Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File:                     K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier:          Z4fEl4rSkcIkAu/vrgF2EUvo9/6WS+dUyG0Evbjgylk=
Subject key identifier:   D8:7B:FD:B0:00:BF:6C:79:78:2C:03:E3:38:0E:DD:F5:58:89:72:0A
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer:       /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial:       01962ECFD6AFEA7934221EA7B0C5D71FDE89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number:          0250
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
                          2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: AYy4WID3E2JoHHqwwnLWcNBm1VEPiPQhBAkTxTrO8lQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d6:af:ea:79:34:22:1e:a7:b0:c5:d7:1f:de:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=d87bfdb000bf6c79782c03e3380eddf55889720a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:0b:59:d1:eb:d0:b5:7a:3a:bf:b2:0e:f7:
                    7c:af:68:6c:4f:ec:ba:cc:79:56:ff:97:45:2e:2f:
                    75:18:98:7d:98:30:25:2e:5f:a0:1e:92:a1:6b:9a:
                    e1:d4:50:87:8b:0f:d9:bd:f4:73:9d:62:42:0a:e0:
                    00:e1:02:68:c3:fa:4e:6a:e2:14:56:11:28:b9:3f:
                    0d:08:9f:54:65:88:35:b8:31:39:71:a6:f7:f7:36:
                    68:e1:a8:c9:93:29:08:0b:e7:8f:0e:9b:b0:9b:30:
                    ed:4d:5c:b8:10:06:ee:ac:d6:9f:44:9b:1c:c3:03:
                    9b:79:4e:c7:b8:15:9b:bb:3f:d3:f8:0b:78:89:b3:
                    38:e7:62:91:eb:a1:07:9b:2a:d6:0c:0c:93:af:ec:
                    b3:c5:33:a1:cd:11:79:33:6b:a4:4e:1e:6d:b3:09:
                    0c:d8:4b:e3:f2:a8:43:35:ec:d9:2e:47:f6:ac:0b:
                    f8:6a:33:a3:58:c4:cb:36:3e:68:0a:65:99:dc:90:
                    72:ad:29:81:8b:8e:c1:0e:aa:9a:b7:20:ac:02:a3:
                    d4:5a:cd:a9:c5:5e:98:cd:6e:95:d5:84:87:1d:5a:
                    df:4a:90:08:cd:6c:7c:25:5f:66:79:bc:4e:0c:ff:
                    53:de:97:a5:05:93:8c:23:1e:ff:39:47:ca:a9:88:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7B:FD:B0:00:BF:6C:79:78:2C:03:E3:38:0E:DD:F5:58:89:72:0A
            X509v3 Authority Key Identifier:
                keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:fa:dd:30:ce:fb:7f:6e:19:b3:ab:8f:ff:ba:68:07:df:28:
         b1:6a:e9:4e:e3:68:72:02:ce:46:52:1b:64:54:06:43:17:e7:
         9c:84:b4:3d:e9:4a:76:ad:28:9a:62:f4:fa:0f:e0:1f:26:4f:
         1b:b4:6f:c2:f2:25:03:ba:ae:18:01:fb:46:1d:6f:d4:fe:b4:
         66:de:c8:9f:e1:03:c4:41:ef:c6:dc:30:22:b8:49:14:58:bf:
         91:70:a2:95:61:ca:35:ca:3b:53:bc:89:52:03:24:65:c8:22:
         fc:68:9b:6d:e5:54:73:7d:39:6d:b4:aa:58:8c:7b:65:7d:7e:
         5b:4d:10:d7:29:a2:cd:79:73:90:44:0a:4d:8c:c0:ba:f3:31:
         55:d4:e5:60:74:d1:88:f1:e1:8e:03:5b:9e:07:60:2a:f3:f7:
         d1:cd:02:e4:3b:02:48:8f:6b:71:b2:f4:da:da:6c:18:cc:39:
         78:f2:80:c7:c3:ed:a1:a7:72:52:17:91:3f:35:ff:22:53:e1:
         5e:77:60:ad:ab:e2:b6:53:b4:d7:09:1e:de:ce:f5:7d:81:c2:
         6e:08:1c:3e:d0:32:81:a3:21:5a:c7:b9:7b:51:d6:a4:f6:6b:
         23:b0:1c:23:7f:65:c8:e7:39:73:b5:13:f8:6f:c9:7f:02:fc:
         c9:c2:17:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9av6nk0Ih6nsMXXH96JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjUwNDEzMTEwMTM0WhcNMjUwNDE0MTEwMTM0WjAzMTEwLwYDVQQD
EyhkODdiZmRiMDAwYmY2Yzc5NzgyYzAzZTMzODBlZGRmNTU4ODk3MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlkLWdHr0LV6Or+yDvd8r2hsT+y6
zHlW/5dFLi91GJh9mDAlLl+gHpKha5rh1FCHiw/ZvfRznWJCCuAA4QJow/pOauIU
VhEouT8NCJ9UZYg1uDE5cab39zZo4ajJkykIC+ePDpuwmzDtTVy4EAburNafRJsc
wwObeU7HuBWbuz/T+At4ibM452KR66EHmyrWDAyTr+yzxTOhzRF5M2ukTh5tswkM
2Evj8qhDNezZLkf2rAv4ajOjWMTLNj5oCmWZ3JByrSmBi47BDqqatyCsAqPUWs2p
xV6YzW6V1YSHHVrfSpAIzWx8JV9mebxODP9T3pelBZOMIx7/OUfKqYhldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh7/bAAv2x5eCwD4zgO3fVYiXIKMB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0PrdMM77
f24Zs6uP/7poB98osWrpTuNocgLORlIbZFQGQxfnnIS0PelKdq0ommL0+g/gHyZP
G7RvwvIlA7quGAH7Rh1v1P60Zt7In+EDxEHvxtwwIrhJFFi/kXCilWHKNco7U7yJ
UgMkZcgi/GibbeVUc305bbSqWIx7ZX1+W00Q1ymizXlzkEQKTYzAuvMxVdTlYHTR
iPHhjgNbngdgKvP30c0C5DsCSI9rcbL02tpsGMw5ePKAx8PtoadyUheRPzX/IlPh
XndgravitlO01wke3s71fYHCbggcPtAygaMhWse5e1HWpPZrI7AcI39lyOc5c7UT
+G/JfwL8ycIXKw==
-----END CERTIFICATE-----