Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          4aAas3/mB1XJDuQiTr0OtldfVH+nDVRLevBlhE6GtgI=
Subject key identifier:   D1:90:8D:19:FE:B1:B0:D2:C6:B7:21:E2:CA:D8:57:D9:06:99:A2:29
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       01962F3D43DA358A3C330F057B93983AC97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          090C
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: 4egFs321hRLCcrzY2hWNwNpCDSf7oazeBTfaoUOGg2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:da:35:8a:3c:33:0f:05:7b:93:98:3a:c9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=d1908d19feb1b0d2c6b721e2cad857d90699a229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:cb:0f:0f:1c:8b:ba:e5:91:eb:9d:21:b2:
                    1d:f2:90:2c:fa:1b:f4:2f:7b:0b:e9:4e:39:a1:b5:
                    cf:ae:9b:79:9c:6c:3a:46:6b:27:69:94:d3:1d:7a:
                    15:fb:ed:6c:40:a6:29:64:87:b7:7d:2b:77:c8:19:
                    6a:46:e4:72:6f:ad:5f:c1:90:59:21:ec:91:c0:d6:
                    97:02:19:d1:13:cc:93:ae:42:01:39:e4:3a:33:f0:
                    36:10:3d:ce:32:0d:d7:8c:9d:88:7f:87:56:cf:16:
                    a5:05:9f:2e:54:89:64:c8:e1:d0:bf:34:a4:00:8c:
                    83:44:eb:16:12:ce:27:4e:42:d3:42:3c:ab:a2:41:
                    7b:5d:7a:ed:2e:fe:d9:0d:08:5d:90:42:4a:3c:17:
                    e4:22:93:c8:17:3f:26:4a:cc:7a:e1:73:5a:2e:1f:
                    45:34:82:f9:66:ac:11:01:72:ee:f9:74:c6:f5:11:
                    98:8e:d5:9f:3f:b3:59:9c:44:3c:13:38:7c:f8:62:
                    bc:c1:88:8f:ea:39:5d:36:cf:71:12:9f:4c:36:50:
                    5d:f1:21:53:60:6a:b3:36:7b:ca:35:fc:ee:e9:0a:
                    39:54:25:27:9d:b1:42:a5:1e:28:4d:5c:35:a5:d9:
                    41:98:20:c4:5a:6e:77:7e:ad:c6:43:22:5f:b6:1f:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:8D:19:FE:B1:B0:D2:C6:B7:21:E2:CA:D8:57:D9:06:99:A2:29
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:64:02:b2:83:83:5d:21:0a:56:46:dc:ba:e7:d1:6c:1e:
         a6:93:48:25:99:d3:43:da:4b:ce:b5:5f:69:b5:03:fa:85:c0:
         15:c9:04:3d:be:d1:90:c1:73:eb:14:3d:ea:62:55:61:92:c4:
         e4:30:12:91:85:b9:05:04:fa:85:75:73:07:29:d8:f3:89:3e:
         b8:c2:95:fc:14:ef:4c:6d:12:6b:6e:0d:b4:4c:ee:24:b1:d3:
         8e:47:8f:3d:d0:62:d1:f2:9b:6d:a8:08:03:4e:5b:42:88:08:
         64:b0:91:25:c1:d7:f6:11:ba:ed:fe:da:fe:a4:99:9a:34:52:
         01:16:0b:24:36:ea:20:e4:dc:32:53:c4:7b:db:2e:c4:59:39:
         dd:dd:6f:d8:5b:ac:78:57:f6:49:0b:23:b4:12:4a:a7:35:0c:
         c1:9b:02:cc:3b:6b:ce:07:e0:b7:40:10:74:55:1a:e0:12:d2:
         70:36:20:70:dd:9c:26:e0:ff:21:d2:1f:cf:a0:6c:51:cb:8b:
         a3:60:2e:b8:cf:4b:72:0f:6c:b0:a8:7e:77:62:5a:66:bb:38:
         68:e1:ba:23:a8:e0:f8:78:34:d6:38:cf:15:cb:80:6e:14:9a:
         a0:c9:5c:fb:d4:eb:65:34:23:4b:2d:c3:b4:0e:6e:b6:5d:ff:
         5f:3d:63:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUPaNYo8Mw8Fe5OYOsl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk
ZjNkMjkwHhcNMjUwNDEzMTMwMTA2WhcNMjUwNDE0MTMwMTA2WjAzMTEwLwYDVQQD
EyhkMTkwOGQxOWZlYjFiMGQyYzZiNzIxZTJjYWQ4NTdkOTA2OTlhMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIfLDw8ci7rlkeudIbId8pAs+hv0
L3sL6U45obXPrpt5nGw6RmsnaZTTHXoV++1sQKYpZIe3fSt3yBlqRuRyb61fwZBZ
IeyRwNaXAhnRE8yTrkIBOeQ6M/A2ED3OMg3XjJ2If4dWzxalBZ8uVIlkyOHQvzSk
AIyDROsWEs4nTkLTQjyrokF7XXrtLv7ZDQhdkEJKPBfkIpPIFz8mSsx64XNaLh9F
NIL5ZqwRAXLu+XTG9RGYjtWfP7NZnEQ8Ezh8+GK8wYiP6jldNs9xEp9MNlBd8SFT
YGqzNnvKNfzu6Qo5VCUnnbFCpR4oTVw1pdlBmCDEWm53fq3GQyJfth+ouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGQjRn+sbDSxrch4srYV9kGmaIpMB8GA1UdIwQY
MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt
ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm
LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPy9kArKD
g10hClZG3Lrn0WweppNIJZnTQ9pLzrVfabUD+oXAFckEPb7RkMFz6xQ96mJVYZLE
5DASkYW5BQT6hXVzBynY84k+uMKV/BTvTG0Sa24NtEzuJLHTjkePPdBi0fKbbagI
A05bQogIZLCRJcHX9hG67f7a/qSZmjRSARYLJDbqIOTcMlPEe9suxFk53d1v2Fus
eFf2SQsjtBJKpzUMwZsCzDtrzgfgt0AQdFUa4BLScDYgcN2cJuD/IdIfz6BsUcuL
o2AuuM9Lcg9ssKh+d2JaZrs4aOG6I6jg+Hg01jjPFcuAbhSaoMlc+9TrZTQjSy3D
tA5utl3/Xz1jhA==
-----END CERTIFICATE-----