Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          uR/L0hVn4usmR1JhWvrF/zm9c/i1gS5U4azC6Q8FydQ=
Subject key identifier:   13:57:1E:54:CF:4B:61:A0:1A:94:E6:A5:26:65:A7:06:4E:86:FF:26
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       01962E6198447FD2D4F299897095F039CAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          074E
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: DBpYgjb+7wKACgU8c6Az25k7/25h8AvM03pXVLifV5g=)
                          2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:98:44:7f:d2:d4:f2:99:89:70:95:f0:39:ca:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=13571e54cf4b61a01a94e6a52665a7064e86ff26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:3b:3c:a3:c8:e4:f7:91:fc:8b:55:c3:ae:
                    f6:75:31:86:d2:9f:53:c8:75:4e:fa:b5:91:75:b9:
                    c0:3d:74:09:3d:6b:8a:fa:36:88:91:6c:7b:61:c4:
                    59:f9:8b:21:5f:8d:70:74:23:f0:ad:39:66:a3:4a:
                    54:47:8d:a1:92:26:a0:e1:60:da:ba:a9:8c:bb:ce:
                    23:1a:e8:09:8a:06:a2:04:42:0f:c0:fa:19:a4:8d:
                    b0:c0:93:d7:4e:31:51:67:f9:55:36:32:1a:5d:42:
                    73:68:47:d5:09:2a:da:e8:40:12:c1:4e:de:79:0b:
                    57:17:66:f2:b4:ad:e8:be:76:10:5f:47:b1:75:6b:
                    fe:5c:22:c7:4b:0d:fc:15:d3:dc:ae:34:6a:53:26:
                    c0:99:8a:2c:e5:d9:0c:cb:ce:ed:3a:5b:96:bf:77:
                    ca:59:a1:3e:1b:16:4f:9e:05:68:53:22:83:77:6d:
                    5e:7d:a6:a1:8a:9a:d8:f3:b3:80:5e:ba:d5:82:e1:
                    32:c3:00:ed:d7:f6:07:7a:20:b5:16:de:32:98:7b:
                    04:63:84:c9:d1:84:6d:aa:0a:8e:c5:9e:4b:41:6f:
                    8a:27:9d:05:a7:fc:a6:9d:3a:66:12:b2:d1:f3:f3:
                    6a:5e:0d:1a:82:dd:44:34:b4:b6:6f:b2:c6:ee:0f:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:57:1E:54:CF:4B:61:A0:1A:94:E6:A5:26:65:A7:06:4E:86:FF:26
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:f7:a5:4b:3d:22:6f:ac:8f:4f:9e:c6:89:a0:47:44:ed:
         c0:90:b7:ef:f6:f2:cd:a9:d6:17:ce:3f:39:5b:ab:0d:cb:8f:
         1b:ac:c9:a2:d6:96:04:a7:22:97:82:dc:75:a8:d5:2e:cd:8b:
         57:76:23:ce:19:9f:c2:d9:25:b2:db:6f:5a:d3:b3:c4:60:e7:
         5c:6c:23:1a:8a:d4:9d:1b:d8:f5:85:40:c8:5f:7d:92:50:eb:
         d4:96:34:0e:72:91:5f:de:80:17:38:31:11:38:74:3c:c1:f5:
         c7:33:c1:ea:c0:2d:1d:f5:3d:0d:89:cf:3a:f0:27:bf:d3:25:
         80:08:05:17:96:d3:4d:7e:9a:35:ab:50:a6:6f:51:b0:3f:9d:
         d3:a7:98:43:ce:69:a2:84:b1:2d:35:86:f8:85:8a:30:ca:ce:
         30:da:1a:8c:5d:ec:ca:49:ed:62:b7:1a:c4:c2:33:86:29:6a:
         de:0b:4d:f1:1a:86:9a:6c:7d:0e:14:9a:d4:05:c4:eb:9e:86:
         cf:82:5a:b1:ce:ce:8a:fb:a7:44:be:57:5d:34:3e:70:fe:86:
         fb:6e:00:8d:83:e0:a3:3f:80:7d:04:fa:c5:20:14:31:32:30:
         b8:ca:f5:08:a7:95:2f:a3:9a:0a:64:a9:84:20:a5:f9:6d:c3:
         f0:53:b7:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZhEf9LU8pmJcJXwOcq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWRjM2YyMjU3MjJiODA5YWJlOTg3NzhjM2JmZDcwMDll
MWNmNGYwHhcNMjUwNDEzMDkwMTA5WhcNMjUwNDE0MDkwMTA5WjAzMTEwLwYDVQQD
EygxMzU3MWU1NGNmNGI2MWEwMWE5NGU2YTUyNjY1YTcwNjRlODZmZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/A7PKPI5PeR/ItVw672dTGG0p9T
yHVO+rWRdbnAPXQJPWuK+jaIkWx7YcRZ+YshX41wdCPwrTlmo0pUR42hkiag4WDa
uqmMu84jGugJigaiBEIPwPoZpI2wwJPXTjFRZ/lVNjIaXUJzaEfVCSra6EASwU7e
eQtXF2bytK3ovnYQX0exdWv+XCLHSw38FdPcrjRqUybAmYos5dkMy87tOluWv3fK
WaE+GxZPngVoUyKDd21efaahiprY87OAXrrVguEywwDt1/YHeiC1Ft4ymHsEY4TJ
0YRtqgqOxZ5LQW+KJ50Fp/ymnTpmErLR8/NqXg0agt1ENLS2b7LG7g+QfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNXHlTPS2GgGpTmpSZlpwZOhv8mMB8GA1UdIwQY
MBaAFAddw/IlciuAmr6Yd4w7/XAJ4c9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWIt
MjM0ZDA3NTQyMzlkLzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82YzhjMzEtZjk5OS00MDU2LWFhMWItMjM0ZDA3NTQyMzlk
LzEvQjEzRDhpVnlLNENhdnBoM2pEdjljQW5oejA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPj3pUs9
Im+sj0+exomgR0TtwJC37/byzanWF84/OVurDcuPG6zJotaWBKcil4LcdajVLs2L
V3YjzhmfwtklsttvWtOzxGDnXGwjGorUnRvY9YVAyF99klDr1JY0DnKRX96AFzgx
ETh0PMH1xzPB6sAtHfU9DYnPOvAnv9MlgAgFF5bTTX6aNatQpm9RsD+d06eYQ85p
ooSxLTWG+IWKMMrOMNoajF3sykntYrcaxMIzhilq3gtN8RqGmmx9DhSa1AXE656G
z4Jasc7OivunRL5XXTQ+cP6G+24AjYPgoz+AfQT6xSAUMTIwuMr1CKeVL6OaCmSp
hCCl+W3D8FO3Lg==
-----END CERTIFICATE-----