:d1:9f:b7:
                    e9:e7:bd:7b:7d:8a:33:58:1c:ec:f0:c0:15:ea:3c:
                    f9:07:6e:08:db:08:29:66:a8:eb:91:6c:f9:ec:67:
                    ae:b5:e4:a3:4d:7a:35:fd:e7:46:f8:74:5b:39:73:
                    e7:0c:d9:d4:5c:e1:78:be:14:cc:87:ea:46:b9:26:
                    d1:b7:40:d9:b9:7a:66:e5:14:74:de:8c:ca:3e:ea:
                    f3:15:41:a1:cd:2e:85:22:50:77:42:b8:76:3b:c9:
                    54:a8:48:a2:2f:6f:60:ea:d5:ae:00:4a:49:83:c3:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:ED:45:8E:8A:B3:71:74:F9:27:5F:43:E3:F8:7A:F6:D6:69:39
            X509v3 Authority Key Identifier:
                keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:08:df:10:92:df:6b:3e:44:36:06:44:ab:2f:89:3f:eb:e6:
         7d:e8:df:94:d4:a6:ec:c5:c7:68:cc:cb:60:c4:6f:f4:2a:9d:
         2f:13:aa:2a:47:b0:9f:56:b6:92:a0:63:bc:75:a5:28:4b:42:
         33:86:a0:fd:96:d0:67:6a:00:2f:09:b9:6a:7d:c5:31:1a:00:
         47:6a:c6:a4:bb:d4:6b:e2:2f:d4:47:1a:88:13:ba:71:dd:43:
         56:41:06:bd:e7:51:a5:af:9a:0d:07:70:64:8a:a8:dc:6a:1a:
         78:1e:b7:f2:7a:18:14:66:dd:e7:5c:0c:2e:a2:2b:da:f1:7c:
         a4:d5:72:b9:c9:be:47:c9:fe:d1:ff:4e:4c:ff:6b:69:7a:7f:
         41:8e:84:15:e6:4e:ce:c5:8e:8a:c3:96:f3:4b:c9:3f:33:09:
         6c:0c:32:94:79:10:ec:96:f6:f4:7f:40:ff:ab:d9:93:9c:f0:
         3c:ab:9a:4c:00:f3:93:ee:55:58:f5:56:22:d9:12:f8:ad:2e:
         ba:cc:e7:b4:5c:5a:1d:a7:c8:ce:dd:b6:86:c3:2e:f6:bc:2e:
         d6:a7:28:0a:af:4e:ea:9b:1c:ab:4a:73:6b:d0:94:0d:8a:ae:
         71:23:e1:ca:ca:5e:fb:28:d6:94:1e:c7:63:40:bd:00:e0:6f:
         3e:48:b9:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMKYncrPQzU14acXtxu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYzU3YjQ3NTE2YTkwZTBjZmUwNzIxNTc5MzdhNzMzYmQ1
MDNiZTAwHhcNMjUwNDEzMTQwMTQzWhcNMjUwNDE0MTQwMTQzWjAzMTEwLwYDVQQD
Eyg3NjdhZWQ0NThlOGFiMzcxNzRmOTI3NWY0M2UzZjg3YWY2ZDY2OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcWVcrqAvYuTLc/NOi48hAlb6S+9
KUDvG2BXBO009zJlDluq76RYy1E+D73dAbh2+FxoHTRaFuuzbBHoozaPjL4w6YDr
LhRquIulj5C0PFvh5uLPofdXK6m9yyn/c/Wji1Fekuhn0S1FuEfcpoV3ikDqmUZF
FRr34AUB8DH/Ra/Xy01zDP5qq96a9aMatjZiKDfRn7fp5717fYozWBzs8MAV6jz5
B24I2wgpZqjrkWz57GeuteSjTXo1/edG+HRbOXPnDNnUXOF4vhTMh+pGuSbRt0DZ
uXpm5RR03ozKPurzFUGhzS6FIlB3Qrh2O8lUqEiiL29g6tWuAEpJg8N/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ67UWOirNxdPknX0Pj+Hr21mk5MB8GA1UdIwQY
MBaAFJDFe0dRapDgz+ByFXk3pzO9UDvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDct
Y2ZhY2IyNTA4NGQ3LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDctY2ZhY2IyNTA4NGQ3
LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwjfEJLf
az5ENgZEqy+JP+vmfejflNSm7MXHaMzLYMRv9CqdLxOqKkewn1a2kqBjvHWlKEtC
M4ag/ZbQZ2oALwm5an3FMRoAR2rGpLvUa+Iv1EcaiBO6cd1DVkEGvedRpa+aDQdw
ZIqo3GoaeB638noYFGbd51wMLqIr2vF8pNVyucm+R8n+0f9OTP9raXp/QY6EFeZO
zsWOisOW80vJPzMJbAwylHkQ7Jb29H9A/6vZk5zwPKuaTADzk+5VWPVWItkS+K0u
uszntFxaHafIzt22hsMu9rwu1qcoCq9O6pscq0pza9CUDYqucSPhyspe+yjWlB7H
Y0C9AOBvPki5dg==
-----END CERTIFICATE-----