Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File:                     KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier:          Zax73v1g+8QWJTxCCScbenpGZYDJF4yaPfSL5wJNrUs=
Subject key identifier:   0E:6F:AA:1F:F7:3B:D5:CE:94:5B:17:50:D1:D4:E2:BE:07:81:6A:24
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer:       /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial:       01962F3D60A95DC3585E960B658DF9C21127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number:          1078
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: 6MG6Z5y8NJeCTzo7NPC6A6ZgMwVe8fqTk72gMe2G56I=)
                          2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
                          3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:a9:5d:c3:58:5e:96:0b:65:8d:f9:c2:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=0e6faa1ff73bd5ce945b1750d1d4e2be07816a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:3b:84:43:8d:3e:e8:c7:84:61:8e:2a:b4:
                    c3:50:ea:b7:df:14:97:07:38:be:f3:54:49:9d:a2:
                    b7:ab:60:92:69:a6:c6:27:12:04:ef:a8:dc:0e:97:
                    6d:92:f5:8a:d3:73:de:6c:fd:ef:20:1e:b6:46:ca:
                    43:4a:61:11:3d:5f:5a:88:dc:2c:4c:85:12:78:1a:
                    b0:cf:1c:df:38:a9:ad:89:ac:f4:a4:1f:c6:28:7b:
                    ff:a8:99:0e:04:98:a9:58:85:82:39:fc:1d:b8:fd:
                    da:e2:dd:15:b4:ad:3f:b6:92:86:c4:22:f3:5e:f9:
                    1d:c4:d0:9d:b8:08:17:3d:74:94:ea:c4:44:c4:02:
                    3a:7c:51:31:f2:a4:89:2d:cf:2e:29:f9:99:fb:8b:
                    46:c5:a8:1a:5d:e4:aa:bc:8d:ac:5a:a1:29:95:54:
                    11:ab:98:b3:08:61:24:25:c9:f8:95:ac:03:12:d2:
                    10:44:c2:be:4b:a6:a8:15:51:49:19:d0:bd:82:23:
                    a4:8c:0f:fa:3c:7d:72:6d:31:59:a3:56:26:2a:98:
                    87:e7:f0:26:d4:75:cf:e3:9e:1c:8a:80:19:1a:5c:
                    f0:f9:f7:a9:66:3d:6b:5f:93:e9:c4:34:52:2c:cc:
                    2c:40:11:13:72:87:cc:51:14:fe:b7:73:6b:ca:78:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:AA:1F:F7:3B:D5:CE:94:5B:17:50:D1:D4:E2:BE:07:81:6A:24
            X509v3 Authority Key Identifier:
                keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:7b:d1:3c:f6:36:6d:68:52:44:ab:61:ac:38:62:cf:7a:
         f6:8e:5e:4c:de:a2:30:f3:3a:1b:03:29:d0:53:9c:1c:50:3d:
         22:8c:78:e1:d0:09:16:d0:f7:f4:1d:64:6d:46:6c:e7:b6:36:
         2b:22:d4:c8:15:0f:19:b1:92:d0:6c:11:e5:70:5f:80:d9:5e:
         60:87:86:2d:5a:37:33:fb:2b:5a:07:4d:31:fc:8d:93:e4:de:
         e1:dc:9a:c5:d0:18:33:2e:cb:3f:ad:52:4f:b4:34:5b:0e:5c:
         9b:a5:f4:80:aa:ee:fd:f3:66:b3:3c:35:2c:04:40:a5:41:46:
         5c:d0:b9:db:7e:a8:6d:90:3c:7b:7b:3b:ce:65:8f:83:0d:98:
         e8:eb:96:bf:55:11:91:a1:33:81:bc:9c:87:09:f5:dd:27:86:
         2b:d2:ce:d5:12:fd:8e:e7:80:af:f9:ec:62:9e:26:b7:4c:bd:
         f9:cf:53:52:6c:ed:3b:99:dd:4b:2a:ab:90:55:c4:81:64:80:
         61:c2:c2:75:54:7e:96:49:d7:6d:4d:28:71:08:d7:e7:7f:e7:
         0e:48:43:75:fe:83:38:44:88:96:53:b3:94:52:d2:83:90:91:
         6e:96:7a:b1:78:7b:09:80:98:66:6e:2f:5b:8f:9d:68:89:40:
         a8:13:5f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPWCpXcNYXpYLZY35whEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWIyMmZiMmRhNDczYzU0MjZiZmNjMWY4ODA4NjEwMDQw
MTcwODcwHhcNMjUwNDEzMTMwMTEzWhcNMjUwNDE0MTMwMTEzWjAzMTEwLwYDVQQD
EygwZTZmYWExZmY3M2JkNWNlOTQ1YjE3NTBkMWQ0ZTJiZTA3ODE2YTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Y7hEONPujHhGGOKrTDUOq33xSX
Bzi+81RJnaK3q2CSaabGJxIE76jcDpdtkvWK03PebP3vIB62RspDSmERPV9aiNws
TIUSeBqwzxzfOKmtiaz0pB/GKHv/qJkOBJipWIWCOfwduP3a4t0VtK0/tpKGxCLz
XvkdxNCduAgXPXSU6sRExAI6fFEx8qSJLc8uKfmZ+4tGxagaXeSqvI2sWqEplVQR
q5izCGEkJcn4lawDEtIQRMK+S6aoFVFJGdC9giOkjA/6PH1ybTFZo1YmKpiH5/Am
1HXP454cioAZGlzw+fepZj1rX5PpxDRSLMwsQBETcofMURT+t3NryniYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5vqh/3O9XOlFsXUNHU4r4HgWokMB8GA1UdIwQY
MBaAFCirIvstpHPFQmv8wfiAhhAEAXCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMt
M2ExNTk1ZmM4NmVmLzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNTNkYTQtMDJlOC00OGY0LTgwYjMtM2ExNTk1ZmM4NmVm
LzEvS0tzaS15MmtjOFZDYV96Qi1JQ0dFQVFCY0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAx70Tz2
Nm1oUkSrYaw4Ys969o5eTN6iMPM6GwMp0FOcHFA9Iox44dAJFtD39B1kbUZs57Y2
KyLUyBUPGbGS0GwR5XBfgNleYIeGLVo3M/srWgdNMfyNk+Te4dyaxdAYMy7LP61S
T7Q0Ww5cm6X0gKru/fNmszw1LARApUFGXNC5236obZA8e3s7zmWPgw2Y6OuWv1UR
kaEzgbychwn13SeGK9LO1RL9jueAr/nsYp4mt0y9+c9TUmztO5ndSyqrkFXEgWSA
YcLCdVR+lknXbU0ocQjX53/nDkhDdf6DOESIllOzlFLSg5CRbpZ6sXh7CYCYZm4v
W4+daIlAqBNfZw==
-----END CERTIFICATE-----