Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File:                     KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier:          YpTGLjiOssjYpRCzej8LvIwa+Xsm/WeLkfXsIoDXNXk=
Subject key identifier:   5B:95:98:DE:1D:94:4D:14:32:44:2A:00:D3:CF:B9:1E:F5:B2:C6:47
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer:       /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial:       01962E2B0FD12B31379B5D371F0CC009A6EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: gWqmGpIo5250H4Zfx8KoOSlpIn8jTycj923i/ooel7s=)
                          2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
                          3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:d1:2b:31:37:9b:5d:37:1f:0c:c0:09:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=5b9598de1d944d1432442a00d3cfb91ef5b2c647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:91:57:14:61:f5:14:c3:a1:22:9c:2b:c1:
                    c8:78:82:10:c0:1c:ad:8f:27:5d:08:29:25:5d:07:
                    6c:8d:47:8c:be:61:eb:dd:67:c0:81:19:bc:db:bd:
                    ef:1b:b2:59:56:92:8d:20:74:07:e1:9c:15:a6:e2:
                    f1:03:8c:89:05:48:de:91:6f:07:25:57:e0:92:95:
                    d2:7d:26:3e:5e:02:da:2b:1e:85:a0:f8:d2:86:c8:
                    b6:9f:6f:0d:ec:c2:a9:7e:f5:b6:21:5c:b4:e0:d0:
                    8f:0f:f6:50:0c:21:7c:2f:a3:cb:d2:37:05:10:55:
                    ad:28:27:b9:10:ad:5b:ff:69:7e:2d:39:4f:4a:95:
                    9f:f6:d5:3a:f8:4a:90:75:1a:12:90:e4:ae:85:da:
                    ff:b6:d7:f3:48:a7:8d:23:25:84:42:77:68:4d:03:
                    76:49:0b:b8:f9:e5:72:62:f3:fa:cc:e4:b9:37:e1:
                    c6:58:c2:6c:13:f2:c4:bd:82:6b:74:d0:83:5d:a6:
                    53:f5:45:cd:e2:b8:91:63:c7:aa:21:91:b1:38:f4:
                    ac:b8:1c:89:02:10:c2:b4:e8:7e:73:b6:80:75:c7:
                    01:b8:a5:c5:65:a3:ee:ba:a1:1e:ea:d3:0b:13:f7:
                    09:85:d3:6d:8a:80:db:cc:e2:49:52:a7:91:39:47:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:98:DE:1D:94:4D:14:32:44:2A:00:D3:CF:B9:1E:F5:B2:C6:47
            X509v3 Authority Key Identifier:
                keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:49:75:b0:2d:c0:3c:c4:c9:59:a7:9e:43:ce:b3:8e:99:04:
         31:00:24:da:15:85:50:ce:d0:4a:b7:da:66:38:d8:ca:63:c3:
         6e:a7:43:2d:75:61:24:a1:b1:9c:1f:90:98:7b:2b:0f:e2:f2:
         0f:4f:cf:3d:3a:4f:1c:b3:20:9f:d1:e3:b4:63:b0:0c:4a:c2:
         35:1e:02:9b:59:49:0e:41:1e:6b:ed:43:39:36:22:7e:7e:1c:
         4f:11:4f:1b:43:f2:4d:ed:0d:40:6f:93:1f:ed:f9:38:67:87:
         ab:d2:94:df:5e:11:aa:66:a7:80:3d:9b:eb:ba:b1:4b:d5:b5:
         81:05:0c:eb:c0:7e:87:3f:d7:b5:f3:1e:03:a2:fc:9d:7e:05:
         bb:38:39:65:a7:93:26:57:b2:97:c3:6b:06:e5:1c:17:9d:23:
         40:5d:70:72:b7:00:42:b8:0a:d3:4c:41:4c:e7:fc:fd:cf:ff:
         96:88:b6:58:59:1b:6e:dd:a9:6f:f4:61:46:4d:cc:cf:81:23:
         7c:fa:18:d0:68:44:15:06:c6:ea:67:d7:04:b5:e9:94:93:b1:
         3d:b4:71:2c:32:46:d0:45:c5:ac:47:22:75:ac:8f:0c:2f:06:
         4d:71:bc:56:d8:c8:4e:13:a9:51:7a:3d:9e:31:82:0f:d1:94:
         7f:cd:b1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw/RKzE3m103HwzACabvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
Eyg1Yjk1OThkZTFkOTQ0ZDE0MzI0NDJhMDBkM2NmYjkxZWY1YjJjNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS6RVxRh9RTDoSKcK8HIeIIQwByt
jyddCCklXQdsjUeMvmHr3WfAgRm8273vG7JZVpKNIHQH4ZwVpuLxA4yJBUjekW8H
JVfgkpXSfSY+XgLaKx6FoPjShsi2n28N7MKpfvW2IVy04NCPD/ZQDCF8L6PL0jcF
EFWtKCe5EK1b/2l+LTlPSpWf9tU6+EqQdRoSkOSuhdr/ttfzSKeNIyWEQndoTQN2
SQu4+eVyYvP6zOS5N+HGWMJsE/LEvYJrdNCDXaZT9UXN4riRY8eqIZGxOPSsuByJ
AhDCtOh+c7aAdccBuKXFZaPuuqEe6tMLE/cJhdNtioDbzOJJUqeROUdLWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuVmN4dlE0UMkQqANPPuR71ssZHMB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0l1sC3A
PMTJWaeeQ86zjpkEMQAk2hWFUM7QSrfaZjjYymPDbqdDLXVhJKGxnB+QmHsrD+Ly
D0/PPTpPHLMgn9HjtGOwDErCNR4Cm1lJDkEea+1DOTYifn4cTxFPG0PyTe0NQG+T
H+35OGeHq9KU314RqmangD2b67qxS9W1gQUM68B+hz/XtfMeA6L8nX4Fuzg5ZaeT
Jleyl8NrBuUcF50jQF1wcrcAQrgK00xBTOf8/c//loi2WFkbbt2pb/RhRk3Mz4Ej
fPoY0GhEFQbG6mfXBLXplJOxPbRxLDJG0EXFrEcidayPDC8GTXG8VtjIThOpUXo9
njGCD9GUf82xVQ==
-----END CERTIFICATE-----