Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
File:                     svg6PraHtBmUyJ94I4qZETPfJfY.mft (raw, json)
Hash identifier:          YiZ4EXOVSt3Tx7oMAYiqKixO/O57cCjZ8xOjAW+84Ac=
Subject key identifier:   A5:72:A3:CB:37:F7:CD:A4:33:F8:3F:5B:ED:42:B9:17:80:7C:C5:E1
Authority key identifier: B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6
Certificate issuer:       /CN=b2f83a3eb687b41994c89f78238a991133df25f6
Certificate serial:       01962F74254FCAE75A6B1E91E7B44DEA0F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft
Manifest number:          0D90
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: svg6PraHtBmUyJ94I4qZETPfJfY.crl (hash: FaEb/tprGBIkO+jn42rjoAbQsDMqthQXvF3O9bYn1eM=)
                          2: tZnHKvR--oQspHXiMTb_7j-JYds.roa (hash: /ZQxh+STzzVQTIGd7v/o5S5T+TwpT7pJx116SvjP5MU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:4f:ca:e7:5a:6b:1e:91:e7:b4:4d:ea:0f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f83a3eb687b41994c89f78238a991133df25f6
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=a572a3cb37f7cda433f83f5bed42b917807cc5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:1f:84:f0:0b:4c:6e:93:5a:d5:c5:b5:2b:
                    cc:b6:15:aa:36:fa:30:14:c2:60:64:fe:97:3d:da:
                    a9:2d:56:4d:a3:fc:6a:83:24:4f:16:59:7f:db:35:
                    8c:5f:29:8a:33:3e:b7:d0:5d:ce:aa:f5:81:45:d2:
                    67:18:1d:f0:18:35:e0:4e:19:58:db:93:5e:fb:4d:
                    11:cc:7f:7c:90:e1:d8:4f:a3:b0:b2:51:02:7c:90:
                    dd:0a:f2:93:e4:3b:d9:cc:f7:b9:3d:ed:24:82:1c:
                    29:2d:e3:3b:cd:5a:2e:20:bf:49:b9:b3:e4:08:7e:
                    16:7d:ba:f1:8e:b0:e3:34:7e:e1:56:18:83:3a:89:
                    42:91:06:17:be:f9:2c:51:0e:4e:ad:e4:06:d6:6f:
                    7a:68:71:8c:1f:5d:32:7e:81:55:31:e3:cd:3e:7c:
                    28:61:06:8a:6e:fe:d0:8d:8b:0c:90:4f:68:2b:de:
                    3f:5a:82:90:43:29:fb:0b:78:54:78:e6:62:7a:53:
                    cd:a1:0b:31:19:fe:02:34:9c:f5:e0:c2:ac:71:a7:
                    42:27:83:cb:40:c0:b1:e5:e3:ff:ab:40:39:c9:9e:
                    9c:4e:19:fa:c3:11:49:24:51:26:af:36:b6:3b:bf:
                    8d:39:09:0c:2a:15:01:fc:ec:fe:e8:7b:e9:25:59:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:A3:CB:37:F7:CD:A4:33:F8:3F:5B:ED:42:B9:17:80:7C:C5:E1
            X509v3 Authority Key Identifier:
                keyid:B2:F8:3A:3E:B6:87:B4:19:94:C8:9F:78:23:8A:99:11:33:DF:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svg6PraHtBmUyJ94I4qZETPfJfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/21b36e-742c-4ae5-b735-f6141e03f3a7/1/svg6PraHtBmUyJ94I4qZETPfJfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:55:d6:a0:1d:77:9a:ca:ab:bb:1a:2a:c5:d9:58:17:97:51:
         00:6b:ac:79:4a:d9:b4:91:fa:29:c3:0c:cb:eb:f6:69:bc:17:
         07:41:7f:d2:b8:6b:15:16:ba:10:87:9c:46:2e:e9:98:d2:1b:
         6d:4b:a9:ba:2d:ef:da:59:69:71:de:cc:d4:18:8b:0b:76:11:
         2b:bf:2c:55:ff:ed:71:f2:ec:fe:f9:8f:a8:25:a7:5b:15:63:
         ad:f1:98:a3:3a:70:d0:07:45:e1:23:06:fe:29:7f:e1:b4:90:
         0b:ea:d4:c4:18:ea:0d:e9:0f:74:c0:a9:ee:19:38:e6:6a:c5:
         54:26:41:ca:e5:42:09:28:ea:04:14:6b:93:51:f5:3b:4b:1e:
         f7:9a:43:09:e4:bc:1d:ee:28:34:25:dd:a7:48:aa:18:90:c5:
         55:1b:2e:a9:03:11:9a:2a:24:77:3a:29:a8:ed:80:20:b3:ba:
         52:a9:aa:e7:3c:31:b1:53:a1:47:cd:92:2e:37:bc:0b:d6:52:
         9e:a3:88:b8:3f:02:f4:cb:04:79:01:b1:59:ad:e8:a9:4e:be:
         30:fd:58:13:02:e6:8d:ba:b1:69:b2:89:9f:ed:1d:3d:35:93:
         5f:1d:50:96:8b:db:68:4b:ba:56:3a:4d:a5:67:12:bf:96:63:
         8f:b1:b2:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCVPyudaax6R57RN6g94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZjgzYTNlYjY4N2I0MTk5NGM4OWY3ODIzOGE5OTExMzNk
ZjI1ZjYwHhcNMjUwNDEzMTQwMTAyWhcNMjUwNDE0MTQwMTAyWjAzMTEwLwYDVQQD
EyhhNTcyYTNjYjM3ZjdjZGE0MzNmODNmNWJlZDQyYjkxNzgwN2NjNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJofhPALTG6TWtXFtSvMthWqNvow
FMJgZP6XPdqpLVZNo/xqgyRPFll/2zWMXymKMz630F3OqvWBRdJnGB3wGDXgThlY
25Ne+00RzH98kOHYT6OwslECfJDdCvKT5DvZzPe5Pe0kghwpLeM7zVouIL9JubPk
CH4WfbrxjrDjNH7hVhiDOolCkQYXvvksUQ5OreQG1m96aHGMH10yfoFVMePNPnwo
YQaKbv7QjYsMkE9oK94/WoKQQyn7C3hUeOZielPNoQsxGf4CNJz14MKscadCJ4PL
QMCx5eP/q0A5yZ6cThn6wxFJJFEmrza2O7+NOQkMKhUB/Oz+6HvpJVlmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVyo8s3982kM/g/W+1CuReAfMXhMB8GA1UdIwQY
MBaAFLL4Oj62h7QZlMifeCOKmREz3yX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUt
ZjYxNDFlMDNmM2E3LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMWIzNmUtNzQyYy00YWU1LWI3MzUtZjYxNDFlMDNmM2E3
LzEvc3ZnNlByYUh0Qm1VeUo5NEk0cVpFVFBmSmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVXWoB13
msqruxoqxdlYF5dRAGuseUrZtJH6KcMMy+v2abwXB0F/0rhrFRa6EIecRi7pmNIb
bUupui3v2llpcd7M1BiLC3YRK78sVf/tcfLs/vmPqCWnWxVjrfGYozpw0AdF4SMG
/il/4bSQC+rUxBjqDekPdMCp7hk45mrFVCZByuVCCSjqBBRrk1H1O0se95pDCeS8
He4oNCXdp0iqGJDFVRsuqQMRmiokdzopqO2AILO6Uqmq5zwxsVOhR82SLje8C9ZS
nqOIuD8C9MsEeQGxWa3oqU6+MP1YEwLmjbqxabKJn+0dPTWTXx1QlovbaEu6VjpN
pWcSv5Zjj7Gydg==
-----END CERTIFICATE-----