Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          hA2pwrlY94Nvxf5D3WpJKh/C60idznhnK+gHtHC4vXY=
Subject key identifier:   A8:A6:8D:30:EB:2D:A0:94:A0:A1:D2:F8:93:81:1D:0D:35:F8:17:F5
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       01962F747A9D9A7DB5785E01E16EC99CEF30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          0CE4
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 3tVWAqpuhZmIvirALPURMbWbRUo.roa (hash: 8vZgncUoPoI0S65ff9n3cIU9sKbrNMXpH1mUnl/CdOM=)
                          2: GerACxDWw1b6KGz6kGs5iVp2ois.roa (hash: 4GcODZKqecND9v8xjlb0j4xGLtBy9xZhAi6ymZShRcQ=)
                          3: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: SqdxJ8lLmYTZhbG8k/VgOUp+thc9KvADV1zNlU4EtT0=)
                          4: LEyJ2WNBj9cTPetK4hsEfLcBcEI.roa (hash: WmOLEifdPoH/joG2SNYp6mcbI8myXya9UUZozRyBF44=)
                          5: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (hash: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=)
                          6: X35BdP6fZcPzqxMLjnciq7uISgs.roa (hash: X6IFONVs0ZqJ9lk+Np5sgqP+DTo255gzewtTiaP3PC0=)
                          7: eGuHIFNh-O-K6vz68gcxBeLPa18.roa (hash: G6cEnCf7JWL4wnvSWWO7ELeSvpGDDJYGerFFAWSt9CA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:9d:9a:7d:b5:78:5e:01:e1:6e:c9:9c:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=a8a68d30eb2da094a0a1d2f893811d0d35f817f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:f6:df:ed:9f:a5:ba:5c:8a:d3:d7:1d:c4:
                    34:39:be:07:f0:69:1d:9b:63:ee:ae:74:e8:a6:10:
                    4e:92:14:85:3c:c0:94:e3:63:fb:5c:d9:f7:97:86:
                    8f:06:a3:5e:03:d4:fd:8f:fb:c2:5f:aa:80:b0:c6:
                    5b:55:5b:6b:b6:51:79:f1:99:33:49:07:b4:7a:94:
                    69:14:c1:da:54:03:ac:92:19:34:22:bc:7b:13:a5:
                    ef:da:c1:1e:39:fe:67:8f:c8:58:45:aa:e0:e9:93:
                    3c:d4:e0:23:07:11:94:f5:26:57:a3:7e:af:ac:4c:
                    8b:6c:4e:d8:02:1c:98:e8:53:c9:81:b2:bd:e4:3c:
                    8b:c3:b1:f6:ed:77:c0:32:e1:6a:1d:17:35:ea:91:
                    90:8f:f4:29:76:04:22:99:ba:f0:30:df:5e:cc:60:
                    34:80:a4:bd:30:67:ed:6c:65:bc:13:38:7e:4d:23:
                    4f:5f:2c:7f:f0:b8:62:42:a6:a2:43:a9:5d:7f:d8:
                    af:50:3d:a2:61:e4:cc:d8:d8:e2:95:db:17:42:04:
                    9a:7d:88:c7:14:28:fd:f3:4c:44:6a:c5:f0:b8:d1:
                    bc:46:13:38:1b:c5:a8:fc:0e:51:6f:a4:0f:36:29:
                    fd:84:24:20:b1:59:b8:ee:22:a1:39:10:8d:e1:02:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:8D:30:EB:2D:A0:94:A0:A1:D2:F8:93:81:1D:0D:35:F8:17:F5
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8e:58:72:5e:e8:b6:74:57:80:a2:19:ec:8c:40:65:0d:f8:
         e8:d3:95:82:83:89:72:37:11:cc:a7:15:52:eb:45:86:e9:18:
         e2:e0:e8:fe:84:71:3a:9e:f3:84:ad:38:6f:9b:c8:da:f8:67:
         6f:e5:41:a3:ae:d8:6e:c8:a3:6f:94:70:19:4f:db:6a:ae:9f:
         52:7c:ba:2a:48:0c:5a:7c:cc:78:1a:4e:ed:cb:c9:c9:b7:3a:
         b6:15:77:e9:50:80:74:af:27:88:b1:79:b4:a7:b6:22:77:36:
         06:11:ae:0f:0e:54:a3:ac:62:af:80:c8:6c:a7:ce:2d:f7:2f:
         67:76:b2:73:4a:2a:bd:64:5e:bd:52:f7:76:aa:9d:b7:79:8d:
         9a:f7:83:ef:d8:cb:b1:44:71:42:78:ee:2d:00:23:0f:79:ea:
         ca:9e:6c:2d:84:eb:2f:32:78:68:36:d9:63:2a:d2:41:da:18:
         c4:03:cd:41:2f:30:f0:a6:58:6d:13:b2:23:0c:74:6e:04:75:
         f8:95:6c:de:1e:27:4a:70:4b:bc:ad:0a:fc:84:fa:9e:4a:a3:
         23:36:b4:02:b5:d5:2f:97:4a:ab:80:00:d4:b5:10:80:ca:d4:
         14:33:cd:d3:a8:fe:36:fc:b4:11:8e:0b:40:f3:a7:a1:98:2b:
         88:11:c3:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHqdmn21eF4B4W7JnO8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjUwNDEzMTQwMTI0WhcNMjUwNDE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhhOGE2OGQzMGViMmRhMDk0YTBhMWQyZjg5MzgxMWQwZDM1ZjgxN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7b23+2fpbpcitPXHcQ0Ob4H8Gkd
m2PurnTophBOkhSFPMCU42P7XNn3l4aPBqNeA9T9j/vCX6qAsMZbVVtrtlF58Zkz
SQe0epRpFMHaVAOskhk0Irx7E6Xv2sEeOf5nj8hYRarg6ZM81OAjBxGU9SZXo36v
rEyLbE7YAhyY6FPJgbK95DyLw7H27XfAMuFqHRc16pGQj/QpdgQimbrwMN9ezGA0
gKS9MGftbGW8Ezh+TSNPXyx/8LhiQqaiQ6ldf9ivUD2iYeTM2NjildsXQgSafYjH
FCj980xEasXwuNG8RhM4G8Wo/A5Rb6QPNin9hCQgsVm47iKhORCN4QJXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKimjTDrLaCUoKHS+JOBHQ01+Bf1MB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo5Ycl7o
tnRXgKIZ7IxAZQ346NOVgoOJcjcRzKcVUutFhukY4uDo/oRxOp7zhK04b5vI2vhn
b+VBo67Ybsijb5RwGU/baq6fUny6KkgMWnzMeBpO7cvJybc6thV36VCAdK8niLF5
tKe2Inc2BhGuDw5Uo6xir4DIbKfOLfcvZ3ayc0oqvWRevVL3dqqdt3mNmveD79jL
sURxQnjuLQAjD3nqyp5sLYTrLzJ4aDbZYyrSQdoYxAPNQS8w8KZYbROyIwx0bgR1
+JVs3h4nSnBLvK0K/IT6nkqjIza0ArXVL5dKq4AA1LUQgMrUFDPN06j+Nvy0EY4L
QPOnoZgriBHDYQ==
-----END CERTIFICATE-----