Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File:                     KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier:          a2sVC1oa21pF7wI/M44oSPbvDxTm4fQisxRDw8wAFc4=
Subject key identifier:   5E:D4:C0:5B:1C:A4:C9:80:75:01:E4:B2:4C:48:F3:39:D5:B9:87:87
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer:       /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial:       01962F066678C9895A449B70C892B888B30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number:          06C0
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
                          2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: e4b1g00Q8gxIFvLvcVdRkDIcHZ/dHJwJ2C/f9LSGGPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:78:c9:89:5a:44:9b:70:c8:92:b8:88:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=5ed4c05b1ca4c9807501e4b24c48f339d5b98787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:b4:0c:25:75:06:7d:70:b6:bd:7b:86:b0:
                    be:60:8d:c1:bd:9d:c6:74:f3:96:e9:1d:3e:b5:0a:
                    d7:30:58:b8:a0:52:2f:1f:a1:6b:28:60:2c:df:8c:
                    0d:d9:4f:fe:80:c0:29:c0:b6:e1:10:cc:2f:c4:b1:
                    25:17:f3:92:37:8f:0e:3f:7d:ba:56:12:66:ea:35:
                    ad:40:8d:2e:63:96:01:18:89:ee:a9:d7:4c:03:6d:
                    bd:3e:b7:e2:37:d3:ae:fd:87:3a:9c:fc:2b:fc:e1:
                    55:3a:5e:a9:5a:ae:df:a6:ce:18:43:f0:7b:45:0b:
                    12:cd:0b:92:f7:14:84:1d:79:fc:23:62:6d:c9:b3:
                    16:d8:22:ff:7d:f6:b9:90:b4:8c:00:ce:3e:90:be:
                    cc:d7:d8:8e:ff:a9:a7:d0:2c:02:30:6d:70:44:a5:
                    89:eb:90:09:b5:4f:f3:8b:a2:21:71:64:9e:d9:48:
                    7c:c4:1b:91:ae:da:42:3c:78:c9:75:66:63:3f:2f:
                    c4:47:ef:74:56:ee:c7:3a:7b:af:11:66:ec:18:63:
                    fe:a7:1c:19:8f:fe:52:de:3f:45:db:57:f5:c4:13:
                    72:a2:27:67:e1:15:17:43:f7:cf:e3:e7:a6:ab:95:
                    d7:d0:50:6e:c9:69:ae:dc:91:79:71:60:ed:5d:f8:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D4:C0:5B:1C:A4:C9:80:75:01:E4:B2:4C:48:F3:39:D5:B9:87:87
            X509v3 Authority Key Identifier:
                keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:1a:d8:f3:3f:22:e4:98:43:e9:94:da:da:3a:0c:27:3d:
         69:0b:ff:f1:a1:3a:cf:09:f3:88:7d:7c:51:7c:c9:91:ae:09:
         ff:84:48:e7:3a:e0:21:54:e6:f9:02:4a:97:93:2a:d8:20:81:
         d4:d4:51:3f:4e:72:ce:ef:97:0e:e6:16:bc:45:7f:80:7a:42:
         16:0c:d0:e1:b7:34:6d:c0:e4:19:f7:50:d3:71:0e:00:38:c9:
         82:d2:95:d2:3d:33:9b:ce:e6:8d:65:31:90:95:36:08:7f:5c:
         e6:7f:dd:db:f3:d2:9a:1d:59:83:dc:b4:24:81:7a:0e:56:3f:
         89:de:11:87:31:85:27:69:75:6c:97:49:39:e5:f0:81:9d:05:
         34:60:4e:ff:78:87:1c:b4:de:64:e1:e6:dd:84:d9:2f:5b:4e:
         9c:af:ba:fe:fc:40:24:8d:51:02:1e:df:ec:a7:39:13:78:ee:
         af:dd:3d:03:2d:03:64:5c:28:57:50:28:33:01:92:f8:5b:44:
         86:19:93:6b:10:5f:a2:46:ad:45:bf:ed:09:51:8f:d5:8e:b2:
         d2:67:96:06:a4:de:d5:b7:be:54:26:dd:a6:cd:81:7f:5d:be:
         88:86:65:9d:db:1b:77:ed:af:aa:77:a9:6d:d0:9a:b6:c5:28:
         ec:55:85:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmZ4yYlaRJtwyJK4iLMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjUwNDEzMTIwMTEwWhcNMjUwNDE0MTIwMTEwWjAzMTEwLwYDVQQD
Eyg1ZWQ0YzA1YjFjYTRjOTgwNzUwMWU0YjI0YzQ4ZjMzOWQ1Yjk4Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzq0DCV1Bn1wtr17hrC+YI3BvZ3G
dPOW6R0+tQrXMFi4oFIvH6FrKGAs34wN2U/+gMApwLbhEMwvxLElF/OSN48OP326
VhJm6jWtQI0uY5YBGInuqddMA229PrfiN9Ou/Yc6nPwr/OFVOl6pWq7fps4YQ/B7
RQsSzQuS9xSEHXn8I2JtybMW2CL/ffa5kLSMAM4+kL7M19iO/6mn0CwCMG1wRKWJ
65AJtU/zi6IhcWSe2Uh8xBuRrtpCPHjJdWZjPy/ER+90Vu7HOnuvEWbsGGP+pxwZ
j/5S3j9F21f1xBNyoidn4RUXQ/fP4+emq5XX0FBuyWmu3JF5cWDtXficPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7UwFscpMmAdQHkskxI8znVuYeHMB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci0a2PM/
IuSYQ+mU2to6DCc9aQv/8aE6zwnziH18UXzJka4J/4RI5zrgIVTm+QJKl5Mq2CCB
1NRRP05yzu+XDuYWvEV/gHpCFgzQ4bc0bcDkGfdQ03EOADjJgtKV0j0zm87mjWUx
kJU2CH9c5n/d2/PSmh1Zg9y0JIF6DlY/id4RhzGFJ2l1bJdJOeXwgZ0FNGBO/3iH
HLTeZOHm3YTZL1tOnK+6/vxAJI1RAh7f7Kc5E3jur909Ay0DZFwoV1AoMwGS+FtE
hhmTaxBfokatRb/tCVGP1Y6y0meWBqTe1be+VCbdps2Bf12+iIZlndsbd+2vqnep
bdCatsUo7FWFKQ==
-----END CERTIFICATE-----