Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File:                     K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier:          DD8G2hnxpRSXmSxXOM2I3Ozt1dUPhQDtmfEJZ88BBc4=
Subject key identifier:   43:00:82:56:CF:26:76:C0:1A:16:03:01:33:5C:FB:75:AB:73:BE:35
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer:       /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial:       01962DF4026714B0DA83EF67EB6A7357CBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number:          0CFF
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: QHzRu4Q+5B3nPKpHX7EL9lsRnCvMxPrrGtN0JP3NxzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:02:67:14:b0:da:83:ef:67:eb:6a:73:57:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=43008256cf2676c01a160301335cfb75ab73be35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4a:b8:7b:d5:f8:a0:f4:61:8e:3f:d7:d4:73:
                    2b:79:c7:79:95:79:d2:5b:be:29:12:d7:2e:fe:c8:
                    5c:46:85:98:30:4b:62:80:6b:f9:fe:ec:be:c1:77:
                    da:e0:ad:f1:31:18:b6:8c:5a:ee:4b:bf:ac:30:c3:
                    2c:f8:6e:11:bb:dc:dd:cd:ac:a9:21:8a:5d:6b:30:
                    89:c2:cf:fb:6a:99:5e:1c:a4:61:04:1a:8c:2e:8e:
                    97:7c:15:cc:8b:da:d2:ce:90:3d:d4:56:aa:b0:5d:
                    a8:97:56:d7:cf:f6:b2:28:b2:ca:11:8a:4d:52:c1:
                    52:9e:25:53:70:f8:0f:8b:f7:32:7c:83:ab:0b:3f:
                    ee:b4:b4:8e:03:4a:74:ea:69:5e:05:51:32:cf:e8:
                    68:51:f7:91:26:f8:6c:6a:ae:bd:90:2b:05:f2:4b:
                    f8:db:1d:86:7f:fb:a0:c8:a6:7b:30:b4:b0:c6:f9:
                    94:7e:cf:76:74:48:e5:d8:75:24:a5:79:7d:44:6c:
                    8a:a5:b6:e0:26:1e:1d:31:5d:59:64:74:69:15:1b:
                    df:7f:f0:33:b4:74:77:ba:9d:8d:f9:8d:c5:42:59:
                    6e:9c:96:e3:9d:d0:d1:b6:45:51:eb:7b:bd:a5:13:
                    6e:67:a9:ad:28:ff:30:3a:82:74:89:7d:1a:d3:29:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:00:82:56:CF:26:76:C0:1A:16:03:01:33:5C:FB:75:AB:73:BE:35
            X509v3 Authority Key Identifier:
                keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:29:e0:2f:2b:60:09:4a:50:d6:f0:77:48:04:8d:46:82:db:
         6a:08:f8:c5:0a:7d:8d:8c:6c:be:d6:16:07:15:ca:5e:f7:cd:
         8e:12:83:9e:ec:c3:0e:10:c5:1b:20:56:b1:b0:94:08:ca:df:
         f8:32:69:0f:5c:4e:40:e3:6d:43:ca:09:54:2b:1a:c1:31:52:
         5a:32:ef:00:73:17:58:84:25:b9:5a:58:17:83:e2:c1:d7:eb:
         3e:f1:bb:f7:06:07:0d:83:6a:aa:78:e5:8f:98:e4:2b:72:de:
         ed:1d:01:1f:26:2a:7c:f6:f1:e1:6b:e2:dc:d0:09:e8:5d:ce:
         82:4e:c7:12:67:f7:7a:b7:9c:5d:69:22:72:8b:af:85:28:ef:
         1a:29:88:69:c4:82:ba:57:b0:64:7c:26:f0:d8:a4:43:23:14:
         2c:42:7d:5f:ef:cb:1a:3a:12:01:46:83:8a:07:d3:f7:68:ee:
         d7:b4:3c:e7:0d:c6:4b:1b:3d:b8:0b:7c:2b:56:a1:2b:60:51:
         6b:b8:51:a4:e1:56:8d:0f:47:3e:4d:21:c5:72:0d:1c:e1:63:
         b7:7f:4b:7f:79:02:ee:6e:7d:49:e7:70:14:52:bf:51:a6:42:
         21:13:48:cc:52:b9:d6:dd:6f:e4:40:17:8f:a8:1f:ae:2a:83:
         8a:13:c3:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AJnFLDag+9n62pzV8utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2RiYzVlZjc5ZTc0MDIyODVlY2RhMDgzN2JhNGJmMjE4
NzYxZGMwHhcNMjUwNDEzMDcwMTI4WhcNMjUwNDE0MDcwMTI4WjAzMTEwLwYDVQQD
Eyg0MzAwODI1NmNmMjY3NmMwMWExNjAzMDEzMzVjZmI3NWFiNzNiZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kq4e9X4oPRhjj/X1HMrecd5lXnS
W74pEtcu/shcRoWYMEtigGv5/uy+wXfa4K3xMRi2jFruS7+sMMMs+G4Ru9zdzayp
IYpdazCJws/7apleHKRhBBqMLo6XfBXMi9rSzpA91FaqsF2ol1bXz/ayKLLKEYpN
UsFSniVTcPgPi/cyfIOrCz/utLSOA0p06mleBVEyz+hoUfeRJvhsaq69kCsF8kv4
2x2Gf/ugyKZ7MLSwxvmUfs92dEjl2HUkpXl9RGyKpbbgJh4dMV1ZZHRpFRvff/Az
tHR3up2N+Y3FQllunJbjndDRtkVR63u9pRNuZ6mtKP8wOoJ0iX0a0ynkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMAglbPJnbAGhYDATNc+3Wrc741MB8GA1UdIwQY
MBaAFCt9vF73nnQCKF7NoIN7pL8hh2HcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kMTBkNGQtYTJjMC00ZDIwLThhMjEt
MjRkMGU2MmY3OWMwLzEvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kMTBkNGQtYTJjMC00ZDIwLThhMjEtMjRkMGU2MmY3OWMw
LzEvSzMyOFh2ZWVkQUlvWHMyZ2czdWt2eUdIWWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyngLytg
CUpQ1vB3SASNRoLbagj4xQp9jYxsvtYWBxXKXvfNjhKDnuzDDhDFGyBWsbCUCMrf
+DJpD1xOQONtQ8oJVCsawTFSWjLvAHMXWIQluVpYF4PiwdfrPvG79wYHDYNqqnjl
j5jkK3Le7R0BHyYqfPbx4Wvi3NAJ6F3Ogk7HEmf3erecXWkicouvhSjvGimIacSC
ulewZHwm8NikQyMULEJ9X+/LGjoSAUaDigfT92ju17Q85w3GSxs9uAt8K1ahK2BR
a7hRpOFWjQ9HPk0hxXINHOFjt39Lf3kC7m59SedwFFK/UaZCIRNIzFK51t1v5EAX
j6gfriqDihPDrQ==
-----END CERTIFICATE-----