Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File:                     K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier:          aXgks84gThmY0SfkScLtXsAICLfy9hgjDJ7M52+Klq0=
Subject key identifier:   E3:77:BE:B3:B0:F2:5F:79:97:17:AC:6C:DA:38:F7:FE:9F:28:29:B8
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer:       /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial:       01962E2B0CA00FDFAE33B7F7CDDEECDC4682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number:          1189
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: hy6kOj09v1iyhZV9p7V8QTIYkJtVkWs+LZxGMMl1fLc=)
                          2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:a0:0f:df:ae:33:b7:f7:cd:de:ec:dc:46:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=e377beb3b0f25f799717ac6cda38f7fe9f2829b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:4f:82:e3:85:28:0d:59:35:57:37:6d:7a:
                    a8:40:90:fa:ed:14:d1:85:ac:11:a6:65:49:0a:6c:
                    8d:fe:18:63:64:05:84:ba:ab:9c:93:be:2f:ed:9f:
                    36:79:36:93:18:33:6d:e5:14:3f:3d:1a:6b:e7:e6:
                    be:2d:39:5a:79:a4:8a:9a:95:41:14:65:1c:5a:18:
                    62:3a:cf:0e:e7:d3:c4:b8:85:cf:2d:bf:eb:44:c9:
                    0f:d0:5b:ed:da:f7:05:e8:b3:ec:f0:76:72:83:8e:
                    89:16:d8:b8:4d:1b:ff:c2:15:33:53:d9:9c:63:05:
                    89:0a:05:4f:92:de:07:db:9e:b7:33:85:b6:0b:a1:
                    6a:18:f0:10:77:6f:0e:05:a9:78:f5:7f:54:bc:da:
                    9f:5a:a7:fa:e0:98:2b:5f:eb:30:11:98:6a:6e:a0:
                    74:7f:14:e2:16:ec:2a:73:9c:cc:2b:51:d9:4c:2b:
                    8b:28:96:0c:76:36:96:7b:5d:13:af:d9:07:34:55:
                    ee:da:9d:93:03:5a:49:c9:53:6c:98:54:26:31:82:
                    cf:1c:f2:63:93:3b:6d:b6:3a:bb:90:ab:bb:93:2e:
                    9d:b9:2e:ad:8c:1d:67:a3:14:d3:a8:35:ce:d7:05:
                    3b:83:8d:5c:d7:b6:47:27:62:d9:37:72:67:0c:04:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:77:BE:B3:B0:F2:5F:79:97:17:AC:6C:DA:38:F7:FE:9F:28:29:B8
            X509v3 Authority Key Identifier:
                keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:ef:ed:9f:28:cd:23:d7:d1:a3:70:91:a1:e9:0b:b6:ad:
         b6:d6:68:fa:f1:dd:99:02:58:d6:92:7d:0f:84:13:fe:bf:1d:
         33:83:04:34:b9:db:61:52:3e:c6:73:77:0e:b9:54:1e:26:ac:
         54:0d:33:d6:78:e4:82:2d:9e:8e:44:da:7a:74:84:fd:9d:4c:
         f1:2b:8d:27:a0:6e:aa:7e:53:42:75:8e:d4:e3:4c:93:02:00:
         74:8f:bb:da:a1:3d:46:77:f0:56:92:4d:5d:a1:dc:25:3a:68:
         bb:2d:c2:7a:2e:4a:67:3d:7a:d2:93:33:41:be:15:4c:69:5d:
         2b:8b:40:01:f6:da:29:6c:9d:9a:d5:6b:83:4c:bd:33:13:c5:
         0a:5f:03:df:2a:7e:87:83:33:ae:d4:61:27:96:eb:9f:12:77:
         c6:cd:b3:25:d0:0a:36:32:b5:d7:94:2b:9b:15:9e:54:d7:59:
         c5:2c:16:fc:f9:b4:50:6f:f6:16:c5:99:78:69:ca:4f:df:e5:
         0a:c7:da:3c:2e:ca:42:76:72:f1:87:85:f5:fb:c2:f0:fd:53:
         b4:d2:7e:7e:46:f4:7e:7d:80:c3:00:e0:a2:4f:8e:fa:d3:2e:
         c6:51:e6:a9:7c:13:70:86:89:5f:8e:f8:f4:f7:09:a5:90:93:
         9d:47:52:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwygD9+uM7f3zd7s3EaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjUwNDEzMDgwMTM1WhcNMjUwNDE0MDgwMTM1WjAzMTEwLwYDVQQD
EyhlMzc3YmViM2IwZjI1Zjc5OTcxN2FjNmNkYTM4ZjdmZTlmMjgyOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV9PguOFKA1ZNVc3bXqoQJD67RTR
hawRpmVJCmyN/hhjZAWEuquck74v7Z82eTaTGDNt5RQ/PRpr5+a+LTlaeaSKmpVB
FGUcWhhiOs8O59PEuIXPLb/rRMkP0Fvt2vcF6LPs8HZyg46JFti4TRv/whUzU9mc
YwWJCgVPkt4H2563M4W2C6FqGPAQd28OBal49X9UvNqfWqf64JgrX+swEZhqbqB0
fxTiFuwqc5zMK1HZTCuLKJYMdjaWe10Tr9kHNFXu2p2TA1pJyVNsmFQmMYLPHPJj
kztttjq7kKu7ky6duS6tjB1noxTTqDXO1wU7g41c17ZHJ2LZN3JnDAQDWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON3vrOw8l95lxesbNo49/6fKCm4MB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLnv7Z8o
zSPX0aNwkaHpC7atttZo+vHdmQJY1pJ9D4QT/r8dM4MENLnbYVI+xnN3DrlUHias
VA0z1njkgi2ejkTaenSE/Z1M8SuNJ6Buqn5TQnWO1ONMkwIAdI+72qE9RnfwVpJN
XaHcJTpouy3Cei5KZz160pMzQb4VTGldK4tAAfbaKWydmtVrg0y9MxPFCl8D3yp+
h4MzrtRhJ5brnxJ3xs2zJdAKNjK115QrmxWeVNdZxSwW/Pm0UG/2FsWZeGnKT9/l
CsfaPC7KQnZy8YeF9fvC8P1TtNJ+fkb0fn2AwwDgok+O+tMuxlHmqXwTcIaJX474
9PcJpZCTnUdSPw==
-----END CERTIFICATE-----