Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File:                     KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier:          XqUIEm+CetkuBFaA4m+jIUBGnsG4H7h/YtDMKQ+l96E=
Subject key identifier:   FE:8C:84:9F:F6:05:B1:28:68:46:B2:6F:CC:EA:52:30:B9:29:7E:14
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer:       /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial:       01962F3D9645B33EA498A8E132B0B9C213AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 5HJN2TYq8z8eJjL58_c0u5IQ5Q8.roa (hash: yhJDGnf72pl9WyOFKwP7I927446gAZjcSsCI8qXComM=)
                          2: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: ZFjUl6bcqUm00sLfHCDPBInsMlkaworpE/qEcc3tHLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:45:b3:3e:a4:98:a8:e1:32:b0:b9:c2:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=fe8c849ff605b1286846b26fccea5230b9297e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:4a:1a:a2:c6:c2:0b:19:46:98:82:b2:d4:
                    d4:c6:e8:17:e8:86:3d:76:87:bb:84:ba:9c:79:6b:
                    91:8e:44:14:aa:4e:eb:88:a9:69:05:58:8c:3e:70:
                    fd:03:d6:af:67:3a:92:a8:fc:9b:5e:3a:d2:82:c7:
                    a3:36:0e:e0:db:7d:fb:d8:a8:d6:15:6b:4d:22:9b:
                    6c:c3:c1:46:31:80:09:ad:ed:d7:87:9f:1e:f4:ee:
                    59:76:f4:9f:72:e3:76:d1:ce:4c:27:73:68:e9:55:
                    cc:0c:5d:fa:89:fd:87:b1:ea:66:3f:c7:3d:97:6e:
                    36:d5:6d:60:57:c6:b9:ad:89:ce:7b:eb:43:57:59:
                    1c:1a:ed:8b:dc:5a:29:84:90:85:9c:23:3f:3c:5e:
                    15:4f:4c:bf:6d:c1:50:2c:7d:29:15:d8:a8:23:a7:
                    0c:d7:81:d1:04:b2:97:b5:49:34:57:d8:9a:9a:30:
                    99:63:1b:c7:46:25:cf:e3:03:ea:34:6e:83:70:c2:
                    28:4f:0f:22:a0:13:7c:c2:90:43:3e:22:59:20:e7:
                    27:7a:f0:35:45:b3:a4:61:fd:e7:c7:3b:c2:72:72:
                    5d:06:83:55:d4:28:f0:6c:ac:76:31:9f:a4:49:80:
                    8c:37:6e:73:5f:2f:12:14:f4:e4:cc:20:e8:0c:1c:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:84:9F:F6:05:B1:28:68:46:B2:6F:CC:EA:52:30:B9:29:7E:14
            X509v3 Authority Key Identifier:
                keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:74:a8:b5:24:d9:d5:65:f5:d1:b0:9b:fc:64:ef:bd:d9:cd:
         a2:1a:b7:92:1a:91:fd:d2:3d:78:84:59:de:da:52:b5:f6:ed:
         ba:6a:92:c1:5e:f8:07:c2:39:01:83:e5:f6:23:e5:37:16:4e:
         f1:ff:d0:a9:5e:3a:6c:ea:a2:c1:fc:86:64:d0:24:68:92:34:
         f3:bb:50:14:51:24:3e:1f:3f:e4:fd:26:44:a0:00:2d:6b:2e:
         72:47:52:0c:e7:cd:d3:08:c0:3e:c2:b8:b4:62:0a:3a:fd:af:
         8b:7b:07:a0:66:8c:d8:8b:b7:bf:16:61:32:3f:3c:d1:fb:aa:
         d4:dd:9a:22:b1:f7:e0:4c:26:b1:ac:87:a0:b8:c4:cd:7c:ee:
         3b:cf:ec:81:2b:20:e0:aa:88:8d:59:de:98:ef:fa:75:c1:6d:
         89:bd:e7:ad:9a:4a:4a:39:4e:d5:1a:d6:58:f3:94:73:e0:78:
         7b:af:a3:e1:21:ac:68:fd:c7:7d:dd:63:e9:47:6f:6b:d2:65:
         92:af:e9:75:ce:51:1b:b6:84:25:23:22:ee:65:3e:90:98:c0:
         a3:fa:0c:d1:09:1c:e1:f6:63:dc:85:ac:aa:b1:27:13:0e:43:
         df:c3:c8:f0:cc:25:4a:a3:46:28:df:93:39:8b:85:6c:55:16:
         83:5b:a9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZZFsz6kmKjhMrC5whOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl
MmY2YTUwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
EyhmZThjODQ5ZmY2MDViMTI4Njg0NmIyNmZjY2VhNTIzMGI5Mjk3ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IZKGqLGwgsZRpiCstTUxugX6IY9
doe7hLqceWuRjkQUqk7riKlpBViMPnD9A9avZzqSqPybXjrSgsejNg7g23372KjW
FWtNIptsw8FGMYAJre3Xh58e9O5ZdvSfcuN20c5MJ3No6VXMDF36if2HsepmP8c9
l2421W1gV8a5rYnOe+tDV1kcGu2L3FophJCFnCM/PF4VT0y/bcFQLH0pFdioI6cM
14HRBLKXtUk0V9iamjCZYxvHRiXP4wPqNG6DcMIoTw8ioBN8wpBDPiJZIOcnevA1
RbOkYf3nxzvCcnJdBoNV1CjwbKx2MZ+kSYCMN25zXy8SFPTkzCDoDBy1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6MhJ/2BbEoaEayb8zqUjC5KX4UMB8GA1UdIwQY
MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt
MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi
LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3SotSTZ
1WX10bCb/GTvvdnNohq3khqR/dI9eIRZ3tpStfbtumqSwV74B8I5AYPl9iPlNxZO
8f/QqV46bOqiwfyGZNAkaJI087tQFFEkPh8/5P0mRKAALWsuckdSDOfN0wjAPsK4
tGIKOv2vi3sHoGaM2Iu3vxZhMj880fuq1N2aIrH34EwmsayHoLjEzXzuO8/sgSsg
4KqIjVnemO/6dcFtib3nrZpKSjlO1RrWWPOUc+B4e6+j4SGsaP3Hfd1j6Udva9Jl
kq/pdc5RG7aEJSMi7mU+kJjAo/oM0Qkc4fZj3IWsqrEnEw5D38PI8MwlSqNGKN+T
OYuFbFUWg1up/A==
-----END CERTIFICATE-----